Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer (raw, json)
Hash identifier: imb7xB625vrs40RrmWOXhlEuZbl+lHuuXGpLMbIu1+E=
Subject key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BF9DF82A0D15E4E5D9D38A38B7982DDB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Jan 2026 10:35:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59689
IP: 185.3.128.0/22
IP: 185.106.117.0/24
IP: 2a02:5cc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:df:82:a0:d1:5e:4e:5d:9d:38:a3:8b:79:82:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 10:35:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:16:9c:02:a9:4d:ad:23:36:8c:3f:37:59:
3e:5b:7d:dd:ee:f2:81:8c:a5:9d:f1:62:38:b7:36:
71:0a:e2:39:aa:67:f5:97:cb:9d:4e:ca:b5:8c:07:
b4:a5:d6:6b:78:dd:2a:5d:fe:c5:c9:a8:b6:6e:7a:
d7:0a:4d:87:cf:ea:3a:37:78:ff:ff:ed:cc:2e:c3:
e1:78:a3:1b:32:08:9a:1e:d9:43:53:02:b2:9f:84:
dd:10:7a:44:54:63:34:85:bc:3e:c4:a7:94:dd:43:
44:32:2c:3f:d6:08:13:c5:6e:0b:4c:7e:85:94:37:
d3:24:bc:cc:ed:77:1c:cd:7c:51:db:10:6b:20:59:
f1:3f:c6:93:70:e0:4c:15:06:9a:1b:21:2b:70:cc:
35:c7:a6:80:f0:5b:04:09:5e:7e:ba:4d:d6:0d:57:
b4:c5:c7:2b:b9:75:f5:6d:58:fa:cb:fc:37:50:be:
d9:e2:e2:7c:05:b9:f7:8f:14:cb:30:ce:a6:38:1c:
d4:82:f1:aa:8c:5c:87:be:70:4b:e7:70:58:5f:5f:
e2:d3:bd:2c:11:31:ad:08:d5:02:cb:26:5b:a5:63:
36:e3:09:8b:3d:d5:50:6a:8d:88:b4:4d:29:ca:49:
46:21:cf:5d:7d:44:5b:f0:31:0c:51:b8:00:4b:b2:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.128.0/22
185.106.117.0/24
IPv6:
2a02:5cc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59689
Signature Algorithm: sha256WithRSAEncryption
0e:43:5c:90:be:0a:f4:13:9c:7d:eb:41:e3:ef:70:b7:30:47:
bc:b5:69:b0:21:fa:a8:f9:3c:07:fe:d8:d3:89:56:a4:26:1a:
c1:48:f2:07:0e:0d:f0:b3:15:10:6b:e4:b7:d4:ce:30:23:3a:
b8:d6:47:f4:93:4c:e1:c1:78:de:29:0b:18:d9:ee:e5:6e:83:
ba:96:76:16:1a:b0:10:c1:56:f1:e4:fa:28:7d:2b:b5:17:6f:
b0:c5:53:0a:0f:69:78:9c:81:24:cb:49:9b:97:87:4e:be:25:
65:0b:b7:3e:1a:ab:90:09:57:0d:e2:dd:a7:24:bd:5a:0d:48:
82:35:2f:65:27:e7:5a:34:74:28:d2:f3:47:cd:28:78:48:65:
bc:b1:a7:ae:66:e4:7c:0a:6e:c2:87:a8:43:1a:ae:8d:3b:6c:
31:cf:f9:13:d8:95:71:e4:6e:28:23:fe:e1:84:7c:97:8c:d0:
8e:83:90:57:25:64:1c:c2:d0:58:e0:70:5c:1a:06:f1:09:f9:
6f:5c:86:76:ac:67:be:da:bb:9c:f0:bf:1d:05:95:f0:59:4c:
95:60:47:3f:ea:2a:83:af:e7:ae:cb:24:79:42:61:0a:0f:96:
69:69:54:18:66:7e:bf:b1:fa:b6:8d:6d:5f:aa:8c:18:04:2c:
2f:9b:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:11:05 2026 by rpki-client