Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hYPpE4a3wAKken-k97f9Nf-eTgo.cer
File: hYPpE4a3wAKken-k97f9Nf-eTgo.cer (raw, json)
Hash identifier: niuh6Ly5+bWkigxWBmcKXsccq9Yn1xnig6+9yu6Fnjc=
Subject key identifier: 85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CA52FCC2E91DD1267589ECC8253D7EB34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 28 Feb 2026 16:58:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.175.37.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a5:2f:cc:2e:91:dd:12:67:58:9e:cc:82:53:d7:eb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 16:58:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8583e91386b7c002a47a7fa4f7b7fd35ff9e4e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:d9:5a:e9:65:c8:4c:27:fc:42:0c:af:ef:
10:2d:3f:ba:fc:35:a7:ff:ed:6e:00:2c:4f:2d:93:
67:10:e5:b5:9f:bc:23:8e:2e:63:f0:84:04:eb:d0:
2e:0d:5b:37:37:5e:f0:52:f6:19:99:49:36:39:86:
dc:74:f6:2a:49:89:23:5f:0e:fd:da:5e:bd:25:db:
df:00:15:ad:2b:56:b2:d1:82:09:31:c3:8c:de:63:
2e:ab:20:43:e8:e7:9c:28:81:f9:e4:05:e7:77:c6:
d6:9a:25:c3:32:70:b9:3c:e7:10:47:ca:f9:03:ed:
a5:e7:e0:a7:db:4d:34:8d:2a:31:be:4f:4d:10:9d:
70:8a:be:47:cc:3f:28:58:1b:51:e8:e1:b8:a6:66:
9f:f9:cd:f2:68:96:0a:bc:57:b4:80:61:92:a8:77:
fa:d7:9a:7a:eb:ae:f7:77:6c:08:49:e3:17:91:66:
e8:2f:df:34:3e:13:09:14:e2:b4:d7:b9:41:ed:7e:
8c:b4:65:46:af:69:f2:56:f9:a9:d9:67:17:52:97:
f6:ce:82:01:85:de:77:9f:bc:bb:74:0a:5e:b9:cf:
f3:19:59:7f:95:eb:cb:83:02:a7:9b:2b:f7:2f:09:
f6:0e:25:ca:c4:0a:f4:9c:de:fd:98:91:ce:cd:c5:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:E9:13:86:B7:C0:02:A4:7A:7F:A4:F7:B7:FD:35:FF:9E:4E:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a6de87-5517-4681-a236-368bc1bf83ea/1/hYPpE4a3wAKken-k97f9Nf-eTgo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.175.37.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b9:a1:01:b4:1a:ce:d1:53:fc:78:6d:aa:96:5f:99:4c:13:
28:7c:f9:9a:15:ba:f8:fa:34:57:c8:54:be:8f:b1:8d:9d:f6:
87:f5:70:cd:2b:a1:d3:22:c9:26:b6:84:27:ca:f3:3f:b1:68:
ad:0d:85:e6:84:32:38:5a:0e:23:c5:55:20:08:d8:62:d5:85:
8d:60:d6:f0:7d:58:8f:27:d8:91:27:a9:a9:9c:74:66:57:df:
f8:40:a6:46:93:e8:b1:6e:3c:de:40:57:b0:6f:a7:73:fa:6b:
2e:11:fa:7f:39:70:fe:07:81:83:ef:44:5e:56:93:95:fb:95:
12:49:e2:c7:50:51:b3:ff:11:2b:c1:91:58:f3:31:38:3a:7b:
52:70:c8:17:35:0e:8b:e4:b3:6d:d9:c5:21:be:af:b2:00:13:
5b:95:c4:32:15:07:9b:df:54:b0:d4:48:9e:fc:a9:b4:84:a5:
bb:ce:d9:7f:7c:08:17:3d:67:39:1e:a3:35:82:25:06:39:3c:
58:2f:55:d4:73:92:4c:d1:fd:35:e6:00:68:4e:a1:b5:41:b2:
1b:3a:22:15:f0:01:ce:b1:49:8a:b7:5e:ca:77:1e:8f:b1:c1:
a0:e9:f3:7b:b6:4b:8f:8b:a4:c7:89:57:54:73:1a:77:4d:ac:
2f:fe:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:54 2026 by rpki-client