Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
File: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer (raw, json)
Hash identifier: p5GkB1d+0MRDCRrSTEEhSjMoGQUDzEz7TolBfqu4I+Y=
Subject key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DC935B2421A66240B5565B25618BA31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:18:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50583
IP: 46.30.184.0/22
IP: 46.33.160.0/19
IP: 185.173.124.0/22
IP: 195.191.172.0/23
IP: 212.114.0.0/20
IP: 2a03:1d00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:35:b2:42:1a:66:24:0b:55:65:b2:56:18:ba:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:bc:70:ec:59:36:48:9a:51:fe:bc:d3:f8:
08:d6:9d:46:67:9d:3a:92:a5:cc:3e:6f:1d:1f:fd:
79:03:1d:71:51:67:7c:b7:c0:de:41:0f:78:f9:fb:
04:c6:12:55:8a:3b:97:6e:06:41:f8:30:53:25:08:
a8:f3:58:f7:ff:f7:eb:09:79:b8:42:6e:f7:07:32:
19:3e:ed:71:90:e3:fa:4f:2a:97:f3:2e:c0:5d:59:
e5:68:c7:2d:f3:10:0e:f8:2f:3a:2e:24:26:52:e9:
ee:c8:75:50:31:c1:b8:9c:a9:6e:3b:ed:13:05:d1:
e3:07:c9:7d:fc:0d:b4:fa:9f:43:07:7c:db:d7:cb:
37:87:85:d9:ca:bc:a6:1a:04:61:ef:71:be:d1:d2:
ca:34:8c:98:c1:72:e6:77:f5:78:e2:62:75:41:19:
2d:8a:e9:4c:cd:43:51:59:89:73:4c:91:c4:3a:11:
0a:b2:68:e4:9f:30:24:d7:83:2f:f2:4d:96:09:5b:
99:1d:80:f0:79:1b:a3:74:69:80:40:05:87:b5:e9:
f3:db:f7:df:a2:e5:28:ab:5d:ff:8a:06:91:af:00:
27:22:c3:68:91:38:f7:72:d9:88:96:13:3a:39:07:
58:ff:9c:ad:4e:c3:2a:ad:b4:0f:d0:03:d9:2b:90:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.184.0/22
46.33.160.0/19
185.173.124.0/22
195.191.172.0/23
212.114.0.0/20
IPv6:
2a03:1d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50583
Signature Algorithm: sha256WithRSAEncryption
74:06:22:11:bd:58:a4:b9:4f:c9:b5:a4:ed:12:f6:ae:e8:54:
c4:46:76:79:83:70:28:0c:da:d0:d8:bb:37:77:50:38:cf:4f:
b4:9f:94:b4:87:d4:ad:35:e7:9a:08:e0:d9:0e:1c:8c:a5:a7:
b0:83:53:0c:88:02:57:9f:59:0d:d0:6d:39:99:6d:39:af:0f:
67:85:e2:46:ab:9d:92:2c:1c:19:20:79:70:5d:29:30:1d:d1:
55:3c:e9:10:27:50:d0:10:a6:1a:0f:d1:ee:cc:10:90:dd:1a:
f1:d5:bb:98:0b:1d:02:34:78:93:26:4c:58:27:4f:88:2e:40:
c1:a1:73:9e:38:aa:e3:ec:7d:f0:a7:ad:69:77:fa:87:54:0c:
af:f0:0f:9e:e3:b9:de:9c:c4:19:eb:93:f0:84:b8:00:57:ac:
fb:00:3f:ca:c5:5e:55:ff:53:68:43:01:29:8b:65:32:e8:56:
b8:b6:75:a2:83:a3:85:f2:4d:80:8b:7e:1a:87:20:f9:29:23:
f2:1f:98:b4:db:c9:32:95:fb:b5:d3:5d:4b:00:6c:e3:3f:18:
98:72:eb:dd:21:c6:8a:c7:8b:65:90:4c:6b:8c:b3:35:28:31:
18:61:ba:56:98:20:ed:3f:23:70:7d:2e:b4:c8:ad:a0:7f:85:
41:42:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:19 2026 by rpki-client