Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
File: hebJukv_0bW6FFCrXdaderdAEGA.cer (raw, json)
Hash identifier: OBby4yoZb9JV5LCONvrWu6f2tv5ig7tF3QMbn2vtgjw=
Subject key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797F2240335C136AAB446FA9EACE0B77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:18:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216432
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:22:40:33:5c:13:6a:ab:44:6f:a9:ea:ce:0b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:f6:c5:2d:e0:69:96:2b:b6:13:82:63:2f:
92:c9:70:0d:08:6e:7c:0b:51:56:1e:05:57:11:3a:
61:72:f2:e9:80:4b:f4:88:69:47:91:d5:ad:ef:66:
e6:fd:fa:f3:ab:f4:c1:cb:1b:a9:19:24:6f:47:d0:
c3:8e:17:16:72:c2:45:11:95:07:d1:22:55:a0:3c:
dd:ed:45:d0:c1:47:a7:13:7d:83:8d:ac:3b:0a:03:
ec:df:21:61:db:ce:1e:b6:80:f9:4f:17:de:db:64:
ee:e7:ee:ec:a1:a5:74:dc:d3:80:db:3b:61:1c:4e:
b0:04:18:9a:74:55:e6:bd:90:7d:34:e0:36:cd:ce:
42:15:e0:14:6c:20:ec:0c:54:ad:3f:3c:2c:08:c1:
26:a3:c0:8a:2f:33:08:48:28:02:a8:ec:02:17:76:
8c:b9:88:fb:57:c2:a4:81:77:e8:83:5e:8b:2e:d2:
8a:7c:9c:f7:48:52:e2:b5:b6:9f:5c:1d:43:8c:67:
32:e6:7b:8c:9d:d8:7a:1e:aa:f9:8a:e7:20:aa:e2:
53:eb:20:15:32:58:56:04:01:f8:81:7a:24:82:c2:
c0:cf:55:99:56:8b:ce:78:e9:e4:1a:b5:22:13:49:
c7:2a:30:15:88:f0:18:fe:21:34:b7:5c:b6:0b:0e:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216432
Signature Algorithm: sha256WithRSAEncryption
31:70:9b:86:2a:83:42:ca:33:f4:a4:fd:09:74:99:0e:c7:a7:
cd:a3:e0:ea:5f:18:b1:b6:75:24:95:02:38:ce:db:1b:03:67:
d5:a4:0a:bb:9e:51:39:fd:aa:9e:b0:47:e2:1c:40:86:ef:cc:
f8:bb:57:44:f4:47:ee:c1:10:bf:fa:9a:60:bd:90:4b:e1:4b:
a1:3a:61:f8:46:ec:bb:98:40:f9:3c:25:cc:a3:c0:19:b0:d6:
30:04:60:e4:80:56:11:1e:63:e2:29:c8:b9:45:b9:e4:e7:a1:
b9:99:58:14:7d:a8:bc:dd:ba:3f:b1:a9:6b:35:4c:c4:62:b4:
93:d3:36:b0:0c:94:22:73:3b:fc:5c:f6:88:7e:ae:28:5d:4e:
3c:2c:08:75:32:c4:6f:7d:bd:7a:38:52:3e:22:11:f6:9a:15:
d9:39:55:78:c8:f3:ae:74:50:29:85:18:9a:d9:ad:83:25:7a:
af:17:e3:f2:7b:06:29:d4:4a:8d:5b:38:5e:90:b2:67:5c:b1:
7c:10:9d:21:f9:51:c8:d9:29:fe:39:70:98:e9:c2:38:5b:55:
d6:37:b5:c0:01:b7:f9:01:e8:57:f0:f6:22:25:27:a4:73:be:
4e:e1:cc:67:49:ac:e8:cd:ff:62:71:f9:6d:70:17:5d:ed:77:
1e:67:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:46 2026 by rpki-client