Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HnUTyzn7z_6kHtLNaff0DoEaKo0.cer
File: HnUTyzn7z_6kHtLNaff0DoEaKo0.cer (raw, json)
Hash identifier: KDw9K/QblS1XsY7IuonPM+u+i9mdAuuyVW9nn4gMlqc=
Subject key identifier: 1E:75:13:CB:39:FB:CF:FE:A4:1E:D2:CD:69:F7:F4:0E:81:1A:2A:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CADE8CEED634C112507C5BA5CE7A41F15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 09:37:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202979
IP: 185.148.172.0/22
IP: 2a07:6100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:e8:ce:ed:63:4c:11:25:07:c5:ba:5c:e7:a4:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 09:37:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e7513cb39fbcffea41ed2cd69f7f40e811a2a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:d2:c3:97:b3:af:5a:2a:5e:c3:a9:7f:3b:
35:82:5f:12:2f:d4:20:16:3e:bd:4c:15:29:90:db:
9f:0e:df:04:cb:90:00:61:77:62:70:77:43:5b:4a:
44:4c:9c:43:cb:b7:31:82:42:45:c3:a9:f7:35:80:
d9:8a:cb:3d:39:cf:3d:b1:85:c5:bf:4f:e3:c3:5a:
ab:45:eb:44:ff:f6:ef:a3:fb:46:f4:b9:bb:f0:13:
61:86:0b:7f:38:4b:46:f7:fc:01:ac:8e:2f:fd:6e:
5f:ae:17:44:7d:4c:64:67:ed:50:6e:93:bb:b8:12:
4e:af:9e:4b:7c:9e:b3:76:6a:22:93:e0:af:d7:00:
f7:78:03:fd:40:fe:f9:e5:68:6e:e9:2e:62:fa:89:
55:fc:97:27:fd:b7:0c:af:e3:ea:1d:b3:c6:6f:de:
5f:0a:e7:c8:0d:e3:dc:48:c6:ef:2e:aa:70:64:46:
f4:bd:e4:d9:35:a4:a2:fe:92:76:d2:19:57:53:cb:
87:38:95:68:bf:cc:c3:e3:8f:c0:09:b9:18:de:69:
0f:df:19:b4:6b:39:75:de:1d:17:76:24:02:a5:4b:
17:f0:3d:1b:a7:1c:cf:21:96:e5:a7:0e:7e:b5:6b:
46:39:46:94:6b:18:1f:64:48:ed:31:46:07:f6:e5:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:75:13:CB:39:FB:CF:FE:A4:1E:D2:CD:69:F7:F4:0E:81:1A:2A:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4ddaec-8b6b-4127-a951-4406679329b0/1/HnUTyzn7z_6kHtLNaff0DoEaKo0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.172.0/22
IPv6:
2a07:6100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202979
Signature Algorithm: sha256WithRSAEncryption
32:f1:12:9c:db:47:c0:95:78:da:0d:a4:5b:65:9c:e8:78:63:
32:c9:da:64:aa:cb:3f:08:6e:50:21:36:28:ec:0e:bb:6b:e3:
e1:9f:7d:31:e7:df:62:73:ba:b4:6b:14:9b:fb:6f:2e:4d:ca:
9f:b6:6b:26:d5:6e:38:8d:95:98:8c:08:84:c5:11:0c:ae:dc:
c2:b7:f7:47:b0:05:09:57:d9:0b:db:6f:f4:e9:30:58:ea:1c:
b1:c8:42:8a:96:32:38:6e:9e:da:36:35:9b:92:b7:62:02:24:
3b:ee:b6:3d:43:d3:87:44:68:b1:17:b4:6f:f4:0c:e3:03:d7:
ec:ff:45:fd:12:1d:b0:c0:f4:de:7d:56:d4:25:c3:05:6e:a6:
6e:4f:ac:bc:74:75:b3:a0:f2:3d:0a:2a:b7:d3:84:f9:bb:00:
ed:c1:9a:73:5b:28:43:8d:6e:28:69:4a:45:82:70:af:2a:11:
c9:77:d8:64:8e:ea:a6:e9:c3:76:66:f1:f7:d4:9e:b4:0d:07:
7f:b3:0f:d3:65:ee:d0:5b:55:a7:1b:35:f9:da:e7:87:13:04:
45:ef:c8:37:22:02:a6:85:60:5c:6b:f9:66:9e:d2:3d:e9:7d:
38:38:bc:b0:37:43:74:fe:e1:fd:1f:b4:3e:ff:fb:6f:d3:24:
ae:29:b3:bb
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZyt6M7tY0wRJQfFulznpB8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzAyMDkzNzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTc1MTNjYjM5ZmJjZmZlYTQxZWQyY2Q2OWY3ZjQwZTgxMWEyYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHLSw5ezr1oqXsOpfzs1gl8SL9Qg
Fj69TBUpkNufDt8Ey5AAYXdicHdDW0pETJxDy7cxgkJFw6n3NYDZiss9Oc89sYXF
v0/jw1qrRetE//bvo/tG9Lm78BNhhgt/OEtG9/wBrI4v/W5frhdEfUxkZ+1QbpO7
uBJOr55LfJ6zdmoik+Cv1wD3eAP9QP755Whu6S5i+olV/Jcn/bcMr+PqHbPGb95f
CufIDePcSMbvLqpwZEb0veTZNaSi/pJ20hlXU8uHOJVov8zD44/ACbkY3mkP3xm0
azl13h0XdiQCpUsX8D0bpxzPIZblpw5+tWtGOUaUaxgfZEjtMUYH9uVItQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB51E8s5+8/+pB7SzWn39A6BGiqNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzRkZGFl
Yy04YjZiLTQxMjctYTk1MS00NDA2Njc5MzI5YjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNGRkYWVj
LThiNmItNDEyNy1hOTUxLTQ0MDY2NzkzMjliMC8xL0huVVR5em43el82a0h0TE5h
ZmYwRG9FYUtvMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZSsMA0EAgACMAcDBQMqB2EAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMY4zANBgkqhkiG9w0BAQsFAAOCAQEAMvESnNtHwJV4
2g2kW2Wc6HhjMsnaZKrLPwhuUCE2KOwOu2vj4Z99MeffYnO6tGsUm/tvLk3Kn7Zr
JtVuOI2VmIwIhMURDK7cwrf3R7AFCVfZC9tv9OkwWOocschCipYyOG6e2jY1m5K3
YgIkO+62PUPTh0RosRe0b/QM4wPX7P9F/RIdsMD03n1W1CXDBW6mbk+svHR1s6Dy
PQoqt9OE+bsA7cGac1soQ41uKGlKRYJwryoRyXfYZI7qpunDdmbx99SetA0Hf7MP
02Xu0FtVpxs1+drnhxMERe/INyICpoVgXGv5Zp7SPel9ODi8sDdDdP7h/R+0Pv/7
b9Mkrimzuw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:22 2026 by rpki-client