Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.cer (raw, json)
Hash identifier: FkhV6AAJaN6UuRKlVM6Qn3l/Kw1BXnatnhIPLsJFQ/4=
Subject key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FDB2BF489C643341675B4B1ABAF704BBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Aug 2026 07:41:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47180
IP: 89.124.16.0/20
IP: 185.28.46.0/24
IP: 194.179.140.0/22
IP: 2a13:f8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:2b:f4:89:c6:43:34:16:75:b4:b1:ab:af:70:4b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 07:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:82:0a:7c:4e:0f:e8:c4:ad:18:fd:4d:93:
f9:78:60:9c:fa:26:34:6d:99:04:41:04:6c:17:7c:
e4:ca:7a:35:61:6a:aa:f9:6f:8d:4d:58:7c:35:41:
30:36:b0:23:05:c9:56:36:ef:20:c9:da:ba:28:6e:
65:21:c4:39:06:12:ec:24:7a:96:b5:9d:aa:f6:5f:
fd:8b:59:19:ed:d6:ce:21:5c:88:bd:77:b8:25:75:
c4:fb:0f:0e:17:db:87:a9:2f:f8:1b:7a:52:8c:b4:
77:d4:c4:c2:4a:f9:03:d4:32:28:cd:a0:5b:5d:31:
d1:1d:ea:cb:52:3d:c0:30:33:39:c0:88:ba:08:d5:
af:bd:45:d1:55:19:b4:a8:fb:42:92:92:de:4c:3f:
57:49:76:0d:67:6e:b4:9b:93:ee:85:56:4b:27:88:
32:88:6a:94:0b:c5:ed:db:9e:07:f6:df:22:22:4e:
f2:23:72:6a:6a:0f:13:7e:25:bc:43:32:17:de:ad:
57:88:7b:01:d4:8e:a6:c1:40:10:ce:e2:bb:f4:ee:
a4:70:85:d1:db:58:2f:de:16:15:85:24:a7:7a:11:
07:80:4c:99:09:55:f2:4a:cc:09:9d:1f:d7:1b:21:
f3:f4:7b:f7:58:c9:ee:3c:4c:c6:cd:50:b0:ae:b9:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.124.16.0/20
185.28.46.0/24
194.179.140.0/22
IPv6:
2a13:f8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47180
Signature Algorithm: sha256WithRSAEncryption
98:cc:76:d1:ca:6d:cb:91:94:dd:c1:37:e1:41:d5:5f:19:22:
c1:15:23:1f:24:35:ea:e8:34:ec:0e:dc:90:d1:71:bc:e4:66:
c9:c8:a8:77:20:f5:9b:e5:c1:51:41:b0:51:1a:3a:fd:e8:7b:
18:cb:49:80:b0:e0:08:f1:0f:7d:ca:b5:68:0e:db:66:03:af:
7a:46:2b:92:21:4f:ae:f3:26:da:83:5a:cc:c2:23:6d:c9:37:
45:02:cb:0d:72:06:ad:da:66:bb:e8:27:83:12:bd:03:38:e3:
29:c3:63:d8:c2:6e:67:39:70:7e:93:db:c1:36:3b:70:38:58:
b3:3d:44:66:fe:4c:c3:87:51:c6:9c:67:ab:e7:84:f2:69:b0:
a6:32:7e:29:77:54:59:14:7c:57:26:b6:11:d8:ca:8b:2c:d8:
98:fe:f0:ae:60:e0:6d:b9:24:5e:d8:46:39:50:7d:e1:0c:79:
70:dd:11:e5:8b:29:da:f3:19:34:09:0d:60:9d:b4:41:29:2b:
39:a9:b6:a9:59:b0:2b:be:ec:c4:ac:34:73:ec:47:c2:23:18:
2b:c2:fb:58:37:14:3a:ac:92:38:3e:40:ef:a1:fd:17:d8:18:
7d:cf:15:08:24:e9:a4:98:f1:13:b8:bb:ee:93:79:ba:9d:4e:
b6:3f:58:9e
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZ/bK/SJxkM0FnW0sauvcEu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODA3MDc0MTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWZjYWI0ZGVkZWQ2NmFiZWY3Y2Q3ZWQ3MjY1N2JjMDNhODIyOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUiCCnxOD+jErRj9TZP5eGCc+iY0
bZkEQQRsF3zkyno1YWqq+W+NTVh8NUEwNrAjBclWNu8gydq6KG5lIcQ5BhLsJHqW
tZ2q9l/9i1kZ7dbOIVyIvXe4JXXE+w8OF9uHqS/4G3pSjLR31MTCSvkD1DIozaBb
XTHRHerLUj3AMDM5wIi6CNWvvUXRVRm0qPtCkpLeTD9XSXYNZ260m5PuhVZLJ4gy
iGqUC8Xt254H9t8iIk7yI3Jqag8TfiW8QzIX3q1XiHsB1I6mwUAQzuK79O6kcIXR
21gv3hYVhSSnehEHgEyZCVXySswJnR/XGyHz9Hv3WMnuPEzGzVCwrrlotwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFB78q03t7War73zX7XJle8A6ginWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2M3Yzgz
Zi1mYWMyLTQ1NTEtOGY3OC05MWE3N2VhMDVkZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYzdjODNm
LWZhYzItNDU1MS04Zjc4LTkxYTc3ZWEwNWRmMS8xL0h2eXJUZTN0WnF2dmZOZnRj
bVY3d0RxQ0tkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQEWXwQAwQAuRwuAwQCwrOMMA0EAgACMAcDBQMq
E/jAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4TDANBgkqhkiG9w0BAQsFAAOC
AQEAmMx20cpty5GU3cE34UHVXxkiwRUjHyQ16ug07A7ckNFxvORmyciodyD1m+XB
UUGwURo6/eh7GMtJgLDgCPEPfcq1aA7bZgOvekYrkiFPrvMm2oNazMIjbck3RQLL
DXIGrdpmu+gngxK9AzjjKcNj2MJuZzlwfpPbwTY7cDhYsz1EZv5Mw4dRxpxnq+eE
8mmwpjJ+KXdUWRR8Vya2EdjKiyzYmP7wrmDgbbkkXthGOVB94Qx5cN0R5Ysp2vMZ
NAkNYJ20QSkrOam2qVmwK77sxKw0c+xHwiMYK8L7WDcUOqySOD5A76H9F9gYfc8V
CCTppJjxE7i77pN5up1Otj9Yng==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:54:24 2026 by rpki-client