Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
File: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer (raw, json)
Hash identifier: 6PqfWys2vbjPXdxI1X44yjacMyPOetl5xn8BCQp8x2k=
Subject key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D0AE3588ACE262A6B4DFF23FAF0337FD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Mar 2026 10:56:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2001:67c:278c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e3:58:8a:ce:26:2a:6b:4d:ff:23:fa:f0:33:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 10:56:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=875b3e56ef93190e506d72819bcca6789ad92140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:a6:4d:e8:80:e0:c1:5f:ff:79:a8:11:ce:
16:86:1a:80:5a:a5:94:8f:8f:2c:f4:7d:84:82:5f:
76:2e:03:c1:c8:46:af:03:96:ae:75:90:4f:30:ec:
8c:bf:20:13:b4:0a:ee:46:46:92:97:8f:5f:b2:e1:
26:ef:0e:92:d6:e5:d6:d8:a4:bb:3b:0a:26:d9:8d:
5c:6e:77:9c:7a:00:e3:e7:d2:ea:30:30:be:97:64:
e4:86:b6:5b:3d:37:06:30:54:83:ca:43:c6:00:bd:
a1:d9:d0:0f:1f:ec:8e:7a:b7:93:c8:35:f3:55:82:
d8:0e:08:b3:ba:cd:dd:16:10:41:5c:a0:c2:e6:a4:
15:d6:6c:57:9d:6f:b8:c8:f8:e4:c9:71:8e:02:fb:
a6:c2:6c:67:02:d8:90:bc:64:b7:1a:e8:b6:8f:4d:
d9:0e:1e:74:c3:64:04:56:6d:2c:ce:0f:89:68:c2:
a4:b5:28:16:65:82:33:d3:5a:e3:6d:da:a4:ed:24:
b9:13:a6:8c:20:e7:3a:0b:c3:c1:8a:08:02:1f:19:
28:d5:3e:91:83:d6:04:fb:79:39:35:d5:14:d7:ef:
c0:3a:0f:6e:eb:5b:65:cb:57:26:65:23:ec:42:5a:
24:94:9f:53:ef:29:36:dd:12:ee:bd:ad:e0:e6:01:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:278c::/48
Signature Algorithm: sha256WithRSAEncryption
72:13:7e:6d:4e:38:ba:72:22:e1:c6:37:01:6a:14:01:e4:90:
5e:84:7a:ef:a7:ae:98:8f:4c:12:79:46:57:f7:25:eb:ef:df:
46:0c:b2:c7:51:d2:5e:8e:70:1a:83:ba:a2:13:a7:60:0b:5b:
b3:32:2e:cd:65:af:f5:a9:70:3d:13:b1:18:58:3b:fe:10:99:
20:f4:82:03:e6:e8:5e:50:00:a6:0d:af:3e:e9:55:a8:47:ff:
15:ee:8c:a2:21:55:52:c7:44:a6:68:78:74:d9:a8:8b:6a:a9:
90:98:d0:98:09:18:28:7d:de:f5:87:9a:82:31:3a:c9:eb:c4:
08:cf:96:4c:e7:5e:8a:01:ff:6e:f3:aa:0e:28:e1:8d:a3:da:
8f:26:92:a4:58:0d:0a:4f:c7:b2:c6:61:7c:50:f4:3a:3a:51:
0e:b0:e7:66:5f:86:86:47:a2:9b:c2:b1:dc:75:db:c3:91:08:
b4:c8:f8:a2:38:d8:d3:de:54:58:94:e9:32:7a:ab:1b:37:e0:
8c:41:90:32:be:51:b8:8c:ec:5a:de:a9:29:84:c6:e9:21:31:
f8:44:b6:02:91:2e:2d:b0:24:08:f0:24:cb:16:46:d3:be:27:
40:bf:6a:e8:4d:00:0c:26:fe:ff:ab:92:8a:90:7a:81:8e:19:
4f:68:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:24:04 2026 by rpki-client