Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
File: humRNBcbWGP2LyK316v3QDSVKOw.cer (raw, json)
Hash identifier: k609AVCcCpC2E9LIoTAZay8ALyaa4yfaFZyPuZYkWyg=
Subject key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A182CDE08DF5EEAF09BB7536A1735DDE18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Oct 2026 13:58:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60439
AS: 209230
IP: 5.182.76.0/22
IP: 5.183.112.0/22
IP: 45.10.76.0/22
IP: 45.12.20.0/22
IP: 45.82.92.0/22
IP: 45.90.148.0/22
IP: 45.94.80.0/22
IP: 45.131.112.0/22
IP: 45.136.212.0/22
IP: 45.141.224.0/22
IP: 45.151.80.0/22
IP: 85.208.196.0/22
IP: 91.207.248.0/24
IP: 139.28.16.0/22
IP: 146.94.192.0/19
IP: 193.160.22.0/23
IP: 193.160.30.0/23
IP: 194.117.73.0/24
IP: 2a13:8240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:cd:e0:8d:f5:ee:af:09:bb:75:36:a1:73:5d:de:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 13:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86e99134171b5863f62f22b7d7abf740349528ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:a1:29:ca:31:dd:2c:4b:fe:21:ce:8b:10:
c9:f7:2c:dc:6d:75:11:ea:c5:99:12:a6:75:2e:16:
49:89:d3:96:75:d0:5f:25:50:8c:b8:eb:16:4e:5a:
76:26:09:38:23:af:69:55:af:02:33:d0:d7:90:4a:
f6:aa:a5:56:a1:f1:83:80:e5:b8:dd:07:14:ae:fa:
4c:dc:c2:f1:74:95:19:69:cb:29:ed:28:85:38:da:
5d:85:87:8b:3b:bf:4c:a6:c8:5c:40:96:34:d6:7a:
e7:48:e0:a0:9f:50:2a:bd:fc:e4:17:2e:96:22:d7:
55:06:c3:95:b7:e4:58:15:5d:60:63:fb:4f:b8:09:
02:c1:34:23:a9:65:f2:59:7b:6d:e4:b5:52:93:5c:
a4:43:9f:a7:71:83:97:00:44:df:c3:f5:f7:c1:08:
c4:dc:8e:04:fe:a2:62:a8:08:35:0a:08:52:8b:d5:
bd:ff:6c:ca:2e:88:67:e6:33:96:75:34:3a:7e:2e:
6c:94:ba:03:67:c6:51:5b:c0:c8:ce:bc:84:a3:92:
02:68:f4:eb:95:87:d9:a9:88:9b:c3:d7:6a:95:2c:
65:6a:2c:84:9f:aa:93:e9:b2:5d:26:19:df:83:d1:
c3:8b:06:02:ca:03:eb:27:d1:35:39:a4:41:51:78:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.76.0/22
5.183.112.0/22
45.10.76.0/22
45.12.20.0/22
45.82.92.0/22
45.90.148.0/22
45.94.80.0/22
45.131.112.0/22
45.136.212.0/22
45.141.224.0/22
45.151.80.0/22
85.208.196.0/22
91.207.248.0/24
139.28.16.0/22
146.94.192.0/19
193.160.22.0/23
193.160.30.0/23
194.117.73.0/24
IPv6:
2a13:8240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60439
209230
Signature Algorithm: sha256WithRSAEncryption
13:75:4d:41:9a:dd:b0:68:3d:46:0e:42:79:49:44:ee:35:57:
ec:34:91:d6:24:28:dd:0d:5c:c8:d9:57:a3:a5:61:8d:76:fb:
79:d1:da:71:a6:5b:8f:36:3c:b6:e1:4f:7c:28:0d:00:85:a3:
25:cc:d5:2f:63:36:56:39:18:de:d9:14:76:58:f2:8c:45:5f:
62:98:67:50:df:97:3d:4d:51:be:2a:eb:ee:d0:4d:af:f4:22:
08:aa:d7:0f:3e:3a:49:9b:fa:7c:7e:85:c2:4d:90:20:34:39:
fa:80:f3:61:c6:a8:96:48:bf:d4:4a:f7:ab:27:d9:37:a7:28:
20:b8:77:db:53:6f:c7:52:93:0c:02:b9:87:93:b0:67:df:05:
15:e8:5c:aa:52:af:23:6e:ec:f9:4c:78:80:40:91:24:6e:f1:
50:ef:33:39:14:33:37:1e:e2:9f:94:e2:f5:4c:8e:64:ad:ff:
ac:fb:6b:c0:f5:f3:11:db:c5:10:60:8a:82:1b:74:cd:0e:a6:
54:4d:65:87:b7:bb:ad:06:75:a5:cc:c0:1e:db:4c:c6:40:0e:
d4:81:b8:5e:59:a1:a0:00:61:40:b2:97:8a:be:4d:62:7a:43:
eb:f7:43:4c:6c:54:53:97:0a:77:3b:24:d6:4b:81:ac:e1:a8:
cb:4b:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:26:10 2026 by rpki-client