Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
File: BRYHqGja9IRiRfPIu_nr52mCmtk.cer (raw, json)
Hash identifier: r1+AtscDtME3S/dy8zWeyZmHCntgpHiGSmfsB2R0R4w=
Subject key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB3CF1EF09A43116991E70DC2AA488
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39819
IP: 91.207.28.0/23
IP: 91.213.233.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:3c:f1:ef:09:a4:31:16:99:1e:70:dc:2a:a4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:c4:b9:1d:70:78:c1:5b:69:90:c8:76:a1:
db:c7:17:50:6f:c5:68:14:64:93:de:c2:16:b2:5a:
5f:a6:a1:ff:26:23:03:8a:9c:cd:3e:83:ae:fe:3b:
e3:55:d2:a4:15:aa:6f:b2:cc:60:f7:af:2f:5d:70:
29:bf:74:f8:fd:65:fe:2f:a8:7f:9f:86:6a:d1:40:
84:5b:fe:f0:68:bf:5a:c5:87:18:77:c4:c2:65:11:
47:6b:ef:b1:ec:74:2e:65:2d:31:24:4c:d1:b9:86:
3d:66:bc:15:80:3f:e5:7a:25:8b:86:b6:b3:ac:1e:
d6:5b:21:57:e9:01:cb:3c:c7:20:33:6f:67:1e:b8:
0f:82:7b:1c:90:f5:0b:a6:76:05:26:fd:4f:d8:c8:
ca:0f:a8:d0:ae:41:f7:1e:89:3c:bf:f6:53:7f:d5:
af:f9:e5:f9:07:3e:a6:c8:d6:be:78:e6:a0:75:57:
92:73:c7:6c:90:14:ad:e9:20:7b:4d:fd:d3:1b:33:
fe:f7:9b:69:56:0f:c1:14:8e:54:38:73:c4:0e:a0:
29:ad:fd:ef:f3:d8:d1:48:9a:e5:68:91:ec:4a:7f:
5b:df:4d:4c:b4:21:7b:9a:6d:dc:1e:d4:a4:85:71:
7a:de:cf:e3:7e:d8:4e:45:6c:8d:88:bb:c2:27:95:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.28.0/23
91.213.233.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39819
Signature Algorithm: sha256WithRSAEncryption
2d:62:4c:87:7d:c1:12:6c:27:d0:12:ff:2a:c2:ca:9c:2c:1c:
23:61:4d:9f:9b:d4:8c:45:4d:ba:09:69:78:c6:da:3d:b9:95:
0e:5a:0b:cf:b3:dc:77:26:9d:a6:2a:79:25:3b:96:e8:56:f7:
1d:95:e3:b2:44:f0:ee:63:6c:3a:26:de:92:29:a7:3f:bb:20:
fc:7a:bd:f2:21:00:ce:8a:f4:9e:b7:ed:c8:94:3a:c8:42:ce:
3e:73:67:5a:a0:c8:7c:35:8c:6d:06:3a:cd:01:57:81:32:50:
c0:ce:8b:9e:10:80:4a:61:60:f5:20:26:1a:4f:4c:dd:bf:05:
1e:df:c1:d5:e5:f0:8a:28:63:6c:62:c8:2d:f2:1c:9f:7d:fb:
d0:44:9a:e2:4d:81:e5:e6:db:3d:60:10:e3:b9:7b:8a:f9:bd:
09:f8:20:6c:43:4d:9f:9e:b5:71:90:ef:9d:2e:9e:a7:5e:90:
ab:29:a4:c9:a1:d3:a7:7c:f2:97:cb:92:22:e9:b9:fb:e8:9d:
f1:e4:2d:a8:1b:e7:aa:5e:53:23:33:8e:95:7b:fc:ae:ff:d2:
57:52:53:e5:0f:cc:ec:8b:66:89:fd:16:03:e0:c3:b8:d1:6e:
db:d8:cb:2f:5f:1f:3e:7f:79:33:d4:5d:de:1e:b8:68:89:3a:
fb:4e:99:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:29 2026 by rpki-client