Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BRdb6cBxQma6B0WpRMCISKOXy5g.cer
File: BRdb6cBxQma6B0WpRMCISKOXy5g.cer (raw, json)
Hash identifier: NzpBX8KoLyupXoEiGRDhNhhckvLlXqM1XLVDU8pJx+M=
Subject key identifier: 05:17:5B:E9:C0:71:42:66:BA:07:45:A9:44:C0:88:48:A3:97:CB:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAA94A12EDAEAD31B73DF3AC77F97D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42264
IP: 193.33.24.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:a9:4a:12:ed:ae:ad:31:b7:3d:f3:ac:77:f9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05175be9c0714266ba0745a944c08848a397cb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:50:ef:52:2f:ec:3e:92:bd:61:0b:d2:7c:
fd:b2:54:e4:28:81:6e:64:e7:23:39:35:57:4c:43:
41:d2:d8:9b:f0:18:34:4a:85:4f:a3:85:a4:01:08:
0b:04:a3:6f:5e:63:00:50:02:25:30:61:75:eb:57:
3d:c5:eb:34:ce:ff:e5:0a:3e:8d:a9:7a:47:83:da:
72:05:84:0b:4a:33:47:10:6b:ac:37:38:91:e0:e3:
03:ef:dd:1c:f5:42:9a:63:01:6c:45:3d:52:03:2f:
fb:ad:28:92:39:56:2b:ac:95:cb:ef:5b:c1:d2:6e:
02:12:3b:59:df:55:b6:ce:55:12:b0:28:55:14:92:
19:c0:b5:d5:45:5c:ac:c2:91:f0:96:61:ec:63:5d:
56:75:bc:c2:09:a8:95:91:ac:7e:02:7e:5c:a2:f4:
fe:33:53:46:74:57:9a:e9:28:ee:df:a7:92:48:3b:
3c:fd:16:2f:89:20:9b:1b:57:1c:41:a2:fa:93:98:
97:4d:ef:01:60:90:4d:f2:7d:09:7b:2f:39:57:9e:
0b:43:f2:7b:b7:11:17:c7:ce:20:e1:67:75:9c:97:
59:35:a8:93:f6:15:07:36:4e:54:ec:10:ed:cb:b5:
b3:72:73:19:01:2f:c4:44:ff:b3:6b:b4:00:0c:0a:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:5B:E9:C0:71:42:66:BA:07:45:A9:44:C0:88:48:A3:97:CB:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.24.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42264
Signature Algorithm: sha256WithRSAEncryption
1f:21:0e:20:f1:69:d5:16:6c:38:2e:49:a8:76:41:37:6e:23:
7a:e6:f7:aa:93:29:f7:0d:7d:6c:2e:8f:57:83:44:ca:44:ea:
da:e0:d8:79:2f:50:31:df:78:76:f7:a2:19:55:a8:64:80:7e:
2f:b7:fe:76:30:5e:c5:65:ef:3c:88:29:3a:f5:2f:92:35:62:
e2:10:19:36:3f:fd:2c:72:a5:27:6c:eb:cf:7e:e6:6b:b4:11:
c8:1f:18:4c:28:b6:6b:b7:11:df:eb:62:d2:93:be:48:65:18:
8c:65:b6:54:18:bc:91:31:e3:23:ae:eb:48:cb:f7:b4:00:1c:
eb:27:87:a7:7e:08:21:fa:e6:cc:cd:0c:74:a2:be:a4:26:5d:
9a:53:79:b4:db:ba:b2:2f:0b:0a:e5:ac:fe:d8:52:74:48:55:
b3:76:0a:13:86:d9:a0:4a:25:34:9d:b9:d2:7e:ab:7d:30:5f:
19:2f:4f:42:a3:68:7e:7c:34:c9:db:e0:1e:4b:21:b8:0a:8f:
92:98:34:b6:49:76:76:b1:4c:a1:a0:48:ad:86:99:0d:92:72:
16:1f:02:0b:37:e8:f8:03:25:9a:7b:3a:a4:0a:e1:d7:b6:ff:
8b:77:d7:f6:bc:11:a0:0f:ff:38:ce:1c:1f:f4:7a:0a:4f:e2:
66:d8:a0:1a
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ8Y+qlKEu2urTG3PfOsd/l9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTE3NWJlOWMwNzE0MjY2YmEwNzQ1YTk0NGMwODg0OGEzOTdjYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0RQ71Iv7D6SvWEL0nz9slTkKIFu
ZOcjOTVXTENB0tib8Bg0SoVPo4WkAQgLBKNvXmMAUAIlMGF161c9xes0zv/lCj6N
qXpHg9pyBYQLSjNHEGusNziR4OMD790c9UKaYwFsRT1SAy/7rSiSOVYrrJXL71vB
0m4CEjtZ31W2zlUSsChVFJIZwLXVRVyswpHwlmHsY11WdbzCCaiVkax+An5covT+
M1NGdFea6Sju36eSSDs8/RYviSCbG1ccQaL6k5iXTe8BYJBN8n0Jey85V54LQ/J7
txEXx84g4Wd1nJdZNaiT9hUHNk5U7BDty7WzcnMZAS/ERP+za7QADAoLmQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAUXW+nAcUJmugdFqUTAiEijl8uYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzYwMDdm
Zi01ZjBjLTRhNzMtYTNmMi1jY2M1ODE0MDk0YWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjAwN2Zm
LTVmMGMtNGE3My1hM2YyLWNjYzU4MTQwOTRhZC8xL0JSZGI2Y0J4UW1hNkIwV3BS
TUNJU0tPWHk1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwSEYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwClGDANBgkqhkiG9w0BAQsFAAOCAQEAHyEOIPFp1RZsOC5JqHZBN24jeub3qpMp
9w19bC6PV4NEykTq2uDYeS9QMd94dveiGVWoZIB+L7f+djBexWXvPIgpOvUvkjVi
4hAZNj/9LHKlJ2zrz37ma7QRyB8YTCi2a7cR3+ti0pO+SGUYjGW2VBi8kTHjI67r
SMv3tAAc6yeHp34IIfrmzM0MdKK+pCZdmlN5tNu6si8LCuWs/thSdEhVs3YKE4bZ
oEolNJ250n6rfTBfGS9PQqNofnw0ydvgHkshuAqPkpg0tkl2drFMoaBIrYaZDZJy
Fh8CCzfo+AMlmns6pArh17b/i3fX9rwRoA//OM4cH/R6Ck/iZtigGg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:13 2026 by rpki-client