Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.cer (raw, json)
Hash identifier: DJ775X34GkXZZ3rJPK5kuJoDiegFve71Sy4DDz9NWQ8=
Subject key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C11111A5C2EA93773300145F31ED12B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:17:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199340
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:11:1a:5c:2e:a9:37:73:30:01:45:f3:1e:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:2f:55:83:03:68:f6:f3:c5:22:69:83:5f:
a4:ae:80:9d:49:cf:de:2b:0e:8e:36:e8:18:f0:1b:
89:80:5b:fc:3e:d0:62:20:bd:b5:cd:5a:89:08:70:
93:17:58:c1:47:71:7c:e0:e9:11:18:25:91:9a:cb:
43:95:1b:fa:71:6b:88:e7:85:30:30:32:49:31:b7:
55:d2:b0:e7:4d:03:b0:1b:33:98:e3:2e:82:a0:24:
f8:e9:a5:17:45:f9:56:14:d8:34:06:e9:8d:7d:00:
5d:d0:d7:6d:3d:71:9f:45:93:eb:f6:10:85:d3:94:
13:ee:0e:88:61:cf:40:02:37:c7:38:62:41:3b:9c:
98:a0:52:9f:08:45:97:1d:e9:36:e1:d7:f0:cd:c6:
a6:ce:f5:4c:25:e2:33:26:ca:cb:fc:e6:b0:62:63:
86:9f:8c:48:4e:3b:03:47:37:7e:51:19:ee:58:d5:
a0:0c:57:93:74:89:97:b4:e6:24:7e:9a:80:c7:ca:
80:55:c3:f9:44:3c:70:2c:dc:9d:45:23:83:33:15:
e0:53:ff:56:c3:f0:75:ae:cb:41:81:16:bd:3c:99:
c2:9c:d2:c4:00:56:d3:48:32:2f:e0:24:50:d1:f1:
20:75:a8:fb:82:a2:ae:5c:91:79:be:26:16:96:7e:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199340
Signature Algorithm: sha256WithRSAEncryption
aa:45:c4:4b:45:23:7f:74:42:0e:1d:9c:30:f9:16:85:b2:f1:
33:d3:2e:53:2a:fb:88:f7:a2:c2:37:0d:02:91:c8:ec:3a:68:
28:f9:24:d4:cf:0c:da:27:d1:e8:d4:66:39:91:b6:42:39:0a:
ac:a9:3c:6a:f9:77:2f:4d:fc:97:a9:72:82:48:64:e5:32:57:
9b:d1:59:dd:4d:c6:9f:9f:1c:27:10:31:f2:e0:ec:52:44:14:
aa:dc:07:c2:e8:ea:7c:6d:54:51:35:d2:91:32:ea:08:1a:42:
5d:d6:76:88:c0:b2:b4:f2:ba:79:5b:9c:50:13:29:90:05:d5:
14:ed:e1:06:fd:aa:3e:29:e3:dc:77:e2:73:81:a0:38:3e:c8:
74:d2:23:d1:99:30:ae:2e:92:ba:c2:28:09:97:d5:85:5a:41:
11:da:5a:8a:d6:b6:d4:ca:53:60:ad:3d:8b:9b:aa:21:32:42:
27:7b:b7:4c:47:64:da:71:b1:b3:48:3b:bb:4f:39:fc:2f:57:
f8:f4:97:b6:76:bf:ac:b6:3d:94:63:38:4e:13:67:b8:4d:a1:
19:79:e9:c6:5d:a5:b8:3f:af:c6:8c:bd:81:cc:6a:76:44:7f:
8e:7d:0c:c1:5e:1b:c1:c4:58:6c:eb:67:05:7c:64:b2:f6:ee:
fe:ce:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:30:54 2026 by rpki-client