Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
File: BpSDF1Vo_2MI2iXOaQQvSaUebss.cer (raw, json)
Hash identifier: 8+aK86skrbex0hnmQd9jsYWEWESUnAsmBMcp0ZLSrL4=
Subject key identifier: 06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E039474F8EE3681421D8EC42AD5746A6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 May 2026 17:55:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198120
IP: 2a0d:2500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:94:74:f8:ee:36:81:42:1d:8e:c4:2a:d5:74:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 7 17:55:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=069483175568ff6308da25ce69042f49a51e6ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:bd:3c:46:f7:fa:76:d2:40:6b:bc:b6:cf:
09:73:4f:5e:af:34:72:1d:4b:ae:e9:f3:8d:28:c2:
2c:a4:68:d7:65:f3:69:a3:01:24:4c:23:42:c5:47:
66:8b:86:39:46:17:e9:91:5f:ad:5c:13:99:63:b5:
63:6f:fc:4b:f6:45:b2:a5:73:d3:ab:3c:cc:2c:fe:
eb:b0:31:1e:0c:86:c0:34:90:fb:7f:04:19:1d:aa:
3a:5d:17:eb:2e:34:a7:48:78:2c:25:4c:81:b0:1d:
80:0d:df:e0:6f:88:65:8e:1d:a9:93:34:c7:bb:2f:
ed:8d:66:22:ac:6a:52:1f:ce:2e:28:b2:82:03:df:
b8:68:23:38:bd:ed:5e:a0:82:31:6f:2c:b8:40:e1:
5b:64:9e:ad:95:88:c2:a0:67:39:2a:5d:9c:d3:f8:
f6:fe:f1:84:76:38:99:28:8e:6b:df:11:c1:ee:ae:
3a:a6:46:09:c5:f1:33:76:e3:4a:96:4d:20:ff:ce:
1a:24:10:b2:79:de:d7:47:b8:41:51:66:dd:99:b9:
99:94:3d:6b:d8:28:47:2b:b2:b4:23:cc:4d:6b:b1:
8e:63:cc:36:76:4d:8e:13:c0:00:a2:3a:62:b6:72:
11:e6:0d:e3:e1:e5:7a:a5:cb:fb:d8:aa:97:ad:fb:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198120
Signature Algorithm: sha256WithRSAEncryption
b0:64:a9:0e:a6:4d:c9:da:78:4f:44:d4:91:4c:da:1a:03:1d:
1c:1b:6d:d2:88:60:a3:03:6c:c3:b7:08:ec:06:66:d0:15:31:
8a:7f:21:4a:8d:e4:f4:64:27:76:d6:ca:c3:47:9a:2d:48:b2:
2f:d5:2c:c8:8e:72:6e:16:27:8b:11:eb:52:04:bc:c3:71:77:
54:80:dd:71:7f:13:7b:38:f0:8e:f8:e4:b3:da:72:48:28:95:
e5:36:45:63:c8:96:20:af:e8:20:3e:b1:46:43:f3:85:a9:6a:
34:ea:72:08:ba:ec:c9:1a:21:67:f7:8d:1a:e7:ce:29:b8:b4:
6c:38:b3:f2:cd:40:6e:79:2a:67:e7:57:01:3b:3f:e1:a6:70:
5a:6d:4d:7d:57:5b:7f:c6:43:76:ce:91:34:fd:f6:0c:ab:78:
e0:ff:6e:4a:88:98:cc:1d:2f:f1:26:d8:de:1c:ac:a0:d3:ed:
66:90:57:50:f7:21:c2:0b:8f:da:e5:dc:27:c0:55:6a:58:00:
fe:ee:c2:0d:4c:7e:c6:35:8f:64:d6:db:bf:ac:7d:58:c1:96:
f5:f8:c2:fc:04:0a:1e:0a:ad:a3:00:f5:2f:57:38:95:29:3e:
f7:0f:fd:71:5a:66:1a:c3:29:d6:ec:ee:04:f2:ee:31:40:75:
55:82:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:50 2026 by rpki-client