Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
File: BtCToXdsCFomSP94tM4f5BfFY10.cer (raw, json)
Hash identifier: jez/2g133Tjr6puf4hqlhao+H5AFi/q7cMO7DnruSKk=
Subject key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7FDCD833E2EDDAEE7262725C74483
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.5.164.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:fd:cd:83:3e:2e:dd:ae:e7:26:27:25:c7:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:53:d8:63:cb:f2:42:83:d0:9e:05:73:a0:
c0:57:84:e0:73:86:a9:cf:b8:43:42:0d:2e:61:88:
99:72:89:7f:f8:19:06:08:c8:d3:40:84:13:98:58:
4d:07:2f:9d:62:a1:00:83:8f:44:f3:24:ef:1d:bb:
e6:fe:3d:a6:93:cb:d7:31:8b:84:ad:78:bf:d6:af:
76:46:e0:00:d2:b6:fd:b6:5e:2c:a6:41:d7:58:18:
45:52:c0:94:56:5b:e5:a1:cb:c3:d4:3e:78:5c:d5:
8b:dd:dc:89:9d:73:a0:67:75:83:93:67:58:21:2b:
94:73:5c:f1:d7:ee:fb:da:3b:b3:a2:4f:2f:b0:91:
67:4f:bf:1a:f5:95:57:3f:d7:42:f0:23:eb:6d:59:
a0:d6:b3:b0:5d:d6:6b:0c:39:78:e2:78:3b:76:9f:
4d:99:b5:fb:c5:c8:13:d0:90:ea:3d:93:c1:14:b6:
f1:26:88:77:e0:1c:d6:2f:22:79:1b:ed:bb:3c:de:
69:d5:7c:bf:ac:16:f3:fc:a2:12:a4:1b:22:b1:9b:
aa:55:b6:de:21:b0:f9:31:64:c5:77:b3:90:eb:1c:
32:4c:64:6d:38:39:3e:e5:d6:b0:a5:e7:e4:34:1b:
63:d4:a3:6d:7a:c3:6f:51:29:88:2a:58:ff:e4:a0:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:67:7d:fb:72:0a:d4:81:e2:a5:36:11:53:ac:86:25:b8:44:
08:61:d5:21:cb:7b:3d:aa:4e:eb:53:00:0f:29:79:92:cb:aa:
53:f4:43:cd:d3:27:b7:d4:c4:1d:2b:8b:e1:2a:28:9e:2d:d2:
09:a3:26:f5:89:3b:3f:28:11:d7:45:3c:65:5b:a8:42:6e:9c:
01:a4:13:d6:9d:65:7a:f2:cf:2b:0d:18:62:06:26:c1:d2:65:
70:4d:d8:7a:cd:93:6b:50:68:f1:d6:fa:c3:82:61:64:9e:e1:
87:df:95:c4:2a:91:c6:a4:8a:23:e0:29:ed:b1:34:26:82:0e:
f6:52:cc:e6:ea:d9:f7:e8:65:da:77:72:4c:9c:fb:89:ce:24:
66:45:a2:e0:62:cd:c6:24:fd:93:b7:4c:a8:ea:98:6b:ed:03:
83:b9:c9:49:d3:36:83:02:15:16:e5:3e:25:6f:2a:16:06:08:
38:86:13:06:c7:a5:8e:17:9d:4b:93:21:ad:df:a6:a1:e3:ea:
2e:d6:e8:60:2c:ee:e4:fc:b2:b4:51:af:29:38:c1:3d:e5:da:
05:c8:07:8d:94:a3:5e:84:35:a5:bf:81:55:b5:45:56:bf:ad:
b3:04:0e:ac:3f:d1:d7:9e:02:21:45:73:e5:a5:fc:32:c4:0f:
46:af:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:29 2026 by rpki-client