Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
File: BtvCTgiywmrakK1jjxrcdH9ppF8.cer (raw, json)
Hash identifier: MaOxLqH8GPIrQ9+pq1j8TD+yI1cJNCBRy9nR4X1s6iI=
Subject key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2448DDCC78A33CE39FF96EF968815
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56693
IP: 91.226.182.0/23
IP: 2a0f:4e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:44:8d:dc:c7:8a:33:ce:39:ff:96:ef:96:88:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:ed:8b:53:21:9b:3b:9f:1d:96:24:9a:e9:
bd:9d:e4:c6:79:1e:04:e7:58:ad:c1:02:78:e1:b0:
8a:2f:4a:6f:68:10:b5:62:9f:4b:3e:4a:bb:34:db:
6a:54:68:92:fe:ba:60:37:5b:28:28:7d:ad:30:aa:
98:69:11:2b:a1:a0:2b:cd:02:3c:0c:00:17:75:b5:
80:86:45:6a:d9:8a:21:eb:d3:4e:53:7e:38:cf:ee:
71:c3:db:b1:32:f2:75:14:09:64:24:6b:3c:4f:53:
e2:60:f3:10:12:ad:3d:b3:c0:91:d9:f1:b2:d5:f3:
72:06:bb:22:28:16:dd:77:cb:e7:7c:8e:f4:65:1a:
1b:d9:32:65:c0:6a:ef:8c:57:a1:9a:58:43:e3:21:
66:64:cf:78:97:76:c3:31:54:7a:4c:54:a1:e6:ce:
51:19:c0:95:7a:7b:32:0f:a2:f3:9a:cd:a5:e9:c0:
98:ef:33:dc:d1:fd:5a:45:85:71:f9:a0:c0:35:39:
45:84:a5:85:52:4f:4c:b8:09:a4:3f:37:6c:e4:c4:
26:b9:01:3a:ca:50:34:1b:de:d9:b3:b0:64:9a:81:
58:42:1a:46:48:c4:5d:3a:70:7f:19:02:2a:0c:50:
32:b2:3d:bc:6a:36:9d:54:3e:dc:8a:c8:8e:0d:45:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.182.0/23
IPv6:
2a0f:4e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56693
Signature Algorithm: sha256WithRSAEncryption
0e:b5:d5:f5:56:d1:c2:3b:fa:45:88:19:19:16:8c:82:c2:64:
2f:02:71:38:53:b7:69:29:46:70:2d:0c:4b:08:17:6d:d7:1b:
53:86:bb:ee:53:24:c8:a3:ea:64:fd:0f:bc:09:10:62:5b:df:
97:3f:f5:eb:a4:f7:c2:7e:7a:4f:9d:9a:67:63:97:d9:a3:6b:
30:eb:e4:ef:b6:e7:f7:76:1b:fc:6e:93:72:ae:39:37:48:14:
5b:a8:ea:a6:59:be:08:16:7d:1e:94:a7:6c:91:45:1f:a5:43:
40:09:99:67:54:3c:c4:b6:af:92:5b:27:6b:7f:da:f9:46:78:
4e:a1:c7:6c:d2:12:94:f6:ae:90:07:65:5a:ad:76:90:49:5b:
58:aa:8f:a2:de:97:48:d3:fd:86:93:01:94:c1:3f:06:1d:4c:
d2:bb:35:59:64:1c:45:b1:30:8b:17:d3:b4:da:b0:52:a1:98:
11:59:e5:37:53:29:9d:21:2c:c6:29:15:83:8f:9d:17:f2:1a:
7d:ba:70:2e:ba:c1:7e:bb:e8:86:36:ea:95:a4:c7:e8:db:3e:
c3:6a:9b:c7:ff:30:c6:c7:dd:ae:78:e5:cd:b8:80:82:b9:02:
e5:20:74:5a:3c:0d:d3:0f:df:4d:1f:8a:60:51:c6:2c:5f:37:
9b:44:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:56 2026 by rpki-client