Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
File: BtvCTgiywmrakK1jjxrcdH9ppF8.cer (raw, json)
Hash identifier: TgGNzYdUSQWctuW5lHEmjdhQv+amRdrfxG7GtV/Po5s=
Subject key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1363AC5F2B102289F21BA64C01ECC325
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jun 2026 12:38:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56693
IP: 2a0f:4e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:63:ac:5f:2b:10:22:89:f2:1b:a6:4c:01:ec:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 29 12:38:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:ed:8b:53:21:9b:3b:9f:1d:96:24:9a:e9:
bd:9d:e4:c6:79:1e:04:e7:58:ad:c1:02:78:e1:b0:
8a:2f:4a:6f:68:10:b5:62:9f:4b:3e:4a:bb:34:db:
6a:54:68:92:fe:ba:60:37:5b:28:28:7d:ad:30:aa:
98:69:11:2b:a1:a0:2b:cd:02:3c:0c:00:17:75:b5:
80:86:45:6a:d9:8a:21:eb:d3:4e:53:7e:38:cf:ee:
71:c3:db:b1:32:f2:75:14:09:64:24:6b:3c:4f:53:
e2:60:f3:10:12:ad:3d:b3:c0:91:d9:f1:b2:d5:f3:
72:06:bb:22:28:16:dd:77:cb:e7:7c:8e:f4:65:1a:
1b:d9:32:65:c0:6a:ef:8c:57:a1:9a:58:43:e3:21:
66:64:cf:78:97:76:c3:31:54:7a:4c:54:a1:e6:ce:
51:19:c0:95:7a:7b:32:0f:a2:f3:9a:cd:a5:e9:c0:
98:ef:33:dc:d1:fd:5a:45:85:71:f9:a0:c0:35:39:
45:84:a5:85:52:4f:4c:b8:09:a4:3f:37:6c:e4:c4:
26:b9:01:3a:ca:50:34:1b:de:d9:b3:b0:64:9a:81:
58:42:1a:46:48:c4:5d:3a:70:7f:19:02:2a:0c:50:
32:b2:3d:bc:6a:36:9d:54:3e:dc:8a:c8:8e:0d:45:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56693
Signature Algorithm: sha256WithRSAEncryption
98:a6:c1:1e:9a:ff:77:f6:f5:46:0a:83:9b:c7:d1:cf:59:6e:
92:09:4a:2d:2c:0a:bd:ac:a7:41:0a:93:2c:3a:2f:7f:7f:f4:
4b:6e:6a:1f:c6:b3:d3:e2:1f:f5:db:c1:00:b2:7f:df:9b:74:
f5:a6:d7:df:be:1b:84:44:73:3d:83:3c:8f:e2:bd:0b:29:f7:
f2:5b:ac:12:73:bc:32:60:7f:64:88:2d:c8:39:c4:ea:a6:9c:
a0:96:ae:2e:a3:0f:c7:22:33:9a:0b:f2:e5:cb:8a:bb:ef:a1:
27:64:bb:f7:87:1c:62:82:cd:aa:c8:01:ab:ed:d6:17:91:65:
44:3a:a3:13:6f:b4:66:fa:6d:3a:15:89:ec:bd:50:25:0d:f5:
e3:02:13:7f:14:07:de:05:5b:e7:13:66:1c:90:d9:8a:82:f6:
b5:5f:51:c1:9c:30:c4:ac:93:37:fe:52:b0:05:42:3e:d9:02:
93:48:29:26:f9:44:fd:00:7b:25:00:eb:c4:e6:b1:9f:30:2a:
59:a6:c0:22:5a:30:84:e8:d9:42:77:44:20:01:b0:a3:52:85:
74:e0:e7:14:88:ae:d2:17:e0:12:8b:dc:58:2e:47:68:f1:a6:
6d:a7:5a:5d:5b:5f:84:84:d5:ce:87:75:41:61:51:6d:93:86:
35:fe:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:24:54 2026 by rpki-client