Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
File: bCecf9LtlfgYXaFSKg9XxQPuxas.cer (raw, json)
Hash identifier: 6Zvbq3ZoieQMuvwcAG/i3jNeieZDur33OnbXSuQ1tiI=
Subject key identifier: 6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F1775E7431FF5934F26B3A558EA103651
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 07:37:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.190.201.0 -- 192.190.202.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:75:e7:43:1f:f5:93:4f:26:b3:a5:58:ea:10:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 07:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:27:81:88:c3:7d:c9:80:85:48:13:76:72:
d0:2f:2d:eb:19:d7:7c:a5:75:0d:60:be:e9:e3:95:
78:27:ab:40:a2:ca:73:0d:0c:f6:7a:8a:a2:e8:f6:
7f:d6:c0:06:60:5b:ef:20:31:7b:bf:76:14:e9:78:
be:f8:5c:7b:b6:36:0f:f3:bb:08:74:08:dc:54:88:
84:c1:26:fb:50:17:0c:69:4a:4d:fa:39:0e:0c:e7:
a0:2e:90:72:b0:78:4b:23:7d:0f:fa:a2:0f:24:6d:
71:0a:17:a7:b9:e5:9f:a8:b3:57:0c:9b:b2:d7:84:
73:d6:ba:89:e1:44:4d:75:85:2c:d9:23:7d:c5:76:
ca:23:b8:52:5c:e7:81:19:c4:5b:a5:b7:54:15:85:
2a:da:e5:3e:e9:89:4c:fc:f3:1c:36:73:da:f0:d8:
d7:d5:11:66:fc:da:64:91:97:87:41:ee:10:c2:31:
c6:fb:fa:53:64:1c:db:b5:a5:9f:5d:7d:e3:91:7b:
5f:9c:68:ed:aa:51:29:0b:a4:60:32:db:e2:e7:b4:
bf:60:c0:e8:c9:6a:b1:aa:8e:8d:df:67:79:3f:b9:
39:98:87:f5:b0:be:0f:d4:71:02:8b:2f:99:1a:3a:
59:68:14:44:6b:9e:1c:ee:22:14:b3:50:03:26:ff:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.190.201.0-192.190.202.255
Signature Algorithm: sha256WithRSAEncryption
ac:c2:11:21:b9:34:1f:d1:1a:29:ac:a1:b5:98:eb:67:c3:c0:
9a:35:76:af:c2:a7:d9:00:19:d5:1e:43:31:d1:3e:7a:19:22:
d5:45:36:ea:52:07:8f:12:1d:da:02:30:a5:42:63:26:a0:e8:
33:5c:94:b3:d1:f0:65:89:d8:32:85:b8:c0:29:bc:88:3f:57:
6f:96:7a:9c:51:bf:9d:8d:f5:d5:f8:23:fc:c8:00:a4:2e:0a:
cc:b5:24:98:9f:c4:1a:7a:5b:4f:53:4e:61:42:f1:d1:b4:d1:
ba:1a:76:9c:92:b9:ce:33:50:d6:08:2f:c2:64:a8:34:05:31:
f4:be:0a:5d:28:93:49:fb:0c:0b:35:ef:70:ce:64:63:f1:ba:
8f:55:ca:f3:ba:7a:5e:14:dd:42:a8:c0:c9:47:f7:89:90:3c:
d7:b5:d6:25:58:73:ec:ff:98:c5:82:08:74:9c:92:a9:cc:8c:
32:bc:f8:f9:f5:bb:21:48:34:91:58:98:c8:68:bf:0f:36:f8:
a8:bc:4c:2e:7b:8e:e1:f8:16:f1:7f:25:0b:b9:16:23:4a:de:
d1:63:f3:71:9e:c4:02:a1:bf:e5:8e:a3:c5:45:53:a0:5b:ca:
62:b1:60:83:9f:17:12:7a:11:f6:29:ff:73:d3:73:e5:6f:bb:
b1:17:a8:4b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZ8XdedDH/WTTyazpVjqEDZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMDczNzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzI3OWM3ZmQyZWQ5NWY4MTg1ZGExNTIyYTBmNTdjNTAzZWVjNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWMngYjDfcmAhUgTdnLQLy3rGdd8
pXUNYL7p45V4J6tAospzDQz2eoqi6PZ/1sAGYFvvIDF7v3YU6Xi++Fx7tjYP87sI
dAjcVIiEwSb7UBcMaUpN+jkODOegLpBysHhLI30P+qIPJG1xChenueWfqLNXDJuy
14Rz1rqJ4URNdYUs2SN9xXbKI7hSXOeBGcRbpbdUFYUq2uU+6YlM/PMcNnPa8NjX
1RFm/NpkkZeHQe4QwjHG+/pTZBzbtaWfXX3jkXtfnGjtqlEpC6RgMtvi57S/YMDo
yWqxqo6N32d5P7k5mIf1sL4P1HECiy+ZGjpZaBREa54c7iIUs1ADJv9H6QIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFGwnnH/S7ZX4GF2hUioPV8UD7sWrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2QyMmFk
ZS01M2RkLTQwZDAtODI1NC0yNDBkZDg2MzZlNDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZDIyYWRl
LTUzZGQtNDBkMC04MjU0LTI0MGRkODYzNmU0Ny8xL2JDZWNmOUx0bGZnWVhhRlNL
ZzlYeFFQdXhhcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF
BwEHAQH/BBgwFjAUBAIAATAOMAwDBADAvskDBADAvsowDQYJKoZIhvcNAQELBQAD
ggEBAKzCESG5NB/RGimsobWY62fDwJo1dq/Cp9kAGdUeQzHRPnoZItVFNupSB48S
HdoCMKVCYyag6DNclLPR8GWJ2DKFuMApvIg/V2+WepxRv52N9dX4I/zIAKQuCsy1
JJifxBp6W09TTmFC8dG00boadpySuc4zUNYIL8JkqDQFMfS+Cl0ok0n7DAs173DO
ZGPxuo9VyvO6el4U3UKowMlH94mQPNe11iVYc+z/mMWCCHSckqnMjDK8+Pn1uyFI
NJFYmMhovw82+Ki8TC57juH4FvF/JQu5FiNK3tFj83GexAKhv+WOo8VFU6BbymKx
YIOfFxJ6EfYp/3PTc+Vvu7EXqEs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:32 2026 by rpki-client