Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
File: bE6tk3_29mwLFfItDUn5N243154.cer (raw, json)
Hash identifier: isIguGgutbO756c2y9NY+E5GalC//X593fqaz0whrEo=
Subject key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F477F20CBB79BE27BCCEFAC17F976E2DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Jul 2026 15:29:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198966
IP: 91.146.64.0/19
IP: 185.153.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:7f:20:cb:b7:9b:e2:7b:cc:ef:ac:17:f9:76:e2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 9 15:29:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:68:b6:a2:01:15:ba:04:f0:2f:0e:1b:a2:
54:c7:d1:2d:2a:8a:b0:d9:33:3a:ab:81:1b:79:fe:
9f:48:d1:0e:e8:50:cd:d3:bd:85:30:91:9a:b1:52:
2a:94:ae:f9:59:e1:16:07:5f:da:eb:c8:c7:e0:e0:
c3:e7:ff:2b:bd:95:03:30:a5:dd:09:88:30:0f:30:
da:bb:fa:f2:46:1f:4f:f3:ac:ba:80:e2:35:ff:26:
f6:10:bc:7f:0c:0d:bc:8a:bb:46:1f:1b:3d:48:9b:
11:d1:6f:0c:13:87:e8:06:4f:3a:1b:d3:b8:f6:ed:
57:b6:a8:92:09:0e:cf:d5:51:24:64:e2:bd:b2:4f:
2a:6b:c9:d1:71:75:bb:58:36:2d:4c:5c:a3:ef:ff:
78:ab:54:8d:7b:b0:88:34:02:34:3d:ba:d8:f6:38:
f2:46:c0:72:3c:54:e1:4e:1b:9e:82:6d:14:1c:83:
7e:f6:fe:c8:18:d3:b5:26:8f:d3:77:4d:4c:ae:77:
01:63:41:7f:65:24:ed:1f:e6:60:0f:3e:6e:7f:5d:
89:0a:f4:20:c9:ed:73:7d:bc:92:be:52:66:88:07:
86:cd:60:f6:78:db:19:f9:84:de:ef:0e:18:86:63:
a5:05:61:ee:80:27:49:b7:94:f5:1a:6b:20:a4:35:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.64.0/19
185.153.144.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198966
Signature Algorithm: sha256WithRSAEncryption
65:b8:7a:73:42:dc:4f:21:4f:00:94:30:01:81:3b:f9:74:e1:
32:15:0d:88:94:81:86:36:23:78:e8:22:27:e8:3e:ad:c0:cf:
bd:78:86:3f:59:10:17:fb:e8:6a:4b:8f:6f:2d:21:b1:44:0c:
df:91:4d:d1:90:59:04:bd:9e:1e:b7:e0:d0:b0:a9:39:02:a9:
e5:67:0d:40:8b:fb:d6:b0:77:ef:9c:db:15:14:69:59:7f:81:
bc:c3:13:8b:46:56:ab:87:17:c4:72:22:bd:90:00:90:24:87:
e9:65:a3:a5:ca:cb:3e:d4:a6:74:93:f4:9b:ec:91:b6:b8:98:
2e:93:5b:f2:8a:48:1b:21:99:60:18:88:27:3c:92:50:18:12:
04:d7:c1:b4:93:39:30:0e:13:78:b2:b1:7a:f0:2d:13:b1:a3:
82:1c:f1:14:e1:e6:18:6c:ac:dd:be:74:5a:66:88:3e:af:7e:
43:3c:c3:f2:6c:da:0a:72:19:e9:1a:c9:9d:8e:ea:14:39:eb:
14:92:96:04:35:49:a1:f0:b4:ce:e7:6b:05:ee:c3:f3:e0:c8:
d0:12:9c:c3:18:5d:eb:3f:8c:5b:82:b6:92:79:df:1e:c1:aa:
ed:f0:13:96:32:cc:63:84:38:a4:d9:12:fb:6b:13:d7:e3:65:
97:85:87:5b
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZ9HfyDLt5vie8zvrBf5duLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzA5MTUyOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzRlYWQ5MzdmZjZmNjZjMGIxNWYyMmQwZDQ5ZjkzNzZlMzdkNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f1otqIBFboE8C8OG6JUx9EtKoqw
2TM6q4Ebef6fSNEO6FDN072FMJGasVIqlK75WeEWB1/a68jH4ODD5/8rvZUDMKXd
CYgwDzDau/ryRh9P86y6gOI1/yb2ELx/DA28irtGHxs9SJsR0W8ME4foBk86G9O4
9u1XtqiSCQ7P1VEkZOK9sk8qa8nRcXW7WDYtTFyj7/94q1SNe7CINAI0PbrY9jjy
RsByPFThThuegm0UHIN+9v7IGNO1Jo/Td01MrncBY0F/ZSTtH+ZgDz5uf12JCvQg
ye1zfbySvlJmiAeGzWD2eNsZ+YTe7w4YhmOlBWHugCdJt5T1GmsgpDV89wIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFGxOrZN/9vZsCxXyLQ1J+TduN9eeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2ExZjA2
ZC1hZWUyLTQwNTctYjg3NS0xNTNhNWYzZmMzM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYTFmMDZk
LWFlZTItNDA1Ny1iODc1LTE1M2E1ZjNmYzMzYi8xL2JFNnRrM18yOW13TEZmSXRE
VW41TjI0MzE1NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQFW5JAAwQCuZmQMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMJNjANBgkqhkiG9w0BAQsFAAOCAQEAZbh6c0LcTyFPAJQwAYE7+XTh
MhUNiJSBhjYjeOgiJ+g+rcDPvXiGP1kQF/voakuPby0hsUQM35FN0ZBZBL2eHrfg
0LCpOQKp5WcNQIv71rB375zbFRRpWX+BvMMTi0ZWq4cXxHIivZAAkCSH6WWjpcrL
PtSmdJP0m+yRtriYLpNb8opIGyGZYBiIJzySUBgSBNfBtJM5MA4TeLKxevAtE7Gj
ghzxFOHmGGys3b50WmaIPq9+QzzD8mzaCnIZ6RrJnY7qFDnrFJKWBDVJofC0zudr
Be7D8+DI0BKcwxhd6z+MW4K2knnfHsGq7fATljLMY4Q4pNkS+2sT1+Nll4WHWw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:06 2026 by rpki-client