Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
File: BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer (raw, json)
Hash identifier: B9KPoaGNQp0vxt3YHjZjXSEKv7RocjlFsPS0w6K990E=
Subject key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DB4925A7A2DC7B632F9AF0E38A57232A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Apr 2026 09:43:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216381
IP: 193.104.148.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:92:5a:7a:2d:c7:b6:32:f9:af:0e:38:a5:72:32:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 09:43:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04448d904f77c70cd9ee12336625d4851accb604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:44:09:af:9a:4d:e4:71:aa:71:db:88:51:
ab:5d:f0:87:18:d5:df:5a:ed:7e:cd:53:2e:5e:8d:
35:b0:ce:8c:d2:18:6e:d4:24:c3:05:20:a2:83:0d:
fd:64:b7:96:83:4e:80:00:e2:e3:57:1a:df:b9:9c:
1b:6b:82:71:d9:f1:28:4a:2d:7e:0c:c0:f1:63:c3:
9a:96:ff:a1:13:72:7d:da:92:44:f6:36:db:76:00:
de:cf:30:9c:b2:fa:22:cc:12:66:3c:f8:06:7a:75:
30:15:55:9f:e9:20:3c:cc:26:bd:69:89:09:4c:f5:
08:33:99:4f:62:19:73:aa:98:42:e7:01:88:ef:a2:
de:a4:bd:40:d4:f0:d0:d2:61:cb:9d:03:ab:2d:95:
7e:04:03:28:a5:cc:b6:4b:a5:8a:0e:fd:e7:43:bc:
a2:48:10:4a:73:b1:78:93:f6:e0:8b:47:e9:38:e6:
5d:c3:73:69:3b:98:69:a3:1c:d8:cb:1d:79:bb:bb:
92:fc:2a:30:4e:48:56:2e:12:6a:4d:64:59:36:98:
20:e8:e9:a5:87:a1:a2:58:4d:c3:82:b4:71:fc:80:
1e:71:f6:0a:3a:1d:cf:d6:f9:43:20:ca:a4:03:c6:
15:e7:4f:3d:57:77:7e:53:a1:ba:63:8b:b5:b3:73:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.148.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216381
Signature Algorithm: sha256WithRSAEncryption
56:cc:67:ce:74:47:73:72:fc:50:dd:56:04:ce:b2:bc:4c:b8:
50:46:08:54:44:8c:4d:ba:5a:a2:03:f0:0e:6e:eb:11:39:9b:
19:3b:74:47:64:02:f5:71:1a:6c:0a:fe:b5:d6:97:4d:4e:a6:
cc:d7:a8:b2:d8:97:83:fd:ca:ea:07:46:03:fd:22:f8:f7:f3:
2d:08:42:d1:ac:7e:a2:d5:db:5d:4b:95:f5:f8:a0:5f:54:1d:
d7:d0:5b:91:f6:55:da:a7:44:8d:ac:d4:f8:ac:3e:69:e9:fd:
fe:46:bd:ec:b2:c7:c3:9e:8c:90:8b:f5:78:fc:40:53:bc:41:
6b:5b:c9:60:bd:61:85:60:25:94:43:88:65:3e:8f:c2:86:de:
56:f7:b3:6e:a8:c9:76:53:7e:19:51:72:13:d0:cd:4f:9b:56:
df:e6:b4:1f:c5:72:e3:52:29:cb:75:8c:f7:d5:f4:23:ca:fe:
59:2e:c2:78:cf:fc:80:04:74:6d:7d:dd:fd:bf:29:3b:6c:d9:
00:03:11:9d:f5:e4:42:c0:e5:8a:43:d1:0a:d7:bd:fb:e9:dd:
24:4f:63:91:b6:82:08:9b:76:5f:c8:f4:54:04:34:e3:bb:e7:
34:f5:0d:e3:24:42:db:0c:9e:b8:bb:80:96:f4:d3:75:a3:c2:
b6:bc:88:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:23:08 2026 by rpki-client