Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer (raw, json)
Hash identifier: e71PCmzXoZfCAlMXvPzXZjLJN9RuuKq1oNKg/aB99ao=
Subject key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA7135C1E623315A6FF03531A8F3FAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 80.67.144.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:13:5c:1e:62:33:15:a6:ff:03:53:1a:8f:3f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:62:a3:c8:de:2c:ee:ed:56:4e:d3:bb:b6:
9a:36:29:e6:f1:05:d4:f7:57:83:6c:05:94:46:48:
a0:ee:b9:d0:be:a1:c6:8e:ab:56:2e:20:a5:3b:59:
0e:97:32:10:69:e8:8d:09:01:5f:71:d8:10:75:a0:
8e:0c:84:98:a1:1a:48:ef:f7:0e:1f:4f:19:09:3d:
e3:13:4e:83:6a:c2:f9:f8:2c:b6:88:0e:4c:b7:e3:
44:18:cc:b8:7e:5c:46:12:02:98:aa:18:4c:86:a4:
0f:76:d4:84:71:cf:f3:d2:4c:9e:a9:34:bf:cf:8a:
c4:5a:17:15:a4:5b:89:b5:2f:f8:ae:0c:c7:fb:24:
6b:5a:4a:90:15:0c:35:28:3b:6e:f2:a6:75:b3:71:
0f:53:16:9e:14:ce:b0:d8:64:c7:e1:59:fa:e6:63:
87:b2:5e:9a:1f:c8:dc:ee:55:aa:29:d9:f3:7d:ca:
5b:f5:c4:b2:4e:32:a8:4e:ff:7c:56:86:3b:4e:81:
56:40:5a:eb:ea:90:28:be:b9:55:df:16:47:10:36:
d1:4a:84:d0:83:7e:e0:6b:55:1c:7a:16:ec:7f:de:
18:1c:44:65:be:2d:bb:e7:0d:74:13:d8:40:cb:b8:
a4:ee:ec:c3:39:e9:bb:2a:70:7a:01:e2:dd:2d:f7:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:45:2d:33:b0:7e:af:d5:b5:fa:61:d3:e1:a5:04:e4:00:20:
7c:7c:43:e7:93:93:15:43:88:83:0d:24:f3:af:e3:57:a0:42:
67:56:5d:0e:4f:b2:9f:a0:96:82:18:d7:cf:c2:fd:63:50:54:
25:26:30:ba:9d:97:7d:e6:db:a8:f6:57:5e:2a:10:07:49:51:
21:53:b0:22:3c:61:71:50:f6:7f:2b:50:3e:82:29:82:60:cb:
a4:af:a0:20:f8:22:9b:f0:2a:1b:15:e1:5d:5b:83:c5:e6:76:
b7:e6:19:c9:72:03:26:af:18:c8:5d:63:8e:65:1e:81:ad:a3:
cc:7f:ac:e2:cb:98:50:b5:37:9a:c0:4b:e0:02:d7:35:d2:03:
a5:95:f3:73:8b:62:a3:2e:c7:32:d2:e4:af:0b:73:be:35:37:
0c:59:70:e2:74:ba:2b:f6:d3:b3:79:73:3a:63:27:69:2b:4f:
d0:4e:eb:33:f6:8a:27:00:27:af:9f:91:d3:60:15:fb:37:80:
c1:05:fc:9b:a8:5a:02:0a:9a:e6:2a:a7:60:c1:73:76:77:84:
5b:3c:f0:ee:32:61:29:c7:51:f4:95:68:b8:4f:85:95:43:d9:
59:b5:d4:b8:83:85:a1:70:2e:d4:b0:61:fd:57:58:78:b8:69:
9a:e8:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:55:38 2026 by rpki-client