Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer
File: BpM2ufTafBbeQeCxmQ8tUxmeZqE.cer (raw, json)
Hash identifier: Tpk6+M7IfKxE02a4MNHIWICPl97JeMr7Hl4LLe8/Jjw=
Subject key identifier: 06:93:36:B9:F4:DA:7C:16:DE:41:E0:B1:99:0F:2D:53:19:9E:66:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FB77D60BBDCDD5B18DD35448361B83D04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Jul 2026 09:24:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219102
IP: 31.43.166.0/23
IP: 2a0b:8480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:7d:60:bb:dc:dd:5b:18:dd:35:44:83:61:b8:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 09:24:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=069336b9f4da7c16de41e0b1990f2d53199e66a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:89:58:5c:00:97:3a:5e:76:3a:a2:d1:93:
ab:4f:40:99:74:94:8e:21:08:15:ae:be:94:69:e9:
b9:f0:4a:bc:b2:6f:50:25:2a:57:93:9d:85:fe:43:
f9:bf:09:5e:94:61:79:69:00:17:4d:c5:d3:54:bb:
0f:e2:ac:bd:08:c8:5e:34:4b:4b:db:d2:f7:62:dc:
6d:fe:f3:88:36:e5:ff:30:75:92:59:42:b9:63:d0:
fd:2e:38:b7:9a:d1:52:1e:35:e9:b2:0b:1c:2a:5e:
27:4a:7b:d4:53:c5:6e:ed:7d:70:7b:a9:73:38:90:
17:3d:7e:d6:7b:eb:ac:c6:62:cd:fe:61:a6:a6:4b:
32:0b:f2:25:71:1f:3b:f3:cc:c7:78:26:d3:32:37:
ef:9d:1d:80:a0:38:5c:5d:34:38:cc:e1:ba:66:f8:
4b:d0:a2:38:a9:1e:6d:5f:bd:32:54:04:20:4d:78:
e0:74:21:d1:fe:ec:c0:1d:48:21:40:a5:02:09:d0:
9a:07:e7:c8:fc:66:09:b0:cf:84:9a:58:59:a0:b1:
66:f3:8c:6a:be:bb:4d:12:5a:13:3d:76:92:d7:0e:
af:8b:0c:f9:d9:f6:2b:a4:83:04:4d:39:62:3f:6b:
5a:03:11:1e:9c:ab:62:81:c2:87:e0:cb:84:03:ed:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:36:B9:F4:DA:7C:16:DE:41:E0:B1:99:0F:2D:53:19:9E:66:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3f89e5-2d48-4d09-a4bc-6b392d080f6d/1/BpM2ufTafBbeQeCxmQ8tUxmeZqE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.166.0/23
IPv6:
2a0b:8480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219102
Signature Algorithm: sha256WithRSAEncryption
71:3e:01:88:30:76:02:f1:37:6a:cb:fc:65:36:41:6e:8d:89:
f4:00:e0:c8:18:c6:60:2d:4e:f7:2c:03:72:be:30:10:47:8e:
08:54:74:3d:8d:c9:2a:6d:23:15:7a:47:81:9b:50:bd:26:53:
12:36:3c:d1:df:db:ad:8e:aa:62:8c:1c:21:b4:47:7f:47:b9:
89:0f:32:9e:e1:c1:06:36:7e:5c:c2:e6:6f:a8:20:ee:75:ae:
fa:88:cc:43:c4:09:82:61:cc:38:c2:e8:3c:0e:27:88:1b:2f:
5f:8a:c8:6c:9d:08:57:22:33:68:82:91:4c:b9:ee:6a:46:e7:
b8:00:e9:52:88:c2:e1:a9:75:22:35:ae:a2:fc:95:87:4b:ae:
0f:f1:0c:71:fa:4d:e7:29:c0:4e:dc:51:d0:fd:63:b5:35:49:
23:f0:b3:f4:e6:a1:fb:e6:aa:04:cc:4b:8d:91:69:d6:c2:59:
60:59:c4:cd:85:50:8b:d5:44:ed:cc:63:78:22:29:99:e8:02:
fe:4c:b6:a3:ed:75:7a:d0:29:fb:40:ef:86:f4:5c:03:44:d2:
be:28:d4:27:53:ce:7e:1d:69:34:3d:7b:15:1b:fd:9a:a6:45:
02:a0:1d:9c:79:2d:0b:27:72:68:09:6d:cb:c8:0e:19:a1:95:
11:08:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:48:55 2026 by rpki-client