Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer (raw, json)
Hash identifier: YQEHG5hMFUn1k057y8tawtZpvzgsHr4E+J8jHRt/nLw=
Subject key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0D2CFEFEEF871778B74B3BCC696DBDB4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Sep 2026 09:47:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210045
IP: 85.159.23.0/24
IP: 217.28.133.0/24
IP: 2a12:2140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:cf:ef:ee:f8:71:77:8b:74:b3:bc:c6:96:db:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 09:47:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:d9:24:47:f9:be:37:27:69:4c:bb:50:5b:
7f:69:1f:c4:37:51:36:fb:40:ee:6f:fb:75:72:89:
3b:66:46:f1:eb:7e:77:74:79:43:57:7b:fc:c5:8a:
fc:0d:d9:0f:a8:0a:64:4e:ca:60:58:0f:05:eb:a0:
c1:1f:95:eb:f0:36:bf:9b:44:58:43:ca:8f:a8:be:
1c:19:72:bf:5b:7c:d3:f3:ba:d9:5a:08:d8:02:12:
e4:b0:e8:37:b5:0f:88:c6:77:24:0a:9c:55:6d:11:
8b:2c:92:cb:36:04:3b:4a:b4:cd:07:41:85:d0:b0:
dd:90:f0:21:c0:6a:c1:0f:69:e2:09:2e:4d:b8:cb:
4c:5b:32:a5:1a:82:a2:11:6b:48:c8:15:2e:44:94:
f0:2a:02:1b:c5:78:9c:f1:e2:d2:6e:8b:59:e2:db:
59:63:f4:46:8e:a2:d6:e2:ef:a3:9a:bb:a5:be:ba:
2f:23:08:b3:36:9d:14:48:86:ff:2f:05:42:58:21:
cb:bf:69:07:0b:7f:7d:0d:ad:1a:50:7e:42:69:44:
9e:db:b4:10:00:f2:79:ad:3c:d3:ca:c9:94:17:13:
90:f9:bd:0f:e4:93:20:fa:82:b9:92:72:fb:6c:54:
40:c0:41:8f:57:6f:d9:6f:78:13:47:b7:dc:14:0b:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.23.0/24
217.28.133.0/24
IPv6:
2a12:2140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210045
Signature Algorithm: sha256WithRSAEncryption
19:9c:58:2f:fc:60:e7:64:27:13:4e:d6:48:16:a7:8c:a7:76:
43:8d:bc:f1:1b:cb:06:16:9f:2a:4c:fb:0a:0d:bd:e0:e4:69:
79:ed:0c:ff:62:52:81:e9:45:cf:25:79:a6:c4:ee:e7:68:a9:
5e:60:b1:5e:79:02:3b:b2:86:66:70:52:3c:34:e3:7a:de:56:
77:13:1f:4f:a9:11:e9:e5:2d:27:bb:7f:ef:f2:6f:71:22:03:
e0:9a:62:0c:2e:dc:ad:8f:ed:d8:bb:f2:ec:ca:e3:38:7c:38:
38:c3:3a:1e:35:b5:9d:d4:f2:8f:33:21:77:11:1b:33:b3:63:
d6:be:3d:4b:63:fc:ce:40:0e:a0:66:4c:41:f9:31:34:89:ff:
4d:ea:a4:8f:71:24:5f:a8:25:01:82:80:27:90:a8:56:4d:ef:
23:71:36:16:cd:cb:e2:60:c3:6e:4f:cf:93:27:df:4f:f8:76:
41:7d:99:1c:39:c7:bb:f3:21:a4:57:34:70:20:81:0d:a7:8c:
54:71:a8:a1:13:1c:55:db:47:af:f8:4b:64:12:46:32:ca:31:
25:75:c3:f9:90:09:99:6b:a3:96:1c:fb:94:02:b1:25:23:5f:
02:ff:c6:a3:a4:9a:e0:08:0b:03:77:f4:28:f8:ec:9c:52:2f:
85:e4:56:9b
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAaDSz+/u+HF3i3SzvMaW29tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTI0MDk0NzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2RjNjk0ZjBjMzI1NWQ1ZDU1NzNmMTMyOGU1MzY1NGNmYjIyYzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte/ZJEf5vjcnaUy7UFt/aR/EN1E2
+0Dub/t1cok7Zkbx6353dHlDV3v8xYr8DdkPqApkTspgWA8F66DBH5Xr8Da/m0RY
Q8qPqL4cGXK/W3zT87rZWgjYAhLksOg3tQ+IxnckCpxVbRGLLJLLNgQ7SrTNB0GF
0LDdkPAhwGrBD2niCS5NuMtMWzKlGoKiEWtIyBUuRJTwKgIbxXic8eLSbotZ4ttZ
Y/RGjqLW4u+jmrulvrovIwizNp0USIb/LwVCWCHLv2kHC399Da0aUH5CaUSe27QQ
APJ5rTzTysmUFxOQ+b0P5JMg+oK5knL7bFRAwEGPV2/Zb3gTR7fcFAscAwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFGzcaU8MMlXV1Vc/EyjlNlTPsixNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2Q3NGNi
Mi1mMGZjLTRmMmMtYmUwMS01MzZlMWYwYzRmZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZDc0Y2Iy
LWYwZmMtNGYyYy1iZTAxLTUzNmUxZjBjNGZmOS8xL2JOeHBUd3d5VmRYVlZ6OFRL
T1UyVk0teUxFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAVZ8XAwQA2RyFMA0EAgACMAcDBQMqEiFAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0fTANBgkqhkiG9w0BAQsFAAOCAQEAGZxY
L/xg52QnE07WSBanjKd2Q4288RvLBhafKkz7Cg294ORpee0M/2JSgelFzyV5psTu
52ipXmCxXnkCO7KGZnBSPDTjet5WdxMfT6kR6eUtJ7t/7/JvcSID4JpiDC7crY/t
2Lvy7MrjOHw4OMM6HjW1ndTyjzMhdxEbM7Nj1r49S2P8zkAOoGZMQfkxNIn/Teqk
j3EkX6glAYKAJ5CoVk3vI3E2Fs3L4mDDbk/PkyffT/h2QX2ZHDnHu/MhpFc0cCCB
DaeMVHGooRMcVdtHr/hLZBJGMsoxJXXD+ZAJmWujlhz7lAKxJSNfAv/Go6Sa4AgL
A3f0KPjsnFIvheRWmw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 14:52:33 2026 by rpki-client