Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer
File: BFKns3JnzkLclaNGIbxwJqIisAU.cer (raw, json)
Hash identifier: 6kNmWHqXFQwK13yky/3MPISNKLj7hU6kHL+iVRGZOuc=
Subject key identifier: 04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A1E9BCDF301AAB7CD64D51677156C79CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 26 Oct 2025 03:41:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204518
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:9b:cd:f3:01:aa:b7:cd:64:d5:16:77:15:6c:79:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 26 03:41:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0452a7b37267ce42dc95a34621bc7026a222b005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:dd:c4:1b:0a:28:71:a5:5d:11:65:01:65:
87:c2:b1:b7:3d:93:f8:05:c8:c7:ba:7a:44:89:57:
d2:37:7d:11:db:13:43:a2:78:ba:4d:45:4b:e3:8f:
7a:c2:29:5b:35:56:49:7d:3d:5d:bb:37:9d:4b:34:
59:8f:3f:a8:c9:d1:a2:f9:b9:9f:6c:7f:f1:4a:61:
3f:43:a4:3f:86:73:0d:cc:40:19:88:eb:84:e9:55:
0e:ca:f1:c9:b0:ee:65:ba:75:c4:bf:37:bb:2f:65:
14:89:52:0e:48:c7:c5:1e:29:b5:4e:9e:47:fc:ad:
2a:8a:56:61:98:29:bc:fc:4d:f0:8f:69:34:35:c4:
63:6c:11:e6:62:ef:ae:c2:bf:8f:2b:b0:67:ed:32:
00:86:81:96:29:58:6d:1c:34:eb:99:ba:91:49:36:
31:78:5e:c5:f6:94:0f:7e:3d:5f:1a:c8:17:30:f2:
3e:22:f2:35:fe:04:e5:2e:1e:55:e5:da:7a:4a:78:
d6:d9:71:82:f3:8b:81:d7:aa:8f:08:41:38:95:0d:
66:91:2e:28:6e:e5:3d:b8:d1:33:ff:53:b4:1a:10:
29:af:eb:85:7c:fc:44:cc:1e:43:6e:c5:51:74:9f:
d7:36:ad:57:ee:e5:15:08:bb:a2:90:87:d2:08:ae:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204518
Signature Algorithm: sha256WithRSAEncryption
ae:35:71:72:a8:d4:ed:f9:84:fc:59:5a:b7:7f:af:b7:b9:89:
4a:02:d1:f6:2c:35:75:da:ac:1c:af:bf:b2:47:8b:36:64:af:
f4:50:5f:45:17:6c:d7:dc:d6:cf:d4:f8:e5:6f:e0:c4:02:03:
e9:d0:da:f7:dc:ff:10:78:f1:d6:19:1d:01:c9:b7:2d:a9:31:
40:9e:c0:a8:ee:98:2a:df:1e:e2:f2:74:a5:c4:92:a7:16:43:
1f:12:01:a9:e9:0c:75:34:9c:ea:14:9e:a6:06:b2:c0:f2:8e:
ed:15:43:40:58:ce:f5:ac:ff:47:6c:c5:da:c7:1f:f8:5a:62:
b9:1b:2d:0d:31:09:77:7a:60:26:c6:97:08:fb:d0:28:14:4a:
a3:f2:54:da:13:f5:84:f5:ab:93:c2:f4:0b:9f:ab:ae:53:b5:
e2:84:f7:0b:29:fa:cc:b7:47:68:3a:62:a3:37:9f:ee:26:ec:
d6:c2:fe:cf:b3:01:e3:7f:b6:70:fb:06:47:31:2d:e6:1a:dc:
75:1f:69:a8:cb:9c:86:10:f8:09:5e:9c:8e:fc:4e:2c:ea:d2:
64:1e:7a:a5:2e:1b:5f:8a:09:27:57:c7:bd:45:a1:f3:93:44:
52:34:c0:5c:46:f2:41:c5:2f:74:34:d9:bc:a1:98:e6:d5:cf:
c4:53:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:04:09 2025 by rpki-client