Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
File: beqXX7sD_CX7gESy2jiBTGrxz94.cer (raw, json)
Hash identifier: bJZRGP4WdeEbcQCPOxtDkFR5dgXYPT8sFVlcC+sQn34=
Subject key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C8AA4EFE6F683839A6B65D8C8F6A1724D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Feb 2026 13:16:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200728
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:a4:ef:e6:f6:83:83:9a:6b:65:d8:c8:f6:a1:72:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 23 13:16:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:03:6f:56:43:ae:9e:1c:aa:51:a1:6e:b1:11:
1b:2a:cd:69:ed:57:1a:b1:3b:0f:d4:c1:ac:e5:f9:
7a:30:ac:95:18:90:87:d8:a8:7f:a7:79:08:33:99:
37:dc:00:6c:26:17:e2:6c:e9:55:6f:e5:ad:bc:c8:
30:03:5e:7b:2f:22:52:c3:e0:cc:5f:6e:de:dd:76:
26:81:d2:13:f8:c9:3f:ae:20:5e:21:2f:57:05:cf:
39:f1:21:ce:29:5a:ae:dd:b0:f9:7a:6e:8a:ea:7a:
2d:12:4d:05:98:28:f9:52:e1:1b:9a:82:b1:51:50:
42:d1:7b:98:aa:20:75:b4:cc:26:a2:aa:ee:ef:e8:
c6:36:46:d0:be:08:45:16:21:bd:13:ba:07:d4:ac:
4e:19:ad:4d:a5:9f:85:de:3a:02:2f:79:11:fd:70:
7c:03:cd:c3:ba:4c:e7:2e:8d:29:cf:d9:a5:12:17:
c6:c5:25:8d:76:1e:44:22:f1:de:d4:2d:9e:52:97:
76:d4:49:61:d0:e3:3b:db:7a:05:61:99:2d:61:e0:
03:79:10:a9:7e:82:a7:37:67:5f:d9:08:9b:ab:6d:
c2:30:b3:33:c7:96:21:2d:d7:33:ab:61:c4:34:2d:
d2:f6:e1:e4:40:94:e6:8e:6d:b3:ed:67:59:91:98:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200728
Signature Algorithm: sha256WithRSAEncryption
1d:dd:60:62:a0:20:17:8a:08:1d:e2:6e:29:35:87:63:23:e4:
b2:b7:0e:b8:cc:92:0e:61:d3:e6:f5:5e:f1:72:7a:a1:4a:92:
11:e5:3b:97:30:32:0a:fc:eb:f2:63:3f:94:2b:94:26:13:38:
44:b3:50:db:19:73:8d:4a:fa:15:74:d0:52:50:31:b0:9b:ba:
0e:7e:de:52:25:a1:33:1e:6b:35:41:c2:82:66:79:72:7c:0c:
f8:88:62:5e:04:dd:93:b3:eb:8a:37:81:28:36:2f:ac:3f:5c:
79:51:18:85:aa:fd:e3:a3:cd:49:9c:66:e1:8c:ae:1e:11:76:
fb:f6:3a:d6:89:45:29:6f:6a:99:f4:a0:e9:1e:0f:22:e0:00:
01:0d:50:69:65:64:c4:cc:7c:a4:84:85:77:f1:4d:c8:b7:63:
a4:41:03:4f:f6:6b:4a:df:66:58:9e:28:74:da:71:75:e5:de:
e9:6f:f6:13:c0:fb:ad:00:bc:9d:1b:82:b0:5b:1f:a7:60:7e:
d1:12:d5:9e:cd:25:69:c9:66:9f:e5:c9:75:48:00:bb:57:83:
c2:f0:ad:fd:00:d7:08:08:31:17:32:bd:59:3d:ad:a0:e5:9a:
e2:81:9a:cd:68:42:af:88:81:26:83:7a:b3:70:77:1f:44:5f:
02:c2:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:54 2026 by rpki-client