Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer (raw, json)
Hash identifier: 6H+L8LT+A0xPUI3/YvYA785uY5a5Q6/0qTe69QLJhfM=
Subject key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5BB72C151759AC4E87F93BA9948071
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:18:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204079
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:b7:2c:15:17:59:ac:4e:87:f9:3b:a9:94:80:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:a3:39:c8:99:aa:25:75:09:90:fa:72:11:
df:79:4a:10:f1:28:94:3b:17:02:3c:b9:bf:8f:2e:
e0:c7:aa:4e:b2:44:e8:b4:90:b4:6e:0d:90:f1:a2:
58:63:db:94:9c:e1:e4:8c:3c:a2:88:16:58:88:f8:
dd:83:ed:ab:2c:88:b5:e5:d1:34:7f:25:c3:61:d4:
17:4a:57:a2:b9:bc:75:0a:9e:bb:f8:db:ad:bc:38:
3f:df:b7:c1:fc:86:4a:ed:dd:2f:3f:a4:6c:38:fc:
b7:8b:7b:f3:e6:60:b3:f0:9f:6b:e5:a4:8b:b8:94:
d7:4f:1e:c0:df:c3:ba:8c:40:5b:26:fe:eb:6d:ae:
5c:c8:21:d9:53:cd:d1:a5:24:d8:5a:60:91:69:b6:
32:14:bf:72:22:5e:92:d0:e6:dd:81:48:d4:fb:cf:
f4:ef:45:9d:29:63:d6:55:91:54:10:be:63:7c:a4:
33:f3:98:da:b9:9e:bd:02:69:32:fe:f8:58:08:35:
a1:8b:85:1c:b4:a3:c3:b6:31:be:52:ad:03:35:44:
26:b7:38:53:f6:89:d9:44:b4:39:62:b5:de:c7:a5:
54:7a:dc:db:c1:1b:ea:56:99:80:33:88:50:4d:98:
9c:f5:e7:27:b9:b0:94:2d:bf:0f:ca:e0:4b:24:d0:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204079
Signature Algorithm: sha256WithRSAEncryption
66:d1:59:ce:15:ec:b5:64:98:6a:8c:d1:76:b6:73:fd:8d:85:
04:ef:89:6f:99:d6:86:13:8a:64:0f:67:2f:f3:71:f9:57:5c:
3d:07:e4:ae:ca:43:90:2b:67:15:e6:59:a5:88:e2:29:a2:95:
ba:bb:bf:73:16:8c:1d:16:75:f2:3f:bb:74:59:f2:4f:d3:76:
4d:74:0e:d8:39:a2:20:e0:e3:17:95:10:12:63:99:59:97:46:
d5:24:dc:88:d5:b7:f7:37:4b:39:b0:0d:ad:59:8f:f1:25:a9:
6e:91:4d:3f:9e:01:6a:8d:f1:7f:41:53:c9:16:35:81:fd:1e:
24:12:22:31:3b:d4:2d:20:ac:36:34:86:23:3f:0f:d2:30:9b:
db:ab:ec:be:da:96:bf:38:09:0a:b6:ef:c2:b7:38:95:7d:15:
29:78:20:cc:b1:9f:e4:3d:0e:a0:46:ea:fc:45:c3:0c:c8:0a:
81:90:78:e5:ec:01:dd:63:c2:a4:a3:3d:2b:f8:c2:51:aa:6a:
5d:d8:66:2e:53:32:33:cd:95:22:ed:07:5f:e6:f3:a4:27:b0:
85:3e:af:49:74:a2:dd:3d:0c:3a:54:fe:28:76:94:19:e7:ef:
ee:3d:2d:83:36:96:b8:6d:c9:71:37:a5:e8:0d:34:46:df:33:
98:fc:1c:c2
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt9W7csFRdZrE6H+TuplIBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjA0NmRmZGVlOGZjYzkyZDc0MGUwYmI4YzhiODI5MzE1NWExNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+jOciZqiV1CZD6chHfeUoQ8SiU
OxcCPLm/jy7gx6pOskTotJC0bg2Q8aJYY9uUnOHkjDyiiBZYiPjdg+2rLIi15dE0
fyXDYdQXSleiubx1Cp67+NutvDg/37fB/IZK7d0vP6RsOPy3i3vz5mCz8J9r5aSL
uJTXTx7A38O6jEBbJv7rba5cyCHZU83RpSTYWmCRabYyFL9yIl6S0ObdgUjU+8/0
70WdKWPWVZFUEL5jfKQz85jauZ69Amky/vhYCDWhi4UctKPDtjG+Uq0DNUQmtzhT
9onZRLQ5YrXex6VUetzbwRvqVpmAM4hQTZic9ecnubCULb8PyuBLJNC1xQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFE8Ebf3uj8yS10Dgu4yLgpMVWhS+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzM4MDk0
Yi1jNDdiLTRiNmMtOTFlMy0xMTNmNGY2ZDU1ZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMzgwOTRi
LWM0N2ItNGI2Yy05MWUzLTExM2Y0ZjZkNTVlMy8xL1R3UnRfZTZQekpMWFFPQzdq
SXVDa3hWYUZMNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMdLzANBgkqhkiG9w0BAQsFAAOCAQEAZtFZzhXstWSY
aozRdrZz/Y2FBO+Jb5nWhhOKZA9nL/Nx+VdcPQfkrspDkCtnFeZZpYjiKaKVuru/
cxaMHRZ18j+7dFnyT9N2TXQO2DmiIODjF5UQEmOZWZdG1STciNW39zdLObANrVmP
8SWpbpFNP54Bao3xf0FTyRY1gf0eJBIiMTvULSCsNjSGIz8P0jCb26vsvtqWvzgJ
Crbvwrc4lX0VKXggzLGf5D0OoEbq/EXDDMgKgZB45ewB3WPCpKM9K/jCUapqXdhm
LlMyM82VIu0HX+bzpCewhT6vSXSi3T0MOlT+KHaUGefv7j0tgzaWuG3JcTel6A00
Rt8zmPwcwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:56 2026 by rpki-client