This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer File: madzR6fTnzfwTrT1hftt_NsubSY.cer (raw, json) Hash identifier: Xr1foJyhfz2qKb1VPIWrW0Lt2Qf3nCJkrwQ+ge9UXgA= Subject key identifier: 99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC7080AF6E5A18DA27FC0F6CEAB452 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210561 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:70:80:af:6e:5a:18:da:27:fc:0f:6c:ea:b4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a77347a7d39f37f04eb4f585fb6dfcdb2e6d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:42:2e:16:c0:c4:8d:3a:bc:d1:5e:f3:4f: 04:4a:48:84:34:68:73:c9:c8:06:72:45:6b:17:a1: 24:1a:ad:bc:90:c4:4b:4a:4d:40:49:36:7f:45:52: 61:21:05:22:1a:b8:8d:e0:4e:03:10:6b:19:7a:5a: fe:05:ea:3a:65:ef:6c:a8:95:63:0a:0e:75:f2:24: 6b:ba:a9:7a:d7:69:95:33:03:ba:84:06:50:54:51: de:b8:a3:3a:e0:87:ca:0d:4e:fa:65:35:16:1d:2a: 01:20:12:54:fa:69:72:ee:b6:47:bd:72:76:46:40: 71:1f:77:4c:72:3f:96:3e:f5:ce:9d:f5:b0:80:c0: f6:12:6f:63:23:9f:4d:23:28:eb:83:a3:0e:b8:8f: cc:12:4f:a2:36:4e:10:99:56:ef:fa:bc:ed:6e:bd: ac:e3:36:32:21:3c:e8:46:49:92:9a:05:2d:0c:d7: 46:83:9c:cf:31:c5:37:92:eb:c1:2d:6c:73:4a:b6: 9b:e5:0a:ec:af:bc:74:13:56:14:14:93:9b:24:eb: ed:df:57:74:4e:b5:2f:5a:88:f2:77:7c:f9:b1:42: 59:d8:1c:2e:81:46:b3:87:e4:f9:04:57:a8:60:9f: 9f:42:e9:c9:56:ee:44:71:8b:ae:47:13:8f:62:49: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210561 Signature Algorithm: sha256WithRSAEncryption 3b:c3:b1:35:89:44:11:62:bc:5f:cb:89:7d:5d:56:a3:2a:b5: d2:77:fe:cb:52:48:61:f6:e7:1c:a4:e0:cf:3f:e9:de:6c:5c: 98:02:8c:95:a1:62:db:74:6e:27:5e:6d:de:b9:f9:64:7f:88: 41:f2:22:46:d8:97:cd:6b:42:7b:15:42:7d:d5:37:ae:3c:69: 87:d6:be:10:49:7e:02:ef:f7:e9:5d:b6:c6:bd:30:6e:c0:32: cf:bd:1e:35:e4:c6:85:25:4f:b4:e2:e2:ab:ef:1c:df:99:c9: 94:d1:6b:d0:8e:f9:6f:66:1a:8b:67:62:23:25:1e:21:ce:ae: 8a:d5:00:2a:e9:fb:32:a1:ae:22:e7:fe:97:48:96:af:b9:de: 09:02:f8:d4:98:e2:3d:d9:2c:c3:3f:1c:34:35:e4:7f:b4:49: 0c:98:e2:3a:a1:80:8f:5a:59:cf:c5:87:53:b9:6b:98:be:c7: d1:ef:61:28:c2:26:64:4a:71:a5:c9:62:46:d9:62:3e:2e:e4: 32:4f:d5:e8:55:76:f7:0a:c1:95:7d:9e:d6:24:09:a6:59:43: b7:51:fe:9e:c1:52:3c:1b:64:dc:2d:74:dd:de:8c:10:4b:45: 8f:a5:05:05:3c:47:e1:bb:94:c8:32:09:e7:24:9a:75:3d:74: 47:bb:34:60 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt57HCAr25aGNon/A9s6rRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWE3NzM0N2E3ZDM5ZjM3ZjA0ZWI0ZjU4NWZiNmRmY2RiMmU2ZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0xCLhbAxI06vNFe808ESkiENGhz ycgGckVrF6EkGq28kMRLSk1ASTZ/RVJhIQUiGriN4E4DEGsZelr+Beo6Ze9sqJVj Cg518iRruql612mVMwO6hAZQVFHeuKM64IfKDU76ZTUWHSoBIBJU+mly7rZHvXJ2 RkBxH3dMcj+WPvXOnfWwgMD2Em9jI59NIyjrg6MOuI/MEk+iNk4QmVbv+rztbr2s 4zYyITzoRkmSmgUtDNdGg5zPMcU3kuvBLWxzSrab5Qrsr7x0E1YUFJObJOvt31d0 TrUvWojyd3z5sUJZ2BwugUazh+T5BFeoYJ+fQunJVu5EcYuuRxOPYkmwkwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFJmnc0en05838E609YX7bfzbLm0mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzEvMIGHBggrBgEFBQcwCoZ7cnN5 bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9kMGYyZGI5 OWZlMWQ0YjM2YjkzMDFjODIxMjIwZmUzYS8xLzk5QTc3MzQ3QTdEMzlGMzdGMDRF QjRGNTg1RkI2REZDREIyRTZEMjYubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNoEwDQYJKoZIhvcN AQELBQADggEBADvDsTWJRBFivF/LiX1dVqMqtdJ3/stSSGH25xyk4M8/6d5sXJgC jJWhYtt0bidebd65+WR/iEHyIkbYl81rQnsVQn3VN648aYfWvhBJfgLv9+ldtsa9 MG7AMs+9HjXkxoUlT7Ti4qvvHN+ZyZTRa9CO+W9mGotnYiMlHiHOrorVACrp+zKh riLn/pdIlq+53gkC+NSY4j3ZLMM/HDQ15H+0SQyY4jqhgI9aWc/Fh1O5a5i+x9Hv YSjCJmRKcaXJYkbZYj4u5DJP1ehVdvcKwZV9ntYkCaZZQ7dR/p7BUjwbZNwtdN3e jBBLRY+lBQU8R+G7lMgyCeckmnU9dEe7NGA= -----END CERTIFICATE-----Generated at Mon Jan 26 06:05:03 2026 by rpki-client