This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/159t1eaV6tOpOkX_MefkaWlwqBM.cer
File:                     159t1eaV6tOpOkX_MefkaWlwqBM.cer (raw, json)
Hash identifier:          3r+MVZPfRSqntF6HVVd9/7VEUL5el3clgrBKp1xOrEk=
Subject key identifier:   D7:9F:6D:D5:E6:95:EA:D3:A9:3A:45:FF:31:E7:E4:69:69:70:A8:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC8DFA925BDC9785A4A43C91D62EC12D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/3cfc3c-5988-4b8e-9e8a-0828d2543a7c/1/159t1eaV6tOpOkX_MefkaWlwqBM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/3cfc3c-5988-4b8e-9e8a-0828d2543a7c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 06:32:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215828
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:a9:25:bd:c9:78:5a:4a:43:c9:1d:62:ec:12:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:32:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d79f6dd5e695ead3a93a45ff31e7e4696970a813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:d7:6f:60:e5:7e:31:3f:f1:17:e8:e3:98:
                    24:cf:c9:8e:86:3f:97:ed:e0:28:25:dd:45:ae:fb:
                    cb:41:c1:8f:d0:28:c7:69:67:c1:a0:ca:8e:bb:50:
                    60:90:4a:77:d9:6e:8c:3e:1e:9b:09:e3:d4:22:28:
                    bf:1d:19:49:5c:4b:18:52:25:fb:c0:3f:b4:0d:08:
                    37:52:f5:1a:f3:a5:af:f9:80:dc:45:55:41:ca:15:
                    0c:c0:10:23:f0:12:a5:76:f4:fd:cb:db:e3:d8:6d:
                    a3:39:5d:1a:b3:70:67:de:b3:07:67:56:9f:67:5f:
                    8b:a0:c5:48:bf:b8:c1:75:4f:a1:fe:0d:21:e2:bc:
                    96:11:1b:a3:da:7a:73:84:8e:41:0b:86:5c:2e:88:
                    e7:fd:22:53:9f:7c:b6:52:a7:c5:8c:3d:79:ba:f4:
                    b0:08:42:2f:f9:f3:77:85:c4:23:10:c2:99:6c:34:
                    a8:8f:f1:6d:cd:02:b0:14:7a:2a:97:05:cc:e7:cd:
                    eb:1e:cc:7e:ac:41:d7:07:86:c3:88:cb:5b:36:37:
                    ac:98:7e:11:e2:45:d4:34:b3:18:71:91:9b:13:77:
                    c6:a6:52:59:83:cf:63:db:bb:74:2a:46:f4:43:a1:
                    e0:49:2e:9e:f6:ce:2c:3e:5d:fa:4d:3a:a8:26:b1:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9F:6D:D5:E6:95:EA:D3:A9:3A:45:FF:31:E7:E4:69:69:70:A8:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/3cfc3c-5988-4b8e-9e8a-0828d2543a7c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/3cfc3c-5988-4b8e-9e8a-0828d2543a7c/1/159t1eaV6tOpOkX_MefkaWlwqBM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215828

    Signature Algorithm: sha256WithRSAEncryption
         38:58:0c:db:a8:af:02:db:dd:f9:53:d0:a2:53:f8:0a:9b:d4:
         0e:af:36:d3:42:dd:a3:1b:84:38:fe:ef:d2:14:4d:0e:58:15:
         5a:48:47:9c:14:be:93:ea:de:80:8f:12:b6:ff:be:17:79:a1:
         02:9f:3f:28:0b:21:fd:67:a8:6f:80:77:d4:56:42:78:94:ff:
         b5:6a:38:4f:d1:b8:91:70:e3:82:05:a9:e5:5d:e0:a4:2f:8d:
         f5:c3:fa:15:d9:07:72:cd:12:fc:55:60:13:94:eb:ce:c4:75:
         f5:85:43:f4:44:87:d5:76:cc:4a:c0:39:ef:8a:ca:65:a4:ea:
         51:8a:bc:39:d6:2f:cc:7e:d4:aa:a9:25:a8:78:ca:e2:01:c3:
         b0:a6:0d:23:f6:7f:6b:65:e1:5e:de:71:86:94:36:0d:9a:9a:
         95:8e:37:29:f6:83:15:79:f2:ca:19:6e:b2:5a:e6:d0:dc:9e:
         5b:01:d2:95:9b:77:c8:dc:d7:66:a5:d5:55:fb:26:5a:79:c6:
         f4:1b:77:35:99:de:62:5b:6f:6a:23:57:23:22:7c:97:c8:64:
         f6:8f:41:e7:56:f7:7e:e4:39:5b:c7:aa:1e:98:9b:0d:a7:41:
         3c:3b:a5:fe:00:73:7e:90:72:22:ce:00:f0:00:66:1a:94:40:
         55:b9:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----