This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1JD4VvgOgHtxgO9G4wSPxfKM-DI.cer
File:                     1JD4VvgOgHtxgO9G4wSPxfKM-DI.cer (raw, json)
Hash identifier:          3qXm8OnbgX/4P8j3fUDgd8LX8hSp3VQ3iBh6Qg63wV0=
Subject key identifier:   D4:90:F8:56:F8:0E:80:7B:71:80:EF:46:E3:04:8F:C5:F2:8C:F8:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B78355C2D477E246486D178888A9BEBFC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/D490F856F80E807B7180EF46E3048FC5F28CF832.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:41 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212995
Validation:               Failed, certificate revoked on Mon 05 Jan 2026 06:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:5c:2d:47:7e:24:64:86:d1:78:88:8a:9b:eb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d490f856f80e807b7180ef46e3048fc5f28cf832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:62:3a:ba:77:3d:9e:ff:af:0d:28:4c:0d:
                    6a:4e:86:92:47:53:fa:e7:29:af:bb:d7:47:ce:97:
                    ea:56:e3:c7:fd:94:03:88:b5:5e:ea:2e:b0:28:3d:
                    6c:71:96:b0:f1:9a:2a:ca:6b:5f:12:61:f0:b3:3a:
                    fd:6e:6b:e1:8f:80:35:ec:51:16:05:66:53:c8:2b:
                    26:75:f9:1d:8f:bf:79:59:4b:66:80:0c:9d:73:4e:
                    50:b3:56:ee:4b:de:77:00:1b:7e:62:41:c5:d3:32:
                    70:8a:6f:6b:2d:c5:a3:90:e5:b2:9c:71:12:d7:fe:
                    5c:87:84:7a:bb:1f:d9:79:fa:f2:7d:8a:39:3d:7f:
                    88:a0:e2:13:e4:0a:c0:5a:9c:86:f9:9b:7b:c2:57:
                    d8:c9:c5:ea:86:f2:be:69:a2:a0:5f:42:a9:f4:4c:
                    d9:f4:be:ac:44:27:d2:49:72:4c:c0:ad:8e:a5:46:
                    8f:66:56:a9:18:eb:cd:b3:45:38:84:2e:0a:24:4c:
                    5b:3a:35:4a:18:43:4a:30:70:5c:8f:5b:1e:46:fb:
                    8f:1d:d1:de:49:71:f8:ad:66:b5:89:e0:84:91:be:
                    8d:a1:cb:2a:a7:f2:a6:7b:74:c0:32:65:a8:6e:7c:
                    09:02:9e:d3:c6:6b:93:b1:20:80:9c:50:2c:77:ce:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:90:F8:56:F8:0E:80:7B:71:80:EF:46:E3:04:8F:C5:F2:8C:F8:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5440d602-b0ab-436f-a957-dfb487c66bb8/0/D490F856F80E807B7180EF46E3048FC5F28CF832.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212995

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:5b:65:d8:cb:30:96:4f:22:9c:e4:2f:d4:eb:0b:0a:d2:
         e3:11:fd:8c:2b:22:1c:86:07:62:23:d5:2b:0d:c5:a2:76:60:
         70:2b:72:ce:b6:63:b2:1f:7f:70:d6:37:d0:7a:9d:b0:bc:b8:
         81:98:0f:a3:3a:8d:9c:4a:5d:ce:4a:1b:65:0b:2f:c8:d7:bf:
         55:3e:59:11:c6:8a:06:d3:72:96:74:87:d2:e1:44:35:b8:ea:
         fb:c2:27:16:d4:dc:5f:2b:44:99:7a:15:a5:a5:25:27:da:8d:
         eb:30:6d:ad:89:53:67:da:04:2f:9b:fd:f8:e5:57:a6:a8:76:
         62:fa:d4:3a:cc:4d:20:9c:95:13:2e:63:51:0f:c5:4b:82:26:
         66:ff:40:77:4a:47:de:34:bb:b4:46:de:1f:4b:27:7b:e7:d1:
         b7:4d:22:8b:46:29:81:d2:02:5e:4b:29:31:4a:48:55:f7:97:
         6e:14:f0:87:d0:e2:87:bf:7a:24:e9:6f:26:db:0a:7c:1e:07:
         e2:39:64:a8:8a:12:5b:b1:ba:9c:4b:7a:0a:59:52:84:fe:6d:
         a3:ca:df:ff:ce:2a:bc:af:d4:2a:51:26:6a:7d:ce:39:9f:c5:
         fc:a6:ae:5a:31:92:86:4d:ad:6a:c7:0c:3b:4b:6e:4e:fd:fa:
         de:14:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----