This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
File:                     3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer (raw, json)
Hash identifier:          CA+D3h5FQWHDWY1n7hxFPQbTMySRnuEe642k4dIKsgo=
Subject key identifier:   DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B0CF656DB360BB4545DE10108525F214D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 11 Dec 2025 10:30:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a00:9c60::/32
                          IP: 2a01:b840::/32
                          IP: 2a03:8ea0::/32
                          IP: 2a10:f580::/29
Validation:               Failed, certificate revoked on Sat 13 Dec 2025 09:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:f6:56:db:36:0b:b4:54:5d:e1:01:08:52:5f:21:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 11 10:30:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:52:03:0c:72:04:55:fa:d4:c6:77:cc:62:
                    83:9f:47:c8:12:b4:29:30:09:41:f2:9b:cc:34:5a:
                    a3:4d:b9:a8:fc:04:27:cb:37:86:37:d1:ce:9c:b6:
                    57:e5:3e:62:10:54:4e:91:9c:a0:13:b0:a0:f5:c9:
                    a0:31:7e:c9:73:f9:1d:8b:c4:e7:e2:b6:9a:db:89:
                    86:5c:c6:ee:af:68:08:de:bd:bd:f7:dc:7e:55:78:
                    3e:fa:29:01:b6:4f:31:25:4d:c8:ba:09:88:e4:54:
                    77:39:e3:8f:6c:74:01:71:4f:a8:ea:e1:43:81:6e:
                    c4:21:43:02:ad:fc:35:06:c0:7d:cf:15:07:73:95:
                    8c:5c:3e:9a:75:a4:61:c1:d4:6b:68:07:49:ca:dd:
                    af:99:54:27:41:72:8c:aa:d4:c8:f3:53:eb:53:86:
                    6d:9d:d3:81:ee:05:bf:c9:6a:46:26:fc:3d:4b:76:
                    00:ff:ef:2a:45:be:21:62:fb:60:a8:cd:dc:c0:5d:
                    54:98:ad:88:6c:e5:56:01:17:75:f7:07:03:51:cc:
                    35:b4:49:c5:b6:50:f5:24:72:1d:6f:e6:be:29:b2:
                    8c:9a:f3:7b:11:7b:e8:c7:6f:4c:7b:31:bb:09:38:
                    46:a4:6d:c7:b0:09:e7:1b:6d:c7:c6:7f:09:5f:fd:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:9c60::/32
                  2a01:b840::/32
                  2a03:8ea0::/32
                  2a10:f580::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:ec:fe:2c:fc:d0:47:f7:b6:40:62:ff:f4:97:6b:3a:8d:c1:
         c7:d7:a1:12:d2:e9:90:da:52:e8:88:d7:72:41:ed:cd:07:c6:
         7d:6b:46:7c:25:63:0d:1e:2c:d1:c3:a9:f6:c5:18:4c:48:43:
         fa:98:f9:79:a3:cc:59:2b:2c:8d:c6:bf:6e:45:98:14:4c:64:
         30:46:32:e5:0b:60:e9:60:23:ac:aa:95:89:99:3b:02:9f:29:
         83:ca:b6:59:06:3c:93:2c:e8:05:91:4d:0e:69:50:e1:15:3a:
         05:50:43:99:27:e2:23:30:00:15:ee:1d:ff:d6:1e:d4:95:8d:
         de:28:da:54:8b:bb:ee:57:51:11:a2:18:d8:fa:a3:b3:df:6f:
         b0:12:d8:cb:28:ed:22:8f:d8:0f:33:f0:93:a5:2d:78:f7:e1:
         09:0e:43:8b:51:76:db:31:98:d6:d9:72:fa:2b:95:f9:d1:e4:
         ec:e9:59:3f:87:41:47:4a:da:c3:98:ac:f9:24:3e:0a:f2:9b:
         f9:52:df:e7:ee:1a:17:41:72:db:24:8b:19:a0:3b:6f:c9:ac:
         a9:9f:9d:78:e6:76:98:58:20:04:22:7e:1c:bf:5d:1c:be:7c:
         fa:7b:74:28:6b:91:08:d1:42:c0:04:90:bb:a8:e6:58:75:14:
         86:ab:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----