This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
File:                     eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer (raw, json)
Hash identifier:          geFRvmp5mTXmhw+th7tZVY91twPwxJfmS0Nux1ZYwlQ=
Subject key identifier:   78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B30A2A704DCEF31D1459C8C885ED461BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 18 Dec 2025 08:45:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49432
                          IP: 185.210.224.0/24
Validation:               Failed, certificate revoked on Tue 23 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:a2:a7:04:dc:ef:31:d1:45:9c:8c:88:5e:d4:61:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 18 08:45:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:8d:7e:df:d5:1f:f9:27:40:0a:74:46:00:
                    3f:aa:45:ae:aa:55:51:da:10:47:98:4e:b0:ad:0b:
                    38:de:98:31:11:bc:b7:19:ba:7b:ef:9d:96:74:12:
                    3c:85:41:f0:16:f8:52:4e:40:bc:55:c9:e9:a6:11:
                    6c:44:26:8c:f6:a2:36:e4:e9:c3:07:91:9d:b7:72:
                    52:03:44:56:ea:ce:e6:3e:10:2b:28:35:3c:a9:45:
                    8a:88:9b:61:2a:3a:a8:b3:8b:ea:71:5f:20:06:27:
                    bc:c5:c3:55:f6:76:83:e5:7e:28:72:02:70:47:5e:
                    ed:81:52:6a:89:50:f1:42:a8:62:78:f6:cf:63:16:
                    b2:4f:42:03:6d:24:d2:e9:51:09:a7:e9:c2:a6:a3:
                    c9:bc:b8:60:b5:01:39:eb:53:a3:92:76:d6:85:04:
                    06:bc:7e:fa:b1:5d:33:f4:e2:8b:07:94:46:f4:be:
                    48:51:46:25:f2:e4:5e:f3:0a:97:89:a5:17:ae:4e:
                    51:bd:41:52:c6:6a:65:ef:63:2d:20:25:d5:9e:b1:
                    be:c8:b8:d9:f8:03:00:1a:61:d8:f5:ad:80:15:6d:
                    f9:20:ff:20:7e:4d:97:0e:82:a3:d3:40:5e:fe:05:
                    fb:ae:68:c2:83:24:b6:cd:b8:5d:fa:fa:fb:09:e4:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.224.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49432

    Signature Algorithm: sha256WithRSAEncryption
         04:8e:9f:61:b7:06:45:71:32:0d:4c:3d:8f:89:be:f5:93:01:
         33:3e:a6:60:5e:88:26:16:7d:d9:ac:2a:a4:b6:cb:54:84:86:
         8b:e0:73:58:82:ed:b7:cc:39:ed:eb:9f:b2:75:ad:66:07:95:
         7a:73:b8:03:e2:fa:b3:39:3e:88:47:7d:b3:e2:4d:69:b3:97:
         4a:b9:08:76:d5:38:12:38:c7:88:a3:0f:39:5a:af:c7:a8:db:
         f3:aa:21:fc:0a:c2:96:90:65:27:a7:05:b5:5d:f8:c9:7c:10:
         83:a1:f3:b6:07:2c:1b:30:a5:b0:73:ca:96:e4:c4:74:54:d1:
         1a:59:21:12:8e:fa:b8:f2:1c:9e:13:b7:82:44:fd:fa:1a:48:
         f3:c2:4b:a7:8f:89:9b:03:8c:84:10:a1:16:9c:89:62:ab:15:
         42:51:5e:a4:c4:20:6b:c4:fc:2a:f7:72:40:6a:0d:d2:58:42:
         5e:c2:f5:45:fc:8d:14:06:08:f3:c4:2c:ba:09:19:9a:b2:0a:
         68:0e:f5:07:21:c7:77:2d:28:6c:88:56:ab:4c:3e:7f:48:3a:
         72:92:b8:6a:16:b4:3a:8e:2e:23:40:55:0c:5a:87:67:d9:27:
         51:99:de:f3:94:36:17:13:31:45:27:ea:b9:d6:6f:31:5b:17:
         04:85:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----