This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.cer
File:                     hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.cer (raw, json)
Hash identifier:          HK2P8g6jjiQxb15fb9x5QGWKrXlZ3OCSQ1OBI12iM/0=
Subject key identifier:   85:D2:0C:87:AC:4A:B9:FF:99:E8:DB:44:23:2C:4B:8B:70:BD:5A:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9C61B81210
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 03:51:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 91.231.142.0/23
                          IP: 91.231.186.0/23
                          IP: 2a0f:5080::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671654351376 (0x9c61b81210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:51:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85d20c87ac4ab9ff99e8db44232c4b8b70bd5afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8f:72:76:4f:e4:fe:a9:60:00:3d:e5:d5:54:
                    b6:cd:be:da:fa:76:bb:73:a7:ca:ad:3e:02:fd:16:
                    77:40:d7:5b:d0:5c:09:84:07:ad:58:2f:dd:7e:74:
                    9a:41:84:12:c6:04:a7:fc:b4:5c:4f:f0:9d:df:78:
                    ab:98:21:63:4d:d4:1e:9d:39:f3:ff:46:c5:84:3a:
                    a5:0b:16:ae:b2:29:58:25:6b:9d:f0:68:1f:1f:e6:
                    34:4a:55:96:fc:a5:77:57:bd:11:97:44:8d:f4:02:
                    5a:56:10:e7:ae:cc:1b:cb:cc:50:59:c4:14:bb:bb:
                    ad:3d:d6:51:3d:0f:70:2c:58:5e:9b:4a:24:a3:b3:
                    92:77:ef:a5:76:fa:e1:76:f1:db:a9:31:b5:03:52:
                    7d:74:5c:4e:45:58:56:58:0d:c3:8a:5e:8e:e0:3c:
                    be:7b:50:bf:d9:3a:cf:89:9b:3e:d2:7a:a5:48:a0:
                    5a:bc:2f:be:6f:1a:da:9d:22:30:5e:09:f2:b7:52:
                    99:7f:f8:ac:8a:f8:3e:1a:f8:6c:ee:cc:39:2c:00:
                    ed:55:aa:49:35:84:ef:c5:9f:76:bc:ea:8d:52:6a:
                    08:38:58:df:46:9b:03:a7:84:9f:c4:34:ca:90:2d:
                    09:ff:4e:fa:3c:34:54:02:46:b3:77:ed:44:6b:b0:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D2:0C:87:AC:4A:B9:FF:99:E8:DB:44:23:2C:4B:8B:70:BD:5A:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/60c829-15f0-4c8a-a40e-655058928514/1/hdIMh6xKuf-Z6NtEIyxLi3C9Wv4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.142.0/23
                  91.231.186.0/23
                IPv6:
                  2a0f:5080::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:2d:8c:b2:8c:54:f8:d9:f8:9c:fe:9d:16:aa:87:eb:f5:28:
         11:3b:49:3b:e1:47:25:8c:72:93:a2:fa:30:e2:49:44:e3:74:
         0f:0e:23:82:72:d4:ae:5a:02:be:60:a6:f6:2e:a7:50:61:59:
         9b:f2:32:55:0a:fb:a9:c9:a8:08:6c:7b:01:18:93:cc:3c:84:
         90:ca:83:89:dc:d8:97:ee:cc:86:67:97:c8:6b:e3:8c:b5:0e:
         7b:ad:6b:eb:af:b1:a1:33:13:a9:30:e7:2b:0d:0c:44:88:1e:
         6a:5e:24:83:c7:7d:59:2b:1d:4d:ff:ee:1a:15:66:aa:0f:46:
         f7:c5:e1:12:54:a3:ba:94:ce:e1:e9:76:fe:b4:d4:2c:19:19:
         11:cd:fa:48:6f:7a:30:b7:30:22:10:e0:35:da:6c:f7:06:d2:
         a6:82:3e:af:ab:37:56:86:7d:7d:5f:d6:45:73:a0:ba:41:a8:
         e1:a0:c0:02:55:2e:61:fa:0b:da:c5:63:a1:e6:50:a1:7a:c4:
         22:f1:99:14:8a:dc:6a:a2:69:0a:1a:f5:52:99:37:b2:41:bc:
         04:16:99:0f:60:8e:95:6c:a7:ea:fe:88:9f:18:27:cb:ee:ca:
         a2:fb:ae:7e:bd:87:d5:90:4a:66:a2:b0:23:3a:11:e4:51:c0:
         1b:7c:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----