This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
File:                     iy4NGE_1UzdchHw41N_NzeEhn9M.cer (raw, json)
Hash identifier:          zaYHnSNWKEY+mmVWbDqrpsdcZuu1F3a3diZuqI5Llvc=
Subject key identifier:   8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019ADF8AA32CD98E4CBADCD18804AC401A57
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 02 Dec 2025 14:49:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 37.77.149.0/24
                          IP: 45.138.222.0/23
                          IP: 62.3.49.0/24
                          IP: 62.68.94.0/24
                          IP: 80.91.220.0/24
                          IP: 91.237.87.0/24
                          IP: 146.19.173.0/24
                          IP: 176.97.196.0/24
                          IP: 185.14.98.0/24
                          IP: 185.104.188.0/24
                          IP: 185.182.106.0/24
                          IP: 194.26.19.0/24
                          IP: 194.26.196.0/24
                          IP: 194.150.77.0/24
                          IP: 212.46.62.0/24
Validation:               Failed, certificate revoked on Thu 04 Dec 2025 09:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:df:8a:a3:2c:d9:8e:4c:ba:dc:d1:88:04:ac:40:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  2 14:49:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:8e:3d:56:d7:ea:12:7b:1b:f7:07:9e:0a:
                    f9:8a:ad:e9:c7:80:cc:6b:d9:85:d2:29:69:f7:69:
                    5c:14:f3:ca:2a:ef:2f:cb:4e:b2:9c:c8:1c:e9:76:
                    ae:2c:7a:29:92:0a:e7:72:db:a9:76:24:0f:15:96:
                    09:2f:15:2e:a7:cb:74:eb:62:fd:5d:ff:e4:77:fa:
                    17:ba:2d:7d:20:5e:db:e3:6f:b5:81:58:21:32:6d:
                    33:7e:cf:2b:9b:b6:43:75:b1:65:21:4d:18:62:2b:
                    0e:7e:49:4e:73:e0:d5:bc:f5:f1:59:52:6d:25:4a:
                    30:c4:ef:2c:08:81:e3:a2:d2:09:8b:98:2d:2a:cf:
                    8c:a2:fe:bb:57:76:46:79:34:41:9f:84:73:0c:11:
                    ef:e1:cb:00:fc:77:f0:e2:e4:db:6b:8a:c4:e7:14:
                    2c:e1:db:16:57:e6:d6:87:18:6b:a1:4b:a9:5f:a0:
                    3d:84:d8:53:94:74:23:de:28:12:83:74:20:43:68:
                    11:a3:c6:2c:ef:70:1f:aa:67:3e:88:ba:26:0e:30:
                    2f:04:03:e3:dc:d2:e0:e0:db:6a:30:27:cb:7e:b6:
                    13:2a:44:fb:e4:c6:68:02:ab:1f:c3:69:8f:a1:a8:
                    17:5d:f3:8f:3e:11:6a:0c:07:36:89:8a:05:01:67:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.149.0/24
                  45.138.222.0/23
                  62.3.49.0/24
                  62.68.94.0/24
                  80.91.220.0/24
                  91.237.87.0/24
                  146.19.173.0/24
                  176.97.196.0/24
                  185.14.98.0/24
                  185.104.188.0/24
                  185.182.106.0/24
                  194.26.19.0/24
                  194.26.196.0/24
                  194.150.77.0/24
                  212.46.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:40:cd:f6:f0:2f:42:22:30:69:2c:2e:35:24:bc:5d:01:07:
         b3:e8:83:37:5f:b6:22:eb:28:f3:cb:70:9f:d8:64:1e:17:5a:
         2b:92:f8:79:96:07:43:1e:27:07:8c:c5:02:ab:5e:74:3d:8b:
         0a:57:41:cb:9e:7e:4c:84:3a:3d:b3:c0:ee:b7:b4:cb:67:6a:
         80:7f:96:39:19:67:02:bf:db:af:59:ca:a4:ef:05:5d:6c:5b:
         9f:a4:d7:be:59:81:f5:2b:2a:4b:3a:bb:24:98:bf:90:39:ed:
         97:52:d3:e7:39:eb:3f:d8:42:62:a4:1b:2c:f0:97:56:83:a0:
         41:4b:dc:ea:81:18:6c:c7:de:54:be:d2:74:ea:d5:af:61:2c:
         95:fd:20:95:e1:61:9a:f3:a7:fe:90:2b:a3:cc:cc:95:59:21:
         80:38:2a:d0:10:19:65:27:e5:67:97:83:5e:8c:77:7d:dc:00:
         40:d0:42:40:d7:93:cb:43:ac:ac:96:18:9e:d5:3a:55:79:30:
         95:95:23:8e:be:9e:10:1e:f6:88:cb:fc:7a:bb:b2:88:79:c6:
         63:4d:13:66:27:4d:af:c6:65:78:8c:61:34:bd:74:2d:60:19:
         26:1b:30:77:8f:1c:bd:00:26:f0:d6:06:47:59:cb:1d:c9:49:
         42:80:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----