This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
File:                     li_WiB3GhZt6-qn3UKbdi71p6Zo.cer (raw, json)
Hash identifier:          hu4fYE++FNTE6hmATXHURdTAVKQRV4Lrd/12VFvE6iA=
Subject key identifier:   96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019928F74A57ECBA8A73A62020CEE6428137
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 08 Sep 2025 10:55:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48550
Validation:               Failed, certificate revoked on Fri 10 Oct 2025 12:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:28:f7:4a:57:ec:ba:8a:73:a6:20:20:ce:e6:42:81:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  8 10:55:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:a2:e6:76:7a:8a:ad:2a:50:91:bf:8b:90:
                    15:ed:cd:65:0f:55:96:a2:8f:36:45:3e:27:c7:b2:
                    30:71:de:b0:19:9a:6b:46:7d:d4:3d:d3:94:56:f4:
                    9a:ea:3a:8a:60:73:3a:b7:a0:c2:04:49:5a:59:4b:
                    53:8c:ac:58:37:0a:83:38:4c:70:97:3c:58:b0:56:
                    92:89:33:b3:dd:56:39:00:29:f3:38:e2:af:bf:54:
                    a6:0e:fe:ee:5c:53:e5:f6:39:b9:06:c6:85:f2:3d:
                    3c:ab:4d:a6:3e:16:0a:12:60:25:06:07:ac:cc:3d:
                    e1:e9:2a:81:47:03:f0:53:e7:a4:07:af:85:c1:f8:
                    82:18:39:19:09:fe:91:2f:38:bd:03:23:a7:c5:b5:
                    08:97:7d:9d:77:a3:54:8a:86:e4:9a:db:fc:0c:6e:
                    7f:f0:7e:9f:33:75:04:81:20:92:1e:08:98:1c:39:
                    0a:a6:c1:bf:04:3d:96:d4:ad:b9:f3:6f:80:26:1a:
                    d2:a8:04:ab:58:22:a2:4e:10:39:cf:34:b3:ab:7b:
                    9b:bf:49:76:90:4d:2c:9b:64:88:49:04:0c:3e:23:
                    ca:e0:32:22:76:b3:94:ac:38:e2:d2:7b:7b:41:77:
                    01:30:ad:49:7d:43:89:91:98:89:8d:32:16:26:f1:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48550

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:ae:04:f1:4f:bd:12:ed:d2:e5:0b:43:3b:49:93:19:49:
         ed:49:ef:6e:7e:13:b7:1b:9b:75:8f:5a:b5:93:5f:48:03:1a:
         6d:90:36:83:45:b4:36:ee:3a:b6:58:9c:2d:63:b6:d4:d3:99:
         95:e2:a8:f4:6c:d3:c7:00:91:a9:3a:2c:eb:7a:2e:95:07:b5:
         9e:b3:fe:d2:94:bc:13:9a:92:71:63:51:26:fc:3a:a1:b2:e9:
         33:51:aa:2c:b4:fc:d5:b5:92:f0:0d:1d:30:54:4c:b7:34:7e:
         7b:87:44:a4:2b:0d:f6:d2:a9:a5:9a:cb:a7:e4:95:a3:22:fe:
         52:b3:8f:b2:fc:37:09:5e:35:e6:ae:55:87:0e:3c:fd:b0:d5:
         82:13:c6:15:20:14:78:fb:17:54:d0:af:6b:14:5c:5b:6d:0a:
         88:84:3f:9c:75:ea:94:49:9e:2c:20:79:33:de:9f:e2:31:ba:
         aa:cc:4b:53:03:82:f1:79:67:b7:cd:59:b5:15:75:fc:e1:83:
         f8:ae:3c:8c:13:90:f1:25:dc:07:df:4a:68:b7:e8:c5:b1:1f:
         62:8b:b8:16:ff:01:dc:f7:26:a9:61:34:17:62:ad:ae:62:52:
         29:2e:f1:6f:02:28:02:06:7a:bd:25:03:de:bd:ad:47:df:96:
         8b:ab:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----