This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
File:                     lp8NNAHQCKqdqoKKQjWalR-UvQg.cer (raw, json)
Hash identifier:          D4ZyrYHrRA43cVb2ogC3g1IVkNdhosYnrHga04IrNJ4=
Subject key identifier:   96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F82BF2837B479F7ACF79D0CC905180D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:33 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 214676
Validation:               Failed, certificate revoked on Mon 09 Feb 2026 12:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:bf:28:37:b4:79:f7:ac:f7:9d:0c:c9:05:18:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=969f0d3401d008aa9daa828a42359a951f94bd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:26:a4:3a:86:56:e4:a9:e0:d5:e9:ad:06:
                    90:e0:88:97:b5:d8:a0:7b:2f:84:92:00:97:c9:00:
                    2c:d0:19:bc:92:ab:ce:f8:43:e2:41:d3:7e:89:8b:
                    b4:fc:2c:1e:09:76:4e:c0:05:3a:28:2c:45:94:08:
                    16:55:75:e9:99:7c:0b:df:63:c1:b8:39:f1:ae:d8:
                    bf:8d:8c:66:3c:bb:2e:6f:c5:b4:ca:d1:4c:2c:17:
                    14:89:f7:ef:9b:2c:91:e2:c5:4b:89:5e:76:18:92:
                    d8:76:ff:19:a2:ed:c9:f1:63:6b:11:b0:3f:01:ce:
                    6b:38:8f:d0:49:c2:c6:3f:8d:c4:f1:24:72:00:1f:
                    92:af:0b:db:66:80:0e:9f:f2:19:fa:d0:3f:60:d4:
                    44:94:21:f7:d7:80:4e:5c:d6:94:c1:11:79:e8:a8:
                    2e:33:f6:c0:af:30:ad:dc:62:ea:ed:1e:22:c2:15:
                    05:19:23:99:b1:41:40:e2:5a:9e:a5:b5:2e:70:22:
                    cb:3d:33:fd:08:71:4d:35:99:70:80:03:84:7f:70:
                    14:9f:66:59:9a:4a:7e:56:fe:c4:26:c8:c5:12:8a:
                    a6:ee:ac:fa:66:0b:dc:6c:0c:a0:86:66:9c:a9:5b:
                    b0:5a:15:43:55:be:22:57:87:09:fb:30:1a:0a:6c:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214676

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:7d:91:92:57:5f:d2:f9:11:61:46:c8:8c:dd:84:22:f7:
         b8:dd:22:ce:d3:cc:db:8a:a4:53:75:98:aa:f3:8b:1d:4e:ed:
         a5:c0:4a:69:40:14:7c:e7:98:f7:e3:fd:f3:84:61:04:d0:23:
         dd:26:9e:c3:bd:1a:d6:8f:17:6f:34:ec:a2:85:9f:45:62:67:
         fd:95:30:c3:05:fb:70:de:4c:5a:54:aa:5e:d5:9d:98:3a:b9:
         bd:fc:01:f4:d1:63:0d:7a:9b:fd:98:9d:08:8e:52:6b:ec:32:
         80:f1:e7:88:ed:35:26:3c:2e:e2:a0:af:ba:8f:0f:e2:56:2f:
         77:09:4b:95:dd:dc:27:1a:9a:41:1e:a0:7f:04:f4:c8:2e:3b:
         02:82:6f:81:55:e4:c4:1f:cd:7a:4f:7c:62:8c:4d:ae:a4:77:
         19:1b:f6:97:dc:b0:2d:a8:f0:a0:55:aa:75:2f:48:59:93:0e:
         32:76:6e:26:07:fa:60:dc:b7:99:e9:f3:bd:09:07:83:4a:26:
         ff:bd:42:d9:b3:4d:36:62:97:fb:4a:0c:a8:43:fc:71:b9:8a:
         06:31:f1:4c:c4:f4:13:07:b7:43:de:8d:bb:77:e8:54:37:1c:
         27:c8:3c:20:26:88:d5:25:c6:74:65:ac:50:1c:a2:3b:a2:ad:
         87:47:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----