This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-j2j9gocE6NcHlseDMn3N6bDI4.cer
File:                     n-j2j9gocE6NcHlseDMn3N6bDI4.cer (raw, json)
Hash identifier:          fz9Yu92FagpPEm3Q1X0VE/AeGWprRjZAsXbXG1QR3qc=
Subject key identifier:   9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0193DF2B7F9ACD85352D4D9DFA78A46B3BC1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 19 Dec 2024 13:46:30 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 205705
                          IP: 2a01:82c0::/32
                          IP: 2a0b:b540::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:df:2b:7f:9a:cd:85:35:2d:4d:9d:fa:78:a4:6b:3b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 19 13:46:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9fe8f68fd828704e8d70796c783327dcde9b0c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ce:48:e9:e6:70:37:b8:3b:91:39:9e:a4:de:
                    f1:72:29:06:93:b0:27:83:41:be:70:73:61:d0:5e:
                    0a:c2:c9:41:0d:b9:cf:96:90:88:2f:cb:2e:9d:fb:
                    9c:4b:53:c7:3e:15:10:72:67:4a:d5:8b:4c:2a:4b:
                    e8:be:18:ca:09:b9:38:10:95:7e:39:09:7e:ea:20:
                    95:84:f7:64:43:ca:1d:60:a0:e5:85:48:11:d4:53:
                    3d:7d:2b:0a:d1:73:43:b4:87:1f:0a:86:83:be:5b:
                    40:85:28:82:59:f8:3b:b9:c7:74:6b:1a:13:90:cd:
                    94:9a:38:af:16:41:42:b4:8a:8a:d7:fb:5f:da:d7:
                    17:8e:0a:68:c7:d0:7b:91:63:d8:ed:45:7f:f3:bc:
                    a6:9e:29:15:ad:6d:8e:17:cd:a4:58:01:d2:2d:44:
                    0c:2b:c0:00:e1:8b:26:ce:2a:cb:34:12:81:8a:55:
                    f4:95:0a:47:78:54:ec:9d:78:5e:f0:8d:60:d4:26:
                    cc:45:a0:d1:a6:e3:04:b2:97:27:40:c6:cb:33:2a:
                    a9:34:76:96:52:28:b8:2d:0f:64:62:3c:d5:47:59:
                    4a:5e:32:3a:0f:e6:17:29:16:b2:bb:8a:a7:9e:1e:
                    71:61:7b:1e:91:e7:1c:2f:8c:b4:37:fe:fa:b3:45:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:F6:8F:D8:28:70:4E:8D:70:79:6C:78:33:27:DC:DE:9B:0C:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a183ef-ab60-4d59-b5dd-9ae5db28c7e2/1/n-j2j9gocE6NcHlseDMn3N6bDI4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:82c0::/32
                  2a0b:b540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205705

    Signature Algorithm: sha256WithRSAEncryption
         8f:2d:a8:c6:2e:44:6a:ae:85:d3:92:66:ed:dc:c9:04:22:91:
         cd:22:57:fb:e6:da:f6:0b:70:aa:d5:05:30:c5:79:df:57:e5:
         f8:ab:9b:4b:7c:cc:a6:c9:38:5f:cf:cf:6d:28:13:eb:df:3f:
         88:50:aa:0c:73:fd:57:ca:d0:51:1f:cf:54:9b:f9:41:57:67:
         00:1d:87:82:27:f4:ef:e7:f0:59:59:9e:d5:29:92:79:5f:64:
         86:a8:4a:e4:7f:76:a0:33:7a:c4:73:94:02:85:7a:d2:2d:72:
         bc:a3:16:e1:d8:dc:a8:f0:5a:04:7b:bb:fb:c7:61:45:60:a3:
         9a:4f:51:5e:f1:f7:99:ec:c2:65:74:92:0b:35:54:e2:0f:77:
         42:1c:2a:ba:8f:89:3a:cf:e6:e1:82:ec:5b:76:d9:c8:e5:02:
         49:79:33:0e:f3:e9:54:bd:e3:18:94:73:2d:36:04:4d:b1:56:
         60:86:d5:e1:c7:5b:7e:c6:b9:f6:5c:7e:64:f7:d5:fa:b3:32:
         41:c4:49:8c:7e:e0:1b:41:9d:f0:80:be:db:7d:70:72:36:78:
         d4:44:10:c0:7b:94:d5:98:06:78:7a:16:d8:f4:3f:dc:b5:c7:
         79:38:3e:30:79:ac:32:4d:b7:eb:f2:77:7e:9c:d5:70:53:f8:
         3c:9a:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----