This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
File:                     tKIIXH3jtZgha4n7Dysdkw3mbBk.cer (raw, json)
Hash identifier:          92mK/ne8hYcxgflBKQ5UvCb9A1qEmj8bpFR72LkdbtY=
Subject key identifier:   B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A53B70D243E76220CFCD6265568806CE3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Nov 2025 11:11:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a0f:aac0::/29
Validation:               Failed, certificate revoked on Tue 25 Nov 2025 10:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:b7:0d:24:3e:76:22:0c:fc:d6:26:55:68:80:6c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov  5 11:11:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:4b:7b:dd:55:16:c8:a6:98:bb:e2:b4:6d:
                    da:75:3c:72:e6:7e:4c:81:4b:5f:9d:de:7d:2b:58:
                    ed:d1:18:2c:cb:f7:85:40:d8:a3:35:0d:9d:c0:7a:
                    9c:a5:21:f0:e7:57:d3:b2:ea:08:de:1e:9d:fe:29:
                    06:8e:36:d1:63:ec:6d:15:a8:7b:52:44:bb:00:be:
                    7c:ef:16:fa:26:85:64:71:9f:ad:00:79:24:c7:0d:
                    ab:72:a3:f3:1c:c4:61:06:aa:a4:3a:69:a2:e4:20:
                    44:97:1e:3e:9b:c1:62:b2:dd:cf:75:73:4f:5f:0a:
                    65:3b:c6:36:ee:f7:b8:09:8a:61:09:7e:37:f6:d1:
                    3c:64:30:57:3f:9d:cc:f8:61:7d:c2:de:42:a3:1d:
                    2c:27:6f:c4:2e:6b:28:5f:b4:be:e9:16:36:45:be:
                    1f:9e:a4:02:15:1d:1a:01:98:2c:c1:0c:20:92:d3:
                    27:38:90:c6:e0:6a:a0:8f:58:e9:42:3a:25:ad:9a:
                    21:58:7f:11:51:b4:2a:ad:ba:eb:32:a3:51:2a:ca:
                    41:0e:8b:7b:e8:65:61:cc:2a:86:26:e4:57:a1:9a:
                    d1:a8:58:bd:d2:15:4a:e5:c7:67:6a:ab:84:6c:2e:
                    5b:47:94:26:d7:fc:23:e3:45:61:74:4c:cb:fc:0d:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:aac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:3d:8c:04:a3:82:e5:a6:d3:20:70:d4:f8:49:b1:14:d1:
         3e:49:ef:de:55:55:a5:d2:22:bf:87:af:38:e8:4c:f0:df:33:
         70:ad:37:d3:0c:dd:71:8c:84:85:dc:7c:a5:d1:19:4d:20:d9:
         e8:32:34:b6:a5:7e:a3:12:d4:65:69:19:d7:d5:a9:f6:74:d1:
         9a:9f:b9:26:21:94:42:2c:8d:33:7e:cf:fc:56:e0:a0:53:ac:
         30:6a:0a:55:75:06:93:5c:bd:55:4f:ff:2b:19:b8:99:48:66:
         f2:c4:63:44:02:70:4f:e0:f4:61:e9:9e:86:64:32:cc:c3:fc:
         10:5a:69:cf:a7:d5:dc:e5:14:45:48:a8:43:ca:80:7d:46:6c:
         b1:58:44:28:d5:a3:be:33:a3:37:5d:0c:2e:84:32:4e:33:06:
         92:81:de:5e:9e:88:0c:45:92:fc:70:13:a2:32:99:5f:f4:b3:
         42:d3:45:b5:d6:d4:4d:89:d9:fa:15:04:4f:1e:68:51:f8:e9:
         1f:6a:1f:7c:44:69:99:62:39:0f:93:a5:7c:7d:37:97:ac:ba:
         99:14:0a:c2:c3:05:4f:e2:bc:8e:aa:3f:57:1b:ab:2e:b1:f8:
         45:5f:e7:f1:c9:cb:f1:99:ab:e1:94:10:a6:fe:49:07:9c:96:
         96:ac:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----