This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer File: uk0Oaat2n2W7KxVb36g6cYburEQ.cer (raw, json) Hash identifier: CpbV1fnEJzZ273+OhaKrIl3SeeabbGUD+469QqD16Jc= Subject key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A81E69EF4814DA23813870845910E1A23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 10:26:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.143.160.0/22 IP: 45.149.60.0/22 IP: 45.149.164.0/22 IP: 194.50.0.0/23 IP: 194.50.4.0/23 IP: 194.246.36.0/23 IP: 194.247.44.0/23 IP: 2a0f:a600::/29 Validation: Failed, certificate revoked on Tue 18 Nov 2025 18:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:e6:9e:f4:81:4d:a2:38:13:87:08:45:91:0e:1a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 10:26:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:8c:ca:b6:9b:bc:80:c4:4d:63:3a:fe:b0: d8:89:f0:d1:f0:94:1c:f7:38:75:aa:4a:a6:65:03: 75:0e:77:1b:93:23:94:76:69:ae:2e:80:77:a9:19: 02:70:c7:62:97:2d:34:ab:b8:f4:56:ed:b5:da:f5: df:77:a6:9a:97:92:7d:97:72:49:03:81:64:2e:dd: 25:cc:b1:54:59:41:72:60:08:7b:8b:b7:3f:38:b6: b6:da:13:77:6e:41:05:e8:48:bd:b8:61:ea:3c:18: ac:4e:41:fe:11:83:c9:b5:1d:30:d3:1d:f4:f7:a0: 3d:c8:09:7e:a6:73:fb:5d:0d:4d:6d:8e:08:f3:85: 20:1b:18:5f:a9:fb:d9:e8:d7:11:6a:d9:8a:8d:db: 96:f1:a2:11:7e:03:98:96:cf:97:24:00:74:ab:32: 07:01:35:18:b0:24:65:25:26:5b:d6:1e:b3:df:3e: 39:61:ab:f4:7b:97:27:9c:25:72:52:f3:30:1d:7f: 7f:2c:69:3f:7a:22:88:48:90:74:ed:f1:61:1a:f3: b2:56:70:44:6d:36:4b:66:f9:f7:76:59:96:82:78: 84:1d:62:f6:9a:b6:77:8f:34:74:1b:b7:dd:6d:52: 35:2e:db:b0:b8:86:b1:61:bc:a4:9d:eb:f1:fd:21: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.160.0/22 45.149.60.0/22 45.149.164.0/22 194.50.0.0/23 194.50.4.0/23 194.246.36.0/23 194.247.44.0/23 IPv6: 2a0f:a600::/29 Signature Algorithm: sha256WithRSAEncryption 94:3b:2d:f2:e3:e4:94:97:16:2d:11:16:00:8e:87:b2:ff:5a: d4:e5:1b:81:a3:1e:8e:64:0b:c3:d1:ca:0a:95:bc:b9:5e:90: c1:e5:3f:cd:ba:8a:48:d3:d0:6c:b9:a3:41:c5:a1:23:0e:9a: 0a:89:9e:98:50:9e:af:81:a6:0f:32:b8:89:7a:f1:1d:2a:66: 42:14:44:57:ff:ef:63:7d:de:eb:19:d6:44:5e:16:10:1f:ba: 1c:84:af:d7:e1:d4:24:10:cd:3c:b6:bf:fa:e0:a1:8a:16:e7: ce:b7:2a:72:18:9c:1e:ce:d2:a0:d8:82:77:c8:de:a3:03:6c: 76:2f:c0:d6:f8:3a:0f:d9:5b:7d:8d:6e:75:78:05:c6:9f:2e: 79:e1:97:8b:d4:3d:04:19:4e:e8:d9:a2:6f:90:41:8b:f6:00: d9:79:4b:e1:43:ba:f1:ee:53:5f:93:29:33:ff:4e:bb:1d:44: cd:41:a0:ee:07:09:1c:f5:df:22:8e:4b:4a:d2:be:c0:cc:9f: d1:a3:a0:c3:62:47:c1:d1:9d:37:cb:dd:5a:e1:e2:c6:88:79: 90:a7:14:92:5e:81:5a:35:f8:d3:52:c2:64:ea:3f:98:9a:b7: 05:51:65:ea:0d:0e:7a:fe:1d:91:88:52:16:ab:42:ac:b4:3d: 0e:28:54:08 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZqB5p70gU2iOBOHCEWRDhojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTAyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTRkMGU2OWFiNzY5ZjY1YmIyYjE1NWJkZmE4M2E3MTg2ZWVhYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnWMyrabvIDETWM6/rDYifDR8JQc 9zh1qkqmZQN1DncbkyOUdmmuLoB3qRkCcMdily00q7j0Vu212vXfd6aal5J9l3JJ A4FkLt0lzLFUWUFyYAh7i7c/OLa22hN3bkEF6Ei9uGHqPBisTkH+EYPJtR0w0x30 96A9yAl+pnP7XQ1NbY4I84UgGxhfqfvZ6NcRatmKjduW8aIRfgOYls+XJAB0qzIH ATUYsCRlJSZb1h6z3z45Yav0e5cnnCVyUvMwHX9/LGk/eiKISJB07fFhGvOyVnBE bTZLZvn3dlmWgniEHWL2mrZ3jzR0G7fdbVI1LtuwuIaxYbyknevx/SEVVwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFLpNDmmrdp9luysVW9+oOnGG7qxEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzNkNmQ2 Yy1mNThkLTQyZTYtYjY4OC04ZWZmM2ZkM2M0OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvM2Q2ZDZj LWY1OGQtNDJlNi1iNjg4LThlZmYzZmQzYzQ4YS8xL3VrME9hYXQybjJXN0t4VmIz Nmc2Y1lidXJFUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQCLY+gAwQCLZU8AwQCLZWkAwQBwjIAAwQBwjIE AwQBwvYkAwQBwvcsMA0EAgACMAcDBQMqD6YAMA0GCSqGSIb3DQEBCwUAA4IBAQCU Oy3y4+SUlxYtERYAjoey/1rU5RuBox6OZAvD0coKlby5XpDB5T/NuopI09BsuaNB xaEjDpoKiZ6YUJ6vgaYPMriJevEdKmZCFERX/+9jfd7rGdZEXhYQH7ochK/X4dQk EM08tr/64KGKFufOtypyGJweztKg2IJ3yN6jA2x2L8DW+DoP2Vt9jW51eAXGny55 4ZeL1D0EGU7o2aJvkEGL9gDZeUvhQ7rx7lNfkykz/067HUTNQaDuBwkc9d8ijktK 0r7AzJ/Ro6DDYkfB0Z03y91a4eLGiHmQpxSSXoFaNfjTUsJk6j+YmrcFUWXqDQ56 /h2RiFIWq0KstD0OKFQI -----END CERTIFICATE-----Generated at Sun Nov 30 00:01:40 2025 by rpki-client