This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
File:                     vedQeWGGkbrh9HvL7VIxRJaWOJE.cer (raw, json)
Hash identifier:          3QkNl5IKAE58fSrLppdRDwH5Hatb0ewtArTWAJprs7c=
Subject key identifier:   BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019C418EEEF8FA166CDE7582DB6ED724D107
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 09 Feb 2026 08:40:12 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 185.235.142.0/24
Validation:               Failed, certificate revoked on Mon 09 Feb 2026 11:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:8e:ee:f8:fa:16:6c:de:75:82:db:6e:d7:24:d1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  9 08:40:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bde75079618691bae1f47bcbed52314496963891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:f5:e8:8e:b0:63:4b:6e:be:f2:74:8f:eb:
                    e7:1c:c7:d1:f9:bc:1b:bf:25:bd:10:35:5f:46:1d:
                    56:b8:ec:35:3a:17:6b:14:54:1b:9a:f6:5d:d3:ee:
                    c1:96:13:1d:2b:0b:b3:ef:74:06:c1:9b:ed:11:3d:
                    16:1a:70:3b:a0:09:0f:2e:2b:3d:67:cc:31:5c:26:
                    5d:9c:1b:f1:b0:f2:85:a2:df:e1:a5:b8:8e:2d:a6:
                    af:df:32:4c:84:c4:34:2c:88:20:b4:81:07:da:64:
                    d4:46:17:eb:c6:1a:56:46:f2:8f:09:1c:dc:2d:e2:
                    a2:d1:29:c3:91:79:ce:48:e0:c8:bc:8a:03:94:a4:
                    ae:27:39:00:68:4b:da:a8:8a:00:e8:9a:57:68:79:
                    fa:c0:98:dd:fd:22:87:eb:df:78:18:34:e3:e1:ab:
                    db:9f:09:ed:41:ae:b7:37:2a:de:4b:19:41:d6:b3:
                    62:e6:be:64:f1:52:82:d8:ed:94:ea:df:8f:80:79:
                    fc:dc:f0:ad:34:66:15:9c:f7:63:40:d7:f4:fc:b2:
                    98:b6:0e:dd:83:cc:08:4f:f6:43:de:71:97:a0:e9:
                    3f:d9:3b:c2:b0:55:ab:ec:29:c9:84:b2:3b:f4:18:
                    08:29:7c:93:bc:7f:de:29:1f:fa:74:9d:39:ba:e7:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:39:e0:1e:22:d6:57:e8:f4:dd:19:81:12:b9:d5:d2:08:ae:
         9f:4c:e1:94:c8:b1:2b:3d:43:c4:8f:48:72:6c:7f:5f:cd:99:
         15:de:83:27:34:c0:4c:24:8a:42:89:29:5e:89:4b:17:36:6a:
         0e:68:ed:17:a4:97:9b:47:57:b5:63:81:4b:c9:37:6c:32:bc:
         47:c5:0e:a5:f7:d7:8f:50:d5:90:92:08:6a:6f:70:94:f5:18:
         08:15:37:69:52:33:01:cd:f6:09:ae:d4:b0:99:73:e7:59:10:
         88:10:f2:0c:0b:6d:6b:29:05:53:93:e0:b4:42:10:2c:93:81:
         c7:1b:a5:f2:ee:41:a3:89:e0:de:52:a2:62:b8:2b:1f:6d:e1:
         98:95:db:3c:5c:b9:6e:b1:ce:22:26:29:1a:b0:69:b3:1e:24:
         3c:3d:5c:ff:75:0b:bb:f5:e8:8d:f7:c4:6b:9d:d7:3c:31:b6:
         99:e6:ab:c0:67:a4:d6:68:59:6c:a7:6d:4a:7d:e6:b4:b8:73:
         51:f5:c2:4e:31:13:ed:ce:92:50:7e:34:fd:22:be:6d:d2:7a:
         57:8f:9f:e6:c8:11:b6:8b:93:24:f0:c2:47:b1:e0:f9:21:6e:
         51:87:f7:69:d3:db:68:49:2e:76:50:90:50:19:c8:54:8c:ab:
         88:72:5d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----