This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
File:                     xAGmSD3G9mt4p6QRLVhz3FZkehk.cer (raw, json)
Hash identifier:          rApBVz8L7W00KDztAI4eV6yGzc+M/38ejnJqS/IIPMg=
Subject key identifier:   C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7AC79BE89C7BC0156016D33563B12A20
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 18:17:40 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 8461
                          IP: 193.254.216.0/23
Validation:               Failed, certificate revoked on Fri 16 Jan 2026 14:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:9b:e8:9c:7b:c0:15:60:16:d3:35:63:b1:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 18:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:56:46:4b:d8:e1:2b:7e:26:14:c3:52:f7:
                    ee:04:c6:2c:97:2f:b9:b2:38:80:90:0c:c9:c6:28:
                    4d:15:10:54:81:8b:c7:90:eb:5d:c5:5a:5d:39:1f:
                    37:a8:f2:cc:1d:e9:5b:4c:8a:15:79:a0:2c:1c:76:
                    c8:a7:16:cf:66:1a:20:3c:42:99:79:d2:46:6f:5c:
                    ee:58:1f:d4:4b:ef:68:2d:8e:71:dd:da:03:64:29:
                    b4:40:c1:ef:43:73:8a:05:5c:ee:19:e0:62:76:be:
                    8b:61:c3:d8:f1:ca:58:4f:4e:65:0c:04:07:db:76:
                    b7:08:3c:2b:de:5b:56:c3:58:65:ab:a8:8d:f5:a9:
                    bc:bf:6b:06:f6:78:e0:2e:76:99:a6:5a:c2:8d:f6:
                    c1:13:51:11:a8:94:b8:df:f9:8d:2e:11:3d:cd:e7:
                    3e:c6:d5:85:e2:2b:f4:01:c1:8b:b8:a6:6b:9d:85:
                    6c:d0:fa:17:78:9f:5f:38:bf:01:30:d7:20:b4:b1:
                    d7:90:25:1f:90:cb:57:ba:84:65:ac:3f:a4:42:0e:
                    44:ea:77:13:d1:14:fb:8a:2c:e4:51:f7:e3:ad:3b:
                    79:2e:64:f2:ae:0a:a7:44:14:5a:9f:8c:7b:0d:d4:
                    fd:07:cd:fd:16:96:db:75:b1:b5:24:59:4e:0b:8e:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.254.216.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8461

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:02:20:42:89:23:92:a6:5c:53:6e:45:45:42:ac:37:6e:
         b3:5b:39:bd:94:27:9f:71:d9:ba:18:66:ac:c4:94:d6:ba:1e:
         16:53:a5:91:ce:dd:1f:e2:b6:48:05:27:1b:ff:fa:74:6f:41:
         d3:fc:c6:71:80:30:19:e0:2b:24:64:65:b1:ba:6c:7a:53:47:
         48:db:b3:80:aa:ec:fa:11:eb:49:5c:0e:7e:6e:22:35:cd:22:
         85:fb:2f:0b:b4:c6:32:fd:1d:2c:2f:a0:63:00:58:d2:be:ac:
         b5:c7:b3:e7:10:57:bc:fe:f0:e7:f3:39:a2:73:ad:e5:90:46:
         57:6c:c9:4f:f6:d7:ce:db:5a:1f:5c:21:6e:d1:9b:15:4b:aa:
         b0:b7:78:a9:b5:80:c6:90:24:98:9a:60:ee:6a:88:05:c1:33:
         fc:fd:4a:f7:71:86:90:50:57:c4:5c:69:9e:a8:01:fa:bd:bf:
         a2:a0:10:3d:88:f7:20:11:46:1f:6e:47:0a:b4:b7:a0:bc:9b:
         49:f1:cb:0d:cc:02:2c:00:65:e5:86:31:9f:a7:d5:46:1f:04:
         af:43:cd:3c:11:33:12:66:b8:94:3e:f4:03:a6:f1:99:f8:62:
         62:e8:54:44:f7:e6:29:94:f9:9a:1a:53:1e:e1:e2:26:03:9c:
         60:9c:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----