This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
File:                     F92cI69p7Czbb-K5k260lM_RYh8.cer (raw, json)
Hash identifier:          0yD1mqPmDMi6ED4mwFzH+xMDYhK3SF3FN6dKk1j3oOk=
Subject key identifier:   17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A7D20632D6A75CEA04693DF57C43964D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 13 Nov 2025 12:11:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 157.167.0.0/16
Validation:               Failed, certificate revoked on Mon 24 Nov 2025 12:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:7d:20:63:2d:6a:75:ce:a0:46:93:df:57:c4:39:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 13 12:11:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:4a:45:b4:56:db:6f:9c:2d:75:a1:f6:fc:
                    12:cd:f7:07:53:ae:90:40:a7:45:e2:61:4b:fe:8c:
                    fe:45:8c:f5:58:be:ed:6d:56:9f:d6:92:64:f8:82:
                    ba:cd:1b:f6:38:94:86:99:3f:ce:66:dd:70:46:5b:
                    1f:a3:19:d2:d3:51:53:fb:4d:39:9d:03:4b:cf:30:
                    71:90:a9:47:f3:84:a7:6d:c5:b4:47:92:58:f6:21:
                    10:4b:d7:79:3d:b4:63:92:6c:c2:fd:53:48:0e:94:
                    70:9a:f4:29:a7:34:15:62:84:04:b8:4b:e0:c9:f8:
                    56:1c:04:c6:1c:88:19:a6:20:30:2c:5d:f5:dc:e5:
                    36:95:2d:2a:58:e2:e0:79:f0:93:43:00:a0:f4:de:
                    2d:e6:bb:78:63:a9:c7:00:15:82:41:b8:90:31:05:
                    ca:83:80:e8:e5:eb:62:a8:8c:79:ba:ed:7e:1f:13:
                    1e:a9:40:ba:30:4a:19:6e:ab:9f:b1:ef:3a:84:a2:
                    da:82:97:c2:32:ce:14:4a:0b:1a:15:5a:00:bd:5a:
                    73:c0:76:e1:6f:b9:e1:35:69:9a:c8:2d:1c:55:35:
                    df:68:79:34:d3:55:1d:0f:54:14:34:90:da:be:4c:
                    09:b8:44:30:5f:05:99:8b:5a:f0:32:2e:63:56:8e:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:13:6e:b7:aa:89:22:73:b4:37:ee:68:f9:7d:6e:3f:da:ed:
         c7:91:3e:b9:67:35:68:fb:6f:ba:81:24:c4:cd:38:b0:06:12:
         f2:51:a3:e7:83:37:cc:57:9a:6a:a4:74:a7:55:35:4a:d8:e0:
         30:c3:01:41:5f:9e:49:1a:49:2f:73:30:52:8b:71:71:4b:93:
         9b:2a:d8:1c:7f:56:02:8c:0a:67:b7:fe:b7:02:da:6f:11:ff:
         71:96:92:06:22:ae:5c:14:2e:12:fd:1b:da:cb:20:c9:7d:0e:
         d2:b5:00:c6:2e:8c:da:8e:55:1a:26:82:e4:40:1c:74:42:f6:
         67:0a:3a:36:d3:96:18:6f:d6:ed:ba:cc:48:a0:31:8e:d2:6e:
         0a:45:54:90:bf:c0:b4:03:35:32:18:5a:5f:fe:67:3e:3e:5b:
         bf:cc:0b:f8:a8:bb:24:79:c7:de:94:c5:19:67:8e:4f:a3:f8:
         22:88:72:b5:7d:d5:f6:3d:8d:97:51:83:6c:20:94:5e:ae:43:
         c0:c3:bf:d2:23:52:ab:13:1b:10:29:04:f0:89:40:ad:62:bf:
         95:ca:55:a1:bc:92:fd:28:db:2c:49:8f:bf:44:3d:a2:c6:e3:
         32:ed:1c:69:77:ec:95:3a:fe:36:de:72:3e:3d:4b:83:5b:82:
         38:11:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----