This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
File:                     U_R6clx2jU3nj7MbtA_hbroZ8g0.cer (raw, json)
Hash identifier:          g7cWXXO7hz1TLOxEizz7iKh9pKIrpc49NY2fFqUCY5Q=
Subject key identifier:   53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019AA60BEF393EA76A24F40654DD6970947B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 21 Nov 2025 10:53:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a0b:d980::/29
                          IP: 2a0f:7c0::/29
Validation:               Failed, certificate revoked on Tue 25 Nov 2025 07:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a6:0b:ef:39:3e:a7:6a:24:f4:06:54:dd:69:70:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 21 10:53:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:81:f4:c2:60:f4:99:a9:e1:d6:48:f2:21:
                    4e:fd:c4:af:f3:e0:2e:33:90:f6:0a:e2:c5:87:fd:
                    a1:02:b1:26:67:8b:1f:04:3e:1e:f8:5a:dc:3f:0a:
                    6c:ed:0a:f2:29:28:7f:37:ff:82:1c:f0:f6:8e:bf:
                    5d:b1:c7:f9:df:13:8d:bb:24:5d:04:95:27:0e:f5:
                    79:46:b1:46:b8:9e:33:03:c8:dc:3a:a1:f5:62:92:
                    c6:0c:71:24:92:d9:72:be:13:e4:1f:9e:aa:b5:00:
                    21:5f:89:da:16:be:a9:21:e1:a1:75:3d:94:15:41:
                    30:9b:20:4a:b6:bc:12:61:e5:5b:88:9c:ca:b2:b8:
                    bc:76:4c:4a:53:22:ae:4f:af:0e:b5:5c:59:11:3a:
                    27:4a:84:8d:69:99:3a:00:0e:dc:15:3d:70:52:42:
                    95:58:19:7e:28:ec:50:5c:11:68:ba:c2:51:f4:4b:
                    c8:83:2e:48:19:9c:c3:cf:08:4f:a4:43:ca:af:fb:
                    e1:c6:bb:b9:06:1d:08:6a:36:9d:53:0c:d3:71:be:
                    84:b9:48:ec:e9:c0:7a:5e:eb:a6:49:7b:ac:44:72:
                    53:01:51:5e:00:3c:06:2d:c4:6d:23:84:4f:e2:40:
                    09:f0:d3:7b:f2:c0:0b:ae:11:b1:70:48:73:de:fd:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:d980::/29
                  2a0f:7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:82:aa:98:1f:d5:53:b0:89:82:c3:16:43:6c:9b:20:5a:
         ef:00:bd:9d:3a:0f:19:3d:72:ed:94:36:33:12:d7:59:76:c8:
         df:ab:f0:67:1a:df:91:3e:f1:14:b4:e7:49:80:b3:d2:ff:72:
         cd:b2:e3:5a:66:07:48:e5:1b:7a:de:83:ea:ae:9c:c1:4b:fa:
         eb:c6:98:48:c0:22:06:04:f0:fa:2d:8c:e9:d5:a5:af:b7:f1:
         28:f6:ac:de:21:1f:d2:33:00:b2:75:46:f3:f6:a3:a8:fb:49:
         c1:fe:69:0e:f3:21:a8:dc:9a:3d:bd:be:a6:6b:d1:48:34:fc:
         44:43:7f:fd:4d:59:e3:ce:71:08:75:2a:c5:06:8d:c7:93:87:
         a5:39:92:fb:13:67:4b:6d:23:dc:1a:c9:68:81:91:57:b2:9f:
         ca:5c:c9:83:d6:d7:28:36:44:b1:c5:70:7c:f7:c6:44:64:8e:
         5b:3d:e3:88:c5:95:0a:3f:90:7d:14:62:bb:39:83:1e:56:d9:
         44:a3:5f:79:eb:85:76:42:62:0e:8e:de:5e:d3:3b:52:6b:7d:
         ec:f6:25:91:11:a6:d2:e7:f6:87:b3:fb:37:3b:cc:c7:1f:fb:
         5d:b8:7f:5f:73:e1:d3:97:45:3f:f6:50:cf:5a:e6:c5:4a:31:
         c3:5e:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----