This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
File:                     f-M2aJct_7fshiiujDwmvt4cq5o.cer (raw, json)
Hash identifier:          d0C0dGp8quW5w9q84T4CceGTVxoPWu4T/kdpJk793ug=
Subject key identifier:   7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941BF6CCAE3483646D42A85A695D1F2691
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 31 Dec 2024 09:05:46 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 51465
                          AS: 59460
                          IP: 91.241.32.0/22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1b:f6:cc:ae:34:83:64:6d:42:a8:5a:69:5d:1f:26:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 31 09:05:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:94:55:f9:5b:ae:b1:1e:d0:de:7d:63:01:
                    60:8b:4c:86:c7:2a:84:f3:26:9f:07:ae:d7:65:61:
                    c8:3e:99:54:ec:a2:7a:02:e9:74:0d:13:48:8b:bf:
                    29:3f:29:13:29:f2:04:b9:50:f1:b0:54:73:cd:04:
                    a1:b7:1c:a0:72:be:4f:49:eb:e1:8c:83:fb:15:bf:
                    cd:90:91:0f:03:78:df:f6:20:50:13:d0:48:99:db:
                    01:fe:18:51:a3:11:3d:b7:a9:0c:43:4b:80:27:48:
                    9b:67:3a:07:d8:2b:c9:bf:f4:ff:da:e8:2d:df:c6:
                    ec:8e:6a:49:c9:19:9f:62:1a:9f:8c:e6:d6:16:78:
                    9c:00:b5:ea:51:2f:a2:24:cb:51:36:24:c2:97:98:
                    00:9e:77:7d:38:0e:14:9c:a5:55:fe:66:c8:b5:15:
                    30:e4:03:aa:56:8e:4d:57:05:c4:bb:ed:a2:0c:2d:
                    60:bf:be:3a:46:17:32:15:ab:ce:90:2a:e8:aa:3a:
                    9f:57:e9:3a:ad:71:31:9b:9e:ed:02:4b:b9:ab:f3:
                    e1:24:e4:bf:f6:41:63:f0:00:48:57:b1:52:db:cf:
                    fa:36:a1:25:0c:26:b7:e4:06:2d:65:c9:74:11:dd:
                    26:5b:ee:95:84:d3:24:b3:12:50:d2:25:22:1b:2d:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.32.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51465
                  59460

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:3c:e4:83:44:50:3d:cc:0e:72:06:d3:3d:66:af:03:12:
         25:f5:22:2f:da:08:37:b7:b5:95:24:9a:79:2d:74:db:3b:0b:
         a6:8e:6a:88:f1:6e:d9:f4:c3:f9:98:bb:7b:a9:2f:30:09:ab:
         0f:60:36:92:a7:43:53:27:8c:d4:dc:1c:10:e4:af:f6:bf:96:
         86:8f:d0:ed:ce:3a:9f:8a:ce:ef:a7:5d:80:4d:2c:ca:d9:8b:
         5e:04:70:9c:fa:b1:db:9f:f5:f1:40:20:47:8c:de:4a:73:42:
         5f:37:84:79:2b:f5:a9:27:7f:26:87:58:ba:fc:5b:88:a7:03:
         e7:8a:b5:ac:bf:ce:43:3b:ee:64:e1:ef:c0:04:40:9e:9b:09:
         2a:65:06:68:b9:bf:c5:6e:dc:b2:7f:4f:4e:db:8a:b0:f4:fc:
         8f:22:ff:b6:b1:28:be:50:b2:21:30:d7:0a:f1:99:30:d7:9c:
         bb:87:2d:75:26:0c:39:a9:b3:3a:f8:28:fd:2e:cc:0a:5c:4d:
         2a:5b:ec:21:30:5a:00:46:52:0e:07:c8:52:4f:89:d6:2f:f3:
         bc:c6:31:31:9a:81:f6:74:07:96:07:01:78:9e:a6:27:eb:60:
         84:5d:76:df:f4:11:04:09:db:ae:7d:9b:45:8c:0d:eb:b7:8d:
         a5:01:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----