This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r3T2IqGbEecUb7-thATYJM_DteA.cer
File:                     r3T2IqGbEecUb7-thATYJM_DteA.cer (raw, json)
Hash identifier:          fBTCEtp7J7nBT5k2iC/2kCMUENR7NspDEqKQi4ntsWw=
Subject key identifier:   AF:74:F6:22:A1:9B:11:E7:14:6F:BF:AD:84:04:D8:24:CF:C3:B5:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018BC3D2EC902AC739847B8FE86C1599D533
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sun 12 Nov 2023 13:57:42 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 60025
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c3:d2:ec:90:2a:c7:39:84:7b:8f:e8:6c:15:99:d5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 12 13:57:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af74f622a19b11e7146fbfad8404d824cfc3b5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ee:18:e5:ee:5f:c9:86:a3:13:f7:2d:e2:39:
                    83:3e:39:2a:38:b6:e3:52:fa:aa:71:c5:65:8e:a2:
                    48:f5:88:c8:2c:c8:08:18:5d:69:d3:df:15:c1:49:
                    98:c9:e8:71:ba:28:c6:b0:b7:d1:35:bb:e7:bc:74:
                    ed:60:41:5d:44:b0:ce:9f:fc:48:6e:99:de:a3:0d:
                    51:e8:68:f3:51:d0:8c:59:05:f7:82:db:53:4b:ad:
                    aa:c7:b9:72:86:8f:71:1e:8b:ec:17:ae:f0:e4:80:
                    b0:b1:43:d1:18:cd:2e:b0:db:69:e7:23:17:ef:ff:
                    96:fa:30:af:e4:5c:0f:84:9f:05:21:d5:b5:ed:45:
                    8a:a7:9e:38:72:21:ff:f7:f8:52:a7:e4:a0:91:2a:
                    82:fc:28:02:41:2e:a9:14:a4:82:ab:bd:82:13:a0:
                    da:06:51:df:a4:39:f5:94:60:2c:de:a5:63:f1:8f:
                    ba:2d:5c:55:3a:e4:eb:93:71:34:d9:a0:91:a1:fc:
                    e4:9e:65:48:75:f4:2a:54:df:9e:ea:9f:ce:ba:e8:
                    23:2a:1d:f6:7e:2b:d9:87:c7:cf:02:47:59:ba:a8:
                    93:3b:e2:43:8c:6b:63:8f:34:0e:67:c0:21:d0:bf:
                    27:0f:01:a8:90:af:f0:46:b0:1b:49:ed:f1:39:72:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:74:F6:22:A1:9B:11:E7:14:6F:BF:AD:84:04:D8:24:CF:C3:B5:E0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/4/AF74F622A19B11E7146FBFAD8404D824CFC3B5E0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60025

    Signature Algorithm: sha256WithRSAEncryption
         13:40:d3:a8:74:5b:c4:78:08:cf:fe:fd:f5:f9:e6:4d:78:1e:
         73:1c:60:1a:05:cc:42:39:df:36:59:af:ab:c3:5b:71:b1:69:
         07:14:a3:3b:41:25:61:e4:20:2e:1e:b8:80:79:24:25:ea:e1:
         76:e9:db:d0:71:ae:06:94:4d:b5:df:a0:dc:06:dd:0e:f5:cd:
         06:03:04:d1:fe:23:99:83:e2:30:b5:1d:87:0a:e5:87:11:0a:
         0c:f6:b4:75:ca:25:8b:d1:55:f4:18:bd:2c:9d:a8:6e:60:e9:
         8e:bb:11:e5:bb:e1:76:43:ea:33:0a:a6:95:71:d5:0f:58:d8:
         25:7b:c7:88:80:50:79:ba:84:54:7a:f5:0c:ec:12:21:8d:5e:
         28:80:7d:64:56:97:46:66:a1:cf:b6:b4:a0:5b:80:40:95:98:
         d0:6b:18:1f:69:c9:8a:7a:96:54:f9:97:47:dd:94:4f:63:ae:
         68:b5:0d:a7:e8:c2:8a:f2:a9:44:e0:a3:18:a6:c2:7c:59:c7:
         60:74:69:1d:eb:87:26:51:6c:bd:8c:66:4d:25:4f:76:aa:a2:
         38:25:82:ab:38:21:9e:3d:a4:4d:c1:84:6e:05:7d:ce:12:21:
         30:36:5a:4c:cc:d1:3a:5b:d1:ab:c9:f9:d1:72:04:84:d8:cd:
         d2:64:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----