This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
File:                     sKVpmgjHv9cHz7BtMhP1ysvyglc.cer (raw, json)
Hash identifier:          ElrwRx0drLa43C2M/RTckSsdRgiNLX+kOW7eBz2SSk8=
Subject key identifier:   B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01997178A42253687CCA930CD11242045635
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 22 Sep 2025 12:49:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.171.166.0/24
Validation:               Failed, certificate revoked on Wed 24 Sep 2025 07:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:71:78:a4:22:53:68:7c:ca:93:0c:d1:12:42:04:56:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 22 12:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:d4:ff:69:2a:ef:e8:8d:6c:a4:a0:9c:6d:
                    b2:6f:66:bf:c1:1c:b7:a7:fc:a5:70:19:bd:13:7b:
                    57:12:6d:a0:0f:58:ea:8a:8a:4c:e7:c0:38:67:d2:
                    73:f6:6e:7d:58:ca:ea:65:fd:7c:fb:cf:96:1d:79:
                    e5:04:22:0c:00:60:89:60:d6:cf:5d:26:1c:a9:f3:
                    6b:c2:48:83:c4:02:91:c2:42:11:d2:ad:8d:d5:38:
                    63:08:45:63:ee:cd:bf:d3:6f:29:09:8e:6f:cf:c6:
                    35:b9:63:54:02:12:87:2c:5a:c0:28:96:d7:0c:b2:
                    47:74:8b:e9:de:1e:4b:27:62:4a:6d:74:c8:38:7f:
                    16:07:de:b5:9a:d5:ed:f0:73:20:c8:5f:63:e2:8f:
                    00:df:07:1f:ff:7e:4e:f5:8b:93:94:53:18:1c:fc:
                    08:55:f1:10:a5:67:9a:ba:13:55:ee:da:56:cc:16:
                    fb:bf:0a:c5:99:d1:14:a8:4a:7f:78:5c:d5:15:24:
                    6d:51:69:68:62:c9:e0:ab:a4:57:68:e7:c5:8d:d9:
                    47:8b:d2:17:8d:5b:75:df:6f:1d:a3:81:d0:29:b2:
                    38:9d:62:13:3e:ae:4e:f0:94:88:08:e5:36:64:01:
                    47:91:60:b1:d3:4a:a8:06:15:87:2c:78:9f:8a:01:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:10:02:8c:3b:4b:ba:26:10:84:3e:35:32:43:f6:d1:11:21:
         01:26:9b:1a:e4:4d:b1:af:da:e7:4c:55:2f:bf:4b:12:0c:d7:
         6e:8b:45:a4:83:7a:de:e2:6b:25:e2:78:8a:e0:b4:07:62:f1:
         fb:4b:d7:f9:91:9b:9d:95:69:cb:e4:1b:84:3f:cb:1d:61:7c:
         7a:22:73:02:e0:89:cb:e8:21:31:94:15:2a:fc:ba:fc:4d:4d:
         5e:43:ba:d0:8a:e5:0a:c3:ab:e6:4a:23:33:71:f1:b6:1c:00:
         7c:84:53:cf:f7:6e:49:f7:16:e2:2a:dd:e0:fd:a7:7b:4f:aa:
         62:b1:e7:de:17:8b:a3:d9:4e:3c:8b:66:cc:32:c6:bd:4d:95:
         3d:56:9f:81:64:e9:7b:af:30:33:2d:8c:40:f1:a5:bd:69:96:
         8f:8d:e9:49:10:1f:ec:ba:3e:21:24:f6:b6:35:7c:4b:23:05:
         8f:ab:53:44:4e:11:24:b6:c8:70:d9:b4:75:b8:3b:c6:9c:f9:
         a6:71:b9:b2:8c:02:d3:7c:76:92:2e:83:0d:c2:d6:0c:2d:6c:
         27:59:9a:03:55:16:14:9b:6e:7a:5b:d4:9d:27:0f:b9:11:52:
         97:85:16:de:ed:ae:ca:35:6f:ba:6a:34:2c:11:b7:62:7a:23:
         46:a2:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----