This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
File:                     wHgEdmsjU5hblxgIi1xnngw-pn8.cer (raw, json)
Hash identifier:          j+6d2ew/P2DosUdnLXi9WY5St20WCvo0Zvy8u5PtVVI=
Subject key identifier:   C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01984143954DF858BCF1F008833C05B2E9BA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 25 Jul 2025 11:06:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a07:8d00::/29
Validation:               Failed, certificate revoked on Fri 25 Jul 2025 11:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:43:95:4d:f8:58:bc:f1:f0:08:83:3c:05:b2:e9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 25 11:06:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c07804766b2353985b9718088b5c679e0c3ea67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:ce:15:73:03:60:fc:07:c0:4d:87:f8:c2:
                    68:98:fe:91:cd:a9:5b:55:95:55:74:ff:81:75:4a:
                    bc:c3:f7:ff:1e:a6:1f:6c:3b:a4:8d:89:92:7c:79:
                    0a:2c:30:22:18:9b:1f:7e:51:d1:13:59:bb:bc:6e:
                    2c:9c:59:34:f0:99:ae:2a:33:06:30:7b:08:5f:24:
                    73:9a:18:85:2f:2b:a9:6a:53:a4:f8:d7:f8:d2:32:
                    03:12:1f:61:3e:d2:4d:77:42:a3:64:2a:3f:cd:67:
                    77:b5:a0:ab:9e:00:26:83:25:a3:98:5b:7a:a0:9e:
                    03:54:e0:9d:79:38:d1:fa:f9:af:47:63:fd:6f:ae:
                    29:68:bc:dc:d9:36:26:28:e6:19:30:3c:ad:3d:e1:
                    42:48:6c:97:14:27:3a:a6:e6:a4:73:9e:25:8c:a9:
                    49:0b:64:a5:ad:27:9f:7b:20:41:1c:d1:d6:99:77:
                    9a:f9:68:56:4e:32:15:fe:e6:8e:f6:5e:b0:89:97:
                    05:cc:b3:1a:4c:02:83:98:ba:ec:d4:3e:f1:36:23:
                    19:c6:e3:ec:fe:59:a1:e4:c1:cf:88:b5:ff:65:f0:
                    b9:aa:f2:ee:8a:5d:a9:a8:b3:78:09:44:c2:0c:92:
                    d4:04:cc:3c:6c:c6:db:be:fc:40:a0:28:8e:a0:a9:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:98:0e:7a:f4:46:96:44:2b:f0:55:b3:a0:5a:4e:35:ca:
         87:9d:41:27:e2:05:54:ef:e3:19:69:60:f3:a2:82:30:a9:07:
         36:38:e7:93:b6:79:d1:27:ef:a6:30:64:0c:01:d4:ba:58:20:
         63:26:17:9d:fb:6e:4c:73:57:2b:15:f0:4b:21:6a:35:db:d9:
         62:84:95:50:51:cc:3c:53:ec:9b:44:06:bb:85:63:f4:3c:ce:
         f2:63:55:7b:9e:62:4c:71:f4:87:1f:5e:a7:a0:f2:8e:4f:a1:
         9c:7b:bd:ac:03:35:04:08:36:7f:90:54:8d:38:2e:7f:2c:a5:
         d3:74:7f:b7:b8:52:7a:60:58:94:a9:37:e4:ac:85:bb:d2:73:
         77:c3:b3:d9:11:9f:5f:0c:f8:e0:92:b6:aa:de:9e:98:7a:ff:
         27:9d:1a:37:c9:42:72:e7:f0:06:c4:dc:52:99:45:3a:17:35:
         e4:c9:f7:3c:2d:f9:6e:07:a5:e4:e9:cb:d8:9e:ce:bb:d4:6b:
         48:86:2a:b4:c7:e2:12:6e:bf:1d:c8:48:71:68:16:dd:26:78:
         8e:fa:fe:9d:1c:ab:c4:41:fe:9f:e0:82:90:40:64:46:60:c5:
         d8:6b:41:93:67:42:e0:6c:1c:81:5f:79:c2:c4:e3:0c:da:01:
         5d:bb:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----