This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
File:                     Wv8T1acc-w2jjY09geE-r0BBanQ.cer (raw, json)
Hash identifier:          Hu1+lVjZJPsXXGrYGmtxBFBAKBg/K3Xt1/b14w344/o=
Subject key identifier:   5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B30BE20ACB9333D401438E04588C211BE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 18 Dec 2025 09:15:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 61245
                          IP: 2a12:e840::/29
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 09:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:be:20:ac:b9:33:3d:40:14:38:e0:45:88:c2:11:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 18 09:15:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:40:6b:73:5d:cc:9f:d6:12:3a:65:96:94:
                    8a:a2:7f:45:94:93:a7:f8:dd:2d:0f:17:2a:7c:89:
                    8f:16:31:15:7c:6e:e5:25:76:1c:35:cc:c9:ac:0c:
                    48:d5:58:cd:43:62:f2:6b:76:2b:34:0e:3b:82:a6:
                    59:0d:5e:ed:2d:e1:80:d6:54:48:1f:49:e2:38:32:
                    da:e9:01:98:1e:7d:08:1a:e3:0a:78:ae:eb:8c:63:
                    75:9e:c0:66:44:ea:12:00:23:47:3a:73:17:2c:b3:
                    8e:98:06:73:21:50:59:94:c9:ce:ba:c0:5d:77:f4:
                    c7:f3:c5:56:00:c4:99:95:69:91:b4:5a:ff:e6:72:
                    23:66:c0:04:11:57:ce:a1:e4:cf:1b:88:b1:13:c2:
                    be:b4:18:c7:37:a9:85:ea:24:ce:66:f5:ed:0f:5f:
                    76:8f:da:b2:55:ca:63:fa:b0:e6:28:da:94:df:f8:
                    55:15:42:78:e7:48:2f:3d:94:80:0c:66:f6:5a:52:
                    84:8b:7a:c9:11:bc:7c:4e:46:35:a2:75:58:7e:2c:
                    0a:72:80:5b:40:78:6c:96:40:9a:a4:a0:5b:d5:b7:
                    c2:39:1b:34:34:f2:91:6a:fc:49:82:6c:93:bd:4a:
                    f4:f1:5b:a7:01:6c:8d:63:ae:df:60:db:5c:2e:2c:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:e840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61245

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:87:17:ac:74:a7:ba:a9:30:c3:47:73:ec:5f:c7:47:fb:
         64:ce:9b:fe:8f:7f:80:6e:d6:e9:7f:ec:f9:11:e1:0c:b5:76:
         cc:79:50:41:95:79:54:23:83:12:62:7e:1e:19:3f:71:5c:0f:
         52:de:96:cb:9d:8d:f0:33:c4:64:7c:e2:60:9d:70:f0:30:63:
         33:6f:38:f6:69:86:fe:1a:2d:4d:d0:75:54:79:38:33:d2:0c:
         ca:bc:e0:15:7e:3a:55:7a:5f:8a:12:65:1a:0c:92:9d:26:8f:
         b2:52:35:d1:bd:07:76:f3:fd:48:cb:f4:29:8a:50:dd:1d:28:
         56:18:9a:86:8a:c7:2e:08:92:14:2a:52:cb:79:e0:22:de:fe:
         7e:de:99:27:3a:4c:2c:49:0a:49:85:a2:40:ff:d5:6e:30:da:
         40:bc:ff:41:16:e1:93:f8:40:c4:99:06:50:fe:a6:b9:31:e4:
         13:1c:a2:44:8d:68:e7:61:35:2d:9c:81:70:77:01:fd:d8:a0:
         56:52:2e:e3:11:68:c3:20:c2:47:66:1b:b6:ed:eb:41:98:49:
         3e:95:b7:1c:eb:9e:c4:f9:a1:97:d0:34:17:55:ab:35:4a:4b:
         be:a4:d7:0b:74:a0:95:de:6f:34:64:d3:48:f6:8c:d4:f6:e6:
         c6:04:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----