This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
File:                     Zdxu-msTax5F4h5DToWaKS0uXhQ.cer (raw, json)
Hash identifier:          Pk6SB3V2s7FpvrGr2A3s0RZEM7oTOK4fdX4apPEzAeI=
Subject key identifier:   65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B26ECFDC603AF5B951BE9D5CA979F416A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 16 Dec 2025 11:30:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a06:b600::/29
Validation:               Failed, certificate revoked on Tue 16 Dec 2025 11:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:ec:fd:c6:03:af:5b:95:1b:e9:d5:ca:97:9f:41:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 16 11:30:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:1b:aa:5d:76:79:d3:e0:5b:88:a5:3f:2f:
                    d1:dc:fd:f1:b8:f3:ac:b4:a3:41:a6:60:d5:b8:18:
                    aa:c0:db:7c:24:24:d6:b9:bb:2a:29:2b:7b:9d:e6:
                    7c:53:ec:56:6d:62:19:c6:d1:37:c7:13:7f:71:43:
                    76:e0:7a:9d:64:db:b1:da:47:67:85:af:ac:80:7e:
                    6e:57:3b:e0:21:f2:bc:90:cb:d4:0c:24:ec:66:36:
                    b8:d1:13:f2:7e:a8:35:bc:c1:1d:be:02:24:c0:37:
                    4b:d2:ca:8f:7b:b8:4e:59:49:a6:43:c8:d6:10:b1:
                    32:95:44:3f:c9:c4:5d:77:54:ec:16:ae:7a:97:da:
                    74:bc:05:bf:1e:7d:5e:a4:6f:5b:5a:c8:ad:f5:f1:
                    92:df:67:3b:92:a5:ea:c3:2f:5e:55:bb:2b:60:cd:
                    4a:cb:44:ab:87:61:6c:78:a3:f9:d2:af:e8:45:b1:
                    e2:87:3b:b9:90:31:0a:a3:e7:74:43:b4:64:7a:43:
                    4c:50:7a:ee:6e:b7:ff:72:7f:84:4a:18:c5:87:20:
                    3b:cd:bb:6d:14:e8:1d:54:41:a0:27:01:97:8f:45:
                    52:e9:b7:1b:54:6f:5c:74:52:72:8a:5e:ce:5a:38:
                    26:2c:86:c1:e4:06:ef:ad:7d:d7:34:4b:27:e2:fe:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:b600::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:4f:b5:71:da:a0:1a:6a:d1:ca:67:37:27:63:67:99:5d:
         9d:54:03:6c:b5:6f:fe:4b:3e:2e:4e:f2:ed:78:55:ba:01:68:
         7c:ce:96:c4:cf:02:fe:b3:ec:90:5f:cf:f5:d8:22:ef:47:da:
         2c:1f:57:dc:7a:b3:62:1f:46:7b:11:af:b1:f8:e5:b8:87:90:
         6a:51:d8:07:ed:79:ca:ed:c9:a8:2e:2e:e4:75:0e:b6:12:5d:
         dd:43:8c:d7:3d:cb:d0:e9:c6:c4:61:c6:21:22:5c:6f:b7:cd:
         49:cf:21:98:04:9f:6a:00:fe:e1:7a:ef:32:32:5b:dd:83:01:
         4e:b0:cb:69:de:0e:9c:b0:65:9d:42:46:f6:d9:3d:97:4c:fc:
         10:aa:9f:6d:9d:ed:d7:2b:5c:16:cb:9a:c5:69:f7:8f:96:c7:
         8d:e1:5b:22:cd:f9:7c:16:bc:7f:e4:6b:03:94:ec:0d:25:3d:
         5e:3c:64:76:0e:0e:d0:d1:fc:b8:e5:21:66:1a:d6:56:55:76:
         ba:9e:f3:a8:a9:e6:b2:6c:c3:bb:92:62:a0:f8:a8:7a:2c:7e:
         48:cb:c5:7a:09:3f:9e:f7:76:56:25:ba:4d:04:00:a9:3f:aa:
         e1:fe:ba:c2:04:60:b3:c0:5f:93:7f:b8:25:47:b0:3c:9c:82:
         15:36:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----