This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
File:                     aG1vVpUAwlBwthJPG4b2CVJnepM.cer (raw, json)
Hash identifier:          veA63JXcNfw6nokFpB3aKTE89HxcN7nWIoNe6ffE1uE=
Subject key identifier:   68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B3230EE51978BE4B019045696E69FB309
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 18 Dec 2025 16:00:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207881
                          IP: 2a0f:6940::/32
Validation:               Failed, certificate revoked on Mon 22 Dec 2025 09:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:30:ee:51:97:8b:e4:b0:19:04:56:96:e6:9f:b3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 18 16:00:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=686d6f569500c25070b6124f1b86f60952677a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:dc:b7:a0:ff:e6:fe:ef:0c:77:de:d8:97:
                    24:0e:59:3b:97:23:d6:99:3a:8d:de:be:f8:27:4a:
                    ba:5f:03:c1:9e:ac:cb:82:2e:ef:c8:c6:a2:c2:5b:
                    fa:03:06:9a:3d:f7:16:e1:99:9d:de:69:d1:1c:c7:
                    e5:a9:37:bf:e2:cb:16:6f:c2:00:89:b1:8c:92:9e:
                    18:cf:76:3b:c3:ab:70:7d:00:c0:05:9b:d1:c7:6d:
                    18:bb:ef:7f:ee:02:f0:ad:f1:06:4e:51:1b:05:1a:
                    7d:91:cd:0a:9a:a3:1a:68:b4:d3:f0:e9:97:5b:a0:
                    77:62:56:b2:04:96:ce:3d:77:42:52:e1:17:a8:fe:
                    bc:41:c4:4c:40:4f:08:47:64:fd:38:d7:aa:b0:78:
                    17:e9:c1:e3:ab:f5:d3:0e:d8:40:b5:89:3f:aa:47:
                    8e:c1:7b:aa:19:04:c3:40:b5:bd:d4:38:0a:2b:f0:
                    b7:b1:bb:4a:cd:06:d7:a2:aa:c9:2d:b6:63:20:bb:
                    dd:9d:ed:d6:85:34:bc:0b:67:6f:d2:9e:ab:fd:d5:
                    7a:9f:76:9b:3f:3e:54:60:f4:1f:c9:43:67:b3:7e:
                    d2:49:cd:03:cc:69:ae:af:ef:9b:06:47:24:85:f1:
                    91:d8:e2:1f:53:d3:6e:39:07:3e:fd:b5:23:f0:c0:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207881

    Signature Algorithm: sha256WithRSAEncryption
         79:95:d7:db:f1:ce:4b:fe:ad:16:6c:66:8f:60:bc:00:6a:b1:
         59:08:66:02:35:5a:c0:89:39:f6:19:77:1d:1a:24:d7:2e:be:
         32:0f:47:d2:2d:ae:a8:83:47:d7:8d:ac:28:d9:f5:e7:24:6f:
         a4:00:ec:4c:f4:2e:6b:ae:dc:79:27:6b:00:7b:8a:ef:e5:42:
         3c:75:48:26:66:63:38:d9:34:a9:a8:e4:c5:ce:26:79:c9:8f:
         b7:ff:f0:ea:56:ab:d2:8c:5d:ae:f5:bc:4a:5b:40:76:a4:51:
         1d:1c:63:c6:ad:16:f0:4b:dc:ad:1f:ec:b7:10:b4:94:92:7c:
         29:66:99:54:b1:c9:2f:44:41:61:ec:fa:3a:a9:9f:40:af:33:
         86:8a:9d:70:b4:31:55:61:e2:63:70:ab:ec:e2:c5:bd:28:a1:
         22:7a:07:af:2a:9f:6e:a6:b7:94:f8:b6:68:36:0a:96:b4:da:
         79:c2:1d:05:d0:07:17:42:8f:bf:f7:55:6d:d5:20:c9:7b:61:
         4a:af:66:ca:8b:1d:7c:e5:eb:dd:98:c7:58:4b:10:0e:37:92:
         c7:87:94:2e:98:eb:48:29:79:00:77:32:b2:9d:92:2c:3b:5e:
         2e:31:0a:d8:72:31:a3:62:83:7c:7d:2d:7b:aa:6b:88:7d:34:
         a2:74:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----