This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
File:                     iTmr9x7sEMXZBgn8qfNMuF09VE4.cer (raw, json)
Hash identifier:          oDQgCqE9B+njdcn88aCtH7clrDHmdjzMwplrIzUPQMY=
Subject key identifier:   89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B50C4B7F5023196E692B45168913D14E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 24 Dec 2025 14:30:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210885
                          IP: 2a11:3d80::/29
Validation:               Failed, certificate revoked on Mon 29 Dec 2025 09:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:c4:b7:f5:02:31:96:e6:92:b4:51:68:91:3d:14:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 24 14:30:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:96:f1:87:b5:60:bd:47:1c:ad:19:0c:ed:
                    7a:d1:27:1b:2d:31:99:de:2e:47:38:57:46:54:4a:
                    e7:39:c2:64:5e:2a:ee:4b:74:9d:44:8e:c7:1e:54:
                    11:18:03:8e:25:dd:72:67:f0:43:1f:bc:e5:5b:24:
                    ca:03:58:9c:eb:1b:0d:54:0f:55:20:b9:62:68:55:
                    1c:84:76:71:77:61:09:8d:a5:1c:69:02:97:55:01:
                    5b:d7:80:b7:b7:11:cb:98:09:13:f2:e2:22:6d:e4:
                    a5:0c:f5:18:a8:71:d6:ce:2c:71:fa:d1:ea:45:84:
                    70:13:55:34:b5:fc:35:b4:9b:aa:d4:43:89:db:c9:
                    8a:43:d6:99:48:ae:21:e9:8e:2d:8e:47:85:e5:03:
                    39:76:98:c2:26:80:0d:24:33:29:8c:da:81:bd:18:
                    6f:95:87:84:14:09:3b:c6:69:ef:0e:19:92:a7:e5:
                    69:7e:e2:34:89:d1:88:eb:b5:73:64:cf:4b:ed:17:
                    41:37:9f:51:22:1d:26:1e:11:10:bf:b1:62:e4:77:
                    98:ef:7c:bd:0e:9a:fa:3c:06:57:19:4d:90:7e:39:
                    7b:28:24:bc:97:8c:d0:83:13:22:69:a8:62:e7:d8:
                    8f:c4:e2:70:c3:a3:e5:c7:7e:1a:71:5d:cb:7e:98:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:3d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210885

    Signature Algorithm: sha256WithRSAEncryption
         11:8d:5d:49:6c:8d:18:8b:cc:19:f8:a4:3a:94:4b:6a:74:d5:
         0e:0b:6d:32:d9:55:86:60:48:c6:15:4d:7e:7e:c4:4d:c2:5b:
         53:70:f1:55:20:ee:1c:d5:65:a4:32:7e:d6:01:39:47:c2:f4:
         30:2e:43:2b:7d:6b:28:ca:97:a1:b1:0e:4b:6f:5f:6b:12:00:
         26:ad:f6:5b:6f:8b:64:89:95:6a:04:8c:90:b4:05:15:ea:85:
         b7:55:a0:78:64:a3:4b:a7:6d:1c:e1:d8:73:20:a7:5e:53:cd:
         fd:bd:b4:41:6c:ab:07:a4:92:0a:0a:a1:23:e1:80:89:b6:7c:
         83:e2:59:d1:d5:a3:bf:0f:a2:fa:82:b0:03:91:04:d4:40:d1:
         66:fc:d9:8d:bd:f7:c1:5d:ad:72:ad:8f:a7:3b:d3:2e:44:c6:
         08:8e:85:22:df:5e:bb:92:31:ae:9e:18:e9:fe:63:58:ed:7a:
         9b:54:9d:f7:31:d2:99:75:ba:1c:85:5b:fd:51:4e:02:b8:bf:
         5d:f1:23:24:c6:b9:00:f3:a2:88:60:4a:77:e4:b4:12:23:57:
         1c:e9:aa:88:50:3e:90:48:10:69:f3:38:b2:4a:8b:a4:8b:30:
         e6:57:0f:f7:94:27:41:4b:c4:a6:97:c4:0b:62:47:44:96:16:
         88:98:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----