This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
File:                     iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer (raw, json)
Hash identifier:          d3ySiFMTTSx1HZTgXf+MSnT3Ws7c2YpaeJDbiWG2MRo=
Subject key identifier:   8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0199DD32ABDF4C46A58DECEB7D8B30DCE95A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 13 Oct 2025 10:51:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.241.44.0/22
Validation:               Failed, certificate revoked on Mon 13 Oct 2025 11:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:dd:32:ab:df:4c:46:a5:8d:ec:eb:7d:8b:30:dc:e9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 13 10:51:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:f1:b3:20:1b:0f:75:47:89:ca:a0:b9:73:
                    a0:f2:97:c8:7a:75:13:28:ff:53:66:ae:3e:20:c2:
                    c6:fc:62:ab:5a:ab:2e:78:b3:8f:b7:59:7b:10:18:
                    9d:38:c5:0b:61:60:36:6d:a9:ba:9b:a0:fa:e3:e5:
                    74:35:22:03:16:d6:55:99:61:ff:ed:9b:46:c4:21:
                    9f:18:9f:95:49:c3:cf:a7:79:9f:2e:53:89:cb:0e:
                    74:09:aa:49:f9:fa:31:31:e2:23:cc:cb:f3:ed:1d:
                    02:b6:37:05:68:51:56:40:42:0c:63:77:5d:76:82:
                    b0:75:fe:35:3a:e1:f3:3e:57:02:48:99:fd:c3:06:
                    93:63:d3:e2:90:9c:c2:80:05:51:d5:f3:09:fa:1b:
                    d0:93:25:d5:7e:fb:91:5a:b6:ab:18:bc:9f:ef:da:
                    d2:58:1b:93:60:9d:bd:96:9d:3b:d1:1e:35:f0:06:
                    e7:06:78:87:01:f0:88:22:a6:f4:17:19:f0:d9:91:
                    19:4e:f2:0b:8a:ac:b2:98:0e:fa:9f:cb:7f:76:68:
                    1f:be:07:d2:c8:70:c6:ab:dc:a2:3f:0e:2c:d9:3e:
                    dc:ab:39:cd:bc:cd:0c:22:88:cf:82:ba:5d:51:c4:
                    d4:8a:e3:91:22:d4:4c:2e:e6:6a:c2:fe:6c:6e:2e:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:7f:7b:68:82:ef:37:a7:77:8a:46:1e:1c:5d:5f:e4:fc:34:
         64:2a:86:c4:b4:ad:c7:74:80:18:20:df:db:51:23:ef:be:6f:
         da:7a:ce:b2:40:85:5c:dd:78:27:ba:95:5a:2e:46:72:82:b1:
         61:f7:f4:0b:df:7d:84:c6:bd:b5:e3:a1:2e:a7:16:3c:9d:cf:
         e4:61:e4:2a:b4:94:e4:d4:62:e1:43:ec:10:ea:c0:8a:0a:42:
         fc:95:5f:e1:6a:8b:f8:d6:1c:24:44:56:05:00:16:65:7c:20:
         2c:32:04:4b:d3:9c:5a:d0:ed:22:bd:38:cd:19:c0:df:26:b1:
         f7:27:90:0a:7a:cf:ff:78:28:4c:af:30:cc:2d:a7:4d:fd:61:
         3b:28:e0:35:60:09:aa:1a:22:e2:03:34:4d:21:36:11:93:ef:
         d2:88:12:67:08:71:b8:1f:88:2f:70:6d:30:59:85:31:4b:7b:
         d8:10:29:1e:59:34:28:ad:6a:69:94:4d:f6:d2:d3:2b:5e:ec:
         21:66:25:2e:49:0e:0f:f4:76:0d:e1:bd:eb:09:0f:9c:ce:27:
         7d:2c:c2:3f:36:ac:68:3d:74:72:08:a4:3a:46:d5:8d:62:8e:
         55:91:76:bd:e8:3d:e9:49:53:b6:39:9e:9d:7a:78:a0:da:ab:
         ec:3d:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----