This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
File:                     jT81agLZZ5zokLXVHg3sLz82M2E.cer (raw, json)
Hash identifier:          hiYz7M98tB4Goc19EMp8mpEiG5FIdl6GbPGHJqu6D8c=
Subject key identifier:   8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B0C43C330999CC54ACA1E69C2BD6121B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 11 Dec 2025 07:15:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a11:4e00::/29
Validation:               Failed, certificate revoked on Wed 17 Dec 2025 07:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:43:c3:30:99:9c:c5:4a:ca:1e:69:c2:bd:61:21:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 11 07:15:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:3b:d5:cc:0b:95:2f:fd:00:73:d9:1d:53:
                    e5:de:4a:fe:58:22:a4:64:78:86:b0:a6:9d:09:f4:
                    eb:e9:74:e6:94:67:3b:ef:85:19:14:2f:88:c6:79:
                    63:94:49:4b:2c:f3:70:89:30:66:94:dc:03:5f:68:
                    5d:5d:fb:5e:1e:97:81:fe:2b:87:ca:43:48:97:13:
                    55:bc:6e:72:66:05:b1:81:19:27:7c:05:19:61:80:
                    56:22:42:bf:10:cb:4c:e6:3f:72:a8:da:f0:81:68:
                    11:40:86:98:21:99:4b:5a:25:5a:ca:44:2f:d8:9f:
                    08:e6:2e:7b:e7:67:a6:6d:b5:f7:d5:2e:ff:b9:4d:
                    fd:cd:40:16:e0:02:45:bb:31:d8:0b:48:8c:62:cc:
                    76:27:b1:ba:ea:6d:54:9c:fe:bf:b2:de:84:f7:8b:
                    d9:4f:b8:9f:0a:93:fe:a9:9a:62:e5:e6:ac:04:7b:
                    e6:22:01:ef:22:92:6d:83:14:01:3a:05:bd:70:e6:
                    c3:9f:aa:93:bb:29:f5:25:6c:3d:fd:5b:65:47:e6:
                    71:b3:35:73:e9:a6:4a:a8:e3:0e:0e:13:d8:e1:ec:
                    59:89:56:2c:24:af:bb:74:35:a0:f1:a4:d7:73:34:
                    f7:29:ea:15:d8:57:18:cd:80:04:2c:6c:74:d0:5b:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:4e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:15:7f:83:ce:3b:b2:82:22:b6:34:85:1e:14:6c:3b:de:
         bb:62:84:5f:bf:0f:d9:2a:ce:4e:de:6e:40:43:2f:d0:47:fe:
         b9:f0:60:bf:8f:fa:68:9e:09:8f:7d:60:b5:68:b8:6e:21:df:
         63:36:02:23:9e:b9:ef:91:19:e0:19:b3:8c:c5:ad:a3:5b:db:
         e6:0d:b8:04:77:33:7c:9c:cf:14:fd:cb:a5:3a:e7:a0:a7:91:
         7b:62:25:e6:30:9c:ed:05:00:22:e4:31:2a:43:7a:61:04:27:
         63:ba:c6:77:68:d3:cd:78:00:5a:f3:83:8c:b2:0e:cf:c4:e7:
         08:d5:46:a8:bd:0c:7b:94:4a:16:5e:bf:f7:d6:a6:07:b2:93:
         9d:7e:99:a6:9b:c3:70:f7:39:1a:0b:4f:77:a8:20:ef:b0:4c:
         94:f3:20:f8:4a:06:12:14:80:34:b6:61:73:f6:21:45:02:6a:
         e9:75:23:6d:83:e7:d0:40:c9:b1:0d:a1:e0:16:eb:fb:2b:80:
         b5:ba:1d:9a:f9:9d:33:7f:ea:15:58:c4:14:c2:c0:6a:22:da:
         00:16:60:1d:86:33:c4:97:91:48:43:2d:48:a9:40:61:ef:45:
         17:20:a8:5b:28:20:99:bc:dd:11:14:18:4c:24:82:c7:e9:d4:
         74:73:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----