This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
File:                     kiluMEh7qUY-S2rcgat9pkfDn-c.cer (raw, json)
Hash identifier:          ItbCPU21ni7uMiOOXczYiz67EpUB0Po8sJZ9LqLeNWk=
Subject key identifier:   92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0199CEA86962D7ADCD2B783E69A17D0F0A55
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 10 Oct 2025 15:06:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a03:2c00::/32
Validation:               Failed, certificate revoked on Wed 15 Oct 2025 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ce:a8:69:62:d7:ad:cd:2b:78:3e:69:a1:7d:0f:0a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 10 15:06:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:46:05:fa:16:5e:78:9f:8e:3b:2b:75:59:
                    a0:eb:e3:16:92:ea:f1:9d:dd:db:30:12:e2:4e:bf:
                    83:85:2f:65:fe:08:fe:1c:4c:26:0d:98:05:d3:ee:
                    98:88:0e:9c:82:4f:26:9d:b2:e4:c3:3f:0d:35:59:
                    de:15:d0:ef:bf:ac:c1:71:5f:aa:3e:ac:2a:cd:4d:
                    66:c3:88:46:d9:0b:a3:02:1a:79:6e:ee:f8:16:63:
                    81:1d:e0:ab:43:40:e8:27:10:6b:50:84:06:1f:04:
                    e4:41:11:19:78:6c:b7:96:85:c5:c7:fb:b7:5d:f0:
                    57:a6:c1:d7:42:2d:4b:ec:b8:70:a6:9e:bc:40:6c:
                    e3:f0:c5:3b:c1:5b:84:e6:17:fb:53:22:92:9c:7a:
                    9f:04:65:22:36:02:f3:46:39:4d:5d:e0:9e:6d:37:
                    12:7f:90:2b:78:23:c7:d7:d4:63:e0:b5:f4:a6:8f:
                    14:f2:da:81:69:d1:48:0a:8d:42:1a:0a:cd:2c:80:
                    84:d4:1b:dd:62:b1:c0:e6:c5:ce:cc:e3:1f:0e:b8:
                    d9:da:2e:f6:8f:ae:be:13:46:f6:d4:54:04:db:27:
                    84:db:91:06:ee:8e:52:48:b9:ff:6c:89:20:a9:4a:
                    7a:23:29:99:e2:18:93:aa:8e:e6:4c:80:4e:56:a1:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:12:dd:d5:28:29:46:16:08:1a:c4:b0:b0:aa:7a:04:7e:4a:
         06:2d:48:bd:f2:4d:ec:26:ba:00:d8:1c:c4:85:91:52:8d:8e:
         61:d6:1e:bb:50:48:5d:3c:04:35:e9:a9:f4:62:19:b3:86:e3:
         f2:e9:e1:0b:23:a3:8f:08:ee:33:e4:17:bf:60:b6:71:26:3c:
         fe:de:e4:ec:f1:78:fc:3f:ed:9b:70:8a:28:97:72:24:01:8d:
         42:2e:dd:e1:93:41:7c:e7:bc:86:f0:10:4d:c6:42:5b:cc:ae:
         3e:35:b0:b4:03:7a:7c:fa:7a:5f:9a:7e:ac:43:c9:93:78:c4:
         d0:84:04:48:34:bb:92:d6:0e:ac:ac:04:61:a6:7b:36:08:e9:
         32:31:5c:b1:5d:4c:99:4c:82:08:75:6b:40:0c:bf:7b:34:20:
         97:0f:a1:8a:cc:37:a8:04:a9:cc:9f:95:09:fe:f7:dc:cb:2a:
         cf:be:0c:ea:71:72:70:3e:22:b2:ef:a9:72:b6:de:ec:f9:80:
         d4:7d:e4:ce:7c:ae:90:95:a6:4b:95:a6:76:d3:86:8c:d6:a2:
         af:3d:e0:d4:5f:54:c1:93:db:f7:59:30:ba:6c:a1:05:8f:60:
         e4:21:b5:21:b7:33:3b:86:07:0b:9e:00:c6:d1:60:1f:e2:30:
         ab:0b:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----