This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
File:                     ks-z-7RDpLz7jyRvz6f168i5ezE.cer (raw, json)
Hash identifier:          15zuN6LsAxMWb3dBeTShdxrXl8S6BSHUnoV13d5bt4k=
Subject key identifier:   92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B775932158F940975177C0C4C4037D05A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:18:12 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 213327
Validation:               Failed, certificate revoked on Mon 05 Jan 2026 12:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:32:15:8f:94:09:75:17:7c:0c:4c:40:37:d0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:e1:dc:0d:4e:1a:cf:e2:63:1e:27:1b:1e:
                    c2:06:14:83:61:d6:15:5f:29:76:42:c4:01:82:7b:
                    bf:c7:66:84:a0:e4:ff:5b:da:af:87:c4:39:50:89:
                    30:c1:ec:c0:47:fe:86:cb:a4:32:68:87:07:ad:4b:
                    ec:80:c9:eb:b9:12:fd:4b:fa:f3:58:38:da:b7:f8:
                    ee:21:83:bb:44:97:eb:68:16:fb:93:7f:2c:96:af:
                    77:1b:3e:07:80:f3:e9:e7:0b:a2:4d:a1:9f:a8:44:
                    a6:01:50:c7:66:04:01:6e:e0:a9:95:8a:27:0a:4b:
                    20:ae:b1:b6:80:17:56:98:15:04:16:51:2d:e6:55:
                    e0:bf:2f:ff:1d:38:4f:97:38:7c:fa:cd:d0:43:43:
                    46:ca:13:38:be:37:ed:16:d7:3a:b6:9f:12:fa:89:
                    56:d2:8b:7f:1c:6c:9d:f4:af:8a:77:62:7a:5b:ea:
                    0b:ea:73:9c:b9:ba:d6:86:1c:47:27:af:63:e5:77:
                    35:6d:78:bb:fd:72:81:b5:d7:c1:81:df:a1:1b:4a:
                    9f:25:51:ab:7c:ad:16:52:7a:6b:d6:52:cb:0a:2c:
                    f0:73:17:b4:ed:6c:e2:be:e0:94:b0:fe:7b:99:1b:
                    02:38:33:00:91:0f:5d:81:f5:f0:cb:45:f4:28:0d:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213327

    Signature Algorithm: sha256WithRSAEncryption
         ad:e4:cf:01:d6:b1:bd:0d:25:ab:e8:05:5f:c6:39:03:89:77:
         da:c5:a3:58:92:0b:22:12:aa:e9:0e:ba:73:94:8f:18:e9:3c:
         cc:b7:8a:41:30:b9:8a:05:30:eb:d7:08:2d:7e:9f:f5:61:ac:
         b3:3c:b7:73:5d:7f:16:f8:26:52:5e:b9:dd:f5:21:84:7e:4b:
         c9:b5:c1:ad:59:73:6c:ab:83:41:90:2b:91:3e:9e:8d:81:02:
         e7:78:fb:37:e6:07:26:6b:47:cf:aa:ba:0d:04:e3:07:57:da:
         06:50:2b:e1:52:b4:70:01:de:a3:38:0d:f2:a1:00:15:b2:1c:
         73:37:f5:4c:06:c9:79:3c:3e:ef:2f:49:ba:6f:1a:c4:5e:76:
         b4:43:c5:63:3a:ca:19:f5:0e:59:c5:2a:f8:cb:e1:ca:5b:e4:
         b6:cf:be:ce:76:b6:14:79:11:1f:e1:88:d4:14:8e:0c:fa:6b:
         f8:73:53:7a:67:23:e1:c8:34:a7:6d:30:b9:10:3f:5c:b5:e2:
         6f:a9:fd:67:32:40:bc:65:f9:50:89:fe:78:89:46:95:dd:19:
         36:49:7b:ef:94:ce:dd:85:37:88:e2:d1:69:44:5d:13:34:aa:
         67:5e:27:91:4a:15:3f:a6:c7:7c:07:4b:1a:85:35:3d:56:7d:
         24:06:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----