This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q5teKDpFc4rxQItbZQBCnf4v39g.cer
File:                     q5teKDpFc4rxQItbZQBCnf4v39g.cer (raw, json)
Hash identifier:          pfDQwcIwLF6e5U127CZoJB7VTIsR6uoGpaRkjWN8fIs=
Subject key identifier:   AB:9B:5E:28:3A:45:73:8A:F1:40:8B:5B:65:00:42:9D:FE:2F:DF:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194122B41093BD7593675F472B4A61EC1FD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/q5teKDpFc4rxQItbZQBCnf4v39g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 29 Dec 2024 11:26:52 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 214806
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:12:2b:41:09:3b:d7:59:36:75:f4:72:b4:a6:1e:c1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 29 11:26:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ab9b5e283a45738af1408b5b6500429dfe2fdfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:1f:c5:d6:b4:9e:07:87:85:a4:d2:ef:ed:
                    ac:5c:ac:f5:d7:ba:a3:8c:0e:ec:99:c9:3c:9b:55:
                    bf:2f:24:4d:2e:d8:c0:7b:21:93:d0:86:3a:1d:35:
                    15:4f:b5:1a:0e:08:3e:a0:db:ab:54:90:2b:49:17:
                    f0:91:8c:4a:42:02:3e:1b:ae:9e:b6:8f:8e:9c:7e:
                    d5:a8:e2:7b:cd:c2:41:44:a5:3a:80:64:d0:6e:8d:
                    a8:f7:d9:21:4d:76:1e:77:77:53:95:75:5b:4d:e6:
                    0e:0f:7e:a7:ea:b6:cd:55:fc:76:d8:57:37:10:1a:
                    57:d5:82:7d:5d:1d:2e:b5:12:fa:72:81:f1:b2:49:
                    30:25:86:65:36:a4:fa:bf:8e:09:3d:4d:e7:2a:30:
                    16:35:94:93:55:d1:62:a2:7f:13:47:56:27:f1:4f:
                    23:7e:6a:ec:08:f3:6c:b6:86:f1:54:f4:eb:3d:b3:
                    27:6d:f5:e6:97:c8:6b:a8:f3:b6:28:28:00:3d:16:
                    d1:8c:e6:10:8a:ca:e1:fb:43:a6:c9:5a:d9:f2:5a:
                    da:2b:c7:42:f8:bf:da:ee:e4:a2:b0:c3:f9:25:54:
                    0f:ff:e5:74:09:f1:89:db:b1:74:dd:ca:f3:13:b8:
                    63:fe:22:cc:8a:11:55:c6:3c:79:e1:3f:4b:11:35:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9B:5E:28:3A:45:73:8A:F1:40:8B:5B:65:00:42:9D:FE:2F:DF:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/q5teKDpFc4rxQItbZQBCnf4v39g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214806

    Signature Algorithm: sha256WithRSAEncryption
         67:a7:02:e7:95:74:7f:2d:fb:1a:65:66:7d:d8:09:5f:10:d9:
         2b:45:7a:0d:03:77:69:a6:c8:86:58:c7:59:85:fe:8d:71:ab:
         c1:10:16:68:2e:2f:97:3f:a2:26:ae:1d:f2:a8:b8:83:f4:a1:
         ab:6a:fb:49:9e:ee:ed:04:2f:e8:83:3f:5f:c3:1f:30:2a:b5:
         d2:8f:fc:a7:f8:45:f1:5c:1d:49:df:3a:54:20:6c:e5:ef:29:
         eb:13:6a:51:1a:64:08:6b:01:c9:dd:74:23:35:24:78:c6:8d:
         8b:91:e2:d1:2c:c3:4e:bf:66:76:55:8c:fa:ce:e5:da:e5:2f:
         be:ce:ad:68:f4:3c:00:af:11:f5:8f:75:1f:2f:6d:bc:20:0d:
         71:82:6f:92:4e:8c:ea:3a:76:fe:ee:93:56:5c:4a:de:20:f9:
         4b:50:52:22:59:a0:fa:fa:6a:5f:80:d9:3c:96:b4:aa:6b:6c:
         ef:56:9e:33:2a:75:b3:b0:7d:3d:d7:29:2c:18:bf:a7:69:2d:
         54:0c:cf:76:c6:89:fc:e0:55:0d:c2:7c:36:d9:db:95:64:15:
         09:75:33:c5:d4:b0:7c:3f:f3:86:c6:8f:99:e3:eb:50:d6:96:
         0d:89:c5:d1:79:b5:7c:f9:78:13:5d:55:ee:cb:d0:ce:2d:98:
         7e:fc:00:c0
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQSK0EJO9dZNnX0crSmHsH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMjI5MTEyNjUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjliNWUyODNhNDU3MzhhZjE0MDhiNWI2NTAwNDI5ZGZlMmZkZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoAfxda0ngeHhaTS7+2sXKz117qj
jA7smck8m1W/LyRNLtjAeyGT0IY6HTUVT7UaDgg+oNurVJArSRfwkYxKQgI+G66e
to+OnH7VqOJ7zcJBRKU6gGTQbo2o99khTXYed3dTlXVbTeYOD36n6rbNVfx22Fc3
EBpX1YJ9XR0utRL6coHxskkwJYZlNqT6v44JPU3nKjAWNZSTVdFion8TR1Yn8U8j
fmrsCPNstobxVPTrPbMnbfXml8hrqPO2KCgAPRbRjOYQisrh+0OmyVrZ8lraK8dC
+L/a7uSisMP5JVQP/+V0CfGJ27F03crzE7hj/iLMihFVxjx54T9LETU8jwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKubXig6RXOK8UCLW2UAQp3+L9/YMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1Lzg3OTY2
NS1lM2MzLTQ0YTctYmFjNy01MzE1MmM5NGMxYWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvODc5NjY1
LWUzYzMtNDRhNy1iYWM3LTUzMTUyYzk0YzFhZS8xL3E1dGVLRHBGYzRyeFFJdGJa
UUJDbmY0djM5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNHFjANBgkqhkiG9w0BAQsFAAOCAQEAZ6cC55V0fy37
GmVmfdgJXxDZK0V6DQN3aabIhljHWYX+jXGrwRAWaC4vlz+iJq4d8qi4g/Shq2r7
SZ7u7QQv6IM/X8MfMCq10o/8p/hF8VwdSd86VCBs5e8p6xNqURpkCGsByd10IzUk
eMaNi5Hi0SzDTr9mdlWM+s7l2uUvvs6taPQ8AK8R9Y91Hy9tvCANcYJvkk6M6jp2
/u6TVlxK3iD5S1BSIlmg+vpqX4DZPJa0qmts71aeMyp1s7B9PdcpLBi/p2ktVAzP
dsaJ/OBVDcJ8NtnblWQVCXUzxdSwfD/zhsaPmePrUNaWDYnF0Xm1fPl4E11V7svQ
zi2YfvwAwA==
-----END CERTIFICATE-----