This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer File: waGQUEttntnBgJaEBCWxHXsi3_Q.cer (raw, json) Hash identifier: mtYjrllobZjhalros/AzO+kFFE3F8fUU3hY2dWqBEnE= Subject key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B221918B1267C26CE7BC7879A05546C18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 13:00:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 42707 IP: 5.57.248.0/21 IP: 5.206.208.0/20 IP: 77.75.48.0/22 IP: 83.143.76.0/22 IP: 84.39.204.0/22 IP: 91.189.224.0/21 IP: 91.195.64.0/22 IP: 109.207.72.0/22 IP: 185.148.28.0/22 IP: 185.229.80.0/22 IP: 185.231.24.0/21 IP: 185.233.212.0/22 IP: 185.236.4.0/22 IP: 185.245.88.0/22 IP: 185.247.44.0 -- 185.247.51.255 IP: 185.248.228.0/22 IP: 185.250.136.0/22 IP: 185.252.124.0/22 IP: 185.254.48.0/22 IP: 193.33.134.0/23 IP: 193.36.164.0/22 IP: 194.49.88.0/22 IP: 195.42.224.0 -- 195.42.229.255 IP: 2a00:5140::/29 Validation: Failed, certificate revoked on Wed 17 Dec 2025 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:18:b1:26:7c:26:ce:7b:c7:87:9a:05:54:6c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 13:00:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:b1:2d:22:e8:55:76:d7:f8:2b:92:f9:0c: 0a:c1:f1:28:4a:b1:75:46:ea:5e:92:e5:ff:52:3c: 80:78:bd:db:c2:7e:49:7c:c7:4d:06:2e:1d:f0:64: ac:77:2b:5f:ea:18:d4:c3:4e:da:27:b0:03:0b:3b: e7:ca:ca:88:6e:6a:eb:28:c9:c1:90:1c:43:b9:14: 6a:04:28:fc:c6:89:d2:7d:70:fd:f1:6f:44:dc:45: 9c:5b:cb:f5:a4:1c:9d:87:cc:ef:dd:e4:df:d1:cc: 69:fa:94:41:cc:ef:31:d4:27:3a:f8:c1:82:c5:2b: 4e:7c:18:eb:4c:53:f9:c7:0d:87:2c:65:46:78:9d: 30:d1:d0:ce:a2:55:d5:c6:00:7c:1b:3d:42:b0:aa: ab:07:37:24:41:b3:f4:dd:71:04:cd:de:97:9c:17: 4f:78:99:84:c1:dc:ee:de:5c:c6:59:57:b2:7a:7e: 3e:f2:e3:f5:ab:3d:d0:b5:e7:1c:4b:cb:ce:d6:84: 46:00:32:f4:69:f0:cd:2c:01:6b:bd:e2:65:72:f3: 37:45:de:08:6b:a5:f0:45:e5:18:5c:f9:ee:92:a5: 3c:4d:fe:b4:cb:74:3f:c5:ee:ae:55:d5:b1:12:28: ab:46:dd:0d:a8:1e:fd:18:96:71:00:25:a9:03:bf: c4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.248.0/21 5.206.208.0/20 77.75.48.0/22 83.143.76.0/22 84.39.204.0/22 91.189.224.0/21 91.195.64.0/22 109.207.72.0/22 185.148.28.0/22 185.229.80.0/22 185.231.24.0/21 185.233.212.0/22 185.236.4.0/22 185.245.88.0/22 185.247.44.0-185.247.51.255 185.248.228.0/22 185.250.136.0/22 185.252.124.0/22 185.254.48.0/22 193.33.134.0/23 193.36.164.0/22 194.49.88.0/22 195.42.224.0-195.42.229.255 IPv6: 2a00:5140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42707 Signature Algorithm: sha256WithRSAEncryption 4e:f6:ed:9b:1c:f3:ee:45:f3:a0:2a:a8:37:6a:08:5a:23:fb: 0a:94:75:fb:ff:c1:6f:65:a4:4a:d2:21:d0:a3:b4:72:be:97: 8c:89:f3:2e:85:a1:49:56:f5:76:5c:18:7f:8f:44:08:d8:81: b3:a1:20:5c:44:1e:fa:6b:c2:9d:5a:74:72:85:8a:f7:bc:96: de:be:9b:00:fa:29:63:fb:30:ea:de:96:91:81:c7:5f:ef:f8: 0c:03:e6:c5:ad:50:c1:f1:d8:de:48:41:1d:1d:b1:ac:28:fa: de:80:1f:b2:0a:00:9a:2b:dd:ff:f5:71:d4:d3:56:16:cb:a8: c0:76:6c:34:c1:aa:51:01:d5:f0:ad:36:c1:c1:ba:ac:ca:1e: 3d:24:1e:f7:5e:01:70:14:fa:70:5a:85:28:a1:47:2e:a8:f7: a8:41:8d:b0:31:06:d1:6d:e0:fb:53:da:e6:7f:e1:30:b0:2e: f5:90:60:61:4d:e3:bb:df:54:0f:de:21:d3:2e:c7:5b:b9:40: 53:a7:c3:f7:4f:56:1f:a4:bf:c3:d1:a9:8a:d9:42:ab:ef:58: ac:30:19:6a:3a:ab:78:01:e8:19:ab:2c:53:aa:2f:a2:a5:02: 96:98:bc:1e:ee:be:ce:89:65:2d:67:ee:3f:e0:26:4b:84:6c: 5e:41:e0:6f -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgISAZsiGRixJnwmznvHh5oFVGwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTMwMDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWExOTA1MDRiNmQ5ZWQ5YzE4MDk2ODQwNDI1YjExZDdiMjJkZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS+xLSLoVXbX+CuS+QwKwfEoSrF1 RupekuX/UjyAeL3bwn5JfMdNBi4d8GSsdytf6hjUw07aJ7ADCzvnysqIbmrrKMnB kBxDuRRqBCj8xonSfXD98W9E3EWcW8v1pBydh8zv3eTf0cxp+pRBzO8x1Cc6+MGC xStOfBjrTFP5xw2HLGVGeJ0w0dDOolXVxgB8Gz1CsKqrBzckQbP03XEEzd6XnBdP eJmEwdzu3lzGWVeyen4+8uP1qz3QteccS8vO1oRGADL0afDNLAFrveJlcvM3Rd4I a6XwReUYXPnukqU8Tf60y3Q/xe6uVdWxEiirRt0NqB79GJZxACWpA7/EFQIDAQAB o4IDSDCCA0QwHQYDVR0OBBYEFMGhkFBLbZ7ZwYCWhAQlsR17It/0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzM4N2Yy MS0xMDFiLTQ4N2UtOGEwZi0wYjgzOGE1OTk2NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMzg3ZjIx LTEwMWItNDg3ZS04YTBmLTBiODM4YTU5OTY2Mi8xL3dhR1FVRXR0bnRuQmdKYUVC Q1d4SFhzaTNfUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHGBggrBgEF BQcBBwEB/wSBtjCBszCBoQQCAAEwgZoDBAMFOfgDBAQFztADBAJNSzADBAJTj0wD BAJUJ8wDBANbveADBAJbw0ADBAJtz0gDBAK5lBwDBAK55VADBAO55xgDBAK56dQD BAK57AQDBAK59VgwDAMEArn3LAMEArn3MAMEArn45AMEArn6iAMEArn8fAMEArn+ MAMEAcEhhgMEAsEkpAMEAsIxWDAMAwQFwyrgAwQBwyrkMA0EAgACMAcDBQMqAFFA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCm0zANBgkqhkiG9w0BAQsFAAOCAQEA Tvbtmxzz7kXzoCqoN2oIWiP7CpR1+//Bb2WkStIh0KO0cr6XjInzLoWhSVb1dlwY f49ECNiBs6EgXEQe+mvCnVp0coWK97yW3r6bAPopY/sw6t6WkYHHX+/4DAPmxa1Q wfHY3khBHR2xrCj63oAfsgoAmivd//Vx1NNWFsuowHZsNMGqUQHV8K02wcG6rMoe PSQe914BcBT6cFqFKKFHLqj3qEGNsDEG0W3g+1Pa5n/hMLAu9ZBgYU3ju99UD94h 0y7HW7lAU6fD909WH6S/w9GpitlCq+9YrDAZajqreAHoGassU6ovoqUClpi8Hu6+ zollLWfuP+AmS4RsXkHgbw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:51:48 2025 by rpki-client