This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.cer (raw, json) Hash identifier: EqRMPcUTfWbpXcxx5z5KTAnuQ/9/ebqWgiE+eSOYTvw= Subject key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B443CE5203DF676E3A453F21F04B851FB9CA7FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft caRepository: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/ Notify URL: https://krill.peering.ee.columbia.edu/rrdp/notification.xml Certificate not before: Sat 29 Nov 2025 01:01:37 +0000 Certificate not after: Sat 28 Nov 2026 01:06:37 +0000 Subordinate resources: AS: 61574 -- 61576 AS: 263842 -- 263844 IP: 138.185.228.0/22 IP: 2804:269c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:44:3c:e5:20:3d:f6:76:e3:a4:53:f2:1f:04:b8:51:fb:9c:a7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 29 01:01:37 2025 GMT Not After : Nov 28 01:06:37 2026 GMT Subject: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:70:18:ed:64:8f:b8:64:dd:da:8a:49:d2: a7:6f:87:e6:22:b6:b8:87:62:d6:1e:ba:93:bd:39: 3a:15:98:69:92:3a:2e:f2:91:d8:ba:72:1c:dd:43: 69:6f:b3:01:47:52:de:89:cb:81:b1:0a:b6:79:e5: 2f:1e:54:58:cd:76:7b:fd:24:2a:5d:21:c6:b0:57: 09:50:07:0e:42:0e:a6:3d:c4:23:05:a5:f9:af:6c: ae:ed:69:54:a7:ff:16:f7:fb:43:2f:2c:d3:21:19: d8:81:21:c7:61:43:88:0d:d5:da:8b:14:93:69:84: 6b:20:4c:f3:84:1f:f6:b5:be:2c:30:a9:43:0d:57: 9f:ad:a2:3e:95:82:d4:93:3c:29:e8:14:00:8e:55: 0c:bd:93:8e:80:c9:85:f4:44:e9:6e:dd:0b:62:c4: 7b:55:06:66:09:63:b9:8b:fd:90:68:fc:08:c4:d8: de:62:46:41:a9:a1:3d:e9:3d:59:2d:56:33:a7:db: 7a:61:c8:64:61:3d:87:52:b6:94:db:ff:fd:2d:ea: 47:e3:14:99:c1:2b:5b:42:dc:42:d4:31:fc:b3:98: c8:dd:6c:b6:c1:1d:7f:7b:4e:6e:62:8d:af:17:ae: da:52:ab:31:08:c7:e2:2c:42:03:84:6e:eb:c6:bd: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/ RPKI Manifest - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft RPKI Notify - URI:https://krill.peering.ee.columbia.edu/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 IPv6: 2804:269c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 263842-263844 Signature Algorithm: sha256WithRSAEncryption 64:27:97:16:b3:8a:47:21:a9:aa:a7:a1:93:d8:2f:3b:c2:f3: 3d:4c:ee:7f:7c:a8:ad:c2:6e:9a:13:5f:8f:2c:6d:f6:da:10: f9:c9:76:fa:fc:d5:60:c5:4e:e1:d6:76:ad:7c:d6:32:98:31: f5:b0:e7:36:5b:7c:b8:1c:37:7f:48:38:ea:66:ab:87:af:24: fa:c2:c2:b5:87:a6:d5:c3:52:1e:e1:51:2d:18:e7:9d:8d:70: 99:34:8f:75:72:b9:e2:ce:e0:69:35:67:d2:9e:46:3c:d1:0a: 59:98:9e:7e:a8:3a:51:dd:d1:8e:c0:7b:52:4a:ff:e1:03:7d: fb:c3:2c:43:59:4e:87:b7:fd:6c:81:5e:6f:ad:0f:7a:2c:74: ed:8d:c6:e0:65:c9:10:3a:69:5f:da:e1:c0:20:23:d0:9d:e5: ac:5b:ec:d5:2e:94:ed:eb:d1:56:45:4d:45:63:79:aa:24:09: b9:e5:4f:7c:46:6e:dc:13:d3:53:0f:61:db:22:a9:d1:38:88: 27:8a:fa:ec:7a:5a:33:d9:ba:f1:52:ed:0a:af:ac:18:b4:13: 35:d2:ae:55:5e:b1:94:1e:f4:e5:de:0f:ec:18:23:b8:af:9d: a4:3c:34:e3:49:15:fd:cc:3a:9a:53:27:57:e1:0b:83:19:ed: 52:a6:6e:1d -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUS0Q85SA99nbjpFPyHwS4Ufucp/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMjkwMTAxMzdaFw0yNjExMjgwMTA2MzdaMDMxMTAvBgNV BAMTKDNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSnAY7WSPuGTd2opJ0qdvh+Yi triHYtYeupO9OToVmGmSOi7ykdi6chzdQ2lvswFHUt6Jy4GxCrZ55S8eVFjNdnv9 JCpdIcawVwlQBw5CDqY9xCMFpfmvbK7taVSn/xb3+0MvLNMhGdiBIcdhQ4gN1dqL FJNphGsgTPOEH/a1viwwqUMNV5+toj6VgtSTPCnoFACOVQy9k46AyYX0ROlu3Qti xHtVBmYJY7mL/ZBo/AjE2N5iRkGpoT3pPVktVjOn23phyGRhPYdStpTb//0t6kfj FJnBK1tC3ELUMfyzmMjdbLbBHX97Tm5ija8XrtpSqzEIx+IsQgOEbuvGvdhHAgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/jrzAQo3WCPOd hYvokbhbADJoGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAR0GCCsGAQUFBwELBIIBDzCCAQswSQYI KwYBBQUHMAWGPXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUv cmVwby9wZWVyaW5nLXRlc3RiZWQvMC8wdQYIKwYBBQUHMAqGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv MC8zRjhFQkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDBH BggrBgEFBQcwDYY7aHR0cHM6Ly9rcmlsbC5wZWVyaW5nLmVlLmNvbHVtYmlhLmVk dS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoq55DANBAIAAjAHAwUAKAQm nDAtBggrBgEFBQcBCAEB/wQeMBygGjAYMAoCAwDwhgIDAPCIMAoCAwQGogIDBAak MA0GCSqGSIb3DQEBCwUAA4IBAQBkJ5cWs4pHIamqp6GT2C87wvM9TO5/fKitwm6a E1+PLG322hD5yXb6/NVgxU7h1natfNYymDH1sOc2W3y4HDd/SDjqZquHryT6wsK1 h6bVw1Ie4VEtGOedjXCZNI91crnizuBpNWfSnkY80QpZmJ5+qDpR3dGOwHtSSv/h A337wyxDWU6Ht/1sgV5vrQ96LHTtjcbgZckQOmlf2uHAICPQneWsW+zVLpTt69FW RU1FY3mqJAm55U98Rm7cE9NTD2HbIqnROIgnivrseloz2brxUu0Kr6wYtBM10q5V XrGUHvTl3g/sGCO4r52kPDTjSRX9zDqaUydX4QuDGe1Spm4d -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:23 2025 by rpki-client