This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer File: 98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer (raw, json) Hash identifier: vcKkN8qM+ji43OcMl1IoY2U+aDT08yiJcsHfmRR98XQ= Subject key identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 07CFBDDBFD1A07925A96C355B8A42795A7CFA04F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft caRepository: rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 14 Nov 2025 18:16:07 +0000 Certificate not after: Fri 13 Nov 2026 18:21:07 +0000 Subordinate resources: AS: 269258 IP: 45.183.28.0/22 IP: 45.239.140.0/22 IP: 2804:61d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cf:bd:db:fd:1a:07:92:5a:96:c3:55:b8:a4:27:95:a7:cf:a0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 14 18:16:07 2025 GMT Not After : Nov 13 18:21:07 2026 GMT Subject: CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:eb:2f:3b:68:a0:e1:28:a8:35:ba:df:d8: b0:db:c6:0d:8f:97:06:3d:b3:e0:fe:8a:b7:47:0b: 82:30:a6:de:38:94:a8:6c:e5:36:8b:c7:7f:5c:de: 37:aa:b3:b5:c3:5e:dd:47:5b:ac:c6:a7:0e:91:c9: 36:d8:df:32:6b:d2:77:c9:9a:ed:b4:58:64:a9:5e: 92:4b:ef:ff:6b:c5:94:84:8b:d9:7a:ce:de:1b:46: 30:90:79:d3:e5:e0:0a:df:18:e0:2c:9e:da:20:c8: dd:99:2b:cb:e1:97:9b:2a:1a:cb:eb:fe:b4:40:7c: 55:2e:0c:22:fb:7e:07:95:47:ce:f3:6a:e4:9f:8c: 3e:fa:6b:6a:b6:b2:54:31:6a:76:21:2c:ba:ec:d2: 84:79:ed:98:47:87:28:31:4d:40:e6:56:d0:6e:f1: 6d:4d:8c:61:37:2f:c9:1b:0b:34:f9:87:4d:16:6b: 79:42:c8:33:49:88:54:0e:63:41:bd:e6:9e:9f:7a: 5d:6f:f4:a9:95:29:9e:2e:04:03:db:ff:39:ce:f6: 73:c3:2e:9d:48:cd:4b:e9:1e:6a:07:2c:39:70:d9: 4b:85:80:3e:5b:d4:31:27:eb:52:dc:f8:c6:76:c6: 59:d7:47:90:15:16:1e:00:ac:6d:62:76:73:2d:63: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.28.0/22 45.239.140.0/22 IPv6: 2804:61d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269258 Signature Algorithm: sha256WithRSAEncryption 30:cf:f0:5f:b0:49:89:77:bb:92:a7:d9:6f:7b:54:4a:ac:19: 2e:30:5c:14:a1:27:9a:7c:25:38:fb:60:71:6a:23:fd:ae:42: 46:44:9b:80:2a:d1:64:90:1a:4d:d9:e4:b4:70:29:c0:b2:83: 63:49:03:1b:94:29:3c:70:c4:63:08:08:ab:f7:fb:13:6a:08: 95:e2:8d:96:8d:8b:a4:b4:a1:07:34:76:5f:f2:f3:6d:95:b0: fd:6f:4d:1f:0f:50:13:4d:19:68:da:2d:4a:6e:1f:54:1a:08: 82:69:a3:fe:ba:57:21:de:10:af:60:90:30:f9:a8:07:1f:91: 29:d8:18:1a:f3:2e:6e:88:4c:36:73:4b:aa:5a:dd:d6:ff:43: 1a:14:9f:54:ab:dc:79:80:5f:0a:96:6a:99:b0:29:63:b0:70: 10:29:0b:a7:74:e9:f7:c8:c4:88:a3:b0:c4:35:29:13:19:9b: 0c:05:d8:00:cc:62:b2:cc:ba:54:bf:83:5f:99:95:4f:d8:4e: f4:8c:62:c3:a7:41:85:32:b4:07:c8:a7:0a:78:a6:dc:85:20: 4d:bc:cc:e3:03:94:e5:84:2c:d9:46:2c:5a:5a:26:45:83:01: 39:4a:1a:cf:63:92:a8:3c:b7:4f:a8:46:9b:44:a7:80:2b:e3: c7:81:0a:b7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUB8+92/0aB5JalsNVuKQnlafPoE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTExMTQxODE2MDdaFw0yNjExMTMxODIxMDdaMDMxMTAvBgNV BAMTKDk4RERCQkE0MzVERDZBOUU0OEQyRkVFQTkzNTRBNzc4REVGMTc2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQOsvO2ig4SioNbrf2LDbxg2P lwY9s+D+irdHC4Iwpt44lKhs5TaLx39c3jeqs7XDXt1HW6zGpw6RyTbY3zJr0nfJ mu20WGSpXpJL7/9rxZSEi9l6zt4bRjCQedPl4ArfGOAsntogyN2ZK8vhl5sqGsvr /rRAfFUuDCL7fgeVR87zauSfjD76a2q2slQxanYhLLrs0oR57ZhHhygxTUDmVtBu 8W1NjGE3L8kbCzT5h00Wa3lCyDNJiFQOY0G95p6fel1v9KmVKZ4uBAPb/znO9nPD Lp1IzUvpHmoHLDlw2UuFgD5b1DEn61Lc+MZ2xlnXR5AVFh4ArG1idnMtY0pBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSY3bukNd1qnkjS /uqTVKd43vF2xDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHRm eHJ3UFUxRllNUXBWTGZyeHk0MWVYc3FRZ3RvUWR0UTkyV2VGN2Y1MXUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h0 Znhyd1BVMUZZTVFwVkxmcnh5NDFlWHNxUWd0b1FkdFE5MldlRjdmNTF1LzAvOThE REJCQTQzNURENkE5RTQ4RDJGRUVBOTM1NEE3NzhERUYxNzZDNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbccAwQCLe+MMA0EAgACMAcDBQAoBGHQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQbyjANBgkqhkiG9w0BAQsFAAOCAQEAMM/wX7BJ iXe7kqfZb3tUSqwZLjBcFKEnmnwlOPtgcWoj/a5CRkSbgCrRZJAaTdnktHApwLKD Y0kDG5QpPHDEYwgIq/f7E2oIleKNlo2LpLShBzR2X/LzbZWw/W9NHw9QE00ZaNot Sm4fVBoIgmmj/rpXId4Qr2CQMPmoBx+RKdgYGvMubohMNnNLqlrd1v9DGhSfVKvc eYBfCpZqmbApY7BwECkLp3Tp98jEiKOwxDUpExmbDAXYAMxissy6VL+DX5mVT9hO 9Ixiw6dBhTK0B8inCnim3IUgTbzM4wOU5YQs2UYsWlomRYMBOUoaz2OSqDy3T6hG m0SngCvjx4EKtw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:41 2025 by rpki-client