This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer File: CE5B1C22F785931FD04E35B0D10299499369B6B2.cer (raw, json) Hash identifier: /BpUjfG4c3rsMxhE+4DuqpxWZITHDszI+giKqUqMuZs= Subject key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E18AD7324CB3E8BE1B0444E01E813E90531ABC9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft caRepository: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Dec 2025 22:56:54 +0000 Certificate not after: Wed 02 Dec 2026 23:01:54 +0000 Subordinate resources: AS: 269394 IP: 45.185.216.0/22 IP: 138.36.8.0/22 IP: 2804:63f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:18:ad:73:24:cb:3e:8b:e1:b0:44:4e:01:e8:13:e9:05:31:ab:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 3 22:56:54 2025 GMT Not After : Dec 2 23:01:54 2026 GMT Subject: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:f8:df:85:7b:a7:9a:09:32:ff:f2:94:f6: 83:0b:44:e5:62:66:53:21:33:eb:ed:e5:24:3b:97: eb:9b:38:b1:ab:26:70:3d:53:92:5e:10:28:f8:f0: b0:01:df:1b:9b:8e:2f:fa:c5:9d:d2:2a:c7:b7:59: f9:36:d7:bd:b6:ba:d4:5b:6d:e9:44:d7:a0:43:ec: 41:97:cf:a6:2c:79:51:d7:85:1a:19:82:79:6d:05: f4:dd:a3:41:88:49:e3:1f:3a:32:83:7e:a1:49:38: 73:6c:2f:64:4a:c4:d1:be:cf:11:db:4f:a9:bc:8f: a2:b4:99:86:9c:cd:72:4a:e8:d3:d6:1e:58:51:ca: e1:9d:28:8f:a4:65:a4:66:6c:54:7f:27:0e:67:09: 2e:81:db:cc:8d:f6:2d:67:ba:8e:00:d2:bc:af:f9: 80:04:98:06:d5:7a:6b:91:82:31:73:4c:89:3e:24: 19:6a:d7:eb:14:54:96:3a:e9:f4:cf:eb:3f:11:37: 2f:9d:95:dc:30:0e:ec:e1:d3:9e:aa:05:0c:5e:56: df:14:e3:11:82:b0:52:b2:f4:83:76:34:b3:16:45: 2e:d3:87:8b:27:25:ad:21:65:d8:b5:12:47:da:bc: 6c:52:85:a0:97:3b:a3:f1:39:d0:d4:b9:18:37:f2: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.216.0/22 138.36.8.0/22 IPv6: 2804:63f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269394 Signature Algorithm: sha256WithRSAEncryption a5:c5:e0:ea:00:f7:a2:9f:64:a5:bb:08:51:e9:a7:db:fd:b3: 9f:ce:99:4e:c8:d9:ae:9d:79:96:d7:50:85:b3:af:9d:48:69: a9:57:44:c4:0b:1c:e3:94:58:62:94:09:35:14:55:10:03:6d: b8:cb:33:ea:14:7b:e5:aa:b8:ec:65:ae:29:fd:9e:3e:06:45: b4:a1:e1:eb:e0:6d:1b:9c:27:5f:9f:37:24:e7:2e:2f:1d:82: ab:4c:7c:5e:1b:76:b9:fb:17:e7:9a:91:d6:2c:32:e8:e4:a0: 6c:54:73:6b:de:e3:a8:4c:74:19:fc:ad:fd:c0:5b:70:c2:73: 8d:2a:2b:97:7e:2b:96:1a:d8:ab:bc:b9:4f:e7:ae:49:06:01: d6:c7:79:84:66:3d:74:27:ab:7f:d1:e0:8a:a1:db:2e:de:7b: 2f:6f:aa:3f:56:7c:a9:2e:b1:4d:38:21:5c:54:17:85:0b:b1: c0:3c:f2:34:35:29:4b:da:da:d9:2b:f0:4d:0a:00:f0:15:57: 45:2c:04:8a:7f:a7:f1:ba:78:af:2b:58:3b:d3:fb:8f:82:53: 6a:5a:e4:ab:ab:84:0e:4a:ea:ef:22:b1:b4:7f:3a:e3:bc:a1: 45:16:5c:c9:95:6c:0e:71:ee:8e:54:4c:28:07:7c:4c:57:80: b0:3e:6c:59 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfhitcyTLPovhsEROAegT6QUxq8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEyMDMyMjU2NTRaFw0yNjEyMDIyMzAxNTRaMDMxMTAvBgNV BAMTKENFNUIxQzIyRjc4NTkzMUZEMDRFMzVCMEQxMDI5OTQ5OTM2OUI2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGN/jfhXunmgky//KU9oMLROVi ZlMhM+vt5SQ7l+ubOLGrJnA9U5JeECj48LAB3xubji/6xZ3SKse3Wfk21722utRb belE16BD7EGXz6YseVHXhRoZgnltBfTdo0GISeMfOjKDfqFJOHNsL2RKxNG+zxHb T6m8j6K0mYaczXJK6NPWHlhRyuGdKI+kZaRmbFR/Jw5nCS6B28yN9i1nuo4A0ryv +YAEmAbVemuRgjFzTIk+JBlq1+sUVJY66fTP6z8RNy+dldwwDuzh056qBQxeVt8U 4xGCsFKy9IN2NLMWRS7Th4snJa0hZdi1EkfavGxShaCXO6PxOdDUuRg38nn7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOWxwi94WTH9BO NbDRAplJk2m2sjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOThV eGFkblJib2dEeEgzMzhNVmhkcDZ0aXZYaThSRHpSTDhuejhkYnU0MmcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk4 VXhhZG5SYm9nRHhIMzM4TVZoZHA2dGl2WGk4UkR6Ukw4bno4ZGJ1NDJnLzAvQ0U1 QjFDMjJGNzg1OTMxRkQwNEUzNUIwRDEwMjk5NDk5MzY5QjZCMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbnYAwQCiiQIMA0EAgACMAcDBQAoBGP0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQcUjANBgkqhkiG9w0BAQsFAAOCAQEApcXg6gD3 op9kpbsIUemn2/2zn86ZTsjZrp15ltdQhbOvnUhpqVdExAsc45RYYpQJNRRVEANt uMsz6hR75aq47GWuKf2ePgZFtKHh6+BtG5wnX583JOcuLx2Cq0x8Xht2ufsX55qR 1iwy6OSgbFRza97jqEx0Gfyt/cBbcMJzjSorl34rlhrYq7y5T+euSQYB1sd5hGY9 dCerf9HgiqHbLt57L2+qP1Z8qS6xTTghXFQXhQuxwDzyNDUpS9ra2SvwTQoA8BVX RSwEin+n8bp4rytYO9P7j4JTalrkq6uEDkrq7yKxtH8647yhRRZcyZVsDnHujlRM KAd8TFeAsD5sWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:17 2025 by rpki-client