This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2D029F4191C8EF817C89954B6B967C60EAE2451.cer File: F2D029F4191C8EF817C89954B6B967C60EAE2451.cer (raw, json) Hash identifier: VFxbEU04iIOTS46RfFcP8JPERiCnh+zucZ3Oqu5c9F4= Subject key identifier: F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71654E6E8E86DB5C00E9B328189BB5728C25AF01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.mft caRepository: rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 10 Jan 2026 13:56:15 +0000 Certificate not after: Sat 09 Jan 2027 14:01:15 +0000 Subordinate resources: AS: 52528 IP: 168.205.56.0/22 IP: 179.106.80.0/21 IP: 2804:2e90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:65:4e:6e:8e:86:db:5c:00:e9:b3:28:18:9b:b5:72:8c:25:af:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 10 13:56:15 2026 GMT Not After : Jan 9 14:01:15 2027 GMT Subject: CN=F2D029F4191C8EF817C89954B6B967C60EAE2451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:5e:d4:1f:56:7a:e1:1f:21:60:63:bd:5d: f8:31:99:37:67:e3:56:8b:2c:b2:21:30:cd:3c:f6: 0a:df:74:4c:ac:ed:b1:31:01:1e:96:0f:7e:70:eb: d2:c6:1a:3e:45:e3:a9:03:8f:7d:45:7c:9e:2f:ae: 7b:23:e2:b0:c2:52:6f:62:bc:59:83:47:4c:f5:05: 3e:7c:72:f1:5c:b8:62:0f:04:6c:44:25:cd:0e:2b: 53:8a:46:13:ed:a8:40:3c:2b:72:b0:59:a9:08:76: 6a:18:25:ec:cd:c3:4d:6f:2e:5d:48:ca:3c:24:37: c2:42:54:95:d4:81:9e:70:fb:5a:1f:8b:1a:90:fb: 84:ba:85:00:5f:7e:47:b4:de:a2:00:cc:ee:2e:9e: a7:d0:e7:53:bd:d2:0c:11:31:22:88:5d:e9:3a:f0: dd:d5:fc:01:86:3a:d7:ea:26:9a:df:a1:55:8b:80: ae:cf:c8:69:62:51:e5:00:9c:ed:07:8d:56:65:85: 68:00:8c:0f:c9:8c:47:18:5f:86:6d:19:b2:8d:de: 6d:d2:86:69:61:82:18:b3:70:e4:ba:02:4d:df:76: b6:e7:f9:1c:8f:59:48:7a:1b:83:aa:39:3d:6f:7e: ad:1d:39:58:05:ac:bb:09:6b:1f:50:6f:78:dc:c0: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:D0:29:F4:19:1C:8E:F8:17:C8:99:54:B6:B9:67:C6:0E:AE:24:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/QjsjPgEf3CCSRqtyRSYaAwhGnJd2ujc2jcUAhYViaug/0/F2D029F4191C8EF817C89954B6B967C60EAE2451.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.56.0/22 179.106.80.0/21 IPv6: 2804:2e90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52528 Signature Algorithm: sha256WithRSAEncryption dc:5a:b1:d1:b8:82:19:9b:b9:09:b8:36:79:99:27:19:32:93: db:4f:99:89:d8:2f:ee:f0:23:75:0a:ac:81:c8:42:9e:38:4c: 3f:3b:c8:7e:c7:e7:46:3a:b0:5c:2a:3b:f5:6f:19:80:96:90: de:0f:86:9b:b4:2e:cf:83:f9:c0:59:9e:fe:49:32:93:23:52: d2:b8:70:39:8a:98:93:d7:c7:61:e8:14:af:85:c9:9b:be:17: ec:38:5c:25:05:dd:ab:ed:37:d3:a5:98:70:d7:a0:da:ee:29: 1e:28:c4:78:1d:c3:ba:20:63:b1:83:b0:41:88:8e:cb:11:fe: ac:7f:56:73:c1:39:54:fe:b6:6d:91:f6:88:20:9b:80:da:5b: 15:b9:4e:c8:66:4d:19:bc:9d:ed:f5:9a:a6:70:2e:75:09:53: 0e:24:05:da:cd:06:d3:1d:88:ce:62:58:11:55:51:c7:89:57: 82:85:1f:4b:8f:d9:08:c4:d6:da:fd:28:a5:a1:fd:02:32:79: 08:7d:bc:99:e7:54:bd:10:fe:7f:ba:d9:89:cf:8a:53:47:8c: 6a:2e:b1:e8:90:02:ec:9e:25:b3:a8:36:c9:61:5d:d4:f8:5b: b0:8d:a6:a2:2a:8e:19:73:3e:97:09:74:47:66:3d:72:fb:17: a4:02:80:8b -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUcWVObo6G21wA6bMoGJu1cowlrwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMTAxMzU2MTVaFw0yNzAxMDkxNDAxMTVaMDMxMTAvBgNV BAMTKEYyRDAyOUY0MTkxQzhFRjgxN0M4OTk1NEI2Qjk2N0M2MEVBRTI0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdV7UH1Z64R8hYGO9XfgxmTdn 41aLLLIhMM089grfdEys7bExAR6WD35w69LGGj5F46kDj31FfJ4vrnsj4rDCUm9i vFmDR0z1BT58cvFcuGIPBGxEJc0OK1OKRhPtqEA8K3KwWakIdmoYJezNw01vLl1I yjwkN8JCVJXUgZ5w+1ofixqQ+4S6hQBffke03qIAzO4unqfQ51O90gwRMSKIXek6 8N3V/AGGOtfqJprfoVWLgK7PyGliUeUAnO0HjVZlhWgAjA/JjEcYX4ZtGbKN3m3S hmlhghizcOS6Ak3fdrbn+RyPWUh6G4OqOT1vfq0dOVgFrLsJax9Qb3jcwLn9AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTy0Cn0GRyO+BfI mVS2uWfGDq4kUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUWpz alBnRWYzQ0NTUnF0eVJTWWFBd2hHbkpkMnVqYzJqY1VBaFlWaWF1Zy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUWpz alBnRWYzQ0NTUnF0eVJTWWFBd2hHbkpkMnVqYzJqY1VBaFlWaWF1Zy8wL0YyRDAy OUY0MTkxQzhFRjgxN0M4OTk1NEI2Qjk2N0M2MEVBRTI0NTEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAqjNOAMEA7NqUDANBAIAAjAHAwUAKAQukDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAzTAwDQYJKoZIhvcNAQELBQADggEBANxasdG4ghmb uQm4NnmZJxkyk9tPmYnYL+7wI3UKrIHIQp44TD87yH7H50Y6sFwqO/VvGYCWkN4P hpu0Ls+D+cBZnv5JMpMjUtK4cDmKmJPXx2HoFK+FyZu+F+w4XCUF3avtN9OlmHDX oNruKR4oxHgdw7ogY7GDsEGIjssR/qx/VnPBOVT+tm2R9oggm4DaWxW5TshmTRm8 ne31mqZwLnUJUw4kBdrNBtMdiM5iWBFVUceJV4KFH0uP2QjE1tr9KKWh/QIyeQh9 vJnnVL0Q/n+62YnPilNHjGouseiQAuyeJbOoNslhXdT4W7CNpqIqjhlzPpcJdEdm PXL7F6QCgIs= -----END CERTIFICATE-----Generated at Sun Jan 25 13:14:29 2026 by rpki-client