This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer File: F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer (raw, json) Hash identifier: 1ZdSFB5k4JqPzsPDlZ97xUTTXKsQprHFC2uwgwkHX+c= Subject key identifier: F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6613D02FC0D19502C91ABB8F9E8D8A3AB57F59C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft caRepository: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Jan 2026 00:33:49 +0000 Certificate not after: Thu 07 Jan 2027 00:38:49 +0000 Subordinate resources: AS: 61723 IP: 131.72.40.0/22 IP: 2804:1b58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:13:d0:2f:c0:d1:95:02:c9:1a:bb:8f:9e:8d:8a:3a:b5:7f:59:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 8 00:33:49 2026 GMT Not After : Jan 7 00:38:49 2027 GMT Subject: CN=F8F717C76795A8AA5AB172A4E1895F2B3431F895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:54:bd:69:5c:57:41:3f:82:70:b4:c9:c4: b0:d3:9b:da:78:b9:ed:8a:68:05:8e:71:4f:ef:63: 5b:37:32:57:db:81:1b:5e:86:3a:28:ea:f2:47:d8: 13:69:d9:ea:70:f6:21:fb:5c:3f:f8:9b:56:02:a1: 75:cc:e4:73:03:70:0c:40:ac:51:43:48:a4:ab:fb: f5:1e:20:07:3d:71:2c:80:a6:d1:ee:75:e6:37:14: 90:76:92:ea:99:46:bd:cc:f6:7b:02:67:fd:e5:3e: 89:9b:2a:ec:68:73:9a:ba:80:d5:5b:90:14:cc:2b: 80:f9:c8:21:ff:50:9f:c2:80:a3:70:9e:eb:69:72: cc:26:53:61:87:46:8c:7f:af:a7:65:37:4e:b1:64: ce:93:17:b9:ed:51:79:13:8a:39:9f:c4:3f:06:cb: 4b:c7:6e:f2:28:be:b3:c1:94:81:6b:dd:2f:07:dc: c2:11:39:fd:93:ab:52:66:c9:17:09:41:c5:c5:2a: 2e:a9:be:a6:dc:7e:61:47:d0:d6:2b:39:2a:71:e0: ce:a8:a5:67:c9:e1:96:1e:2b:8f:67:31:96:ba:d4: fc:48:08:c8:ea:98:9e:2f:6d:e1:b9:75:69:bc:86: 30:29:29:ef:3b:9b:1a:36:65:f5:0d:1c:93:52:d0: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.40.0/22 IPv6: 2804:1b58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61723 Signature Algorithm: sha256WithRSAEncryption b7:6f:55:2b:71:28:79:d1:2f:0d:01:72:02:5c:d9:1f:5e:da: 44:f8:a7:5e:8d:63:f4:51:81:dd:75:8c:52:69:c7:1f:cf:ac: 28:4c:b2:8f:8c:e8:4f:e3:ed:63:1b:0a:10:99:5d:20:6a:01: 2a:c2:0d:80:46:20:12:2b:54:84:0d:af:4d:2e:02:c2:a4:a6: 23:b5:02:a8:98:f6:08:77:37:86:9d:1c:5b:14:37:90:9b:92: cd:3d:e8:8b:ec:6e:6f:83:2a:13:0a:8d:cc:96:3f:e2:ae:95: dd:44:68:d0:5a:20:9a:a8:58:6d:ed:5b:b0:b1:45:d5:54:af: 3b:18:35:21:f7:27:32:81:0b:65:b1:72:8b:e5:ac:0c:93:6a: 0d:ef:27:26:80:ba:9c:64:ec:f8:9c:df:51:c5:ce:bf:ee:32: 75:e9:89:4e:20:a6:73:ad:07:86:22:5e:0e:52:b4:52:58:41: 19:e8:90:7d:cf:97:3b:ce:9e:e4:75:0a:e1:87:4f:75:69:1b: 62:48:ad:71:9c:02:6e:b1:e7:e6:25:ac:2f:e1:33:55:6c:7b: 3e:89:74:ea:7d:3a:b8:90:e9:ff:3f:aa:b0:dd:c4:ca:5f:b6: 8e:4c:62:2d:3d:86:20:b5:52:93:a6:d4:83:cb:ea:a6:f3:5c: ee:97:15:42 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZhPQL8DRlQLJGruPno2KOrV/WcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjAxMDgwMDMzNDlaFw0yNzAxMDcwMDM4NDlaMDMxMTAvBgNV BAMTKEY4RjcxN0M3Njc5NUE4QUE1QUIxNzJBNEUxODk1RjJCMzQzMUY4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeolS9aVxXQT+CcLTJxLDTm9p4 ue2KaAWOcU/vY1s3MlfbgRtehjoo6vJH2BNp2epw9iH7XD/4m1YCoXXM5HMDcAxA rFFDSKSr+/UeIAc9cSyAptHudeY3FJB2kuqZRr3M9nsCZ/3lPombKuxoc5q6gNVb kBTMK4D5yCH/UJ/CgKNwnutpcswmU2GHRox/r6dlN06xZM6TF7ntUXkTijmfxD8G y0vHbvIovrPBlIFr3S8H3MIROf2Tq1JmyRcJQcXFKi6pvqbcfmFH0NYrOSpx4M6o pWfJ4ZYeK49nMZa61PxICMjqmJ4vbeG5dWm8hjApKe87mxo2ZfUNHJNS0PrRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT49xfHZ5Woqlqx cqThiV8rNDH4lTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREdn dzNQMktDTG5hTVJ4aXBDUXRycWpIZkN4VnhKMUNNRUpkRU1rdkFOTmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RH Z3czUDJLQ0xuYU1SeGlwQ1F0cnFqSGZDeFZ4SjFDTUVKZEVNa3ZBTk5oLzAvRjhG NzE3Qzc2Nzk1QThBQTVBQjE3MkE0RTE4OTVGMkIzNDMxRjg5NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg0goMA0EAgACMAcDBQAoBBtYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxGzANBgkqhkiG9w0BAQsFAAOCAQEAt29VK3EoedEvDQFy AlzZH17aRPinXo1j9FGB3XWMUmnHH8+sKEyyj4zoT+PtYxsKEJldIGoBKsINgEYg EitUhA2vTS4CwqSmI7UCqJj2CHc3hp0cWxQ3kJuSzT3oi+xub4MqEwqNzJY/4q6V 3URo0FogmqhYbe1bsLFF1VSvOxg1IfcnMoELZbFyi+WsDJNqDe8nJoC6nGTs+Jzf UcXOv+4ydemJTiCmc60HhiJeDlK0UlhBGeiQfc+XO86e5HUK4YdPdWkbYkitcZwC brHn5iWsL+EzVWx7Pol06n06uJDp/z+qsN3Eyl+2jkxiLT2GILVSk6bUg8vqpvNc 7pcVQg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:56 2026 by rpki-client