This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft File: FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft (raw, json) Hash identifier: oT++Sh2Bfc2lFmw1gtGQkzzLaDE0DVVTzRweBYYZZ0A= Subject key identifier: 0D:B8:5E:00:EC:10:E7:6F:51:49:0C:D0:BE:03:DC:44:B0:C5:2E:63 Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E Certificate issuer: /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E Certificate serial: 1C3487DE4FE848EB4F0E90EA93C937377C8EBE4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft Manifest number: 0143 Signing time: Mon 22 Dec 2025 20:47:26 +0000 Manifest this update: Mon 22 Dec 2025 20:42:26 +0000 Manifest next update: Tue 23 Dec 2025 21:57:26 +0000 Files and hashes: 1: 323830343a363139633a3a2f33322d313238203d3e20323639323435.roa (hash: YKjIAqG1yuEFYMVP4xZkWKECjkHqyOHvad/Qpo5c/Co=) 2: FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl (hash: rmC3qYYs4Os9Kmm0UbqsKcg8xn/AuzWFKT9fRJXtals=) 3: 34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa (hash: E+cklEAbvkMVYK9jhvnpL60xDxOtgqMtgJs65eGmU7c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 21:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:34:87:de:4f:e8:48:eb:4f:0e:90:ea:93:c9:37:37:7c:8e:be:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E Validity Not Before: Dec 22 20:42:26 2025 GMT Not After : Dec 23 21:57:26 2025 GMT Subject: CN=0DB85E00EC10E76F51490CD0BE03DC44B0C52E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:51:24:89:89:60:87:17:72:10:72:1e:5d:a4: 26:47:1e:d5:19:f2:88:43:31:ff:b7:be:41:f8:53: ce:b9:43:79:3b:1d:f0:94:42:ac:7a:ca:3e:2a:da: af:9f:8b:28:1c:8a:10:ab:dd:9c:3a:a6:91:39:54: 60:0a:52:e7:9d:29:86:72:62:1c:9e:ef:dd:17:07: b8:ff:2f:1e:0d:81:58:13:15:fe:6f:42:f4:6c:c0: 2a:20:93:9d:74:66:28:03:21:88:57:16:05:fe:90: d0:0a:bd:b4:9e:91:8c:a5:13:f5:30:5b:e9:70:55: 3b:34:e8:94:d4:f5:b2:3c:a8:2c:79:1b:c0:a2:3b: 40:35:fd:98:49:37:68:04:ff:c3:40:3b:e4:40:a2: 12:18:e3:2d:9a:44:93:85:0b:ba:f7:34:be:c9:b5: 70:30:57:7f:59:06:5b:1c:50:c0:f5:ae:ea:5a:35: f7:df:8d:4b:06:8b:6a:72:78:1e:0c:36:f1:28:f0: 93:ee:e2:43:ba:df:ad:1a:ed:93:35:9b:ce:ca:27: 6c:b5:c8:3d:77:11:af:eb:c5:0c:f4:a6:65:dc:a3: f3:d8:b7:5b:c3:0a:99:eb:ce:8a:a1:5f:f5:94:c5: 52:b4:7a:29:ef:49:3d:e6:7b:01:2f:89:1f:5f:5f: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B8:5E:00:EC:10:E7:6F:51:49:0C:D0:BE:03:DC:44:B0:C5:2E:63 X509v3 Authority Key Identifier: keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5a:c4:87:cd:ab:96:7d:4f:a4:e9:87:c1:10:d4:b9:be:33: 09:6a:69:38:da:9f:e5:16:29:55:8f:cf:12:74:f7:3e:da:1f: 28:a0:c6:22:27:7b:8d:42:8d:c5:8c:32:64:57:9a:2d:0d:c5: 8a:7a:6f:ce:3b:b6:6c:c5:10:62:02:b9:45:c7:76:2f:50:0c: 71:fb:e3:08:d4:08:58:2a:03:fa:b6:22:00:15:54:d1:80:bd: 70:8e:6b:4b:1b:ad:de:f8:58:d6:42:d4:9a:1b:38:fe:6a:90: fe:22:35:cc:90:b7:52:b0:32:c6:02:af:fc:12:3d:93:ca:a7: 6d:df:ea:dd:f0:b2:41:e9:3c:df:4c:2a:d9:86:11:2b:7c:71: ef:7c:a6:a8:a8:70:90:63:9e:da:a4:13:d4:11:0f:3c:3a:95: de:85:cc:83:55:36:af:32:5b:dd:7b:d1:36:8b:19:17:39:52: ce:4c:5d:48:2a:2d:35:d5:66:35:6c:1d:56:72:bd:67:79:7e: 42:5c:ef:93:6b:96:63:0b:40:31:76:da:10:2d:1e:19:6d:b8: 9c:96:44:81:84:cb:94:c7:24:8f:f5:a6:43:cc:ea:e1:5a:38: 86:fc:21:ff:db:31:a1:0c:db:5f:76:a0:c3:e3:45:66:29:48: a8:44:42:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHDSH3k/oSOtPDpDqk8k3N3yOvk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkREMTQzRjYyRTM5N0E4N0VDMjJGQzIzOUU3REEyNDM1 QUQ4MEQ5RTAeFw0yNTEyMjIyMDQyMjZaFw0yNTEyMjMyMTU3MjZaMDMxMTAvBgNV BAMTKDBEQjg1RTAwRUMxMEU3NkY1MTQ5MENEMEJFMDNEQzQ0QjBDNTJFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiUSSJiWCHF3IQch5dpCZHHtUZ 8ohDMf+3vkH4U865Q3k7HfCUQqx6yj4q2q+fiygcihCr3Zw6ppE5VGAKUuedKYZy Yhye790XB7j/Lx4NgVgTFf5vQvRswCogk510ZigDIYhXFgX+kNAKvbSekYylE/Uw W+lwVTs06JTU9bI8qCx5G8CiO0A1/ZhJN2gE/8NAO+RAohIY4y2aRJOFC7r3NL7J tXAwV39ZBlscUMD1rupaNfffjUsGi2pyeB4MNvEo8JPu4kO6360a7ZM1m87KJ2y1 yD13Ea/rxQz0pmXco/PYt1vDCpnrzoqhX/WUxVK0einvST3mewEviR9fX/jPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDbheAOwQ529RSQzQvgPcRLDFLmMwHwYDVR0j BBgwFoAU/dFD9i45eofsIvwjnn2iQ1rYDZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpoZUJxRnhGem5MMXFmQWViWVVBWXYzbWk0VlZNUThudzd0c0pDREpK bVovMC9GREQxNDNGNjJFMzk3QTg3RUMyMkZDMjM5RTdEQTI0MzVBRDgwRDlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZERDE0M0Y2MkUzOTdBODdF QzIyRkMyMzlFN0RBMjQzNUFEODBEOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlpoZUJxRnhGem5MMXFmQWViWVVBWXYzbWk0VlZNUThudzd0c0pDREpKbVovMC9G REQxNDNGNjJFMzk3QTg3RUMyMkZDMjM5RTdEQTI0MzVBRDgwRDlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAglrEh82rln1PpOmHwRDUub4zCWppONqf5RYpVY/PEnT3PtofKKDGIid7jUKN xYwyZFeaLQ3Finpvzju2bMUQYgK5Rcd2L1AMcfvjCNQIWCoD+rYiABVU0YC9cI5r Sxut3vhY1kLUmhs4/mqQ/iI1zJC3UrAyxgKv/BI9k8qnbd/q3fCyQek830wq2YYR K3xx73ymqKhwkGOe2qQT1BEPPDqV3oXMg1U2rzJb3XvRNosZFzlSzkxdSCotNdVm NWwdVnK9Z3l+Qlzvk2uWYwtAMXbaEC0eGW24nJZEgYTLlMckj/WmQ8zq4Vo4hvwh /9sxoQzbX3agw+NFZilIqERCAw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:20:23 2025 by rpki-client