This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.mft File: CB91FE18915AE687D903BB2899406C36F9DB163E.mft (raw, json) Hash identifier: Bq9UTmdOVzdhk7y8df8cDInMFmtYp0jcmlQhTXX8U8I= Subject key identifier: BF:3C:55:02:39:0F:69:90:94:68:0E:8E:97:32:9F:C8:A1:EE:90:33 Authority key identifier: CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E Certificate issuer: /CN=CB91FE18915AE687D903BB2899406C36F9DB163E Certificate serial: 2801ED1787220C33F9C1C85F222075372B382638 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.mft Manifest number: 0225 Signing time: Tue 23 Dec 2025 05:02:10 +0000 Manifest this update: Tue 23 Dec 2025 04:57:10 +0000 Manifest next update: Wed 24 Dec 2025 08:45:10 +0000 Files and hashes: 1: 3137302e38312e3132302e302f32322d3234203d3e20323636343036.roa (hash: 2oDrpu6etcuI2mEbMVCYRlYKncvSXQnN/k+hlMindEk=) 2: CB91FE18915AE687D903BB2899406C36F9DB163E.crl (hash: MjGk0dSuX/DxKGzFnf0kU7LcVCfKzTIVdg82iHhaoT8=) 3: 323830343a333735633a3a2f33322d3634203d3e20323636343036.roa (hash: Fe7sEDWBsrLrEVuMCHG2ckURBqt7OAhjltK4GTLzhCQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 08:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:01:ed:17:87:22:0c:33:f9:c1:c8:5f:22:20:75:37:2b:38:26:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB91FE18915AE687D903BB2899406C36F9DB163E Validity Not Before: Dec 23 04:57:10 2025 GMT Not After : Dec 24 08:45:10 2025 GMT Subject: CN=BF3C5502390F699094680E8E97329FC8A1EE9033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:3d:a0:e5:c5:40:0d:45:0e:13:43:27:8f: 29:ff:2e:f8:07:6b:0e:d7:7f:2c:27:85:28:59:32: 17:d5:01:f7:ea:8a:7f:fc:26:a3:03:a5:ac:82:a1: 6a:30:a5:68:58:49:b7:df:96:94:11:a9:17:c5:f6: b8:3d:3a:d0:b3:e8:7e:6d:63:f4:d7:ed:b3:de:94: 49:43:eb:b5:66:99:1b:f3:d2:c2:65:34:a1:f9:20: 0d:7f:4c:58:c7:d8:75:3f:93:99:7d:74:6c:f5:d2: 6b:ff:96:d9:68:06:1e:15:4b:3f:ca:f0:96:5f:5f: bb:ed:19:bc:8a:34:13:33:c1:e1:4c:fa:97:10:52: 81:68:c9:bc:b1:d5:0d:f3:85:91:ef:62:bc:d8:a2: c1:74:a4:c6:fb:30:75:2c:c8:3f:63:96:63:c3:1c: 8b:45:98:62:66:6d:66:77:ba:68:c3:55:78:e4:f2: 5c:ba:eb:4d:5c:fa:d4:07:fc:97:be:5a:64:18:ac: f7:7f:54:87:6b:84:26:fd:70:13:8f:9f:e7:74:68: 3a:63:be:52:51:98:e1:97:94:61:d1:f1:1d:b0:9d: 06:2c:5c:59:03:37:a3:0b:4c:99:c8:d2:ff:33:a5: 72:17:dc:ae:ed:e2:6e:fe:94:9c:81:ce:d3:db:78: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3C:55:02:39:0F:69:90:94:68:0E:8E:97:32:9F:C8:A1:EE:90:33 X509v3 Authority Key Identifier: keyid:CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:fd:49:4d:6b:04:7f:3d:1a:2b:34:2f:0f:d3:82:51:07:f6: db:97:64:95:e8:bc:d7:ab:c0:32:c5:c5:6d:fa:7e:c4:d5:25: 25:8e:5d:9b:6a:13:a8:e2:d6:ed:bd:65:fa:af:50:db:f5:56: 12:85:01:09:08:53:f4:ac:85:92:9f:12:10:72:0a:b0:90:94: 92:ee:2a:73:34:96:dd:b5:6c:93:b0:53:f0:90:3f:c1:e6:01: 65:7c:3a:9b:be:a2:62:17:8b:8b:bd:46:73:df:48:6a:11:ce: 91:55:4d:38:42:85:ab:7c:d1:93:58:9e:96:60:7b:39:5a:0a: 4e:f7:f3:d2:71:5a:eb:4a:51:74:2f:37:1d:19:42:c5:d2:bc: 62:c9:04:40:95:e1:5b:5a:d9:02:59:df:62:ae:ac:59:59:7c: 4a:5f:22:3a:bc:45:1a:49:2b:b7:bb:c3:25:1d:c4:b0:a4:30: 0f:66:2b:e0:b8:e4:8d:31:c5:8f:fb:52:72:29:63:de:d1:e5: 53:1b:5f:c1:62:a7:40:d2:d5:30:d8:2b:94:2d:7e:77:2d:d2: b0:07:c2:5d:4d:c7:3b:9e:dc:c6:5d:e7:39:59:40:06:1f:00: b4:70:26:4b:44:91:40:e0:92:ec:aa:38:e9:6b:48:57:78:2a: 56:a6:db:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKAHtF4ciDDP5wchfIiB1Nys4JjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5MUZFMTg5MTVBRTY4N0Q5MDNCQjI4OTk0MDZDMzZG OURCMTYzRTAeFw0yNTEyMjMwNDU3MTBaFw0yNTEyMjQwODQ1MTBaMDMxMTAvBgNV BAMTKEJGM0M1NTAyMzkwRjY5OTA5NDY4MEU4RTk3MzI5RkM4QTFFRTkwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4T2g5cVADUUOE0Mnjyn/LvgH aw7XfywnhShZMhfVAffqin/8JqMDpayCoWowpWhYSbfflpQRqRfF9rg9OtCz6H5t Y/TX7bPelElD67VmmRvz0sJlNKH5IA1/TFjH2HU/k5l9dGz10mv/ltloBh4VSz/K 8JZfX7vtGbyKNBMzweFM+pcQUoFoybyx1Q3zhZHvYrzYosF0pMb7MHUsyD9jlmPD HItFmGJmbWZ3umjDVXjk8ly6601c+tQH/Je+WmQYrPd/VIdrhCb9cBOPn+d0aDpj vlJRmOGXlGHR8R2wnQYsXFkDN6MLTJnI0v8zpXIX3K7t4m7+lJyBztPbeBwHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvzxVAjkPaZCUaA6OlzKfyKHukDMwHwYDVR0j BBgwFoAUy5H+GJFa5ofZA7somUBsNvnbFj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlppUUdkNnVFM29pYnByeVk1NFNhZ25QaGdwc1dickh5dVh5N3Z3enlC bXIvMC9DQjkxRkUxODkxNUFFNjg3RDkwM0JCMjg5OTQwNkMzNkY5REIxNjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTFGRTE4OTE1QUU2ODdE OTAzQkIyODk5NDA2QzM2RjlEQjE2M0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlppUUdkNnVFM29pYnByeVk1NFNhZ25QaGdwc1dickh5dVh5N3Z3enlCbXIvMC9D QjkxRkUxODkxNUFFNjg3RDkwM0JCMjg5OTQwNkMzNkY5REIxNjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl/1JTWsEfz0aKzQvD9OCUQf225dklei816vAMsXFbfp+xNUlJY5dm2oTqOLW 7b1l+q9Q2/VWEoUBCQhT9KyFkp8SEHIKsJCUku4qczSW3bVsk7BT8JA/weYBZXw6 m76iYheLi71Gc99IahHOkVVNOEKFq3zRk1ielmB7OVoKTvfz0nFa60pRdC83HRlC xdK8YskEQJXhW1rZAlnfYq6sWVl8Sl8iOrxFGkkrt7vDJR3EsKQwD2Yr4LjkjTHF j/tScilj3tHlUxtfwWKnQNLVMNgrlC1+dy3SsAfCXU3HO57cxl3nOVlABh8AtHAm S0SRQOCS7Ko46WtIV3gqVqbbmQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:42:32 2025 by rpki-client