This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json) Hash identifier: r77+E9oypH/hRzhoHRCiOasIjSVs1ezNUSGKFtSSxts= Subject key identifier: 2D:01:3A:26:14:BA:EC:7A:4D:38:C6:9E:42:38:A2:B8:FA:A1:CF:9E Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Certificate serial: 2771CE35A119E48D17B959BF6D0F924DBE182180 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft Manifest number: 034A Signing time: Mon 29 Dec 2025 16:57:04 +0000 Manifest this update: Mon 29 Dec 2025 16:52:04 +0000 Manifest next update: Tue 30 Dec 2025 17:35:04 +0000 Files and hashes: 1: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: mc7zyxlcDWTpf8MHBgckQ6SrkcbI0QSEbJyTbgaFwFE=) 2: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: VBCnHU5TBlO8GQbvm38yaXyrz4vjADhjKHV3unpcPFM=) 3: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: NfkxNwV5nzbKErTskOzvwwAYhoEw1h+hipO5se9F5Kg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 30 Dec 2025 17:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:71:ce:35:a1:19:e4:8d:17:b9:59:bf:6d:0f:92:4d:be:18:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Validity Not Before: Dec 29 16:52:04 2025 GMT Not After : Dec 30 17:35:04 2025 GMT Subject: CN=2D013A2614BAEC7A4D38C69E4238A2B8FAA1CF9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:69:ef:70:af:6a:06:a9:cf:bb:aa:38:40: c1:0b:5d:04:56:3a:b7:77:e1:1c:79:26:0b:1b:b7: a6:8d:a9:5a:fe:50:45:ca:93:08:bf:89:5f:cb:c4: 28:fc:94:08:bb:b1:c0:7b:0a:73:b8:4c:e5:6b:e4: d8:34:eb:42:3e:ac:d4:08:a6:90:47:bb:98:29:eb: 94:d3:bb:7d:70:a8:fe:28:dc:f7:ac:44:29:67:92: 23:dc:b6:93:10:28:2e:31:2f:fd:c3:bc:cb:a1:5a: 58:d2:5b:e7:87:b9:81:0e:1b:56:ee:65:f9:50:1d: e5:64:6c:75:42:c6:b9:e6:ed:c6:3b:7c:0c:74:9f: ae:a0:4c:e6:82:fb:1d:70:29:42:b9:d4:14:3c:ce: 47:03:68:47:7d:27:da:7d:24:e8:94:02:95:de:a7: 1b:4b:ab:60:7a:87:76:78:d3:c0:77:b7:19:b1:f4: 39:3f:42:73:cf:9d:83:eb:55:b0:34:9e:77:22:75: ce:fb:91:01:37:7b:85:65:1f:ec:d2:9d:54:7f:b1: 40:8a:bf:87:a1:f6:f2:3b:2a:7a:f9:24:88:0c:5f: b1:e1:fa:6e:7f:92:e7:82:05:dd:07:95:03:d0:df: f9:bf:ef:8c:68:6b:6a:74:fe:4c:09:bc:65:5d:46: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:01:3A:26:14:BA:EC:7A:4D:38:C6:9E:42:38:A2:B8:FA:A1:CF:9E X509v3 Authority Key Identifier: keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:41:6c:2c:af:ef:54:e5:4b:2f:60:e4:66:54:4c:1b:7b:aa: cc:a0:9b:7a:fc:8d:c9:aa:af:93:57:d0:d1:bf:72:57:7f:2d: 0c:94:ee:e5:9c:e7:b4:9b:2d:3e:48:38:44:16:6e:c5:a0:26: 58:b1:01:63:7b:5b:40:da:dc:3b:3a:cd:44:7b:11:8a:5e:66: 76:8f:08:08:f5:f1:33:8f:1e:53:b2:4c:9f:72:02:b0:83:a0: f6:bf:58:cf:88:71:4a:b2:7c:dd:c7:c8:f5:15:db:dd:45:77: c5:8f:95:b8:03:6f:10:54:0d:b5:47:a2:90:92:be:12:18:a1: 8d:5c:75:f3:59:eb:4c:a8:c2:f8:39:8f:af:1c:61:84:13:7d: 6b:1b:30:e0:99:9c:0d:b2:ae:e5:16:dc:0c:77:ed:9c:ef:df: fd:94:2a:1a:d2:e4:ba:4d:c3:b8:0b:b2:87:c4:70:d1:2a:ce: 9b:9a:03:e7:d1:91:8f:d7:61:69:92:da:16:a6:46:99:d1:6d: b7:fc:8a:67:d5:e9:e8:4d:42:ba:c3:1c:39:d4:cb:b6:a9:56: 9e:bf:8d:32:67:2b:bb:03:20:e9:9b:0a:23:b8:b8:e8:a9:80: 1a:49:d2:fd:ea:80:71:a6:1a:f3:50:21:d6:76:95:9d:cb:55: 2c:f0:35:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ3HONaEZ5I0XuVm/bQ+STb4YIYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGRTkzNzY5RERCRkNBNzA0RjgzNjA0MDdGNTVCMEQ4 RkE4NkNDNzAeFw0yNTEyMjkxNjUyMDRaFw0yNTEyMzAxNzM1MDRaMDMxMTAvBgNV BAMTKDJEMDEzQTI2MTRCQUVDN0E0RDM4QzY5RTQyMzhBMkI4RkFBMUNGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpu2nvcK9qBqnPu6o4QMELXQRW Ord34Rx5Jgsbt6aNqVr+UEXKkwi/iV/LxCj8lAi7scB7CnO4TOVr5Ng060I+rNQI ppBHu5gp65TTu31wqP4o3PesRClnkiPctpMQKC4xL/3DvMuhWljSW+eHuYEOG1bu ZflQHeVkbHVCxrnm7cY7fAx0n66gTOaC+x1wKUK51BQ8zkcDaEd9J9p9JOiUApXe pxtLq2B6h3Z408B3txmx9Dk/QnPPnYPrVbA0nncidc77kQE3e4VlH+zSnVR/sUCK v4eh9vI7Knr5JIgMX7Hh+m5/kueCBd0HlQPQ3/m/74xoa2p0/kwJvGVdRkzvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULQE6JhS67HpNOMaeQjiiuPqhz54wHwYDVR0j BBgwFoAUy/6Tdp3b/KcE+DYEB/VbDY+obMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pW bmUvMS9DQkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRkU5Mzc2OUREQkZDQTcw NEY4MzYwNDA3RjU1QjBEOEZBODZDQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pWbmUvMS9D QkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATkFsLK/vVOVLL2DkZlRMG3uqzKCbevyNyaqvk1fQ0b9yV38tDJTu5ZzntJst Pkg4RBZuxaAmWLEBY3tbQNrcOzrNRHsRil5mdo8ICPXxM48eU7JMn3ICsIOg9r9Y z4hxSrJ83cfI9RXb3UV3xY+VuANvEFQNtUeikJK+EhihjVx181nrTKjC+DmPrxxh hBN9axsw4JmcDbKu5RbcDHftnO/f/ZQqGtLkuk3DuAuyh8Rw0SrOm5oD59GRj9dh aZLaFqZGmdFtt/yKZ9Xp6E1CusMcOdTLtqlWnr+NMmcruwMg6ZsKI7i46KmAGknS /eqAcaYa81Ah1naVnctVLPA1EA== -----END CERTIFICATE-----Generated at Tue Dec 30 01:35:31 2025 by rpki-client