This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft File: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft (raw, json) Hash identifier: qHEEQ7cKyW/7SfI2YspaIWKPqzNXcVKzxjF8eSV4b3U= Subject key identifier: F3:62:87:41:05:93:D2:F4:1D:E0:C5:88:7B:AF:C7:09:2D:6E:8C:0F Authority key identifier: CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20 Certificate issuer: /CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20 Certificate serial: 5FC5ECF4D72F40C5B238D522148424BE686ED56A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer Subject info access: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft Manifest number: 04 Signing time: Fri 19 Dec 2025 12:09:08 +0000 Manifest this update: Fri 19 Dec 2025 12:04:08 +0000 Manifest next update: Sat 20 Dec 2025 14:57:08 +0000 Files and hashes: 1: 323830343a393732633a3a2f33322d313238203d3e20323734333839.roa (hash: kTr6CKpzTKUFfgoDsLlDzKHFTQvHPRxo2ersppPwDCk=) 2: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl (hash: dixkp79nh5c5v1+oR9WupJoJQamFlMglk5ojzBgUA1E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 14:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c5:ec:f4:d7:2f:40:c5:b2:38:d5:22:14:84:24:be:68:6e:d5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20 Validity Not Before: Dec 19 12:04:08 2025 GMT Not After : Dec 20 14:57:08 2025 GMT Subject: CN=F36287410593D2F41DE0C5887BAFC7092D6E8C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:4f:74:fe:c9:42:45:17:71:6d:2f:52:13: 80:aa:bc:6b:b5:75:d1:df:42:db:0d:3d:4e:57:1c: 10:cf:ab:5d:ff:d7:29:ae:0b:c7:3f:30:e6:2a:1e: 3d:c9:1a:cf:98:c5:24:71:4a:f4:2d:40:6f:6e:cb: 87:27:c6:2f:1f:0d:20:44:5b:14:83:5f:74:4e:1e: 33:20:da:9f:53:6c:d9:18:32:0c:7f:09:ad:fe:93: 44:f3:b7:f1:a1:8e:2e:30:47:1b:f5:9f:c7:1d:e8: 2d:8c:49:85:68:36:ef:70:02:4c:fd:e5:af:f4:68: b2:90:ee:6f:18:e9:8e:a3:a0:84:29:01:8b:8c:2e: ab:a5:8e:99:fa:7a:cc:eb:73:18:ec:9a:b8:07:8a: 2f:e3:0f:02:fa:ca:a3:3a:22:ab:6c:52:71:7d:c0: 4e:de:8f:eb:e7:31:b0:1a:c4:2f:eb:6d:93:d5:93: 8b:f4:75:89:d3:98:bb:03:13:8d:70:7f:c7:cb:d2: 15:96:21:ac:56:c9:98:5a:fd:8f:a0:61:b7:0e:2b: bd:74:9a:7d:e2:cf:f2:45:4c:24:79:2a:a4:8e:a0: d5:94:6f:21:23:ff:be:f2:46:d4:d2:85:ff:f7:00: 8c:e7:91:82:ec:73:6d:ce:5a:c5:4f:56:1b:33:a1: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:62:87:41:05:93:D2:F4:1D:E0:C5:88:7B:AF:C7:09:2D:6E:8C:0F X509v3 Authority Key Identifier: keyid:CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e1:72:3f:50:ff:61:11:cb:33:9e:dc:6b:88:0c:fb:ad:93: 56:3b:52:d9:39:b2:9e:6b:ed:04:09:60:37:eb:da:77:1c:27: 69:ef:d0:c5:ce:e1:26:0d:69:8d:37:b3:a5:0e:4a:e7:45:75: 92:e5:b2:ac:3d:39:30:c6:49:95:6e:5c:22:1c:33:86:6a:08: 02:ee:92:54:1d:5b:5f:68:d4:ba:56:8a:b0:2d:a6:47:80:12: 11:e4:8c:26:f4:c6:51:54:47:25:17:13:58:ba:89:a6:8b:96: 0c:56:b5:0e:87:59:23:0e:98:b6:70:20:b3:80:a2:2c:86:18: ce:1d:39:d9:e3:e6:62:57:d9:16:ea:a8:cb:30:50:b3:fd:87: 0e:fc:b9:2e:95:de:53:2f:95:21:1e:74:a2:41:64:90:fb:ca: 1a:84:a8:00:aa:ea:de:5a:9f:d8:54:ef:9a:aa:87:10:08:f2: 5a:ae:36:8b:46:ba:d3:94:52:88:9c:8c:a3:85:99:76:75:06: 57:f4:28:91:a3:63:0a:0b:8e:b5:ab:1b:af:d7:65:ef:e9:eb: 95:f7:2b:39:27:12:1e:c7:31:b6:8e:2d:c8:92:97:6b:43:f1: d6:f0:a5:33:75:4b:ed:ee:59:0b:82:15:72:a8:9e:2a:f1:5a: 8a:d4:9a:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX8Xs9NcvQMWyONUiFIQkvmhu1WowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBODUxOEU2RDBCMzVBQTYxMkUyRjNDOTM3NTBFQzBC NTI4NkUyMDAeFw0yNTEyMTkxMjA0MDhaFw0yNTEyMjAxNDU3MDhaMDMxMTAvBgNV BAMTKEYzNjI4NzQxMDU5M0QyRjQxREUwQzU4ODdCQUZDNzA5MkQ2RThDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4k90/slCRRdxbS9SE4CqvGu1 ddHfQtsNPU5XHBDPq13/1ymuC8c/MOYqHj3JGs+YxSRxSvQtQG9uy4cnxi8fDSBE WxSDX3ROHjMg2p9TbNkYMgx/Ca3+k0Tzt/Ghji4wRxv1n8cd6C2MSYVoNu9wAkz9 5a/0aLKQ7m8Y6Y6joIQpAYuMLquljpn6eszrcxjsmrgHii/jDwL6yqM6IqtsUnF9 wE7ej+vnMbAaxC/rbZPVk4v0dYnTmLsDE41wf8fL0hWWIaxWyZha/Y+gYbcOK710 mn3iz/JFTCR5KqSOoNWUbyEj/77yRtTShf/3AIznkYLsc23OWsVPVhszoQwTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU82KHQQWT0vQd4MWIe6/HCS1ujA8wHwYDVR0j BBgwFoAUzqhRjm0LNaphLi88k3UOwLUobiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzZ2SDhpQWdjak1zNjNKZXFZbzJHbUh3NWRWUlV4aWhqblc5UEhNcFB2 NnQvMC9DRUE4NTE4RTZEMEIzNUFBNjEyRTJGM0M5Mzc1MEVDMEI1Mjg2RTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTg1MThFNkQwQjM1QUE2 MTJFMkYzQzkzNzUwRUMwQjUyODZFMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzZ2SDhpQWdjak1zNjNKZXFZbzJHbUh3NWRWUlV4aWhqblc5UEhNcFB2NnQvMC9D RUE4NTE4RTZEMEIzNUFBNjEyRTJGM0M5Mzc1MEVDMEI1Mjg2RTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApeFyP1D/YRHLM57ca4gM+62TVjtS2TmynmvtBAlgN+vadxwnae/Qxc7hJg1p jTezpQ5K50V1kuWyrD05MMZJlW5cIhwzhmoIAu6SVB1bX2jUulaKsC2mR4ASEeSM JvTGUVRHJRcTWLqJpouWDFa1DodZIw6YtnAgs4CiLIYYzh052ePmYlfZFuqoyzBQ s/2HDvy5LpXeUy+VIR50okFkkPvKGoSoAKrq3lqf2FTvmqqHEAjyWq42i0a605RS iJyMo4WZdnUGV/QokaNjCguOtasbr9dl7+nrlfcrOScSHscxto4tyJKXa0Px1vCl M3VL7e5ZC4IVcqieKvFaitSaEg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:39 2025 by rpki-client