This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft File: 8969EE982CBE9BCDB5B100091931153438B2D419.mft (raw, json) Hash identifier: kkRzmJcl8CwoTxAazjoVR7yaDnfuEp94GeeJnUxL9g8= Subject key identifier: 1B:23:F7:22:9B:63:4E:BA:CE:A7:B9:DB:CB:86:94:44:C2:1C:26:95 Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19 Certificate issuer: /CN=8969EE982CBE9BCDB5B100091931153438B2D419 Certificate serial: 67C78BA03A51BA0FD0705915717F23A075941A53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft Manifest number: 01D2 Signing time: Sat 20 Dec 2025 06:28:26 +0000 Manifest this update: Sat 20 Dec 2025 06:23:26 +0000 Manifest next update: Sun 21 Dec 2025 09:43:26 +0000 Files and hashes: 1: 34352e3232382e3139322e302f32322d3332203d3e20323637303933.roa (hash: lb2JsO5RC7AAX30XmMb7Qmh6X7YlaVp15gQ0jYnnZbI=) 2: 8969EE982CBE9BCDB5B100091931153438B2D419.crl (hash: GFR9AGPgTQSkk9xakC3zLqWV3y/dhgH1qiqEhZ5hS5A=) 3: 323830343a343830383a3a2f33322d313238203d3e20323637303933.roa (hash: TYrUYvbnC8BPKhENEy7PHQFkz3DfZs8uct6D4OHN640=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 09:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c7:8b:a0:3a:51:ba:0f:d0:70:59:15:71:7f:23:a0:75:94:1a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419 Validity Not Before: Dec 20 06:23:26 2025 GMT Not After : Dec 21 09:43:26 2025 GMT Subject: CN=1B23F7229B634EBACEA7B9DBCB869444C21C2695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:2c:65:91:8a:e2:68:a4:af:3c:63:d6:10: bf:06:a1:50:3d:ff:28:7a:15:26:22:db:b6:f3:41: b0:ff:b2:36:c8:d8:4d:fe:04:a0:21:72:1f:b9:47: cf:43:70:27:d4:af:36:a2:bb:5d:a4:11:65:8a:cd: f6:d7:8b:91:98:06:17:f1:db:19:be:ec:7f:f7:da: 6f:b9:bc:b5:79:06:16:0b:03:f7:0f:ab:0c:aa:88: 50:52:73:48:56:ce:fd:2a:09:52:a3:1b:14:98:5d: 82:98:cc:53:ec:70:8c:d0:78:4f:8b:27:25:f3:fe: f3:bc:b9:0a:f2:f6:54:97:09:0b:b4:15:4a:2a:d2: 96:d6:b1:86:1e:50:9d:6d:c9:a1:f6:2c:a6:cf:6d: ec:40:93:12:9b:93:b1:65:21:64:5c:b3:8f:da:72: 01:4e:84:89:f9:12:e2:df:87:1d:d0:c2:b4:aa:82: 1b:00:5e:b9:a3:71:b7:75:1e:ee:3e:f7:d5:a0:59: 56:73:68:d2:8a:58:95:08:c6:ff:37:7b:17:98:c9: 2e:65:2b:dd:1e:1a:d1:f1:79:77:f5:2d:d8:14:3c: db:87:c4:62:5c:70:f9:31:04:58:c1:78:72:c3:d4: aa:9b:e6:34:0b:e3:64:d1:aa:5e:e7:ef:cd:62:dd: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:23:F7:22:9B:63:4E:BA:CE:A7:B9:DB:CB:86:94:44:C2:1C:26:95 X509v3 Authority Key Identifier: keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:22:f5:06:d9:a5:2b:cb:44:e1:30:2f:f6:df:f8:a6:e7:3a: 78:47:3e:04:1c:29:47:87:e1:46:16:28:c1:ec:dc:a8:5c:56: d1:e4:29:99:2b:38:59:d2:8d:e5:f4:d6:f6:07:53:ab:40:b7: c6:77:71:74:a0:53:2d:c0:12:77:58:d4:74:25:2a:64:77:71: 90:36:b5:2d:18:34:8e:55:6f:c7:bc:c6:18:05:bd:02:d3:4d: 9f:b4:9d:fd:7a:c7:f7:c6:d5:cb:b0:0f:ac:d2:8d:60:06:36: 9d:d3:b9:59:fb:51:70:38:75:6d:a4:39:e0:f1:e8:84:5c:8f: ac:10:36:3f:01:de:5d:2f:51:65:50:e8:f3:a0:65:6c:48:d6: 58:84:a2:13:a4:b0:c9:69:bc:56:f2:01:78:d9:97:17:70:14: 4b:ff:fc:70:e2:6d:d2:df:e7:22:29:a4:da:c6:e0:af:f8:5b: 64:00:af:e3:8b:aa:74:29:29:6e:23:86:d4:93:f9:bb:72:74: 3b:cd:72:7c:6f:a9:9d:bc:a5:d6:fb:93:c4:31:5a:a6:41:1b: c5:ce:ac:f6:65:6a:f6:ca:cd:a7:74:35:27:72:ad:a3:e0:e0: 70:f2:d7:ef:ff:22:5a:b5:e2:f3:48:75:23:f9:74:ea:57:b1: 99:4f:6f:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ8eLoDpRug/QcFkVcX8joHWUGlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk2OUVFOTgyQ0JFOUJDREI1QjEwMDA5MTkzMTE1MzQz OEIyRDQxOTAeFw0yNTEyMjAwNjIzMjZaFw0yNTEyMjEwOTQzMjZaMDMxMTAvBgNV BAMTKDFCMjNGNzIyOUI2MzRFQkFDRUE3QjlEQkNCODY5NDQ0QzIxQzI2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WyxlkYriaKSvPGPWEL8GoVA9 /yh6FSYi27bzQbD/sjbI2E3+BKAhch+5R89DcCfUrzaiu12kEWWKzfbXi5GYBhfx 2xm+7H/32m+5vLV5BhYLA/cPqwyqiFBSc0hWzv0qCVKjGxSYXYKYzFPscIzQeE+L JyXz/vO8uQry9lSXCQu0FUoq0pbWsYYeUJ1tyaH2LKbPbexAkxKbk7FlIWRcs4/a cgFOhIn5EuLfhx3QwrSqghsAXrmjcbd1Hu4+99WgWVZzaNKKWJUIxv83exeYyS5l K90eGtHxeXf1LdgUPNuHxGJccPkxBFjBeHLD1Kqb5jQL42TRql7n781i3axZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGyP3IptjTrrOp7nby4aURMIcJpUwHwYDVR0j BBgwFoAUiWnumCy+m821sQAJGTEVNDiy1BkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pqQ0JkdWtWQjNkS3M4QnI5U3d3Zk5LcUtkWTc4SmpOMjNyNW9XZGlu dGkvMC84OTY5RUU5ODJDQkU5QkNEQjVCMTAwMDkxOTMxMTUzNDM4QjJENDE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NjlFRTk4MkNCRTlCQ0RC NUIxMDAwOTE5MzExNTM0MzhCMkQ0MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pqQ0JkdWtWQjNkS3M4QnI5U3d3Zk5LcUtkWTc4SmpOMjNyNW9XZGludGkvMC84 OTY5RUU5ODJDQkU5QkNEQjVCMTAwMDkxOTMxMTUzNDM4QjJENDE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfSL1BtmlK8tE4TAv9t/4puc6eEc+BBwpR4fhRhYowezcqFxW0eQpmSs4WdKN 5fTW9gdTq0C3xndxdKBTLcASd1jUdCUqZHdxkDa1LRg0jlVvx7zGGAW9AtNNn7Sd /XrH98bVy7APrNKNYAY2ndO5WftRcDh1baQ54PHohFyPrBA2PwHeXS9RZVDo86Bl bEjWWISiE6SwyWm8VvIBeNmXF3AUS//8cOJt0t/nIimk2sbgr/hbZACv44uqdCkp biOG1JP5u3J0O81yfG+pnbyl1vuTxDFapkEbxc6s9mVq9srNp3Q1J3Kto+DgcPLX 7/8iWrXi80h1I/l06lexmU9vqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:33:06 2025 by rpki-client