This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft File: 8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft (raw, json) Hash identifier: L20Gme+vI4QlZD5qj0FP/iTvaWV5PCqdsQj8wiiHt+Y= Subject key identifier: 2C:BA:00:B2:A4:E2:75:BF:13:AB:0F:96:D4:76:12:3E:7B:60:A5:AC Authority key identifier: 8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4 Certificate issuer: /CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4 Certificate serial: 7F15F9012737D4B2A7F9451B97B40950F2C0D785 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft Manifest number: 37 Signing time: Fri 19 Dec 2025 19:35:38 +0000 Manifest this update: Fri 19 Dec 2025 19:30:38 +0000 Manifest next update: Sat 20 Dec 2025 21:52:38 +0000 Files and hashes: 1: 323830343a6161383a3a2f33322d313238203d3e203532393033.roa (hash: JFLMhL+dK5DQlsxE/wPNHbPgo0R3J7/zNOp2ZaVabJs=) 2: 3137372e31312e3136382e302f32312d3332203d3e203532393033.roa (hash: wRPSEoYxS6wUcAEt8Sz8lDg1n4zmxGB7njj1uR05ZRs=) 3: 8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl (hash: +I1TZN1NrX3XTHcH4/PNhLU1W1w0MBcX2cBQL5aVqKc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 21:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:15:f9:01:27:37:d4:b2:a7:f9:45:1b:97:b4:09:50:f2:c0:d7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4 Validity Not Before: Dec 19 19:30:38 2025 GMT Not After : Dec 20 21:52:38 2025 GMT Subject: CN=2CBA00B2A4E275BF13AB0F96D476123E7B60A5AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:ab:a4:a0:a5:36:2e:66:1d:ae:f8:1b:ae: 29:7c:d8:a0:e6:db:5b:a2:38:39:6c:4c:45:67:b0: 44:05:de:bf:9c:62:83:02:55:0b:9f:a2:dd:8a:3d: 2f:d4:5b:25:4f:94:11:3b:93:54:33:36:68:f8:70: 67:81:54:08:58:9a:d4:32:58:ff:d1:1b:fa:d9:ca: cd:fb:21:e2:81:3d:c8:3a:a1:28:bc:ea:da:3c:0d: 27:3c:6e:94:94:90:76:63:f6:5d:2d:45:90:5a:b0: a3:d4:15:6a:78:99:78:73:d0:88:b1:49:7f:e4:43: 32:99:01:9e:72:4f:31:11:b1:60:63:b3:b6:82:9e: 17:c5:83:29:bb:be:85:36:3b:16:07:fc:88:36:0c: 87:d8:3e:a1:81:77:58:c2:6a:54:86:b9:24:9d:76: 84:16:4d:27:8f:2d:3d:e2:d6:87:8a:c4:2a:c5:fc: fc:4d:c8:2b:48:44:d0:f4:30:df:0a:38:b6:51:20: ee:d5:08:6a:3e:8a:11:fa:4a:89:fd:44:88:3f:f9: 13:d7:6f:46:ad:63:66:31:7e:77:87:c6:df:a8:d6: af:3b:91:9a:b1:1d:42:20:22:26:ff:9a:3b:d8:97: 91:46:87:9a:12:cb:b3:8d:57:62:47:a4:12:23:38: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BA:00:B2:A4:E2:75:BF:13:AB:0F:96:D4:76:12:3E:7B:60:A5:AC X509v3 Authority Key Identifier: keyid:8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f3:08:f2:84:39:43:60:9f:17:4c:bd:39:e2:6a:2e:c2:74: a2:83:a3:bd:c9:3e:6c:d5:cd:20:62:54:da:75:ff:2d:99:ae: 02:a9:10:94:f9:f4:aa:97:62:f2:b3:ce:76:c3:18:5c:0b:e5: 1e:e3:62:1e:9b:73:ab:a4:f3:30:69:ce:9b:48:ab:3d:a0:fc: d3:fd:8c:26:7d:8a:94:17:98:84:a5:fe:f5:1a:1d:24:c6:3c: 05:ca:2b:9e:6f:5b:4f:0e:e3:4c:01:3a:0d:c3:10:67:4e:6c: da:3c:33:02:bf:0c:a6:c7:97:ef:a9:b5:16:79:29:20:71:b7: 84:f7:4c:ed:34:b5:37:42:81:2c:23:c4:63:01:c5:98:d6:34: 42:1c:e5:76:c8:72:14:b7:f7:10:68:3d:df:c1:0f:bb:c0:77: 91:68:b3:29:ba:2e:af:41:77:f0:bb:45:75:2c:93:81:b0:1c: f8:f0:8f:35:41:2b:be:c4:a8:f7:b6:85:d1:db:8a:6b:ae:80: 64:09:7b:79:a1:c7:f7:6c:c6:c6:b4:8e:d8:78:71:ee:dc:b3: 74:3e:0d:c9:dc:7a:68:bd:ed:06:13:34:f6:18:e2:f8:4d:3a: 6a:dc:d0:05:78:ba:04:8a:f4:d3:f2:1d:d2:c0:d3:67:f7:38: 48:c3:1b:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfxX5ASc31LKn+UUbl7QJUPLA14UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzQzRBRjFCOTU4MzE3QjM0QjNENERDRTg1MEE0NzlF OTQ2RTZBNDAeFw0yNTEyMTkxOTMwMzhaFw0yNTEyMjAyMTUyMzhaMDMxMTAvBgNV BAMTKDJDQkEwMEIyQTRFMjc1QkYxM0FCMEY5NkQ0NzYxMjNFN0I2MEE1QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcqukoKU2LmYdrvgbril82KDm 21uiODlsTEVnsEQF3r+cYoMCVQufot2KPS/UWyVPlBE7k1QzNmj4cGeBVAhYmtQy WP/RG/rZys37IeKBPcg6oSi86to8DSc8bpSUkHZj9l0tRZBasKPUFWp4mXhz0Iix SX/kQzKZAZ5yTzERsWBjs7aCnhfFgym7voU2OxYH/Ig2DIfYPqGBd1jCalSGuSSd doQWTSePLT3i1oeKxCrF/PxNyCtIRND0MN8KOLZRIO7VCGo+ihH6Son9RIg/+RPX b0atY2YxfneHxt+o1q87kZqxHUIgIib/mjvYl5FGh5oSy7ONV2JHpBIjOHGJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULLoAsqTidb8Tqw+W1HYSPntgpawwHwYDVR0j BBgwFoAUjzxK8blYMXs0s9Tc6FCkeelG5qQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEE1ZDk3cG9zWEwyOUNidVN0dlZ2M1hBQ2ZSMmM3clhiZERUQ1hpQ0VS cVgvMC84RjNDNEFGMUI5NTgzMTdCMzRCM0Q0RENFODUwQTQ3OUU5NDZFNkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGM0M0QUYxQjk1ODMxN0Iz NEIzRDREQ0U4NTBBNDc5RTk0NkU2QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEE1ZDk3cG9zWEwyOUNidVN0dlZ2M1hBQ2ZSMmM3clhiZERUQ1hpQ0VScVgvMC84 RjNDNEFGMUI5NTgzMTdCMzRCM0Q0RENFODUwQTQ3OUU5NDZFNkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAovMI8oQ5Q2CfF0y9OeJqLsJ0ooOjvck+bNXNIGJU2nX/LZmuAqkQlPn0qpdi 8rPOdsMYXAvlHuNiHptzq6TzMGnOm0irPaD80/2MJn2KlBeYhKX+9RodJMY8Bcor nm9bTw7jTAE6DcMQZ05s2jwzAr8MpseX76m1FnkpIHG3hPdM7TS1N0KBLCPEYwHF mNY0QhzldshyFLf3EGg938EPu8B3kWizKbour0F38LtFdSyTgbAc+PCPNUErvsSo 97aF0duKa66AZAl7eaHH92zGxrSO2Hhx7tyzdD4Nydx6aL3tBhM09hji+E06atzQ BXi6BIr00/Id0sDTZ/c4SMMbVg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:46 2025 by rpki-client