This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft File: B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft (raw, json) Hash identifier: 3nb7gQlDclTnyotpkgLmqSkZlO9TVgS4LpMhunmIQQo= Subject key identifier: 7B:94:2C:CC:3F:AC:C7:FC:B2:F7:DF:B4:9F:74:3B:A7:B7:FF:B0:EA Authority key identifier: B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91 Certificate issuer: /CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391 Certificate serial: 14CD90626B651AC555AC5AC1DC77D83926ED91D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft Manifest number: 020D Signing time: Mon 22 Dec 2025 01:59:33 +0000 Manifest this update: Mon 22 Dec 2025 01:54:33 +0000 Manifest next update: Tue 23 Dec 2025 03:55:33 +0000 Files and hashes: 1: 3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa (hash: D9QppqLT7H6n7AuxOU5w0IV2pGii6IfXWxzdnP2nz5E=) 2: B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl (hash: hbyIGnJNLsjTd3Dfy0GBMIzBx2jJBpvqOfeJYKDeUO4=) 3: 323830343a376133343a3a2f33322d313238203d3e20323731333535.roa (hash: awRXTG5/JiTvuAiBImObhWf3ci5YbXEW5AqPL0+mqo8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 03:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cd:90:62:6b:65:1a:c5:55:ac:5a:c1:dc:77:d8:39:26:ed:91:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391 Validity Not Before: Dec 22 01:54:33 2025 GMT Not After : Dec 23 03:55:33 2025 GMT Subject: CN=7B942CCC3FACC7FCB2F7DFB49F743BA7B7FFB0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:46:9a:42:39:36:1c:82:42:9c:2a:0a:6f: c2:c5:67:70:bc:14:91:72:13:26:0f:e2:0a:f2:4f: a5:de:80:c2:2f:17:67:4a:1c:e7:5c:c0:44:6a:3f: 76:b3:83:6c:30:af:cc:26:d4:c4:ff:49:26:d4:24: b3:8a:31:ea:23:85:a2:a0:44:38:b5:7d:f7:51:e1: 53:b3:17:41:31:0f:6d:60:8b:8a:a4:3f:37:76:41: 5f:30:87:38:4d:42:31:ba:c8:d7:df:25:c4:87:98: 2f:5a:3e:a8:5b:3d:06:b4:de:6d:2a:60:83:60:b5: b0:e8:f7:0f:23:aa:6d:74:c9:a8:25:2f:6d:a5:e2: f2:75:c1:dc:9e:55:4f:86:3a:39:9e:8a:64:2b:12: aa:3d:8b:1f:87:5c:70:89:34:41:1c:aa:9a:39:7b: 00:fc:18:68:66:04:66:00:5d:30:a6:db:82:8d:0e: dc:6f:fa:1c:7b:b4:79:c7:43:5e:ca:58:89:e7:83: 39:67:d6:e6:a6:2c:66:e4:0e:21:1c:d3:da:b5:0e: e9:ea:ca:18:f0:12:0c:69:5a:50:7c:3f:07:bf:0b: f7:5e:e6:fe:51:5c:5c:38:39:70:ab:0d:08:f0:84: be:ca:31:17:f7:40:ed:bb:1b:26:49:e6:1c:7a:39: a7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:2C:CC:3F:AC:C7:FC:B2:F7:DF:B4:9F:74:3B:A7:B7:FF:B0:EA X509v3 Authority Key Identifier: keyid:B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:13:45:7f:12:e6:6a:92:2c:d3:04:1c:b9:21:b9:53:10:d2: 2f:11:6f:aa:e5:75:0c:58:14:26:de:de:46:73:80:5c:88:d2: ce:8e:e8:d0:f3:38:1e:c6:f0:65:cb:d1:d5:24:f8:ce:c2:57: 45:04:e6:5b:c6:77:f5:8b:6e:85:dc:0f:8a:fb:ad:91:37:aa: ae:d0:c8:4c:69:7f:ba:a1:68:c0:6b:31:25:66:d3:fe:ad:cb: d3:bf:b7:9f:81:39:89:6b:d8:74:bd:60:a0:e1:8a:19:b6:06: 88:da:a5:cc:43:1b:6a:59:de:6b:51:eb:cc:34:9f:70:24:59: 47:2a:ae:88:e1:97:04:8c:ec:39:28:45:55:ea:05:1e:42:b7: 1f:11:da:7c:80:30:e4:7f:4d:2e:ee:5a:df:97:2a:48:0e:5e: d8:e3:3d:4c:db:02:7c:34:74:cf:32:c6:dd:7a:25:4d:38:fc: 34:79:06:1e:2c:b3:2f:c2:dc:13:9c:9c:3e:50:9a:4f:16:4e: 05:c1:90:c0:2d:c4:d3:ab:bc:db:35:d5:5f:23:e0:77:28:a0: f6:0e:62:58:15:2e:b9:fe:8e:cf:4b:70:f9:ab:ba:21:6c:02: ec:11:d8:a4:f0:f7:cc:a4:7c:4a:2c:f5:b4:6d:88:4b:34:22: 1a:69:33:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFM2QYmtlGsVVrFrB3HfYOSbtkdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5QTcyRjdEQUExOTA1RTBCODlDN0Q4RkVBMDNEM0Uy MUU4NTM5MTAeFw0yNTEyMjIwMTU0MzNaFw0yNTEyMjMwMzU1MzNaMDMxMTAvBgNV BAMTKDdCOTQyQ0NDM0ZBQ0M3RkNCMkY3REZCNDlGNzQzQkE3QjdGRkIwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZIkaaQjk2HIJCnCoKb8LFZ3C8 FJFyEyYP4gryT6XegMIvF2dKHOdcwERqP3azg2wwr8wm1MT/SSbUJLOKMeojhaKg RDi1ffdR4VOzF0ExD21gi4qkPzd2QV8whzhNQjG6yNffJcSHmC9aPqhbPQa03m0q YINgtbDo9w8jqm10yaglL22l4vJ1wdyeVU+GOjmeimQrEqo9ix+HXHCJNEEcqpo5 ewD8GGhmBGYAXTCm24KNDtxv+hx7tHnHQ17KWInngzln1uamLGbkDiEc09q1Dunq yhjwEgxpWlB8Pwe/C/de5v5RXFw4OXCrDQjwhL7KMRf3QO27GyZJ5hx6OafFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUe5QszD+sx/yy99+0n3Q7p7f/sOowHwYDVR0j BBgwFoAUsJpy99qhkF4LicfY/qA9PiHoU5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0 VHgvMC9CMDlBNzJGN0RBQTE5MDVFMEI4OUM3RDhGRUEwM0QzRTIxRTg1MzkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwOUE3MkY3REFBMTkwNUUw Qjg5QzdEOEZFQTAzRDNFMjFFODUzOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0VHgvMC9C MDlBNzJGN0RBQTE5MDVFMEI4OUM3RDhGRUEwM0QzRTIxRTg1MzkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJBNFfxLmapIs0wQcuSG5UxDSLxFvquV1DFgUJt7eRnOAXIjSzo7o0PM4Hsbw ZcvR1ST4zsJXRQTmW8Z39YtuhdwPivutkTeqrtDITGl/uqFowGsxJWbT/q3L07+3 n4E5iWvYdL1goOGKGbYGiNqlzEMbalnea1HrzDSfcCRZRyquiOGXBIzsOShFVeoF HkK3HxHafIAw5H9NLu5a35cqSA5e2OM9TNsCfDR0zzLG3XolTTj8NHkGHiyzL8Lc E5ycPlCaTxZOBcGQwC3E06u82zXVXyPgdyig9g5iWBUuuf6Oz0tw+au6IWwC7BHY pPD3zKR8Siz1tG2ISzQiGmkzrQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:02:41 2025 by rpki-client