This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft File: 5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft (raw, json) Hash identifier: vXEMwUNVU5NLBiKh9/r5jPw/9cMGgeDiokVLnk3Pw84= Subject key identifier: 33:1A:83:BC:B3:A1:C8:35:47:66:FB:03:13:92:C4:22:85:FD:F6:C1 Authority key identifier: 5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB Certificate issuer: /CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB Certificate serial: 64BDA0CB83FA1BDDAFE0CE7FDEF89ACDF30CEC85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer Subject info access: rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft Manifest number: 35 Signing time: Wed 17 Dec 2025 14:04:33 +0000 Manifest this update: Wed 17 Dec 2025 13:59:33 +0000 Manifest next update: Thu 18 Dec 2025 15:02:33 +0000 Files and hashes: 1: 3136382e3233322e34342e302f32322d3234203d3e20323634393439.roa (hash: YRXUQAZar0uTO1g6gvS6QzY1HkgS5fXJZ//3rAwcacg=) 2: 323830343a333036383a3a2f33322d3336203d3e20323634393439.roa (hash: fisFpMA5MMWc1btQAKZqzTMd+nQdo2OisIdj4XAWTe0=) 3: 5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl (hash: WdPoVSsC7HdpKwwmEFqrrlKs4rJttrdHJc5BwveQ/rk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 15:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bd:a0:cb:83:fa:1b:dd:af:e0:ce:7f:de:f8:9a:cd:f3:0c:ec:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB Validity Not Before: Dec 17 13:59:33 2025 GMT Not After : Dec 18 15:02:33 2025 GMT Subject: CN=331A83BCB3A1C8354766FB031392C42285FDF6C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:65:67:4f:c8:93:7c:7d:ca:4a:b2:58:10: cc:9e:84:ff:be:88:1b:29:c7:c6:80:3c:e3:e9:3c: ec:d0:ef:24:4f:67:2b:97:3b:13:4b:67:f0:87:88: 67:f7:26:d8:18:a6:5c:c9:1c:e3:32:47:01:91:6d: f6:cd:c9:6b:0a:8d:63:18:16:cf:2c:76:00:44:54: 25:79:5e:31:d5:38:ae:06:67:f3:13:f2:ab:b1:46: e3:60:b8:51:c2:2e:61:e1:89:fc:e5:1e:d0:19:7e: fd:f2:f3:a3:8e:98:b1:25:bf:a3:fd:fb:16:6d:78: b3:f1:17:7d:67:12:45:87:51:e4:4d:62:0c:be:e6: 88:16:ef:26:ab:30:8a:f5:e7:01:ce:4b:fd:6d:4e: 77:17:39:d8:ea:7a:34:53:d1:aa:0b:6c:9c:46:43: 97:39:12:db:f7:9d:ff:b5:23:79:4d:89:65:af:89: 64:64:6d:3e:34:d1:89:22:44:fc:4b:14:ef:73:02: a0:51:87:08:34:cd:6f:e9:7d:4b:1a:a8:d3:60:1c: df:95:12:6b:cb:71:ff:e3:93:27:8a:19:08:cf:1f: 74:f2:8e:77:22:50:4e:d4:c6:68:94:ea:67:a3:4a: 40:98:f8:4a:9b:33:c4:30:76:e6:20:bb:a8:db:fd: 79:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1A:83:BC:B3:A1:C8:35:47:66:FB:03:13:92:C4:22:85:FD:F6:C1 X509v3 Authority Key Identifier: keyid:5B:9D:EC:AF:81:F8:0B:2E:AE:42:6A:05:0C:B1:1C:33:DD:2F:0F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/2/5B9DECAF81F80B2EAE426A050CB11C33DD2F0FCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:46:e2:24:72:6a:b2:c2:f3:6a:1c:6b:fe:a5:76:a5:1d:ae: 12:cc:73:12:8d:e3:f5:39:cf:04:a5:23:e5:42:de:6d:3b:6e: 0f:e2:6a:05:a3:f9:e2:64:76:9f:bb:06:13:a1:0a:7e:11:be: 31:19:11:eb:5c:48:37:9f:9f:d2:21:bb:3c:b4:f3:09:12:58: 1a:0a:a0:19:ec:67:ea:93:58:01:ad:fd:c8:09:93:3e:fa:43: db:5b:25:61:5a:60:a5:b7:62:da:d0:bb:35:0a:15:77:38:ea: 59:d3:b5:b6:df:03:7c:0f:38:23:9a:41:7f:79:c8:c5:f6:b3: 1c:bb:79:96:fa:40:7c:d4:1f:ca:ca:61:96:cd:21:2a:20:20: 80:c0:03:f3:de:5d:d1:eb:63:68:bd:86:2c:2e:ea:60:9b:81: bc:04:5b:41:6c:90:17:18:87:b3:c4:74:c1:ff:a8:45:44:6f: 8b:1a:1a:ec:09:94:3a:dc:28:9b:83:28:2f:36:e0:0b:76:c6: 94:0e:58:ae:95:4f:1e:4c:47:a8:c1:df:d6:81:80:ee:01:d8: d5:17:d6:11:55:18:92:7c:b8:41:0b:44:d2:ce:df:63:eb:c4: df:df:43:39:92:a3:84:49:be:76:c2:7e:8e:38:21:46:b5:e4: e5:47:5b:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZL2gy4P6G92v4M5/3viazfMM7IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5REVDQUY4MUY4MEIyRUFFNDI2QTA1MENCMTFDMzNE RDJGMEZDQjAeFw0yNTEyMTcxMzU5MzNaFw0yNTEyMTgxNTAyMzNaMDMxMTAvBgNV BAMTKDMzMUE4M0JDQjNBMUM4MzU0NzY2RkIwMzEzOTJDNDIyODVGREY2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jWVnT8iTfH3KSrJYEMyehP++ iBspx8aAPOPpPOzQ7yRPZyuXOxNLZ/CHiGf3JtgYplzJHOMyRwGRbfbNyWsKjWMY Fs8sdgBEVCV5XjHVOK4GZ/MT8quxRuNguFHCLmHhifzlHtAZfv3y86OOmLElv6P9 +xZteLPxF31nEkWHUeRNYgy+5ogW7yarMIr15wHOS/1tTncXOdjqejRT0aoLbJxG Q5c5Etv3nf+1I3lNiWWviWRkbT400YkiRPxLFO9zAqBRhwg0zW/pfUsaqNNgHN+V EmvLcf/jkyeKGQjPH3TyjnciUE7UxmiU6mejSkCY+EqbM8QwduYgu6jb/XkTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMxqDvLOhyDVHZvsDE5LEIoX99sEwHwYDVR0j BBgwFoAUW53sr4H4Cy6uQmoFDLEcM90vD8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUZTenFWTU1aU0t3R0RiRnl6ekNxd25TNUsxdnF6MVJLREIzOWFISmVV YzUvMi81QjlERUNBRjgxRjgwQjJFQUU0MjZBMDUwQ0IxMUMzM0REMkYwRkNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCOURFQ0FGODFGODBCMkVB RTQyNkEwNTBDQjExQzMzREQyRjBGQ0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUZTenFWTU1aU0t3R0RiRnl6ekNxd25TNUsxdnF6MVJLREIzOWFISmVVYzUvMi81 QjlERUNBRjgxRjgwQjJFQUU0MjZBMDUwQ0IxMUMzM0REMkYwRkNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc0biJHJqssLzahxr/qV2pR2uEsxzEo3j9TnPBKUj5ULebTtuD+JqBaP54mR2 n7sGE6EKfhG+MRkR61xIN5+f0iG7PLTzCRJYGgqgGexn6pNYAa39yAmTPvpD21sl YVpgpbdi2tC7NQoVdzjqWdO1tt8DfA84I5pBf3nIxfazHLt5lvpAfNQfysphls0h KiAggMAD895d0etjaL2GLC7qYJuBvARbQWyQFxiHs8R0wf+oRURvixoa7AmUOtwo m4MoLzbgC3bGlA5YrpVPHkxHqMHf1oGA7gHY1RfWEVUYkny4QQtE0s7fY+vE399D OZKjhEm+dsJ+jjghRrXk5UdbuA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:17:01 2025 by rpki-client