This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json) Hash identifier: ebM0uGiXbXmVrIRz/mxvT/agMQwfaX5/hmtVA3jk5a4= Subject key identifier: 3A:7F:80:DE:E4:D2:BB:B1:B2:7D:7F:33:55:79:FE:94:7B:1E:93:D7 Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Certificate serial: 676D4B5DEA83B3FB8F766108E4F5FAA32F213A8B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft Manifest number: 0323 Signing time: Wed 17 Dec 2025 00:21:55 +0000 Manifest this update: Wed 17 Dec 2025 00:16:55 +0000 Manifest next update: Thu 18 Dec 2025 01:46:55 +0000 Files and hashes: 1: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=) 2: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=) 3: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=) 4: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: MAjgrMM8wGKE/GjfaWPQNraaUTO7ki8GPGM0PeLoy9Q=) 5: 34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa (hash: A/pSWtKQA/OxokA0LkXc4PfBb4bWMqi4QQ8NPqMk/+E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 01:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6d:4b:5d:ea:83:b3:fb:8f:76:61:08:e4:f5:fa:a3:2f:21:3a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Validity Not Before: Dec 17 00:16:55 2025 GMT Not After : Dec 18 01:46:55 2025 GMT Subject: CN=3A7F80DEE4D2BBB1B27D7F335579FE947B1E93D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:e8:60:b6:9f:f8:da:b2:37:9a:83:51:07: 7a:90:ce:02:2e:52:d5:45:5f:08:ae:0e:32:e3:f5: 94:e1:0d:4c:09:b1:5b:86:3e:8d:34:6c:5c:60:74: de:3d:25:f1:65:b9:d4:8e:e2:c7:b7:38:a3:8e:71: 82:7c:37:21:63:b2:cb:a7:9e:eb:61:9e:d3:99:7f: b9:fc:f2:dd:27:c8:48:6a:13:b8:d4:a4:b7:0d:aa: 2c:af:02:20:0a:44:86:7d:47:c6:24:de:34:b7:e3: b3:3b:6d:1e:e3:37:16:b2:e5:b0:fb:12:17:96:30: cb:64:4e:ba:45:cc:13:ba:c7:31:fe:be:b6:89:c7: b7:c9:b9:75:bf:f3:d0:d0:86:07:07:ee:b2:d0:26: 9b:d8:08:56:42:00:cc:0d:26:2c:54:cd:7f:76:4b: c7:01:7d:f6:0d:1a:dc:ae:62:a6:19:67:37:d3:55: 0e:3c:6e:87:2a:3f:86:b1:80:8b:b1:3a:00:33:ee: 7b:f8:74:f3:fa:40:34:48:03:f7:f8:01:c3:08:96: d0:b0:77:f5:80:56:f1:48:e8:6d:7d:4c:16:1d:de: 00:46:f5:8c:1b:54:e7:c2:71:ec:e7:8a:14:de:1e: 0d:10:03:eb:b5:72:de:14:5e:a6:d5:f8:ee:dd:81: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7F:80:DE:E4:D2:BB:B1:B2:7D:7F:33:55:79:FE:94:7B:1E:93:D7 X509v3 Authority Key Identifier: keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c8:70:dc:da:08:c9:2b:c3:e7:88:12:22:c4:1f:d9:de:9b: c1:6d:77:8d:0d:80:cf:3c:8c:cc:2c:12:5c:fe:21:4f:be:d8: 23:cc:c5:9a:a8:a4:35:8e:5f:84:0b:d2:99:06:51:e7:d0:7a: a0:3d:f0:9e:76:4c:fd:fb:c0:a4:22:2e:92:15:e1:f6:cf:9f: 7c:78:42:d8:0f:ca:5b:4e:74:14:ad:65:2f:58:53:1d:12:88: 9f:fc:68:3b:2f:2c:55:2b:4b:45:4d:0c:7a:05:bf:3b:05:8e: 56:4d:38:05:7b:a8:8f:8b:eb:1e:6d:63:7f:22:36:a4:11:0d: 62:1a:8f:2f:59:89:40:cb:1c:7a:63:f0:fb:39:d6:7e:f6:3e: 18:c7:dc:5a:3a:bb:d1:2b:07:f3:3e:64:28:de:0d:d5:2d:ac: c1:98:b5:7c:56:56:3a:28:cb:04:c2:8f:99:e7:2e:c2:ef:c5: 54:05:f0:a7:75:8a:a1:72:9f:f3:95:53:45:3e:ca:94:4d:1e: 8b:77:38:b8:c1:b6:ed:90:33:d8:b5:78:f9:25:83:e7:b5:8a: 86:a3:70:91:e0:df:f0:0d:6d:8e:84:5d:b6:54:1f:3f:e0:1b: 51:60:9d:a0:a3:b3:7a:fd:b5:fb:35:dc:e5:7e:13:b0:db:17: e1:ba:fd:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ21LXeqDs/uPdmEI5PX6oy8hOoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwMEFGOEU2NzJGNjRFMDJDRUM1RDA0N0VERUIyQUQ4 NkI0N0VEOTAeFw0yNTEyMTcwMDE2NTVaFw0yNTEyMTgwMTQ2NTVaMDMxMTAvBgNV BAMTKDNBN0Y4MERFRTREMkJCQjFCMjdEN0YzMzU1NzlGRTk0N0IxRTkzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemuhgtp/42rI3moNRB3qQzgIu UtVFXwiuDjLj9ZThDUwJsVuGPo00bFxgdN49JfFludSO4se3OKOOcYJ8NyFjssun nuthntOZf7n88t0nyEhqE7jUpLcNqiyvAiAKRIZ9R8Yk3jS347M7bR7jNxay5bD7 EheWMMtkTrpFzBO6xzH+vraJx7fJuXW/89DQhgcH7rLQJpvYCFZCAMwNJixUzX92 S8cBffYNGtyuYqYZZzfTVQ48bocqP4axgIuxOgAz7nv4dPP6QDRIA/f4AcMIltCw d/WAVvFI6G19TBYd3gBG9YwbVOfCceznihTeHg0QA+u1ct4UXqbV+O7dgTl/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOn+A3uTSu7GyfX8zVXn+lHsek9cwHwYDVR0j BBgwFoAUKACvjmcvZOAs7F0Eft6yrYa0ftkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hw Zm8vMS8yODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MDBBRjhFNjcyRjY0RTAy Q0VDNUQwNDdFREVCMkFEODZCNDdFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hwZm8vMS8y ODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgchw3NoIySvD54gSIsQf2d6bwW13jQ2AzzyMzCwSXP4hT77YI8zFmqikNY5f hAvSmQZR59B6oD3wnnZM/fvApCIukhXh9s+ffHhC2A/KW050FK1lL1hTHRKIn/xo Oy8sVStLRU0MegW/OwWOVk04BXuoj4vrHm1jfyI2pBENYhqPL1mJQMscemPw+znW fvY+GMfcWjq70SsH8z5kKN4N1S2swZi1fFZWOijLBMKPmecuwu/FVAXwp3WKoXKf 85VTRT7KlE0ei3c4uMG27ZAz2LV4+SWD57WKhqNwkeDf8A1tjoRdtlQfP+AbUWCd oKOzev21+zXc5X4TsNsX4br9Sg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:30:08 2025 by rpki-client