This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft File: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft (raw, json) Hash identifier: QXRdMq4uyWb6SOVAhBvJINgPuOeYmLvg+vG9qkX1M+A= Subject key identifier: 17:5F:7F:08:6B:D2:78:D4:7D:62:C0:26:84:E9:05:B0:5A:72:45:6A Authority key identifier: 23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE Certificate issuer: /CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Certificate serial: 0ABBEFF34759ABF4F9155B4F9B6B9B4FF8655D57 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft Manifest number: 0249 Signing time: Sun 21 Dec 2025 10:44:20 +0000 Manifest this update: Sun 21 Dec 2025 10:39:20 +0000 Manifest next update: Mon 22 Dec 2025 11:26:20 +0000 Files and hashes: 1: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl (hash: MW4exZjd6zXzCXZVWfEUaR8YYjCXJ+2k0lLvD1nCdG0=) 2: 34352e3136312e36382e302f32322d3332203d3e20323638343535.roa (hash: YoRm/nqF+KNC/n4V5g6jY+UwAJaamAkico+WD/f/zN4=) 3: 323830343a353137633a3a2f33322d313238203d3e20323638343535.roa (hash: vBU2F9kKN1eXg5kBSHXhOTuAjDtWXxjuNBA8ByfvWro=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 11:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bb:ef:f3:47:59:ab:f4:f9:15:5b:4f:9b:6b:9b:4f:f8:65:5d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Validity Not Before: Dec 21 10:39:20 2025 GMT Not After : Dec 22 11:26:20 2025 GMT Subject: CN=175F7F086BD278D47D62C02684E905B05A72456A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:7f:89:a1:70:e7:43:19:60:1f:4a:f4:ea: d6:16:80:32:22:b6:57:29:ee:b1:e2:a0:9f:ca:34: 37:64:7e:55:5e:5c:f8:e0:40:e4:18:c1:ab:c7:c0: f2:8a:ca:46:1c:3f:7f:5e:74:e4:e6:f4:73:aa:df: 5d:71:f0:86:ab:97:f7:de:04:2c:65:77:c1:6d:75: d3:0f:c4:d9:e3:d4:ef:e4:38:9f:b4:91:34:07:06: 9c:c5:20:b7:cb:42:62:65:bc:ce:df:b2:6b:5e:e8: d8:34:3a:53:8d:01:b5:3d:3c:91:01:cf:64:06:f0: 3e:94:1e:b2:e5:22:5c:35:39:68:1b:19:89:15:6f: 2e:05:5a:cc:23:c0:7a:37:18:77:a0:04:9b:4b:d1: db:68:6b:e4:26:ae:c1:42:92:a8:97:97:eb:e7:4a: ea:d4:00:0c:f3:a1:5f:bb:16:17:c0:64:ab:96:16: 67:b2:39:e7:79:10:2d:a1:fe:2f:f1:d7:5a:ae:93: f0:c7:67:90:b9:06:0b:4b:1a:61:79:76:ca:c5:4c: 37:6e:6e:5e:f0:b2:56:58:fc:d5:93:1c:57:3e:d0: 07:f1:9b:4a:3c:1d:8f:16:b0:47:08:97:ae:80:46: 6c:a0:64:95:c9:4f:85:80:50:cd:06:2d:6d:30:6a: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5F:7F:08:6B:D2:78:D4:7D:62:C0:26:84:E9:05:B0:5A:72:45:6A X509v3 Authority Key Identifier: keyid:23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:de:bc:75:e1:7a:1b:d0:d1:b7:be:79:f7:ee:41:ff:35: 5f:27:10:41:83:c2:78:0f:d5:dd:9d:79:26:b0:9d:b3:12:98: dc:ba:87:0b:3a:67:78:04:7f:24:2c:17:66:8f:9f:74:0f:18: 94:74:c8:c9:60:61:59:fc:01:25:2f:5f:c1:b7:d9:3e:23:a7: 74:6c:49:bb:9c:9a:96:97:e7:ef:79:f2:57:18:9f:6b:09:da: 11:34:9a:6d:4c:73:2d:5d:9e:99:0e:66:2f:66:93:54:f4:bc: 35:e4:a1:d5:17:46:86:d6:2e:eb:66:00:73:be:a7:9d:2c:1a: 20:20:30:dc:9b:cc:42:2f:07:cb:be:02:08:78:45:a3:e7:59: 0e:ef:9f:b4:0c:02:00:3c:e8:99:00:33:ff:b4:c1:f7:72:c6: 77:2d:b2:76:79:68:1d:9c:ca:3d:6e:44:68:4f:c6:58:ff:b4: 1e:2f:4a:d2:79:eb:22:fb:3e:76:a7:ba:c3:90:0a:0e:1b:75: ff:33:bd:32:f4:a2:ca:14:22:ab:2e:f2:66:eb:97:d8:f7:9c: fb:d5:f6:d6:28:b6:63:11:70:a3:b0:37:12:f8:07:95:b8:9c: da:fa:c0:d6:04:63:83:37:19:e2:c3:51:8b:88:a5:e5:7e:dd: 34:19:3d:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCrvv80dZq/T5FVtPm2ubT/hlXVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFMTY2MEFCNDgwQzFDOUQzMEY3OTI4QTdBRDVDNzAz OUMxMzJGRTAeFw0yNTEyMjExMDM5MjBaFw0yNTEyMjIxMTI2MjBaMDMxMTAvBgNV BAMTKDE3NUY3RjA4NkJEMjc4RDQ3RDYyQzAyNjg0RTkwNUIwNUE3MjQ1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIX+JoXDnQxlgH0r06tYWgDIi tlcp7rHioJ/KNDdkflVeXPjgQOQYwavHwPKKykYcP39edOTm9HOq311x8Iarl/fe BCxld8FtddMPxNnj1O/kOJ+0kTQHBpzFILfLQmJlvM7fsmte6Ng0OlONAbU9PJEB z2QG8D6UHrLlIlw1OWgbGYkVby4FWswjwHo3GHegBJtL0dtoa+QmrsFCkqiXl+vn SurUAAzzoV+7FhfAZKuWFmeyOed5EC2h/i/x11quk/DHZ5C5BgtLGmF5dsrFTDdu bl7wslZY/NWTHFc+0Afxm0o8HY8WsEcIl66ARmygZJXJT4WAUM0GLW0wagwhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF19/CGvSeNR9YsAmhOkFsFpyRWowHwYDVR0j BBgwFoAUI+FmCrSAwcnTD3kop61ccDnBMv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdw d0wvMC8yM0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzRTE2NjBBQjQ4MEMxQzlE MzBGNzkyOEE3QUQ1QzcwMzlDMTMyRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdwd0wvMC8y M0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZNfevHXhehvQ0be+effuQf81XycQQYPCeA/V3Z15JrCdsxKY3LqHCzpneAR/ JCwXZo+fdA8YlHTIyWBhWfwBJS9fwbfZPiOndGxJu5yalpfn73nyVxifawnaETSa bUxzLV2emQ5mL2aTVPS8NeSh1RdGhtYu62YAc76nnSwaICAw3JvMQi8Hy74CCHhF o+dZDu+ftAwCADzomQAz/7TB93LGdy2ydnloHZzKPW5EaE/GWP+0Hi9K0nnrIvs+ dqe6w5AKDht1/zO9MvSiyhQiqy7yZuuX2Pec+9X21ii2YxFwo7A3EvgHlbic2vrA 1gRjgzcZ4sNRi4il5X7dNBk9kA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:32:58 2025 by rpki-client