This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft File: 40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft (raw, json) Hash identifier: atlLkzk2T4P5+Yok1gey8nwL0YhZlW6d084+Syqu0Gw= Subject key identifier: 85:2A:03:23:47:A1:CA:09:D0:E1:17:2D:D7:4D:D4:7C:B8:9B:02:10 Authority key identifier: 40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26 Certificate issuer: /CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526 Certificate serial: 479D67F14BBACD15FE4FDD0FC679DBC4F8B39C4B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer Subject info access: rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft Manifest number: 0158 Signing time: Sun 21 Dec 2025 11:06:03 +0000 Manifest this update: Sun 21 Dec 2025 11:01:03 +0000 Manifest next update: Mon 22 Dec 2025 13:08:03 +0000 Files and hashes: 1: 323830343a383632343a3a2f33332d3333203d3e20323732363234.roa (hash: sBSN+HUK3GGarNrSTOHymxXFFrp9vU2d2m6GgTuDx80=) 2: 323830343a383632343a383030303a3a2f33332d3333203d3e20323732363234.roa (hash: uW+Krbx1y+tzxnIP2jc8wtMiHufJf7YOkQhz8S1KBgw=) 3: 40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl (hash: C98q8hYNAN06IV04mx7QRCasPMliTJnjU8QJR87WjcY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 13:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9d:67:f1:4b:ba:cd:15:fe:4f:dd:0f:c6:79:db:c4:f8:b3:9c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526 Validity Not Before: Dec 21 11:01:03 2025 GMT Not After : Dec 22 13:08:03 2025 GMT Subject: CN=852A032347A1CA09D0E1172DD74DD47CB89B0210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:a0:21:7d:03:7e:18:72:07:78:49:cf:18: cd:cb:80:de:79:5a:2d:63:0a:ab:a9:ec:96:72:1a: 97:bc:bd:b5:9e:96:ab:4d:f8:ef:b0:ac:00:3b:0e: 0c:3e:15:8b:e2:a6:96:96:94:20:f7:72:0f:4c:6f: d7:02:59:92:9e:dc:70:0a:a7:77:3e:af:53:7e:4a: 74:8e:e4:d8:d9:f7:84:77:d0:2f:2f:5c:ca:01:86: fe:90:10:6f:54:8f:b6:31:d4:f0:92:bd:5c:38:47: a6:a6:bd:0c:a4:a9:3e:32:24:3d:52:d0:39:5a:27: 5f:67:e1:63:31:b1:33:10:f5:e0:3a:c7:50:bb:84: f5:bd:fc:d6:c1:a5:39:ce:bf:6e:39:a7:74:3d:67: 69:67:d0:13:aa:63:70:cd:1c:89:9b:bc:c2:13:93: 71:3d:19:76:3e:1a:96:a8:db:7f:99:d4:35:da:69: df:b2:48:6c:72:71:c7:d7:b0:dd:9b:25:b2:7c:eb: 35:49:99:5e:0d:79:d0:11:38:a0:c0:18:2d:03:82: 89:d9:99:29:d3:93:03:31:33:22:d2:2f:7d:bd:a6: 78:2e:e4:6e:60:af:df:cc:25:1b:e9:69:06:ed:d3: b0:c9:73:cd:7f:01:78:4b:e5:f5:11:fe:39:06:98: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2A:03:23:47:A1:CA:09:D0:E1:17:2D:D7:4D:D4:7C:B8:9B:02:10 X509v3 Authority Key Identifier: keyid:40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ef:53:65:f0:17:d9:16:3d:51:83:9a:e7:4e:1f:5f:31:bc: 1d:b1:10:0a:90:23:a1:04:00:59:bc:79:c0:e1:18:57:79:60: fd:3e:1d:96:cd:bb:54:2e:e0:10:4a:30:c9:b1:17:4b:49:ac: 91:33:05:75:b2:cf:08:2b:a3:26:5a:ac:5a:a0:d0:b6:43:4c: 92:b4:44:cf:e3:23:2f:0f:12:b4:fe:ae:06:b4:ea:e9:71:11: 97:5f:f2:28:71:59:0b:51:9d:50:99:57:eb:f9:d5:20:95:f3: 51:ad:5b:6e:72:7b:ef:c9:d9:e5:ab:30:f0:11:c1:d9:9c:56: 4c:68:e3:cd:26:5e:15:0e:78:76:b1:e5:de:02:2c:e9:43:36: 30:d9:79:cc:ab:9f:ea:0e:5e:9b:eb:a4:e5:d9:4f:7e:bc:ea: 0d:4c:76:99:48:ff:a2:5e:b6:ac:08:cf:e6:c5:7c:21:a6:8a: 47:79:fe:21:85:56:4c:28:ab:64:84:a1:b0:a1:55:42:17:eb: 04:66:8a:f2:4f:5b:54:b2:6f:9c:b6:e9:23:24:93:be:c9:c6: 61:43:dc:85:ed:9d:53:91:49:6b:14:2e:96:5a:ae:c7:b4:2a: a8:8d:4c:59:c0:d7:df:e4:fd:fc:fd:03:de:7a:26:67:bc:5a: 32:a8:93:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR51n8Uu6zRX+T90PxnnbxPiznEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDMkZGNjJGMDMyRjI0QzJGQUJCMTlCNEQ0RjVFRkI0 OTE4MTUyNjAeFw0yNTEyMjExMTAxMDNaFw0yNTEyMjIxMzA4MDNaMDMxMTAvBgNV BAMTKDg1MkEwMzIzNDdBMUNBMDlEMEUxMTcyREQ3NERENDdDQjg5QjAyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVqAhfQN+GHIHeEnPGM3LgN55 Wi1jCqup7JZyGpe8vbWelqtN+O+wrAA7Dgw+FYvippaWlCD3cg9Mb9cCWZKe3HAK p3c+r1N+SnSO5NjZ94R30C8vXMoBhv6QEG9Uj7Yx1PCSvVw4R6amvQykqT4yJD1S 0DlaJ19n4WMxsTMQ9eA6x1C7hPW9/NbBpTnOv245p3Q9Z2ln0BOqY3DNHImbvMIT k3E9GXY+Gpao23+Z1DXaad+ySGxyccfXsN2bJbJ86zVJmV4NedAROKDAGC0DgonZ mSnTkwMxMyLSL329pngu5G5gr9/MJRvpaQbt07DJc81/AXhL5fUR/jkGmDFVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhSoDI0ehygnQ4Rct103UfLibAhAwHwYDVR0j BBgwFoAUQML/YvAy8kwvq7GbTU9e+0kYFSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlRodThvVFhRZmt0R1JkQVdKVVRIeG45VDI5a25Xd1I3M21EQnkxekZ2 QUwvMC80MEMyRkY2MkYwMzJGMjRDMkZBQkIxOUI0RDRGNUVGQjQ5MTgxNTI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQzJGRjYyRjAzMkYyNEMy RkFCQjE5QjRENEY1RUZCNDkxODE1MjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlRodThvVFhRZmt0R1JkQVdKVVRIeG45VDI5a25Xd1I3M21EQnkxekZ2QUwvMC80 MEMyRkY2MkYwMzJGMjRDMkZBQkIxOUI0RDRGNUVGQjQ5MTgxNTI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvu9TZfAX2RY9UYOa504fXzG8HbEQCpAjoQQAWbx5wOEYV3lg/T4dls27VC7g EEowybEXS0mskTMFdbLPCCujJlqsWqDQtkNMkrREz+MjLw8StP6uBrTq6XERl1/y KHFZC1GdUJlX6/nVIJXzUa1bbnJ778nZ5asw8BHB2ZxWTGjjzSZeFQ54drHl3gIs 6UM2MNl5zKuf6g5em+uk5dlPfrzqDUx2mUj/ol62rAjP5sV8IaaKR3n+IYVWTCir ZIShsKFVQhfrBGaK8k9bVLJvnLbpIySTvsnGYUPche2dU5FJaxQullqux7QqqI1M WcDX3+T9/P0D3nomZ7xaMqiTsw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:55:04 2025 by rpki-client