This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft File: DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft (raw, json) Hash identifier: FhmJ0jS5YxPWmoGwUPZIdONq05Ct6ebdPDMTC/4TFBY= Subject key identifier: 01:F6:B8:59:6D:C9:13:FF:4C:98:09:78:53:65:25:48:55:5A:24:19 Authority key identifier: DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26 Certificate issuer: /CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026 Certificate serial: 5E47B0C9DFBF23919F2DA8F67F8A04872C57B722 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer Subject info access: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft Manifest number: 5A Signing time: Fri 19 Dec 2025 20:19:37 +0000 Manifest this update: Fri 19 Dec 2025 20:14:37 +0000 Manifest next update: Sat 20 Dec 2025 20:22:37 +0000 Files and hashes: 1: 34352e3232342e3136382e302f32322d3332203d3e20323636393139.roa (hash: JrUEQFjfe4G5l/Qyw/wlPVbLvelmbWX+UdfuCtyaabI=) 2: 323830343a343535343a3a2f33322d313238203d3e20323636393139.roa (hash: 4tAaveoCXdDcpHp2LFl8RU4V7u4EaA1z6K9jhZ1hLbU=) 3: DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl (hash: RSxKSUabFEEKciKqL0a17B+2Dm4yicPTVn2sFZddPfY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 20:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:47:b0:c9:df:bf:23:91:9f:2d:a8:f6:7f:8a:04:87:2c:57:b7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB2688671EBDA340920F7F274ED0C3C3DFE38026 Validity Not Before: Dec 19 20:14:37 2025 GMT Not After : Dec 20 20:22:37 2025 GMT Subject: CN=01F6B8596DC913FF4C98097853652548555A2419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9b:5b:2d:e4:de:08:37:db:0e:2d:e6:70:f2: 26:65:52:1e:79:9b:a2:0c:ea:c8:2d:4e:4f:77:d5: 91:c8:eb:1a:06:66:89:7e:8d:51:74:fe:f5:7c:c8: 98:a0:e2:85:93:47:52:16:08:bf:c6:61:8d:ae:39: 19:a6:97:79:f4:1b:bc:c2:06:ee:ef:19:26:cb:88: 32:62:eb:aa:c3:a3:41:f2:c2:5e:0e:d8:84:93:78: 58:49:bc:55:9d:3e:b0:83:da:13:ce:16:7f:fb:af: e2:23:b0:3f:8e:82:68:c9:99:38:70:a6:f3:79:3d: e1:a8:b5:92:20:28:d7:85:f3:60:c4:e9:ab:81:75: 4f:0e:4d:9a:9a:5b:a5:3a:d9:41:40:84:7d:d6:a1: 80:86:e1:da:3d:4e:bd:94:8d:26:f1:cc:41:c6:22: 60:59:2a:fc:c2:be:db:7f:20:ea:77:ff:1d:6c:04: e5:95:06:97:49:88:58:c8:b8:13:eb:46:e3:bd:7b: fe:9e:ed:6e:33:5b:3e:e4:b5:ef:83:75:06:49:dd: 8c:c0:7b:31:07:b9:a7:24:b3:59:e0:11:f8:34:ec: ed:b3:12:7c:e9:91:2b:3a:a4:99:15:21:c8:38:0b: 6d:8e:f2:94:67:43:cf:ad:8a:74:0a:17:10:14:36: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:B8:59:6D:C9:13:FF:4C:98:09:78:53:65:25:48:55:5A:24:19 X509v3 Authority Key Identifier: keyid:DB:26:88:67:1E:BD:A3:40:92:0F:7F:27:4E:D0:C3:C3:DF:E3:80:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB2688671EBDA340920F7F274ED0C3C3DFE38026.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WW8zurBiJkm3KUqXHHWss8Jq7QqMJ7Nj7gob12V3X17/0/DB2688671EBDA340920F7F274ED0C3C3DFE38026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:52:cd:c5:d4:60:98:19:e6:ac:e5:3c:ca:01:a4:45:2d:a6: 2a:a5:fd:78:a6:57:dd:69:79:d0:f0:1e:06:52:e6:c4:1d:64: e9:31:99:a3:dd:55:6a:70:08:46:1f:ca:fb:3b:25:d3:66:a0: 52:f3:26:f1:43:6d:84:00:e5:65:06:50:77:c7:60:c9:d5:d4: 90:99:f9:5c:a9:8f:35:c6:9a:69:44:d8:9e:e8:9f:83:a7:41: 95:5a:48:6f:46:92:95:6e:64:1f:00:80:b7:52:0a:67:ef:a9: 93:9a:46:a8:a6:db:d2:c1:43:d7:32:8a:a1:fc:9b:3d:34:de: 79:a7:35:85:2c:71:9e:97:bb:a9:88:ee:92:c4:74:df:28:92: cd:cb:82:7b:48:54:5d:63:3e:9b:1d:5d:ff:46:58:a8:2b:4e: 7d:06:e1:90:d8:53:17:89:ad:9a:db:6f:60:15:96:b5:2b:f8: 86:8e:89:92:37:70:72:08:f9:2f:62:26:11:45:34:a4:b1:23: 8a:42:35:02:55:6f:72:ec:0b:20:b7:b2:27:09:ea:41:82:fe: 39:c5:8a:a8:8e:01:ea:c1:97:de:de:7e:16:95:b3:2b:cc:30: 57:c5:37:55:a2:36:d4:dd:6d:88:d6:26:35:32:a6:55:30:11: 80:2e:fd:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXkewyd+/I5GfLaj2f4oEhyxXtyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIyNjg4NjcxRUJEQTM0MDkyMEY3RjI3NEVEMEMzQzNE RkUzODAyNjAeFw0yNTEyMTkyMDE0MzdaFw0yNTEyMjAyMDIyMzdaMDMxMTAvBgNV BAMTKDAxRjZCODU5NkRDOTEzRkY0Qzk4MDk3ODUzNjUyNTQ4NTU1QTI0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwm1st5N4IN9sOLeZw8iZlUh55 m6IM6sgtTk931ZHI6xoGZol+jVF0/vV8yJig4oWTR1IWCL/GYY2uORmml3n0G7zC Bu7vGSbLiDJi66rDo0Hywl4O2ISTeFhJvFWdPrCD2hPOFn/7r+IjsD+OgmjJmThw pvN5PeGotZIgKNeF82DE6auBdU8OTZqaW6U62UFAhH3WoYCG4do9Tr2UjSbxzEHG ImBZKvzCvtt/IOp3/x1sBOWVBpdJiFjIuBPrRuO9e/6e7W4zWz7kte+DdQZJ3YzA ezEHuacks1ngEfg07O2zEnzpkSs6pJkVIcg4C22O8pRnQ8+tinQKFxAUNtPLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAfa4WW3JE/9MmAl4U2UlSFVaJBkwHwYDVR0j BBgwFoAU2yaIZx69o0CSD38nTtDDw9/jgCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1dXOHp1ckJpSmttM0tVcVhISFdzczhKcTdRcU1KN05qN2dvYjEyVjNY MTcvMC9EQjI2ODg2NzFFQkRBMzQwOTIwRjdGMjc0RUQwQzNDM0RGRTM4MDI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCMjY4ODY3MUVCREEzNDA5 MjBGN0YyNzRFRDBDM0MzREZFMzgwMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1dXOHp1ckJpSmttM0tVcVhISFdzczhKcTdRcU1KN05qN2dvYjEyVjNYMTcvMC9E QjI2ODg2NzFFQkRBMzQwOTIwRjdGMjc0RUQwQzNDM0RGRTM4MDI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABVLNxdRgmBnmrOU8ygGkRS2mKqX9eKZX3Wl50PAeBlLmxB1k6TGZo91VanAI Rh/K+zsl02agUvMm8UNthADlZQZQd8dgydXUkJn5XKmPNcaaaUTYnuifg6dBlVpI b0aSlW5kHwCAt1IKZ++pk5pGqKbb0sFD1zKKofybPTTeeac1hSxxnpe7qYjuksR0 3yiSzcuCe0hUXWM+mx1d/0ZYqCtOfQbhkNhTF4mtmttvYBWWtSv4ho6Jkjdwcgj5 L2ImEUU0pLEjikI1AlVvcuwLILeyJwnqQYL+OcWKqI4B6sGX3t5+FpWzK8wwV8U3 VaI21N1tiNYmNTKmVTARgC794A== -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:07 2025 by rpki-client