This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft File: AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft (raw, json) Hash identifier: oxqmAPakYWqqGq9UhOMT5wL+k4fnJDSiAmGbWb3Zf4I= Subject key identifier: FB:97:D3:15:65:DC:C4:E2:46:AE:50:C8:09:DB:D3:97:B1:D2:E0:A5 Authority key identifier: AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E Certificate issuer: /CN=AC1B2713D2954ED5AC23E7DECD46C042574F9A1E Certificate serial: 7940FA80161A284BCF6D4E61E11A89F07F0D3700 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft Manifest number: 0145 Signing time: Thu 25 Dec 2025 13:08:44 +0000 Manifest this update: Thu 25 Dec 2025 13:03:44 +0000 Manifest next update: Fri 26 Dec 2025 13:15:44 +0000 Files and hashes: 1: 34352e3137362e342e302f32322d3234203d3e20323638393235.roa (hash: o/gDnt1Ulyn5FOub2NZyPCpAw0IFA2s/DkCb5gzJnnY=) 2: 323830343a356362343a3a2f33322d3438203d3e20323638393235.roa (hash: DJzTj8iTmI4drTZZ9APX5IgBjVeJiBfjGMR9Kac6xOY=) 3: AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl (hash: 4HwbDUgqyeh8gUkepiyxi2z/ajT0+pQHM1Wl7OoQ9ok=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 26 Dec 2025 13:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:40:fa:80:16:1a:28:4b:cf:6d:4e:61:e1:1a:89:f0:7f:0d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1B2713D2954ED5AC23E7DECD46C042574F9A1E Validity Not Before: Dec 25 13:03:44 2025 GMT Not After : Dec 26 13:15:44 2025 GMT Subject: CN=FB97D31565DCC4E246AE50C809DBD397B1D2E0A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:3e:95:9b:88:07:71:69:cb:ea:0b:33:5d: 8c:de:70:95:e6:f8:cc:af:68:9d:81:77:9d:92:a0: 18:29:bf:6b:b7:93:a5:57:9b:4e:8a:57:58:ea:34: 62:62:ef:93:93:5a:29:28:08:5f:a3:d6:a0:41:c5: be:a2:71:21:45:0e:7d:4c:8d:ac:65:34:9d:74:f6: 7e:4e:8f:6f:18:b5:bb:b8:01:94:14:23:d7:10:6e: aa:75:e4:d5:88:64:f4:49:18:f4:77:17:46:02:3d: da:fd:36:fa:2d:ff:f0:2e:c1:e1:f3:8d:d9:0c:32: 0b:cb:a8:42:8b:ef:33:5f:ac:1b:a7:4f:bf:47:ea: 0e:22:9c:db:92:39:f8:7d:79:6d:be:ad:4f:fa:3d: 5a:24:8c:c7:7d:03:1a:34:54:a9:77:43:ce:15:b0: 21:60:7e:0d:bb:e0:e5:83:29:4f:c1:6b:33:99:79: 44:70:c9:3f:8c:e7:8a:7a:06:5d:ee:b0:36:53:dc: 39:f6:01:48:4d:d0:7d:da:79:da:be:c0:08:57:ea: a3:9b:a5:fa:7c:e6:8e:fd:aa:ab:5f:40:17:b4:da: 6d:74:fd:21:56:d2:57:ef:48:aa:31:df:c1:bf:cc: bf:82:20:ca:b7:38:9b:e5:df:19:a9:b5:81:35:11: e8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:97:D3:15:65:DC:C4:E2:46:AE:50:C8:09:DB:D3:97:B1:D2:E0:A5 X509v3 Authority Key Identifier: keyid:AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c0:5f:1c:5a:5a:e6:55:7d:ea:40:18:fe:5d:6f:78:1a:50: 0a:c6:b0:28:1a:51:30:e7:7b:3b:61:f6:6c:a3:55:46:16:d4: 06:26:0b:09:a6:29:d9:db:dd:90:19:cf:80:b7:6f:62:45:23: 76:14:e7:a3:7f:76:b1:1c:3b:04:41:81:25:98:e2:b1:f4:56: 67:8e:f1:6a:dd:e3:07:a4:9f:c1:c6:2c:4b:64:ca:5b:8d:c2: ee:69:39:26:aa:2d:2a:55:e3:fa:81:10:f7:66:5a:df:85:aa: f9:04:42:18:e2:4d:a9:87:4b:d2:a3:1f:28:3f:d2:f6:7e:3b: 56:a5:b0:aa:1c:1c:aa:e4:19:ea:66:24:16:b7:62:13:ec:11: 6c:b5:13:22:23:93:bf:62:ca:d6:c6:9e:a8:d1:24:e6:6a:2d: f8:1e:75:bc:6c:0a:ef:17:51:f3:fa:c1:58:07:01:38:4c:39: c5:8c:75:32:ff:e9:c0:de:d7:6d:93:51:3b:83:c0:6c:cc:54: db:ba:65:fa:27:89:aa:28:aa:26:ea:93:6b:25:e5:01:56:5a: 8d:f3:ad:ee:d1:5e:71:26:e0:57:69:56:a8:0c:93:cb:87:bc: 71:ab:83:e2:02:45:24:58:b0:49:72:09:bb:4c:27:de:53:76: 39:4d:2e:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeUD6gBYaKEvPbU5h4RqJ8H8NNwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxQjI3MTNEMjk1NEVENUFDMjNFN0RFQ0Q0NkMwNDI1 NzRGOUExRTAeFw0yNTEyMjUxMzAzNDRaFw0yNTEyMjYxMzE1NDRaMDMxMTAvBgNV BAMTKEZCOTdEMzE1NjVEQ0M0RTI0NkFFNTBDODA5REJEMzk3QjFEMkUwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWD6Vm4gHcWnL6gszXYzecJXm +MyvaJ2Bd52SoBgpv2u3k6VXm06KV1jqNGJi75OTWikoCF+j1qBBxb6icSFFDn1M jaxlNJ109n5Oj28Ytbu4AZQUI9cQbqp15NWIZPRJGPR3F0YCPdr9Nvot//AuweHz jdkMMgvLqEKL7zNfrBunT79H6g4inNuSOfh9eW2+rU/6PVokjMd9Axo0VKl3Q84V sCFgfg274OWDKU/BazOZeURwyT+M54p6Bl3usDZT3Dn2AUhN0H3aedq+wAhX6qOb pfp85o79qqtfQBe02m10/SFW0lfvSKox38G/zL+CIMq3OJvl3xmptYE1EejHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+5fTFWXcxOJGrlDICdvTl7HS4KUwHwYDVR0j BBgwFoAUrBsnE9KVTtWsI+fezUbAQldPmh4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1l S3QvMC9BQzFCMjcxM0QyOTU0RUQ1QUMyM0U3REVDRDQ2QzA0MjU3NEY5QTFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUIyNzEzRDI5NTRFRDVB QzIzRTdERUNENDZDMDQyNTc0RjlBMUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1lS3QvMC9B QzFCMjcxM0QyOTU0RUQ1QUMyM0U3REVDRDQ2QzA0MjU3NEY5QTFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjMBfHFpa5lV96kAY/l1veBpQCsawKBpRMOd7O2H2bKNVRhbUBiYLCaYp2dvd kBnPgLdvYkUjdhTno392sRw7BEGBJZjisfRWZ47xat3jB6SfwcYsS2TKW43C7mk5 JqotKlXj+oEQ92Za34Wq+QRCGOJNqYdL0qMfKD/S9n47VqWwqhwcquQZ6mYkFrdi E+wRbLUTIiOTv2LK1saeqNEk5mot+B51vGwK7xdR8/rBWAcBOEw5xYx1Mv/pwN7X bZNRO4PAbMxU27pl+ieJqiiqJuqTayXlAVZajfOt7tFecSbgV2lWqAyTy4e8cauD 4gJFJFiwSXIJu0wn3lN2OU0uCQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:18:55 2025 by rpki-client