This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft File: AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft (raw, json) Hash identifier: 1E2688cpEmlmGOeLEAxQ31rQ3Jq3CzRVCsRcXWqoqNs= Subject key identifier: 2C:BE:78:B5:01:04:22:9D:2F:AA:C2:E4:C0:32:48:1D:FA:56:9E:1A Authority key identifier: AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E Certificate issuer: /CN=AC1B2713D2954ED5AC23E7DECD46C042574F9A1E Certificate serial: 77ECD72988E0AA920F48799502654670DF75E64E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft Manifest number: 0140 Signing time: Sun 21 Dec 2025 16:28:36 +0000 Manifest this update: Sun 21 Dec 2025 16:23:36 +0000 Manifest next update: Mon 22 Dec 2025 19:58:36 +0000 Files and hashes: 1: 323830343a356362343a3a2f33322d3438203d3e20323638393235.roa (hash: DJzTj8iTmI4drTZZ9APX5IgBjVeJiBfjGMR9Kac6xOY=) 2: 34352e3137362e342e302f32322d3234203d3e20323638393235.roa (hash: o/gDnt1Ulyn5FOub2NZyPCpAw0IFA2s/DkCb5gzJnnY=) 3: AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl (hash: b29OiVsJPapIW3Rj283tR+JUCgapp4wUk5zqfNWhVDw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 19:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ec:d7:29:88:e0:aa:92:0f:48:79:95:02:65:46:70:df:75:e6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1B2713D2954ED5AC23E7DECD46C042574F9A1E Validity Not Before: Dec 21 16:23:36 2025 GMT Not After : Dec 22 19:58:36 2025 GMT Subject: CN=2CBE78B50104229D2FAAC2E4C032481DFA569E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:75:08:f1:f5:a2:b7:43:c3:91:3c:ec:98: d0:6f:c3:fb:6b:50:86:4f:06:50:80:ed:79:56:64: 97:b0:74:d6:de:0f:a5:8c:a8:38:62:f4:f7:1f:b9: 48:62:0d:3e:46:00:7f:5f:f1:90:b4:dd:32:cb:3c: 73:b7:62:58:33:37:ad:a0:43:b7:78:21:e1:a2:e0: 42:5a:03:94:7a:66:94:ce:cc:28:a5:2f:dd:ef:72: 4d:11:11:4e:e6:2b:57:d7:f1:8d:c9:56:d7:11:6f: fc:43:87:79:ab:b5:7d:96:d7:95:c8:7f:18:9f:09: c6:6c:9b:3d:bc:94:25:b0:fc:21:98:a1:61:85:1f: c6:cf:84:3f:13:20:36:2b:8c:fa:d1:88:fd:d1:e1: 7c:af:9b:de:4e:7e:63:26:09:cf:2c:2f:ce:de:ec: 73:49:19:e1:2f:e5:e6:63:e2:3d:42:cc:fb:2e:16: 29:01:3f:b4:21:b4:87:c2:9a:f2:83:32:ca:2e:dc: cd:a7:ec:34:05:af:ef:de:86:55:26:90:05:40:a1: 12:48:9b:77:f7:fc:c8:b9:df:69:d9:5f:8d:eb:5b: d3:60:8f:f5:69:49:16:26:12:b1:99:27:ed:14:cc: 2e:bb:aa:3f:e4:2d:3b:14:19:b0:14:ff:10:8d:d0: f6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:78:B5:01:04:22:9D:2F:AA:C2:E4:C0:32:48:1D:FA:56:9E:1A X509v3 Authority Key Identifier: keyid:AC:1B:27:13:D2:95:4E:D5:AC:23:E7:DE:CD:46:C0:42:57:4F:9A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/AC1B2713D2954ED5AC23E7DECD46C042574F9A1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:37:2d:04:5a:ab:3e:14:2a:7e:3d:08:00:a1:59:a4:e4:72: 2f:2b:d3:29:e2:87:12:7f:06:b2:d8:84:32:c2:ab:99:cb:87: b3:18:fd:59:a0:4b:97:41:f5:b7:89:77:e8:75:ca:ea:b6:78: 51:fd:a1:9f:35:6d:a1:8c:0c:ec:08:24:be:fd:c5:bf:ae:2e: 15:ff:68:7c:80:9b:9a:50:d4:0a:c7:40:6a:ce:a3:0b:66:1b: 1e:24:7a:e8:b5:ad:56:41:d2:20:1d:5b:9e:a4:1f:e9:ca:e5: 1f:0e:63:12:68:81:06:7b:ff:7f:51:08:10:7b:93:5f:a3:85: 8e:d0:25:34:63:ab:f2:3f:57:c4:e1:a1:dc:0b:ec:57:a7:0c: 00:d8:85:1d:85:b9:2b:f9:01:5c:81:10:22:ca:0e:6b:b5:e0: 4a:8d:5a:82:15:9a:3d:ad:a7:26:0b:af:33:e9:35:d6:3c:8b: 31:1b:4a:16:da:2b:a5:b2:71:1b:5a:24:70:e1:d4:f5:db:41: 0e:81:f3:2e:78:d0:f3:14:d7:d8:e3:60:b4:e4:2e:4d:60:2b: 08:20:0f:d0:88:f5:6c:fe:14:6e:76:4d:26:ec:f2:ab:c7:29: 4c:bf:ee:a0:ec:60:8c:da:82:4a:bb:53:6f:9c:64:b0:4c:28: a2:3d:ad:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd+zXKYjgqpIPSHmVAmVGcN915k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxQjI3MTNEMjk1NEVENUFDMjNFN0RFQ0Q0NkMwNDI1 NzRGOUExRTAeFw0yNTEyMjExNjIzMzZaFw0yNTEyMjIxOTU4MzZaMDMxMTAvBgNV BAMTKDJDQkU3OEI1MDEwNDIyOUQyRkFBQzJFNEMwMzI0ODFERkE1NjlFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtnUI8fWit0PDkTzsmNBvw/tr UIZPBlCA7XlWZJewdNbeD6WMqDhi9PcfuUhiDT5GAH9f8ZC03TLLPHO3YlgzN62g Q7d4IeGi4EJaA5R6ZpTOzCilL93vck0REU7mK1fX8Y3JVtcRb/xDh3mrtX2W15XI fxifCcZsmz28lCWw/CGYoWGFH8bPhD8TIDYrjPrRiP3R4Xyvm95OfmMmCc8sL87e 7HNJGeEv5eZj4j1CzPsuFikBP7QhtIfCmvKDMsou3M2n7DQFr+/ehlUmkAVAoRJI m3f3/Mi532nZX43rW9Ngj/VpSRYmErGZJ+0UzC67qj/kLTsUGbAU/xCN0PZDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULL54tQEEIp0vqsLkwDJIHfpWnhowHwYDVR0j BBgwFoAUrBsnE9KVTtWsI+fezUbAQldPmh4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1l S3QvMC9BQzFCMjcxM0QyOTU0RUQ1QUMyM0U3REVDRDQ2QzA0MjU3NEY5QTFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUIyNzEzRDI5NTRFRDVB QzIzRTdERUNENDZDMDQyNTc0RjlBMUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRVU1RXaDZWZW1lS3QvMC9B QzFCMjcxM0QyOTU0RUQ1QUMyM0U3REVDRDQ2QzA0MjU3NEY5QTFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeDctBFqrPhQqfj0IAKFZpORyLyvTKeKHEn8GstiEMsKrmcuHsxj9WaBLl0H1 t4l36HXK6rZ4Uf2hnzVtoYwM7Agkvv3Fv64uFf9ofICbmlDUCsdAas6jC2YbHiR6 6LWtVkHSIB1bnqQf6crlHw5jEmiBBnv/f1EIEHuTX6OFjtAlNGOr8j9XxOGh3Avs V6cMANiFHYW5K/kBXIEQIsoOa7XgSo1aghWaPa2nJguvM+k11jyLMRtKFtorpbJx G1okcOHU9dtBDoHzLnjQ8xTX2ONgtOQuTWArCCAP0Ij1bP4UbnZNJuzyq8cpTL/u oOxgjNqCSrtTb5xksEwooj2t0A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:57:53 2025 by rpki-client