This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft File: 99C2A53A53B7161516985068CD39F465FE646938.mft (raw, json) Hash identifier: BE2kptkw4hhsjW2wXJTAml7qtkkKXdNHL1YDx4WtnbE= Subject key identifier: 52:FE:39:12:0E:3D:99:47:E5:EF:B8:78:D7:FB:8E:26:E6:84:41:CC Authority key identifier: 99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 Certificate issuer: /CN=99C2A53A53B7161516985068CD39F465FE646938 Certificate serial: 0E7B8A73EC92A909E8C570CF32E0775A92D54FCB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft Manifest number: 01F5 Signing time: Wed 31 Dec 2025 17:32:12 +0000 Manifest this update: Wed 31 Dec 2025 17:27:12 +0000 Manifest next update: Thu 01 Jan 2026 19:00:12 +0000 Files and hashes: 1: 323830343a376564383a3a2f33322d3438203d3e203238323332.roa (hash: PhO68uVnCgFScnDEM039IdG1hpyK/D+rO+AQU/xYeQ4=) 2: 99C2A53A53B7161516985068CD39F465FE646938.crl (hash: 2/R7+BxqGu00BBG8VR3H2hxwNf4XRPJXJATSmumC+B8=) 3: 3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (hash: LEXqlZJbf5qMWkOrSfLzDj7qmflNSbw1YqpcAf5AUH8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Jan 2026 19:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7b:8a:73:ec:92:a9:09:e8:c5:70:cf:32:e0:77:5a:92:d5:4f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C2A53A53B7161516985068CD39F465FE646938 Validity Not Before: Dec 31 17:27:12 2025 GMT Not After : Jan 1 19:00:12 2026 GMT Subject: CN=52FE39120E3D9947E5EFB878D7FB8E26E68441CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:6c:75:9c:05:01:7a:61:89:cd:46:0a:e8: 62:49:87:59:37:2f:14:95:2f:25:2c:2c:f3:b1:32: f5:ff:24:75:98:05:64:cc:c1:17:17:09:87:ee:99: 93:1c:0d:b8:af:aa:06:f4:02:d5:ff:fc:d2:6f:5c: f0:e3:42:9b:aa:3d:e1:8c:39:d4:e5:81:52:29:77: 09:90:3d:69:de:2c:90:57:7d:c6:8a:ab:38:25:e9: 1b:4d:22:20:15:37:16:14:0f:77:86:79:40:14:6a: 53:8f:6c:1d:5e:2c:c9:38:77:29:c2:34:4a:e3:29: 4f:55:20:96:e9:ef:76:f8:ce:ca:6f:fb:97:cf:bd: b6:3c:da:78:ec:0b:9e:53:6b:2b:22:3f:08:7a:fa: 8f:e0:62:3b:cb:87:a5:4b:e0:bf:28:10:d8:68:7c: 05:c6:92:05:76:2f:a4:91:5a:26:7a:91:5b:7d:2d: b6:12:9c:02:2b:88:96:43:84:99:1d:0f:53:cf:50: 34:c1:7b:ce:9c:f9:d1:b5:97:e7:85:33:56:f5:bb: e5:75:a3:9e:f6:a8:2f:8a:ce:0e:02:c8:87:b1:0b: 28:3d:93:16:22:01:6e:ae:35:04:f8:17:a1:1b:45: 71:13:d5:4d:d6:79:c0:eb:68:18:28:d0:b2:fa:00: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:39:12:0E:3D:99:47:E5:EF:B8:78:D7:FB:8E:26:E6:84:41:CC X509v3 Authority Key Identifier: keyid:99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:33:8b:c6:f0:10:e1:77:c5:55:91:77:88:5d:a3:73:c1:f6: 15:ae:e8:fc:76:fb:cd:28:86:48:d1:13:f5:a1:b6:94:89:2e: 1a:d9:9c:1a:01:b7:e2:89:2c:67:6e:f0:a0:ec:05:9a:d9:47: f7:61:b9:2e:22:d0:b0:2f:36:23:6c:67:f2:aa:48:c0:27:fa: d5:b7:5f:17:16:aa:c9:65:c6:e6:96:3c:19:65:d6:b8:83:b5: 9b:53:6c:49:be:3f:1e:d7:8c:17:7a:5b:3f:68:3c:dd:14:9e: 56:c9:cc:1b:7f:a7:aa:59:f2:5e:18:9f:d3:cf:ec:84:c9:49: 67:88:4f:d5:c7:28:d1:a1:12:44:3f:3a:dd:18:8e:03:19:04: 50:a5:33:24:8e:fa:c1:5e:f9:b4:e2:7d:cc:d8:a9:86:d9:47: 5a:ce:27:27:93:6f:7d:d7:d4:2b:b0:dc:c2:0b:dc:40:0d:85: b2:ba:0a:d5:d4:a5:0c:5c:4b:97:36:63:7f:0d:37:47:89:60: f7:fd:fd:79:1e:3d:fe:36:c2:50:92:18:06:40:12:40:65:5c: 08:74:da:c4:44:e2:98:08:eb:d2:18:49:3a:0f:ed:02:59:7e: d6:a4:52:20:a6:8d:14:ee:a3:6f:cf:87:07:77:c8:68:f4:20: db:f6:60:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDnuKc+ySqQnoxXDPMuB3WpLVT8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMkE1M0E1M0I3MTYxNTE2OTg1MDY4Q0QzOUY0NjVG RTY0NjkzODAeFw0yNTEyMzExNzI3MTJaFw0yNjAxMDExOTAwMTJaMDMxMTAvBgNV BAMTKDUyRkUzOTEyMEUzRDk5NDdFNUVGQjg3OEQ3RkI4RTI2RTY4NDQxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDku2x1nAUBemGJzUYK6GJJh1k3 LxSVLyUsLPOxMvX/JHWYBWTMwRcXCYfumZMcDbivqgb0AtX//NJvXPDjQpuqPeGM OdTlgVIpdwmQPWneLJBXfcaKqzgl6RtNIiAVNxYUD3eGeUAUalOPbB1eLMk4dynC NErjKU9VIJbp73b4zspv+5fPvbY82njsC55TaysiPwh6+o/gYjvLh6VL4L8oENho fAXGkgV2L6SRWiZ6kVt9LbYSnAIriJZDhJkdD1PPUDTBe86c+dG1l+eFM1b1u+V1 o572qC+Kzg4CyIexCyg9kxYiAW6uNQT4F6EbRXET1U3WecDraBgo0LL6AI3xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUv45Eg49mUfl77h41/uOJuaEQcwwHwYDVR0j BBgwFoAUmcKlOlO3FhUWmFBozTn0Zf5kaTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVn elovMC85OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QzJBNTNBNTNCNzE2MTUx Njk4NTA2OENEMzlGNDY1RkU2NDY5MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVnelovMC85 OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAijOLxvAQ4XfFVZF3iF2jc8H2Fa7o/Hb7zSiGSNET9aG2lIkuGtmcGgG34oks Z27woOwFmtlH92G5LiLQsC82I2xn8qpIwCf61bdfFxaqyWXG5pY8GWXWuIO1m1Ns Sb4/HteMF3pbP2g83RSeVsnMG3+nqlnyXhif08/shMlJZ4hP1cco0aESRD863RiO AxkEUKUzJI76wV75tOJ9zNiphtlHWs4nJ5NvfdfUK7DcwgvcQA2FsroK1dSlDFxL lzZjfw03R4lg9/39eR49/jbCUJIYBkASQGVcCHTaxETimAjr0hhJOg/tAll+1qRS IKaNFO6jb8+HB3fIaPQg2/ZguQ== -----END CERTIFICATE-----Generated at Thu Jan 1 12:34:21 2026 by rpki-client