This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: 90EB1RydUqnUKCNt7P1iyRH2Bjvuh6EjDCcOEXUKW28= Subject key identifier: E0:A4:85:86:6B:5C:24:D0:A5:5D:20:36:9A:AA:10:FB:40:84:E6:92 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 5EB64ECA2306BF9FBBE14E62EBEDE99D4AAD9838 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 0342 Signing time: Fri 19 Dec 2025 15:05:04 +0000 Manifest this update: Fri 19 Dec 2025 15:00:04 +0000 Manifest next update: Sat 20 Dec 2025 17:25:04 +0000 Files and hashes: 1: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 2: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 3: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: QG+c/DrV5mvjeu8sQ908eA1uQCYxg0F93rpaAXhvUTY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b6:4e:ca:23:06:bf:9f:bb:e1:4e:62:eb:ed:e9:9d:4a:ad:98:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Dec 19 15:00:04 2025 GMT Not After : Dec 20 17:25:04 2025 GMT Subject: CN=E0A485866B5C24D0A55D20369AAA10FB4084E692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:93:22:0e:21:7e:8d:36:a2:43:e3:6e:64:3a: 83:ae:05:d0:77:3c:08:bf:ee:ff:be:6e:95:0c:84: 59:71:b9:18:58:08:65:0d:a6:48:c5:68:9e:4c:bd: 99:5a:f3:64:17:34:63:d8:c5:49:4c:05:50:05:85: d0:a0:87:20:92:2a:bd:8c:53:6a:17:31:1d:61:6e: d5:f6:73:15:a5:a3:0f:21:8f:6b:21:d3:99:f7:4c: 1c:19:ec:57:32:0e:26:5c:25:1a:86:69:46:e5:6a: e6:90:95:27:a5:90:d7:cc:c1:51:43:e9:89:d6:73: 44:46:46:16:57:42:65:4f:a6:17:a2:b8:c7:eb:df: a4:6b:6d:df:bb:64:ff:84:8f:ca:c7:87:dc:fb:79: 80:95:87:02:dd:f6:6e:ce:b0:8e:81:e9:e1:1c:ad: be:ed:e4:dd:61:7c:75:76:c1:60:1b:de:d0:22:ca: 5e:b1:0a:68:b3:8f:c0:f7:b4:52:20:03:b6:bb:10: 50:44:3e:ef:04:96:7d:3f:41:04:7c:89:50:7e:c0: b9:b7:a8:04:97:c6:77:96:1f:89:b3:4b:8c:8b:1b: a0:57:2f:cd:59:26:61:b9:98:fb:21:71:37:25:8b: 10:f2:01:1b:c5:3e:a3:a8:1b:30:6f:fa:bd:c4:cb: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A4:85:86:6B:5C:24:D0:A5:5D:20:36:9A:AA:10:FB:40:84:E6:92 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:63:10:f9:32:94:63:71:f7:93:29:5c:2a:18:d8:3f:3b:cd: b4:63:5a:a9:1d:39:e3:dd:5c:61:b9:2b:01:28:89:65:15:ea: f9:f3:2b:38:3a:24:7a:39:90:ea:26:b7:5c:5a:e3:30:70:e2: 7c:ee:cf:50:3d:ce:84:6a:21:c0:e9:6b:4b:27:73:4c:83:08: 04:68:a2:20:17:20:69:bd:16:7c:d1:59:83:20:0b:47:c8:6c: c0:aa:6a:33:11:de:b2:b0:68:5e:f9:89:82:7c:e9:ec:f2:4b: 33:69:95:7d:6c:65:5a:d9:57:bf:a3:48:dc:9d:51:5d:f5:2f: a1:be:c0:2a:bf:f5:bf:dc:5c:d6:06:0a:da:da:f0:26:a9:0d: c9:30:a5:82:43:d2:5d:a9:c9:f0:91:53:53:d8:b8:8a:84:95: 4b:62:ae:81:d0:a7:04:5e:dd:b0:80:a6:0e:93:ba:70:27:86: 91:49:60:40:e8:31:5d:65:dc:78:f6:72:bb:de:bf:f7:22:dd: 19:9f:ca:92:8e:5c:39:a7:30:74:d2:ea:89:f1:cb:53:90:0e: 2b:e1:08:46:53:e2:95:1e:f2:7f:6c:56:e8:f7:8e:92:18:a8: 40:ab:55:dc:e6:79:86:c7:1d:67:88:5d:a4:a7:dc:46:66:44: 15:5a:6b:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXrZOyiMGv5+74U5i6+3pnUqtmDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTEyMTkxNTAwMDRaFw0yNTEyMjAxNzI1MDRaMDMxMTAvBgNV BAMTKEUwQTQ4NTg2NkI1QzI0RDBBNTVEMjAzNjlBQUExMEZCNDA4NEU2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkyIOIX6NNqJD425kOoOuBdB3 PAi/7v++bpUMhFlxuRhYCGUNpkjFaJ5MvZla82QXNGPYxUlMBVAFhdCghyCSKr2M U2oXMR1hbtX2cxWlow8hj2sh05n3TBwZ7FcyDiZcJRqGaUblauaQlSelkNfMwVFD 6YnWc0RGRhZXQmVPpheiuMfr36Rrbd+7ZP+Ej8rHh9z7eYCVhwLd9m7OsI6B6eEc rb7t5N1hfHV2wWAb3tAiyl6xCmizj8D3tFIgA7a7EFBEPu8Eln0/QQR8iVB+wLm3 qASXxneWH4mzS4yLG6BXL81ZJmG5mPshcTclixDyARvFPqOoGzBv+r3Ey71rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4KSFhmtcJNClXSA2mqoQ+0CE5pIwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArWMQ+TKUY3H3kylcKhjYPzvNtGNaqR05491cYbkrASiJZRXq+fMrODokejmQ 6ia3XFrjMHDifO7PUD3OhGohwOlrSydzTIMIBGiiIBcgab0WfNFZgyALR8hswKpq MxHesrBoXvmJgnzp7PJLM2mVfWxlWtlXv6NI3J1RXfUvob7AKr/1v9xc1gYK2trw JqkNyTClgkPSXanJ8JFTU9i4ioSVS2KugdCnBF7dsICmDpO6cCeGkUlgQOgxXWXc ePZyu96/9yLdGZ/Kko5cOacwdNLqifHLU5AOK+EIRlPilR7yf2xW6PeOkhioQKtV 3OZ5hscdZ4hdpKfcRmZEFVpreQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:49:14 2025 by rpki-client