This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft File: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft (raw, json) Hash identifier: ZUem6U1du9YyNEONW7Or0ObVVyLBnP3ZWYxFK1cy61M= Subject key identifier: F0:25:98:E0:EC:24:A0:5C:8F:B9:A5:22:46:03:E3:F6:DE:4B:CA:9C Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20 Certificate issuer: /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820 Certificate serial: 3FCA869C1B2D91DF45A0A23B90822713C670640F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer Subject info access: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft Manifest number: 034E Signing time: Tue 30 Dec 2025 14:54:43 +0000 Manifest this update: Tue 30 Dec 2025 14:49:43 +0000 Manifest next update: Wed 31 Dec 2025 15:07:43 +0000 Files and hashes: 1: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (hash: CImzxX+rkL1rxYW2A+TXCoq1LL7u0k8unKss9z1G3Xo=) 2: 323830343a336131383a3a2f33322d3334203d3e20323636303730.roa (hash: 5jChHZu/vFi+LLiu8tTfwWKXqbT78LjUfm2ELx1+iX8=) 3: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl (hash: Q5bwOs1CkU+esp8z6FqjJZzq/nUW1+Nwt3pvL/5af/I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 31 Dec 2025 15:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ca:86:9c:1b:2d:91:df:45:a0:a2:3b:90:82:27:13:c6:70:64:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820 Validity Not Before: Dec 30 14:49:43 2025 GMT Not After : Dec 31 15:07:43 2025 GMT Subject: CN=F02598E0EC24A05C8FB9A5224603E3F6DE4BCA9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f1:09:6a:8d:87:fe:77:6f:4e:26:50:56:05: 88:e6:67:83:55:50:cc:e1:c3:fc:c3:fe:73:d3:95: 6e:e3:37:bd:bf:e0:8b:c1:61:85:29:fb:ae:7e:22: cb:f4:de:ea:74:d2:ce:6f:41:0c:a6:b0:16:b3:a8: 70:bd:f1:c0:fc:ff:07:32:42:9f:06:5a:98:03:20: ab:2a:7d:92:aa:e3:a9:6c:9b:8f:cf:49:e0:23:c8: b6:d7:bc:b8:f1:4a:5a:cd:c9:15:c1:ff:d4:b2:19: b0:f1:da:a8:7a:ea:1c:34:c1:97:e3:42:0a:bc:16: 3f:a3:17:9d:01:24:4b:a7:bc:c0:92:e0:9a:fe:06: f4:d5:aa:c1:26:83:d8:54:06:f3:01:a1:2b:88:db: 65:5c:2d:0b:99:8f:60:be:e1:a7:9d:b0:c1:f3:bb: 5c:cd:a5:5a:cf:32:33:f3:f2:bb:63:ff:18:37:5e: d0:6d:e8:18:40:d5:42:0c:90:ea:d0:ec:50:c3:84: 56:a7:33:6b:69:f4:c2:6e:45:c5:a4:be:68:a4:97: 15:dc:27:3b:2d:80:2c:e3:21:10:88:9d:26:5c:67: 86:f6:38:8c:29:0d:b1:47:e0:86:1d:0f:b1:fa:0c: bf:06:f1:f6:d4:b2:86:50:be:34:76:ea:48:84:f6: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:25:98:E0:EC:24:A0:5C:8F:B9:A5:22:46:03:E3:F6:DE:4B:CA:9C X509v3 Authority Key Identifier: keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c6:5e:e3:f7:b9:df:77:ee:65:b6:de:65:cf:29:9a:bc:1c: 44:75:19:75:8f:ac:66:03:9d:c2:59:14:58:6b:f3:ca:49:fa: b5:34:16:94:fe:71:10:b9:c3:75:99:5b:cf:c9:fb:5c:52:f3: 9d:e9:51:98:e4:7c:01:5a:5f:35:1d:b1:da:98:28:53:df:66: d6:de:33:74:83:a9:be:03:fc:0c:59:c5:3a:1f:75:a2:65:d3: 4b:2e:bc:97:92:82:b7:9b:55:a5:4b:fb:a8:96:f4:40:34:6b: 7a:52:71:08:11:54:37:e9:28:93:8a:59:e0:93:87:11:a8:57: 7c:ec:ac:06:c7:17:51:23:23:2e:61:be:1d:f2:ae:d7:dd:3b: 17:bf:e1:1d:95:a5:61:7e:83:fc:41:e7:f2:e9:6f:96:8b:1d: d9:c7:54:1f:f6:c5:63:2f:67:55:ed:f2:6f:b4:9d:81:b8:5a: e6:e9:82:4d:87:6b:9b:97:ee:3f:7b:3f:e3:d7:4e:7c:98:b1: 1f:08:30:ba:6c:b3:ab:34:c1:1b:72:57:4f:a9:f7:85:e4:9b: 8a:fc:f7:21:2a:09:bd:ac:9b:17:8e:e2:03:a9:0d:0d:6d:90: 91:a7:0c:cc:43:fc:4b:79:df:de:e1:64:80:6f:94:7a:21:2a: 79:28:72:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP8qGnBstkd9FoKI7kIInE8ZwZA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRjFGQ0JFRTRCNDg5RTY1ODYzNkUxQjI0NTQ1Q0Ew RTRFQTgyMDAeFw0yNTEyMzAxNDQ5NDNaFw0yNTEyMzExNTA3NDNaMDMxMTAvBgNV BAMTKEYwMjU5OEUwRUMyNEEwNUM4RkI5QTUyMjQ2MDNFM0Y2REU0QkNBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8QlqjYf+d29OJlBWBYjmZ4NV UMzhw/zD/nPTlW7jN72/4IvBYYUp+65+Isv03up00s5vQQymsBazqHC98cD8/wcy Qp8GWpgDIKsqfZKq46lsm4/PSeAjyLbXvLjxSlrNyRXB/9SyGbDx2qh66hw0wZfj Qgq8Fj+jF50BJEunvMCS4Jr+BvTVqsEmg9hUBvMBoSuI22VcLQuZj2C+4aedsMHz u1zNpVrPMjPz8rtj/xg3XtBt6BhA1UIMkOrQ7FDDhFanM2tp9MJuRcWkvmiklxXc JzstgCzjIRCInSZcZ4b2OIwpDbFH4IYdD7H6DL8G8fbUsoZQvjR26kiE9nmlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8CWY4OwkoFyPuaUiRgPj9t5LypwwHwYDVR0j BBgwFoAUsy8fy+5LSJ5lhjbhskVFyg5OqCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFFjeG55SkxkcFIzQ3NlMmJueDU1Znc3RkFFUFh1c3ZCdFFiTTRIbVJY amIvMS9CMzJGMUZDQkVFNEI0ODlFNjU4NjM2RTFCMjQ1NDVDQTBFNEVBODIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzMkYxRkNCRUU0QjQ4OUU2 NTg2MzZFMUIyNDU0NUNBMEU0RUE4MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFFjeG55SkxkcFIzQ3NlMmJueDU1Znc3RkFFUFh1c3ZCdFFiTTRIbVJYamIvMS9C MzJGMUZDQkVFNEI0ODlFNjU4NjM2RTFCMjQ1NDVDQTBFNEVBODIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsMZe4/e533fuZbbeZc8pmrwcRHUZdY+sZgOdwlkUWGvzykn6tTQWlP5xELnD dZlbz8n7XFLznelRmOR8AVpfNR2x2pgoU99m1t4zdIOpvgP8DFnFOh91omXTSy68 l5KCt5tVpUv7qJb0QDRrelJxCBFUN+kok4pZ4JOHEahXfOysBscXUSMjLmG+HfKu 1907F7/hHZWlYX6D/EHn8ulvlosd2cdUH/bFYy9nVe3yb7Sdgbha5umCTYdrm5fu P3s/49dOfJixHwgwumyzqzTBG3JXT6n3heSbivz3ISoJvaybF47iA6kNDW2QkacM zEP8S3nf3uFkgG+UeiEqeShycA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:30:20 2025 by rpki-client