This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft File: 10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft (raw, json) Hash identifier: uxWFeGSyiEOrKjaA7QjWo8nPJVIj+r2ATcwwZJX1+OI= Subject key identifier: DF:48:CA:1E:2D:84:1F:85:70:FE:BE:DA:4F:B6:43:3F:62:67:3A:D5 Authority key identifier: 10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5 Certificate issuer: /CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5 Certificate serial: 68E34A802F815EC071C68838A92365E0A636A9A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft Manifest number: 0351 Signing time: Wed 31 Dec 2025 15:38:43 +0000 Manifest this update: Wed 31 Dec 2025 15:33:43 +0000 Manifest next update: Thu 01 Jan 2026 18:04:43 +0000 Files and hashes: 1: 34352e3137392e34382e302f32322d3234203d3e20323639303630.roa (hash: ic5gQ39rVAGkoh7+jevjyH4AIMeS6mEZxIju3r050V4=) 2: 10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl (hash: vJ3hPe6LT9GE4waPmHf4FHRqDSt6rBduMQ4zhTqWdTQ=) 3: 323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (hash: HFns4FaaAXYNTXt/UMi3YM6904uJyBfBr5hlMSKRdwc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Jan 2026 18:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e3:4a:80:2f:81:5e:c0:71:c6:88:38:a9:23:65:e0:a6:36:a9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5 Validity Not Before: Dec 31 15:33:43 2025 GMT Not After : Jan 1 18:04:43 2026 GMT Subject: CN=DF48CA1E2D841F8570FEBEDA4FB6433F62673AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:fa:18:d5:69:fe:ba:a6:b5:68:1a:40:aa: f3:08:5d:d1:f7:55:df:a7:e0:3a:cc:f1:1d:ee:d6: 53:9f:91:7b:f2:ec:5d:1a:8f:a6:a2:c8:e3:27:b7: f0:a3:ff:d0:11:39:5a:26:0e:c3:2e:79:eb:b2:b6: 50:4c:0b:2a:05:cb:6c:dd:f4:95:bf:dd:63:50:25: 47:45:01:f8:68:6e:39:7e:0d:de:2c:ef:6f:c9:6f: 2a:16:55:79:23:b8:4b:47:03:d1:46:f4:82:1f:66: 4c:46:e5:06:07:e4:27:4f:5d:e2:e8:a7:59:ef:5d: f1:be:9b:26:c1:11:8b:3a:64:db:5d:cb:52:1c:59: 51:b6:e0:ce:51:8a:8a:82:29:cd:61:b9:ac:f0:69: 03:3d:4a:a3:e4:31:69:f1:16:f7:64:bd:5f:0d:f2: de:ff:bc:fe:23:a4:f2:6e:3d:33:79:5c:a3:1d:37: 41:ad:11:78:2c:a2:c1:41:a9:7d:fd:a6:50:aa:0f: 56:9b:00:b1:f9:92:0d:08:81:f0:fb:8c:d0:c9:cf: f7:57:0b:26:ea:7a:43:cb:49:33:e7:5b:30:38:b7: 38:12:2e:d0:c6:ee:ad:d6:ac:5e:a0:e9:93:42:72: 89:44:0d:b6:b0:a3:7a:98:47:de:60:9c:4f:04:42: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:48:CA:1E:2D:84:1F:85:70:FE:BE:DA:4F:B6:43:3F:62:67:3A:D5 X509v3 Authority Key Identifier: keyid:10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:74:8b:f7:44:71:65:f4:76:24:b0:c7:55:06:ce:39:36:e3: af:f8:bd:11:a4:c4:27:9c:55:c6:52:0f:0f:9a:ad:e3:a1:ce: 40:0a:c9:eb:a5:f9:81:b4:53:ef:62:1f:22:cc:83:16:ea:a4: 9c:1e:b3:fe:79:6b:6e:fb:fa:64:4e:60:d0:78:90:7e:b4:d4: 2e:9e:8f:bc:ab:18:42:26:3b:aa:02:99:c3:65:29:2d:12:12: 82:09:50:c7:57:69:0d:c1:c9:ec:68:f7:7d:73:c2:c1:52:35: 39:41:dc:02:2a:a6:62:42:27:2f:88:e8:77:e6:55:e6:ac:24: 5c:c3:be:b6:b7:26:a3:b5:e5:93:93:04:bc:c9:de:5a:bc:9a: 94:43:de:ce:06:b3:0e:66:f1:ce:51:8a:c6:61:77:01:59:b7: 9d:93:4f:1b:ca:94:cb:49:0f:36:e5:7c:68:3d:bf:65:29:2c: 1e:9c:50:c1:10:78:ee:61:94:4b:94:e6:41:00:7f:97:29:a6: 29:e0:4c:67:55:79:72:66:13:e2:65:6e:13:9f:7b:46:f5:e1: a8:94:ad:95:98:40:21:20:ab:d7:26:cf:db:b7:3b:60:ed:fd: 39:86:09:fe:dd:d8:6e:7a:f1:46:bb:e5:02:56:65:e9:64:a9: 8e:ef:56:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaONKgC+BXsBxxog4qSNl4KY2qagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MzVENTE0NjJBMUM2NDFCOUE1RURGQTkzRjg0NzVD Q0VFRTRDNTAeFw0yNTEyMzExNTMzNDNaFw0yNjAxMDExODA0NDNaMDMxMTAvBgNV BAMTKERGNDhDQTFFMkQ4NDFGODU3MEZFQkVEQTRGQjY0MzNGNjI2NzNBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrvoY1Wn+uqa1aBpAqvMIXdH3 Vd+n4DrM8R3u1lOfkXvy7F0aj6aiyOMnt/Cj/9AROVomDsMueeuytlBMCyoFy2zd 9JW/3WNQJUdFAfhobjl+Dd4s72/JbyoWVXkjuEtHA9FG9IIfZkxG5QYH5CdPXeLo p1nvXfG+mybBEYs6ZNtdy1IcWVG24M5RioqCKc1huazwaQM9SqPkMWnxFvdkvV8N 8t7/vP4jpPJuPTN5XKMdN0GtEXgsosFBqX39plCqD1abALH5kg0IgfD7jNDJz/dX CybqekPLSTPnWzA4tzgSLtDG7q3WrF6g6ZNCcolEDbawo3qYR95gnE8EQvzZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU30jKHi2EH4Vw/r7aT7ZDP2JnOtUwHwYDVR0j BBgwFoAUEINdUUYqHGQbml7fqT+Edczu5MUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFkMkU1elpqMWtYcUM1NWE1aFZQTmhXblllQWdRS1EzQWtmblFDa0pV ZzMvMS8xMDgzNUQ1MTQ2MkExQzY0MUI5QTVFREZBOTNGODQ3NUNDRUVFNEM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwODM1RDUxNDYyQTFDNjQx QjlBNUVERkE5M0Y4NDc1Q0NFRUU0QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFkMkU1elpqMWtYcUM1NWE1aFZQTmhXblllQWdRS1EzQWtmblFDa0pVZzMvMS8x MDgzNUQ1MTQ2MkExQzY0MUI5QTVFREZBOTNGODQ3NUNDRUVFNEM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFHSL90RxZfR2JLDHVQbOOTbjr/i9EaTEJ5xVxlIPD5qt46HOQArJ66X5gbRT 72IfIsyDFuqknB6z/nlrbvv6ZE5g0HiQfrTULp6PvKsYQiY7qgKZw2UpLRISgglQ x1dpDcHJ7Gj3fXPCwVI1OUHcAiqmYkInL4jod+ZV5qwkXMO+trcmo7Xlk5MEvMne WryalEPezgazDmbxzlGKxmF3AVm3nZNPG8qUy0kPNuV8aD2/ZSksHpxQwRB47mGU S5TmQQB/lymmKeBMZ1V5cmYT4mVuE597RvXhqJStlZhAISCr1ybP27c7YO39OYYJ /t3YbnrxRrvlAlZl6WSpju9W+g== -----END CERTIFICATE-----Generated at Thu Jan 1 07:40:17 2026 by rpki-client