This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json) Hash identifier: 3nzNQG0FWnLqVRgnmHZ5pBk43vM72GENhuInYzuGxUk= Subject key identifier: 1C:F7:DC:6B:06:95:47:52:55:D3:C4:69:90:6B:17:85:63:B7:02:92 Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A Certificate issuer: /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Certificate serial: 29B634B662B24AC270EE6B0E7D1E6218DBC18737 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft Manifest number: 66 Signing time: Fri 19 Dec 2025 14:21:47 +0000 Manifest this update: Fri 19 Dec 2025 14:16:47 +0000 Manifest next update: Sat 20 Dec 2025 16:30:47 +0000 Files and hashes: 1: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=) 2: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: LUfig5TkghsJzrOH0wI1p877+WkDanLtP4Au8M0h4kU=) 3: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 16:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b6:34:b6:62:b2:4a:c2:70:ee:6b:0e:7d:1e:62:18:db:c1:87:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Validity Not Before: Dec 19 14:16:47 2025 GMT Not After : Dec 20 16:30:47 2025 GMT Subject: CN=1CF7DC6B0695475255D3C469906B178563B70292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:ce:90:30:eb:fa:37:32:45:f3:d3:a0:08: c5:04:71:9f:ee:0c:5b:c8:8c:73:02:9b:65:6c:d1: 95:d8:93:59:e6:69:aa:14:59:ca:13:fa:49:64:a4: 42:6d:ae:31:95:07:36:20:b9:f5:ed:4f:50:43:9b: 2f:f7:e0:75:5e:ab:b5:7f:a3:c8:0d:45:14:c8:8d: c7:a5:ab:12:58:36:3e:bc:22:11:6d:2c:7e:0e:a8: bf:a3:1d:f5:51:24:36:4f:06:f1:e2:da:f7:e2:c5: 60:b4:56:01:0a:2a:58:04:ba:ec:b6:db:97:71:d5: c8:91:71:b0:2e:f4:4b:8d:0e:7e:78:79:a7:85:ca: a4:9a:e4:e8:b2:bd:85:33:6b:77:a7:f1:60:40:b4: 00:13:20:0a:90:d0:8d:59:03:e7:56:e5:6b:01:88: f0:1e:87:c6:bc:f3:1b:f8:61:a3:c4:80:0b:08:43: ca:21:57:8a:27:f5:1d:38:3b:11:01:0e:c4:87:49: 3b:39:35:93:14:44:a8:4a:d7:28:e5:e4:dd:06:27: d0:c1:9a:20:26:f3:0a:7f:5d:2e:f8:0c:4f:dd:33: 45:50:8b:33:45:f4:c1:dd:6b:e7:c8:0f:d0:a9:de: ee:fd:50:6b:90:89:b1:cb:1b:24:3e:d8:9a:b4:7a: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F7:DC:6B:06:95:47:52:55:D3:C4:69:90:6B:17:85:63:B7:02:92 X509v3 Authority Key Identifier: keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2b:94:06:37:75:e2:d9:2d:d6:c3:da:71:ff:cc:46:fb:6f: e9:2b:65:40:c0:72:df:ae:e9:37:73:3d:7b:5c:90:42:d2:6a: 64:fe:32:f1:21:ab:c5:d7:d7:b3:13:c0:dd:7d:5d:c4:c6:67: 41:bd:20:06:6f:78:03:d6:6a:5b:11:87:f6:3b:49:4b:d7:78: 5f:59:40:6b:a1:27:da:d1:d3:c9:4b:1c:9e:c2:22:76:0d:4c: 6f:70:77:94:a9:b8:6a:39:43:03:06:bd:02:c5:e2:24:16:ae: cd:b4:fa:f5:3a:a2:f5:fc:5a:77:77:4d:e5:22:f8:aa:d6:98: d2:c4:b3:3e:d4:77:a4:6d:13:ba:65:26:9d:5f:32:66:7e:d7: 87:cb:8e:82:e1:b3:84:b8:a8:e1:15:53:fb:15:4d:3d:d8:b1: f1:15:a6:07:3b:aa:2d:ce:24:70:af:16:32:1d:38:46:4b:d9: 9a:57:4f:04:b6:71:2c:5c:3c:c3:1f:5d:78:2b:c0:7d:df:1c: ca:65:9b:6f:b7:89:ed:c6:44:ad:8f:fb:e1:53:57:25:a1:7e: b1:d2:a5:96:12:9f:58:b5:58:39:77:84:3d:9d:24:34:08:bd: 3b:d6:00:c2:ef:94:60:83:1e:af:3a:d6:f4:65:38:90:4b:88: e8:c1:b6:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKbY0tmKySsJw7msOfR5iGNvBhzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhEMUIyMDdENUFBOTcyODE3MzIwNEE4RENFQjhBQTZF NDVCQkMwQTAeFw0yNTEyMTkxNDE2NDdaFw0yNTEyMjAxNjMwNDdaMDMxMTAvBgNV BAMTKDFDRjdEQzZCMDY5NTQ3NTI1NUQzQzQ2OTkwNkIxNzg1NjNCNzAyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMc6QMOv6NzJF89OgCMUEcZ/u DFvIjHMCm2Vs0ZXYk1nmaaoUWcoT+klkpEJtrjGVBzYgufXtT1BDmy/34HVeq7V/ o8gNRRTIjcelqxJYNj68IhFtLH4OqL+jHfVRJDZPBvHi2vfixWC0VgEKKlgEuuy2 25dx1ciRcbAu9EuNDn54eaeFyqSa5OiyvYUza3en8WBAtAATIAqQ0I1ZA+dW5WsB iPAeh8a88xv4YaPEgAsIQ8ohV4on9R04OxEBDsSHSTs5NZMURKhK1yjl5N0GJ9DB miAm8wp/XS74DE/dM0VQizNF9MHda+fID9Cp3u79UGuQibHLGyQ+2Jq0euepAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHPfcawaVR1JV08RpkGsXhWO3ApIwHwYDVR0j BBgwFoAUiNGyB9WqlygXMgSo3OuKpuRbvAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktl eFEvMC84OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RDFCMjA3RDVBQTk3Mjgx NzMyMDRBOERDRUI4QUE2RTQ1QkJDMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktleFEvMC84 OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSuUBjd14tkt1sPacf/MRvtv6StlQMBy367pN3M9e1yQQtJqZP4y8SGrxdfX sxPA3X1dxMZnQb0gBm94A9ZqWxGH9jtJS9d4X1lAa6En2tHTyUscnsIidg1Mb3B3 lKm4ajlDAwa9AsXiJBauzbT69Tqi9fxad3dN5SL4qtaY0sSzPtR3pG0TumUmnV8y Zn7Xh8uOguGzhLio4RVT+xVNPdix8RWmBzuqLc4kcK8WMh04RkvZmldPBLZxLFw8 wx9deCvAfd8cymWbb7eJ7cZErY/74VNXJaF+sdKllhKfWLVYOXeEPZ0kNAi9O9YA wu+UYIMerzrW9GU4kEuI6MG2qQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:49:12 2025 by rpki-client