This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft File: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft (raw, json) Hash identifier: 6gHopEyvEC5Ak18tGrVPliPfMyEUplZYuwfCOk6Pu80= Subject key identifier: 76:6F:AE:6D:0D:CC:C6:08:1A:A9:51:EA:D5:73:D9:D5:00:51:DF:6E Authority key identifier: 21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62 Certificate issuer: /CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62 Certificate serial: 586660A92C53B221004DE5095AC73AD90F9A5F11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer Subject info access: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft Manifest number: 2E Signing time: Fri 19 Dec 2025 17:59:19 +0000 Manifest this update: Fri 19 Dec 2025 17:54:19 +0000 Manifest next update: Sat 20 Dec 2025 18:45:19 +0000 Files and hashes: 1: 34352e3136312e3232342e302f32322d3234203d3e20323638343737.roa (hash: VQI4ymWbBnU+UgVt+pYFL4UDEQuVU0M1Kf8Kqq/NFjI=) 2: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl (hash: +BBqBCUZ/bwTkyS4Buxq7VY/D8TMzy7/Swh6ZilHWts=) 3: 323830343a353163383a3a2f33322d3336203d3e20323638343737.roa (hash: ZeYF/IADxUCs97amTb0H/O7aiJsJoEpO8oClUzCl2Rs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 18:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:66:60:a9:2c:53:b2:21:00:4d:e5:09:5a:c7:3a:d9:0f:9a:5f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62 Validity Not Before: Dec 19 17:54:19 2025 GMT Not After : Dec 20 18:45:19 2025 GMT Subject: CN=766FAE6D0DCCC6081AA951EAD573D9D50051DF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:43:75:14:a4:b2:99:2f:de:f1:de:cd:2f:38: bd:f2:f8:b4:5b:1b:98:2e:f3:23:d8:d0:6f:bc:24: 7e:6d:7d:4b:00:d3:9c:27:34:b2:1e:cd:14:d0:0d: ce:cf:2a:35:5e:e5:78:62:98:3e:b9:f9:f0:d1:cd: 64:50:e7:c5:e9:b6:e7:f1:e2:82:2e:9a:5e:d5:1c: cd:8c:6f:8e:e8:a1:d0:b4:8e:d1:e7:ae:7e:b2:94: e8:bb:86:cf:96:06:ad:95:70:0b:56:61:fb:b8:5f: e7:4d:11:54:16:da:5b:c9:23:03:cf:01:a0:f1:87: d7:6d:fb:bc:27:ae:ae:6f:8a:5a:bb:8d:76:c1:21: 3d:db:d4:fe:35:a6:df:f3:91:79:5d:d5:9a:ac:a7: bd:72:33:2b:37:a3:a4:e5:c7:44:a9:a7:84:ae:4c: 2c:81:9c:12:fc:bb:c8:bb:47:02:30:c7:53:64:81: 91:d3:e0:a3:ad:c9:fa:8f:20:a8:30:fb:ef:cb:9e: 31:dd:32:0f:49:67:66:7d:e0:2f:61:1b:96:bd:a1: fa:c5:e3:6e:69:08:1e:b9:5a:1e:56:bc:78:d3:75: b2:e7:59:3e:e5:43:f0:7c:f0:eb:f2:27:02:02:28: d3:7f:54:ee:82:19:05:ef:09:0b:3c:fb:0f:1e:1b: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6F:AE:6D:0D:CC:C6:08:1A:A9:51:EA:D5:73:D9:D5:00:51:DF:6E X509v3 Authority Key Identifier: keyid:21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:85:f7:53:18:50:5a:dd:4e:85:9b:71:4b:9b:48:00:40:38: fb:5f:69:df:c3:47:a4:6a:c2:68:86:87:09:0a:c9:dd:c5:47: 9f:40:20:ab:be:9b:2d:b8:ea:0c:45:52:6f:c4:12:cb:9c:d8: 39:ba:49:2e:40:57:9b:41:c7:59:a9:3e:8a:33:bf:24:b2:2b: a8:4d:a1:83:3c:e4:73:5b:4a:1c:a3:33:07:ea:8c:74:16:69: 75:54:20:07:2d:5f:3f:c8:a2:b2:7d:f5:d3:0f:2b:6e:ff:ef: 79:91:ea:3d:68:34:da:f3:0c:36:9b:0a:43:71:eb:a0:eb:cb: 21:cf:7a:22:b5:db:c3:fd:cc:bb:6b:69:c3:c8:b6:7f:00:24: 95:eb:00:54:1f:0c:3b:e4:8e:22:4d:92:e2:92:4e:77:f4:09: c6:68:e1:af:2d:cb:ff:73:e0:af:47:66:96:72:94:9f:23:d6: bc:90:04:05:92:02:73:e9:1f:3a:fc:41:09:8d:a0:3a:23:1c: 53:36:cb:dc:68:e8:e7:d7:1d:73:61:fe:3e:ef:24:33:7f:ce: d4:ac:f9:8a:ff:8e:37:59:c5:6d:92:c6:9c:3d:e5:f4:19:c2: 75:62:cc:30:1b:e5:ec:b6:f4:33:1d:b8:d0:0c:dc:5b:a5:ec: bd:02:8c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWGZgqSxTsiEATeUJWsc62Q+aXxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQTY5MjRDRjVDQkUzRjk3MEREMzgyRTVFNDg2MEFE NjdDQUI2MjAeFw0yNTEyMTkxNzU0MTlaFw0yNTEyMjAxODQ1MTlaMDMxMTAvBgNV BAMTKDc2NkZBRTZEMERDQ0M2MDgxQUE5NTFFQUQ1NzNEOUQ1MDA1MURGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQ3UUpLKZL97x3s0vOL3y+LRb G5gu8yPY0G+8JH5tfUsA05wnNLIezRTQDc7PKjVe5XhimD65+fDRzWRQ58Xptufx 4oIuml7VHM2Mb47oodC0jtHnrn6ylOi7hs+WBq2VcAtWYfu4X+dNEVQW2lvJIwPP AaDxh9dt+7wnrq5vilq7jXbBIT3b1P41pt/zkXld1Zqsp71yMys3o6Tlx0Spp4Su TCyBnBL8u8i7RwIwx1NkgZHT4KOtyfqPIKgw++/LnjHdMg9JZ2Z94C9hG5a9ofrF 425pCB65Wh5WvHjTdbLnWT7lQ/B88OvyJwICKNN/VO6CGQXvCQs8+w8eG7/fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdm+ubQ3MxggaqVHq1XPZ1QBR324wHwYDVR0j BBgwFoAUIbppJM9cvj+XDdOC5eSGCtZ8q2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHpWQ3lQS0piTmc4NHpkYlRvMUZLU2E5ZlVGNDlpNkVjUlFYQ2I0dEZo aFovMC8yMUJBNjkyNENGNUNCRTNGOTcwREQzODJFNUU0ODYwQUQ2N0NBQjYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQkE2OTI0Q0Y1Q0JFM0Y5 NzBERDM4MkU1RTQ4NjBBRDY3Q0FCNjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHpWQ3lQS0piTmc4NHpkYlRvMUZLU2E5ZlVGNDlpNkVjUlFYQ2I0dEZoaFovMC8y MUJBNjkyNENGNUNCRTNGOTcwREQzODJFNUU0ODYwQUQ2N0NBQjYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIX3UxhQWt1OhZtxS5tIAEA4+19p38NHpGrCaIaHCQrJ3cVHn0Agq76bLbjq DEVSb8QSy5zYObpJLkBXm0HHWak+ijO/JLIrqE2hgzzkc1tKHKMzB+qMdBZpdVQg By1fP8iisn310w8rbv/veZHqPWg02vMMNpsKQ3HroOvLIc96IrXbw/3Mu2tpw8i2 fwAklesAVB8MO+SOIk2S4pJOd/QJxmjhry3L/3Pgr0dmlnKUnyPWvJAEBZICc+kf OvxBCY2gOiMcUzbL3Gjo59cdc2H+Pu8kM3/O1Kz5iv+ON1nFbZLGnD3l9BnCdWLM MBvl7Lb0Mx240AzcW6XsvQKM/w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:42:42 2025 by rpki-client