This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft File: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft (raw, json) Hash identifier: +m0T3Hor705vCmW3Z1JcKjaPOGZYnm5lyE0Cw7pK5vk= Subject key identifier: 38:E1:D0:2F:39:DF:EE:95:D1:13:4A:20:F6:31:3B:54:C3:87:CB:F1 Authority key identifier: D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D Certificate issuer: /CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Certificate serial: 600B2EF129C76460B7C9313D50FEAE49E2E0074A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft Manifest number: F5 Signing time: Sat 20 Dec 2025 11:40:41 +0000 Manifest this update: Sat 20 Dec 2025 11:35:41 +0000 Manifest next update: Sun 21 Dec 2025 12:44:41 +0000 Files and hashes: 1: 323830343a346237343a3a2f33322d313238203d3e20323637333037.roa (hash: dUZNvF/89BKD0mmyDTVw/iy7hWhShcuVbo/kVaXn0wc=) 2: 34352e3233332e3130342e302f32322d3332203d3e20323637333037.roa (hash: 9GALASwvDqxvBvCAHp51gmtuAoBU3cDGHtT6KouQUqs=) 3: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl (hash: 1uXANRjXfUBafT8NxEBjvpVaIpY0qRIjbM+GBdMVUQU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 12:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0b:2e:f1:29:c7:64:60:b7:c9:31:3d:50:fe:ae:49:e2:e0:07:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Validity Not Before: Dec 20 11:35:41 2025 GMT Not After : Dec 21 12:44:41 2025 GMT Subject: CN=38E1D02F39DFEE95D1134A20F6313B54C387CBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:e9:51:03:cc:54:70:4d:b4:6e:ed:75:27: bc:9e:b1:d1:28:51:f2:e0:a9:43:35:61:b5:12:06: e4:a8:8f:24:24:36:b1:d7:c1:3c:f9:97:6f:0a:d9: 8d:b4:64:f8:d1:9f:6b:5a:78:3b:42:20:23:d9:e2: 33:47:06:57:88:05:f6:2b:f2:6b:23:2f:89:fc:d4: f0:fa:19:1e:b6:90:f0:52:ee:ec:09:2e:df:d7:85: 14:11:eb:bd:60:d3:08:bc:f1:48:39:2e:84:b4:e7: ce:23:1b:f2:7f:28:d8:e4:ee:f6:ba:db:62:7c:75: 3a:a0:e8:23:23:c4:d4:a1:77:0f:9e:5b:06:69:c3: 39:ae:7c:8c:5c:6d:bc:07:bd:8b:1b:f3:3b:8b:5d: 9e:23:e2:7b:a1:5c:df:e8:87:c7:b2:6d:ba:d8:47: e5:a6:62:19:bb:f8:53:19:50:56:8a:a7:6a:b3:4a: 61:93:c4:1b:c0:c1:f1:5e:25:ad:b5:36:ce:ce:63: 36:21:3b:13:10:99:36:e1:9b:a8:9f:59:01:74:5d: 3a:29:ee:44:a1:9e:5b:4e:ff:29:31:62:58:66:65: 3b:18:f0:1e:f9:fd:bb:cf:9f:92:60:22:10:de:a5: 09:13:eb:2f:4f:78:73:dc:55:f2:89:04:47:68:96: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E1:D0:2F:39:DF:EE:95:D1:13:4A:20:F6:31:3B:54:C3:87:CB:F1 X509v3 Authority Key Identifier: keyid:D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:5d:c2:cb:8d:4e:49:b6:e4:3c:b8:2b:bf:fa:49:7a:b8:92: 74:16:54:ae:6f:15:b4:9c:bc:22:46:66:ff:9e:53:26:5b:19: 21:57:5d:7e:1b:f1:37:ea:11:ee:25:cd:9c:a8:ee:d2:f4:85: 96:67:01:95:de:ed:61:f1:0d:83:0d:cc:fd:da:8b:7a:bb:26: 2d:6a:57:1c:88:dd:e4:d0:04:d4:26:4a:46:2a:60:f8:55:b3: 29:0b:87:fe:9c:f3:8d:31:25:fa:d7:78:2b:0c:7c:d7:08:b2: 4d:ae:0d:e7:db:ca:2b:3e:2b:e3:b4:a3:15:c8:57:98:57:d0: 19:8e:82:58:18:f8:5c:d4:a1:e9:3a:e6:3a:37:e0:6d:50:3a: e8:3b:5a:5d:6d:ae:5d:cf:55:93:5b:9b:08:40:91:11:5f:9e: f9:c7:b9:c2:74:8e:2e:5c:2b:9b:3a:67:a5:15:45:ed:da:20: 3a:4a:9c:47:8f:2a:03:e6:39:a8:d4:6c:5c:a9:58:b3:eb:c8: 4c:03:21:4c:0f:0e:93:a5:30:df:53:92:64:99:51:1e:f4:e1: 45:43:5f:04:f5:2c:e7:b2:91:22:95:22:4a:d9:56:28:95:19: f8:7c:d3:f4:c4:af:c0:40:59:a8:11:bf:a6:3a:e7:90:fa:41: 5c:2d:3a:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYAsu8SnHZGC3yTE9UP6uSeLgB0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxODkyNTRCNzVCOURCQkNBODRFQUQ3OTg2NUM1QzVG N0YxMEU1RDAeFw0yNTEyMjAxMTM1NDFaFw0yNTEyMjExMjQ0NDFaMDMxMTAvBgNV BAMTKDM4RTFEMDJGMzlERkVFOTVEMTEzNEEyMEY2MzEzQjU0QzM4N0NCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtC+lRA8xUcE20bu11J7yesdEo UfLgqUM1YbUSBuSojyQkNrHXwTz5l28K2Y20ZPjRn2taeDtCICPZ4jNHBleIBfYr 8msjL4n81PD6GR62kPBS7uwJLt/XhRQR671g0wi88Ug5LoS0584jG/J/KNjk7va6 22J8dTqg6CMjxNShdw+eWwZpwzmufIxcbbwHvYsb8zuLXZ4j4nuhXN/oh8eybbrY R+WmYhm7+FMZUFaKp2qzSmGTxBvAwfFeJa21Ns7OYzYhOxMQmTbhm6ifWQF0XTop 7kShnltO/ykxYlhmZTsY8B75/bvPn5JgIhDepQkT6y9PeHPcVfKJBEdolqG7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOOHQLznf7pXRE0og9jE7VMOHy/EwHwYDVR0j BBgwFoAU2RiSVLdbnbvKhOrXmGXFxffxDl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0 cXMvMC9EOTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MTg5MjU0Qjc1QjlEQkJD QTg0RUFENzk4NjVDNUM1RjdGMTBFNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0cXMvMC9E OTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABF3Cy41OSbbkPLgrv/pJeriSdBZUrm8VtJy8IkZm/55TJlsZIVddfhvxN+oR 7iXNnKju0vSFlmcBld7tYfENgw3M/dqLersmLWpXHIjd5NAE1CZKRipg+FWzKQuH /pzzjTEl+td4Kwx81wiyTa4N59vKKz4r47SjFchXmFfQGY6CWBj4XNSh6TrmOjfg bVA66DtaXW2uXc9Vk1ubCECREV+e+ce5wnSOLlwrmzpnpRVF7dogOkqcR48qA+Y5 qNRsXKlYs+vITAMhTA8Ok6Uw31OSZJlRHvThRUNfBPUs57KRIpUiStlWKJUZ+HzT 9MSvwEBZqBG/pjrnkPpBXC06pQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:35:49 2025 by rpki-client