This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: bzFcJb3P7Mxth54idOHVpuyChHRKv2/opX/9F3UMIr4= Subject key identifier: 23:0F:E8:DE:47:77:2B:F8:20:F5:BB:1D:26:CC:83:80:3A:A6:E0:51 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 05A9EDBD6955AAEDBFF9ECF7FF3202113F205737 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 02C0 Signing time: Fri 19 Dec 2025 17:18:25 +0000 Manifest this update: Fri 19 Dec 2025 17:13:25 +0000 Manifest next update: Sat 20 Dec 2025 20:19:25 +0000 Files and hashes: 1: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: G00fRPIbdNeuvmuvvKXJ56aywS2/9xbzF1ko3EOKp98=) 2: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) 3: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 20:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a9:ed:bd:69:55:aa:ed:bf:f9:ec:f7:ff:32:02:11:3f:20:57:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Dec 19 17:13:25 2025 GMT Not After : Dec 20 20:19:25 2025 GMT Subject: CN=230FE8DE47772BF820F5BB1D26CC83803AA6E051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:97:f0:c1:25:9d:a9:19:3b:85:f0:55:b5: 51:0d:e5:20:d2:aa:46:59:ba:7a:69:d6:1c:37:e6: 06:be:c6:fb:d6:bd:e3:45:72:15:85:46:78:a0:f9: 2d:02:7f:c1:f3:80:c4:59:fa:bb:d2:6e:62:fb:86: 98:1e:cf:48:c0:0f:81:06:35:0e:a1:79:f8:af:42: 3e:72:d4:d2:45:8a:3d:04:a3:f2:35:e4:e4:0d:5b: a6:eb:c7:2a:c7:60:58:d5:1b:a4:b4:1e:eb:cc:b0: 32:df:4b:26:38:56:c2:b1:4e:2a:bf:2f:a5:d4:d7: 26:36:be:5c:4b:8d:ab:f6:01:67:f3:73:34:bf:93: dc:98:55:14:12:44:83:8c:62:70:3e:d0:82:6a:2a: 4f:54:ec:3c:3a:6c:ca:27:c3:bf:c2:da:9c:77:5d: 08:97:b5:fd:69:f9:50:ad:08:e4:ed:10:32:79:27: 6f:ac:2e:ec:2e:5b:90:34:c0:19:c6:9e:68:74:f6: 2e:b2:3b:4a:c9:3e:58:22:64:0e:0c:28:fb:99:c3: 3b:e1:d8:77:27:01:1a:d3:e3:84:81:65:a3:aa:85: 2a:22:65:73:64:0e:4c:fa:ab:7e:17:ff:8e:3c:21: 8b:7b:f2:21:dd:b5:9b:d1:c8:c9:88:27:06:15:bc: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0F:E8:DE:47:77:2B:F8:20:F5:BB:1D:26:CC:83:80:3A:A6:E0:51 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5a:5c:8a:36:da:ab:dc:24:39:d9:e7:64:8d:81:c8:99:67: f6:40:4c:a9:3e:10:c2:a9:f7:35:96:61:26:ff:82:5f:0d:61: dd:7a:b6:b8:d8:0a:d8:07:e1:aa:c2:9a:e5:15:35:e4:ab:54: ea:b4:36:7b:a0:5c:bb:20:10:d9:ca:3e:51:de:c3:2b:93:a1: c1:dc:ae:13:a3:33:c5:0c:bc:13:9a:9b:94:69:a6:14:ed:5a: c2:91:d2:56:c2:3b:80:75:c7:93:96:42:1d:2e:f9:20:d3:a1: 95:40:fa:b8:16:d8:66:41:fc:45:8b:d7:f6:33:c4:bc:eb:38: 1d:f7:ea:50:15:dc:5e:29:2a:46:0a:d1:ce:1d:4e:63:6c:47: ad:b0:18:71:e9:fd:8f:ef:f9:6e:0a:94:ab:bf:85:3d:3d:15: 95:d4:6a:79:1a:91:75:5c:06:bb:15:0f:05:52:b6:1c:ae:17: 3e:0f:7c:a4:8d:50:f6:80:25:9a:31:bb:e1:23:e1:42:1f:cb: cf:10:6b:ea:68:90:bb:22:f3:5b:74:bd:da:d6:da:09:24:f9: 6c:6a:cf:1c:c6:8e:22:d0:4c:2b:a2:44:4c:25:9c:5f:fb:f2: 61:28:1b:9d:2b:75:fc:be:df:31:9c:13:b9:0a:91:51:d0:8f: 92:10:93:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBantvWlVqu2/+ez3/zICET8gVzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTEyMTkxNzEzMjVaFw0yNTEyMjAyMDE5MjVaMDMxMTAvBgNV BAMTKDIzMEZFOERFNDc3NzJCRjgyMEY1QkIxRDI2Q0M4MzgwM0FBNkUwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/ZfwwSWdqRk7hfBVtVEN5SDS qkZZunpp1hw35ga+xvvWveNFchWFRnig+S0Cf8HzgMRZ+rvSbmL7hpgez0jAD4EG NQ6hefivQj5y1NJFij0Eo/I15OQNW6brxyrHYFjVG6S0HuvMsDLfSyY4VsKxTiq/ L6XU1yY2vlxLjav2AWfzczS/k9yYVRQSRIOMYnA+0IJqKk9U7Dw6bMonw7/C2px3 XQiXtf1p+VCtCOTtEDJ5J2+sLuwuW5A0wBnGnmh09i6yO0rJPlgiZA4MKPuZwzvh 2HcnARrT44SBZaOqhSoiZXNkDkz6q34X/448IYt78iHdtZvRyMmIJwYVvHx5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIw/o3kd3K/gg9bsdJsyDgDqm4FEwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG1pcijbaq9wkOdnnZI2ByJln9kBMqT4Qwqn3NZZhJv+CXw1h3Xq2uNgK2Afh qsKa5RU15KtU6rQ2e6BcuyAQ2co+Ud7DK5OhwdyuE6MzxQy8E5qblGmmFO1awpHS VsI7gHXHk5ZCHS75INOhlUD6uBbYZkH8RYvX9jPEvOs4HffqUBXcXikqRgrRzh1O Y2xHrbAYcen9j+/5bgqUq7+FPT0VldRqeRqRdVwGuxUPBVK2HK4XPg98pI1Q9oAl mjG74SPhQh/LzxBr6miQuyLzW3S92tbaCST5bGrPHMaOItBMK6JETCWcX/vyYSgb nSt1/L7fMZwTuQqRUdCPkhCTFg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:49:36 2025 by rpki-client