This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json) Hash identifier: 9XXBayWXzFzxRuTo2jxJsTzue67lQF25aRyxdF1xhr8= Subject key identifier: 01:52:0B:87:64:AD:9A:1D:49:87:1D:16:7A:B2:8A:F2:1A:78:30:8E Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Certificate serial: 6B376611462AFA6FFCA4596F4C8416D1F0BDD2C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft Manifest number: 0346 Signing time: Sat 20 Dec 2025 20:33:06 +0000 Manifest this update: Sat 20 Dec 2025 20:28:06 +0000 Manifest next update: Mon 22 Dec 2025 00:29:06 +0000 Files and hashes: 1: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=) 2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: w7i6B/nvBMKroGqN37wmcLn550XRDkjahS0ewxdM+Ak=) 3: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 00:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:37:66:11:46:2a:fa:6f:fc:a4:59:6f:4c:84:16:d1:f0:bd:d2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Validity Not Before: Dec 20 20:28:06 2025 GMT Not After : Dec 22 00:29:06 2025 GMT Subject: CN=01520B8764AD9A1D49871D167AB28AF21A78308E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:2b:89:9a:a1:09:d8:af:48:44:4b:cb:1e: b0:c2:94:57:dc:b4:21:a2:87:15:29:14:0d:3b:89: b5:29:74:32:49:1f:01:41:81:bc:b0:8a:6c:41:ce: a4:01:b1:f3:b9:78:a1:63:01:99:52:5b:fc:4f:33: 8a:bc:39:11:4b:88:7c:18:71:64:22:da:28:c9:d9: d6:23:db:67:35:51:08:14:43:75:6f:c2:05:ec:07: 91:47:ee:f6:45:42:c3:70:f5:6a:01:f2:af:82:ea: cd:30:1b:60:a2:6c:41:5a:cd:fb:f8:9e:78:7b:1e: 2d:d3:73:22:70:74:54:af:20:fb:3e:02:c1:dc:c6: ea:21:06:ca:4d:94:a7:d9:ce:4f:db:34:44:bd:00: e8:6c:a9:32:d1:b2:b2:9d:6c:3a:f1:cf:07:eb:52: b2:3c:21:a1:d3:ca:6b:e2:5a:81:34:da:2c:a6:60: 40:1d:10:9a:1c:d5:d1:28:f0:a1:bc:98:ef:90:80: 2b:fc:19:aa:a5:b1:01:2c:0b:40:3c:3c:86:8e:39: 01:b4:42:65:14:64:73:69:4e:25:d5:e1:87:c7:18: ab:06:b0:04:67:5a:78:89:c4:2a:a3:91:b4:5a:87: 1c:7b:50:4b:53:44:75:08:ca:53:fc:aa:76:63:68: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:0B:87:64:AD:9A:1D:49:87:1D:16:7A:B2:8A:F2:1A:78:30:8E X509v3 Authority Key Identifier: keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3c:db:80:2e:88:0b:0e:1a:5e:8f:d0:1c:fd:49:c0:8f:83: 85:e3:b3:d6:c8:8c:58:69:8f:0c:4f:76:ad:bb:92:13:48:49: 33:8e:69:08:a4:81:57:f2:2f:9e:a7:e1:10:e0:47:e8:f0:c7: c8:ea:79:22:04:79:7b:63:ce:8d:9f:eb:12:de:9b:52:3a:bf: 30:e7:49:bd:51:e9:38:f4:69:b4:90:5f:f5:31:2f:73:18:db: 1a:27:74:cb:1a:2d:d6:8b:45:0c:ec:b4:d4:e5:70:1d:94:c0: 32:58:6d:1e:a2:5a:9e:4b:01:40:78:d2:14:50:b5:f2:1b:40: 9f:3b:72:1a:0f:4d:34:6e:60:bd:a6:f4:f5:31:af:c6:b3:f1: 1a:22:a0:cd:75:5d:47:fc:56:34:71:b9:a8:4f:91:35:5c:13: a7:35:02:36:40:72:a4:c9:1b:36:24:a9:eb:fe:42:d8:98:ba: 11:a4:07:2b:0c:d2:29:ed:67:bd:c9:02:01:fd:73:dd:a2:cc: 23:2b:d5:74:71:60:68:29:aa:56:85:49:29:00:25:81:36:15: 76:ff:72:67:02:76:49:57:83:33:9e:6b:b7:c8:30:86:fa:bb: a6:bf:a5:93:77:dc:a9:7c:4b:ce:76:d2:35:3b:eb:48:51:33: f5:e5:f2:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUazdmEUYq+m/8pFlvTIQW0fC90sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE Q0EwMDE1NjAeFw0yNTEyMjAyMDI4MDZaFw0yNTEyMjIwMDI5MDZaMDMxMTAvBgNV BAMTKDAxNTIwQjg3NjRBRDlBMUQ0OTg3MUQxNjdBQjI4QUYyMUE3ODMwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjSuJmqEJ2K9IREvLHrDClFfc tCGihxUpFA07ibUpdDJJHwFBgbywimxBzqQBsfO5eKFjAZlSW/xPM4q8ORFLiHwY cWQi2ijJ2dYj22c1UQgUQ3VvwgXsB5FH7vZFQsNw9WoB8q+C6s0wG2CibEFazfv4 nnh7Hi3TcyJwdFSvIPs+AsHcxuohBspNlKfZzk/bNES9AOhsqTLRsrKdbDrxzwfr UrI8IaHTymviWoE02iymYEAdEJoc1dEo8KG8mO+QgCv8GaqlsQEsC0A8PIaOOQG0 QmUUZHNpTiXV4YfHGKsGsARnWniJxCqjkbRahxx7UEtTRHUIylP8qnZjaIs7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAVILh2Stmh1Jhx0WerKK8hp4MI4wHwYDVR0j BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4 bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4bmUvMS8z Q0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAljzbgC6ICw4aXo/QHP1JwI+DheOz1siMWGmPDE92rbuSE0hJM45pCKSBV/Iv nqfhEOBH6PDHyOp5IgR5e2POjZ/rEt6bUjq/MOdJvVHpOPRptJBf9TEvcxjbGid0 yxot1otFDOy01OVwHZTAMlhtHqJanksBQHjSFFC18htAnztyGg9NNG5gvab09TGv xrPxGiKgzXVdR/xWNHG5qE+RNVwTpzUCNkBypMkbNiSp6/5C2Ji6EaQHKwzSKe1n vckCAf1z3aLMIyvVdHFgaCmqVoVJKQAlgTYVdv9yZwJ2SVeDM55rt8gwhvq7pr+l k3fcqXxLznbSNTvrSFEz9eXypg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:00:19 2025 by rpki-client