This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft File: D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft (raw, json) Hash identifier: U7mTDvAcpsVTO+IGklQ2gY0oTQvPI3Jo9fTqNod8NsY= Subject key identifier: B1:66:AD:01:8B:5C:D3:10:34:1D:80:50:08:26:15:AE:FC:04:86:1E Authority key identifier: D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53 Certificate issuer: /CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053 Certificate serial: 422A6D92F94C94BA64468B5C15EA8D486DBDBBE1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer Subject info access: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft Manifest number: 40 Signing time: Fri 19 Dec 2025 23:37:39 +0000 Manifest this update: Fri 19 Dec 2025 23:32:39 +0000 Manifest next update: Sun 21 Dec 2025 03:19:39 +0000 Files and hashes: 1: 323830343a316538343a3a2f33322d3336203d3e20323634343333.roa (hash: wqkO26iBwML8dHCOdOfHPla5oFoB5WF7uIRgLGj2YMk=) 2: 3133312e3232312e3134382e302f32322d3234203d3e20323634343333.roa (hash: cB6sCKAyHvesTFjo6aVVBHx3MwFesWxApaaS8pLGJk4=) 3: D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl (hash: a3swwi0nMGESmFw0B//qNfFQv4rLjlxOieeJhZxXsus=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 03:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2a:6d:92:f9:4c:94:ba:64:46:8b:5c:15:ea:8d:48:6d:bd:bb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053 Validity Not Before: Dec 19 23:32:39 2025 GMT Not After : Dec 21 03:19:39 2025 GMT Subject: CN=B166AD018B5CD310341D8050082615AEFC04861E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:3f:4b:1c:e9:c6:4c:67:42:8d:dc:96:3d: b0:da:66:bf:29:48:b2:1d:9d:f9:3f:3e:b7:bd:29: 36:c8:88:e6:9b:bf:40:1f:13:18:54:ee:c2:b6:ca: cb:f9:27:d5:8b:e1:98:9d:da:cc:10:ab:09:d9:f3: 68:17:26:c4:d3:7a:39:97:2c:68:cc:7c:14:a3:ca: 42:7d:a7:09:07:23:85:e6:89:62:84:67:ae:81:97: 01:72:9b:9a:c1:fc:b5:3c:e4:a3:43:7c:38:4b:04: 4a:f5:aa:20:8c:54:4d:49:0d:39:a6:78:29:96:7d: 8b:a4:cf:04:57:b9:ae:e8:b1:80:bb:35:c9:40:a6: d8:05:cf:3b:de:57:69:d6:fd:c6:ce:68:36:2f:f2: 80:62:98:7b:45:57:ba:f7:ac:cb:83:ae:5a:38:1f: 32:1d:e3:7b:18:4f:64:03:f9:f3:8a:03:cf:70:e1: 3e:4f:3a:30:b7:5b:79:28:bd:be:e6:55:fb:d9:c0: 4b:4d:b1:09:20:ec:8c:40:a5:56:3c:21:98:2c:29: 2c:6b:4d:8e:87:d2:ef:72:c4:cd:09:06:25:1c:27: 58:ef:55:7e:4e:57:5a:b2:4f:c9:b9:f0:05:58:55: fb:fb:94:63:f5:98:d1:d7:5f:af:56:b0:a2:34:47: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:AD:01:8B:5C:D3:10:34:1D:80:50:08:26:15:AE:FC:04:86:1E X509v3 Authority Key Identifier: keyid:D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:6e:9e:0a:9e:86:d1:84:9c:c9:76:8e:f0:a7:6c:b7:52:50: 3a:a4:66:1e:bb:ed:05:7d:e2:e0:60:cf:48:46:17:63:da:78: e2:6d:78:9d:9e:94:7b:d2:24:35:b7:75:30:b6:d2:16:33:2e: 66:cf:26:db:e6:be:ae:0e:11:9b:74:7f:ac:6b:0f:94:99:d4: d6:4a:9c:db:21:9a:95:7c:49:2e:45:ea:cf:96:43:8d:09:a8: c9:cc:fe:58:27:77:79:ef:40:5a:49:38:c5:56:28:e7:ad:40: 34:96:55:ae:44:94:a7:64:bd:93:35:7c:f2:2a:e5:e5:a2:2f: 68:e2:87:8a:54:aa:8c:d9:7a:b7:0b:c3:2d:ad:91:c5:b7:bb: 1f:a3:00:a2:17:3e:ac:01:b1:24:56:42:d5:ed:86:4d:30:36: 6c:65:f1:fe:81:bd:ca:80:92:70:32:d7:40:1a:6b:83:f1:e3: 4f:3a:ec:8d:c2:97:96:c3:9e:1f:63:76:28:df:25:dc:b3:bb: 79:9b:f6:b5:61:f2:45:07:23:a3:d2:72:f3:dd:40:87:c6:83: a2:5a:85:33:03:b3:20:81:fb:25:53:12:07:30:6d:25:6f:d8: 21:00:5d:d5:23:c3:a1:c4:b2:c0:6a:b5:98:28:73:63:ea:6b: 52:d0:bf:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQiptkvlMlLpkRotcFeqNSG29u+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0NTFDREM4NkMwQTNGQjEyQ0VFQTBFQzdGNEIxRDM4 MjI3MDA1MzAeFw0yNTEyMTkyMzMyMzlaFw0yNTEyMjEwMzE5MzlaMDMxMTAvBgNV BAMTKEIxNjZBRDAxOEI1Q0QzMTAzNDFEODA1MDA4MjYxNUFFRkMwNDg2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/z9LHOnGTGdCjdyWPbDaZr8p SLIdnfk/Pre9KTbIiOabv0AfExhU7sK2ysv5J9WL4Zid2swQqwnZ82gXJsTTejmX LGjMfBSjykJ9pwkHI4XmiWKEZ66BlwFym5rB/LU85KNDfDhLBEr1qiCMVE1JDTmm eCmWfYukzwRXua7osYC7NclAptgFzzveV2nW/cbOaDYv8oBimHtFV7r3rMuDrlo4 HzId43sYT2QD+fOKA89w4T5POjC3W3kovb7mVfvZwEtNsQkg7IxApVY8IZgsKSxr TY6H0u9yxM0JBiUcJ1jvVX5OV1qyT8m58AVYVfv7lGP1mNHXX69WsKI0Rx7NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsWatAYtc0xA0HYBQCCYVrvwEhh4wHwYDVR0j BBgwFoAU2UUc3IbAo/sSzuoOx/Sx04InAFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUVOZ2RLVnhIb0RkS3VpNXExRVBKdFNoQTZCZVh1VnlVM25MdUpCcEJG ZVYvMC9EOTQ1MUNEQzg2QzBBM0ZCMTJDRUVBMEVDN0Y0QjFEMzgyMjcwMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NDUxQ0RDODZDMEEzRkIx MkNFRUEwRUM3RjRCMUQzODIyNzAwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUVOZ2RLVnhIb0RkS3VpNXExRVBKdFNoQTZCZVh1VnlVM25MdUpCcEJGZVYvMC9E OTQ1MUNEQzg2QzBBM0ZCMTJDRUVBMEVDN0Y0QjFEMzgyMjcwMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzG6eCp6G0YScyXaO8Kdst1JQOqRmHrvtBX3i4GDPSEYXY9p44m14nZ6Ue9Ik Nbd1MLbSFjMuZs8m2+a+rg4Rm3R/rGsPlJnU1kqc2yGalXxJLkXqz5ZDjQmoycz+ WCd3ee9AWkk4xVYo561ANJZVrkSUp2S9kzV88irl5aIvaOKHilSqjNl6twvDLa2R xbe7H6MAohc+rAGxJFZC1e2GTTA2bGXx/oG9yoCScDLXQBprg/HjTzrsjcKXlsOe H2N2KN8l3LO7eZv2tWHyRQcjo9Jy891Ah8aDolqFMwOzIIH7JVMSBzBtJW/YIQBd 1SPDocSywGq1mChzY+prUtC/aQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:40 2025 by rpki-client