This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
File: C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft (raw, json)
Hash identifier: 9qKb0ySjf/6qsjXFtdKNPzcZkW1t3gIHvYFdFI4rRuc=
Subject key identifier: A0:61:E3:D5:BF:30:58:E8:E9:0E:1A:85:53:40:CA:96:7E:51:C3:BC
Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
Certificate issuer: /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Certificate serial: 509C532D68052D217B692E469FD95CEC1BC7292E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
Manifest number: 01CA
Signing time: Wed 24 Dec 2025 20:44:28 +0000
Manifest this update: Wed 24 Dec 2025 20:39:28 +0000
Manifest next update: Thu 25 Dec 2025 23:14:28 +0000
Files and hashes: 1: 323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (hash: 2GvlRynMXEvu3A0kCDLQB+Gp55iYyLUR7ENalGcUhBc=)
2: 3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (hash: 2OZaK3XVHDYJW95YQoRuXz+veAnFcZdofQ9N3sdy+d4=)
3: C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl (hash: gLdbS/UBG605OV6t+ucSLi5ClQsi+ArrsFRI2UCdgzQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl
rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 25 Dec 2025 21:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9c:53:2d:68:05:2d:21:7b:69:2e:46:9f:d9:5c:ec:1b:c7:29:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Validity
Not Before: Dec 24 20:39:28 2025 GMT
Not After : Dec 25 23:14:28 2025 GMT
Subject: CN=A061E3D5BF3058E8E90E1A855340CA967E51C3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:b1:48:cc:6b:42:c7:94:66:e2:84:01:48:
43:fa:57:c5:87:85:c3:23:0f:b4:ff:48:27:1a:c1:
f2:bd:70:5d:9b:23:99:6e:6a:ca:44:56:c7:d7:84:
63:06:70:d0:b1:a5:cf:4c:dc:21:99:8f:42:3e:e3:
aa:8b:1a:ba:6f:ec:33:a5:09:1c:a2:12:fc:1e:21:
92:2a:1f:b4:62:36:91:23:38:ab:6c:90:bd:21:86:
3f:52:57:32:eb:9c:e6:9b:20:08:35:f6:66:f7:9d:
6e:7a:bf:80:48:c6:66:aa:65:82:3f:4e:1c:08:00:
3f:89:c8:fe:56:d3:6b:76:11:f5:ec:d5:86:6f:d4:
1e:06:9b:8f:97:cd:59:26:c7:7b:34:93:f7:ef:1a:
2c:17:f7:c5:88:44:c8:c3:47:4f:11:7e:fe:2e:ee:
a9:be:43:12:04:8a:81:72:9b:49:30:33:f1:33:93:
3d:1c:e4:b4:d3:ae:c9:52:50:ad:bf:6a:81:ab:4c:
0b:42:0d:c0:6e:cc:d1:0f:c1:36:aa:88:a4:6f:8e:
cb:a3:11:bf:8c:9c:59:75:8d:88:07:18:aa:e6:85:
3d:2c:8e:1b:fb:f7:81:dd:b2:8d:fb:c5:69:b0:b8:
5f:17:d6:5d:be:87:53:16:75:f9:34:07:d8:9d:98:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:E3:D5:BF:30:58:E8:E9:0E:1A:85:53:40:CA:96:7E:51:C3:BC
X509v3 Authority Key Identifier:
keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b3:f2:3f:ee:3b:57:95:2a:61:6d:97:6e:63:15:65:e8:a8:
ab:bc:8a:db:c0:7a:a4:cb:5e:1a:ab:47:47:14:07:b4:10:70:
59:55:17:d4:40:41:b1:c0:3c:09:a3:84:c2:f2:81:bb:2f:60:
97:ef:d7:fd:7f:27:f5:8d:22:d5:05:5a:63:63:cc:6f:fc:d2:
78:23:f9:64:87:c5:5a:55:39:69:59:70:45:ea:39:57:b4:f9:
65:04:24:39:c1:be:c3:29:02:3b:4c:a1:da:3b:9c:21:fd:4b:
7c:4e:34:e8:a8:ed:f9:d9:d3:55:15:fc:8c:ee:de:0b:7e:b0:
ac:2d:38:f9:b4:6f:f8:c7:95:ba:f7:1f:b4:fa:20:74:71:64:
09:b0:f7:a5:da:c3:6e:b8:c8:c9:4a:ac:58:2b:1b:39:e2:3b:
a9:cf:94:26:5f:b8:47:12:7b:02:73:0e:78:de:13:39:c3:57:
08:c8:34:32:5f:f1:9d:ad:29:db:2c:7f:14:cf:53:c8:c4:8c:
29:f9:94:e3:f5:dc:3c:55:32:f3:9c:2f:f1:c6:fc:6c:72:31:
fc:a0:04:2c:72:95:c3:d3:1b:a9:ff:49:97:14:f2:c9:62:3f:
6a:d1:b1:71:a6:a7:c6:c7:4e:a9:ff:c5:92:7a:fd:46:c5:4a:
72:a4:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:51:36 2025 by rpki-client