This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft File: 312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft (raw, json) Hash identifier: 0/rZelRREV7wzlKwPq4JX+KqyZiLzGj18bD2qxp6AAQ= Subject key identifier: AB:49:DC:90:67:D7:91:B3:92:C9:8C:8A:5D:35:F0:28:84:36:6D:DC Authority key identifier: 31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5 Certificate issuer: /CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5 Certificate serial: 19A19309FE1785BC19C1D20E108961556FA30719 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer Subject info access: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft Manifest number: 0127 Signing time: Wed 31 Dec 2025 08:23:12 +0000 Manifest this update: Wed 31 Dec 2025 08:18:12 +0000 Manifest next update: Thu 01 Jan 2026 12:11:12 +0000 Files and hashes: 1: 3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (hash: AcgGAlvaKXbUxC9kB4j399ZgseBmCmyzLXIybiYAVlE=) 2: 323830343a313838633a3a2f33322d313238203d3e203631393339.roa (hash: HcOGsAPSHvkeaRLUa88kfrvHyXD3Izj/1JBiGMJkKhs=) 3: 312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl (hash: PhjIh9J9mc9wXQgwEWfRa+y/jTh4HimuoqFSX65EWGs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Jan 2026 12:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a1:93:09:fe:17:85:bc:19:c1:d2:0e:10:89:61:55:6f:a3:07:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5 Validity Not Before: Dec 31 08:18:12 2025 GMT Not After : Jan 1 12:11:12 2026 GMT Subject: CN=AB49DC9067D791B392C98C8A5D35F02884366DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:c7:f0:32:3f:c4:d8:1a:21:c8:fa:7c:89: 3a:c6:0d:c6:01:46:68:23:29:97:ab:eb:fe:e1:73: 06:1c:19:ab:a8:7b:c8:7b:d0:19:b7:a2:6c:b2:e7: 7a:71:23:4c:60:35:7f:9c:ed:07:36:c1:24:17:27: b0:c9:17:b8:5c:d6:0e:c7:56:0d:34:71:bc:2d:04: 4e:ac:00:92:cb:be:99:93:06:d7:74:75:07:bd:56: 6e:ff:04:bb:30:78:21:e9:dd:ea:c0:9f:36:26:46: fe:85:fc:09:d9:41:2b:c8:e0:90:dc:0b:dd:d9:4a: c9:8e:c5:4f:fe:76:af:97:44:60:1b:a4:57:76:c0: 89:86:43:4a:b8:d8:d8:51:fc:2e:0b:52:44:92:a3: 38:08:a2:3a:ff:67:7d:1d:84:b8:42:94:f7:27:da: 66:20:e3:cc:15:ab:28:67:ae:b8:6b:be:66:44:23: ce:0e:ad:20:3a:e7:71:e5:71:16:14:3f:7e:bb:af: 81:bb:93:a5:54:73:8f:74:ee:49:d8:52:d4:15:c3: e0:0e:b3:a7:d6:dd:10:c7:d7:e8:09:9e:d0:0f:30: 6f:30:e0:4e:40:1d:0e:5a:21:1c:cd:63:17:32:ae: 6f:6b:cb:3b:9f:73:e8:ad:73:06:55:ee:14:92:c6: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:DC:90:67:D7:91:B3:92:C9:8C:8A:5D:35:F0:28:84:36:6D:DC X509v3 Authority Key Identifier: keyid:31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8a:4b:fc:18:9d:dd:bd:53:75:e3:6c:3b:d2:71:4a:4c:da: e5:eb:03:83:7a:c2:6f:68:1c:df:aa:37:30:b6:ef:b4:74:19: ef:ff:4e:c4:a5:f8:f0:5f:a0:36:bd:2f:09:57:88:cf:c2:6d: 93:d8:ba:8e:7f:a8:66:1a:39:35:92:22:d7:4d:34:84:26:46: 99:d1:c9:44:3c:46:e6:3a:7d:2a:d7:6d:1a:0c:03:bf:b2:44: b2:75:bb:af:f1:39:49:40:21:6b:6a:a7:29:b3:1f:34:49:87: 3f:e2:0d:2b:26:c3:be:1e:bd:1c:60:30:44:8c:9d:a9:1b:a4: ef:9d:c4:aa:4d:1d:12:dc:6a:8c:24:8f:82:1e:62:c3:cf:be: 2b:f0:b3:af:f3:f2:58:70:02:0a:b7:35:69:84:59:50:14:5f: a3:59:5d:6e:1e:c8:42:a8:ad:84:59:29:ce:ce:df:00:77:c1: d5:16:52:3c:ab:e6:2d:9f:74:d1:c9:9b:81:9b:91:39:65:a6: b9:37:15:ea:8f:9a:9a:77:96:5d:17:ce:71:4f:6c:cc:eb:73: 94:06:4c:b4:49:13:ec:9f:c0:a9:7d:04:8e:df:44:2f:56:89: 5a:a3:77:0d:78:66:d4:0a:eb:3a:0b:2a:cc:90:41:ae:a0:f2: e7:ee:db:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGaGTCf4XhbwZwdIOEIlhVW+jBxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyMzE3RTU4NENENUExMEQyQ0IwNEQ2RkMxRTQwNTE4 QjRDMjZDNTAeFw0yNTEyMzEwODE4MTJaFw0yNjAxMDExMjExMTJaMDMxMTAvBgNV BAMTKEFCNDlEQzkwNjdENzkxQjM5MkM5OEM4QTVEMzVGMDI4ODQzNjZEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRcfwMj/E2BohyPp8iTrGDcYB RmgjKZer6/7hcwYcGauoe8h70Bm3omyy53pxI0xgNX+c7Qc2wSQXJ7DJF7hc1g7H Vg00cbwtBE6sAJLLvpmTBtd0dQe9Vm7/BLsweCHp3erAnzYmRv6F/AnZQSvI4JDc C93ZSsmOxU/+dq+XRGAbpFd2wImGQ0q42NhR/C4LUkSSozgIojr/Z30dhLhClPcn 2mYg48wVqyhnrrhrvmZEI84OrSA653HlcRYUP367r4G7k6VUc4907knYUtQVw+AO s6fW3RDH1+gJntAPMG8w4E5AHQ5aIRzNYxcyrm9ryzufc+itcwZV7hSSxo6XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq0nckGfXkbOSyYyKXTXwKIQ2bdwwHwYDVR0j BBgwFoAUMSMX5YTNWhDSywTW/B5AUYtMJsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNY WEMvMC8zMTIzMTdFNTg0Q0Q1QTEwRDJDQjA0RDZGQzFFNDA1MThCNEMyNkM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxMjMxN0U1ODRDRDVBMTBE MkNCMDRENkZDMUU0MDUxOEI0QzI2QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNYWEMvMC8z MTIzMTdFNTg0Q0Q1QTEwRDJDQjA0RDZGQzFFNDA1MThCNEMyNkM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqYpL/Bid3b1TdeNsO9JxSkza5esDg3rCb2gc36o3MLbvtHQZ7/9OxKX48F+g Nr0vCVeIz8Jtk9i6jn+oZho5NZIi1000hCZGmdHJRDxG5jp9KtdtGgwDv7JEsnW7 r/E5SUAha2qnKbMfNEmHP+INKybDvh69HGAwRIydqRuk753Eqk0dEtxqjCSPgh5i w8++K/Czr/PyWHACCrc1aYRZUBRfo1ldbh7IQqithFkpzs7fAHfB1RZSPKvmLZ90 0cmbgZuROWWmuTcV6o+amneWXRfOcU9szOtzlAZMtEkT7J/AqX0Ejt9EL1aJWqN3 DXhm1ArrOgsqzJBBrqDy5+7bzA== -----END CERTIFICATE-----Generated at Wed Dec 31 23:32:21 2025 by rpki-client