This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: 2F8bCA4gZPuWx+ln11gnuG39atir1ROx+gh5XSpms4s= Subject key identifier: 38:10:D8:A6:A0:E8:B2:9C:B9:32:37:CD:E2:18:5D:0C:D6:21:FF:82 Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 42B8D209CD7B41D947E5C3CE9FAFC6839FE9B27E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 028E Signing time: Tue 30 Dec 2025 14:30:46 +0000 Manifest this update: Tue 30 Dec 2025 14:25:46 +0000 Manifest next update: Wed 31 Dec 2025 15:23:46 +0000 Files and hashes: 1: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=) 2: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=) 3: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: nRmWNO3cRyMEqVSkLJyMp4J1esuOfRcTBKsJnGvVG8Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 31 Dec 2025 15:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b8:d2:09:cd:7b:41:d9:47:e5:c3:ce:9f:af:c6:83:9f:e9:b2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: Dec 30 14:25:46 2025 GMT Not After : Dec 31 15:23:46 2025 GMT Subject: CN=3810D8A6A0E8B29CB93237CDE2185D0CD621FF82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:7f:14:c7:9a:04:c1:4a:55:0e:98:4a:4d: 7c:0a:64:18:82:ef:94:e0:d8:25:bb:a2:e4:b9:c6: 2b:f4:b9:9b:50:90:1f:30:d1:73:7c:59:81:4e:e0: 37:8d:bf:b1:f3:01:fa:6f:0d:1a:d6:53:6d:8e:01: 75:a6:36:5e:33:b8:73:c4:27:27:63:3c:9b:f0:b6: d2:32:d6:5a:45:ad:2f:51:25:6b:fe:72:58:f0:f0: 26:a3:62:c7:ac:89:d7:d8:76:2a:a2:79:96:f6:c2: 77:75:ae:e0:1d:3b:c0:29:a5:80:1e:c9:cc:f7:06: b7:86:b8:2d:23:4a:cf:b8:b7:69:f0:03:a6:a0:0a: 80:fb:3e:a1:fe:8e:b5:a4:40:ec:11:6a:2c:91:1f: f7:d8:9e:51:75:56:c7:b2:07:88:d4:28:3f:21:30: 3c:2e:0b:36:ae:44:83:bd:63:db:04:97:7e:61:7e: 2e:04:4b:ef:13:0d:4a:5e:89:56:5c:ba:99:e5:92: 93:6b:60:5a:6b:04:70:57:a8:2c:fe:74:a6:4d:fe: ed:83:b0:77:ca:2a:d8:ec:30:09:a2:73:0e:7d:7d: 41:d8:60:17:0d:a1:9c:f4:f1:a2:39:35:00:a4:d4: 60:e9:6a:5d:93:f9:87:73:1e:b8:b9:0c:4a:a6:e6: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:10:D8:A6:A0:E8:B2:9C:B9:32:37:CD:E2:18:5D:0C:D6:21:FF:82 X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5a:97:ea:1b:aa:c7:38:d3:cf:15:97:71:94:77:34:49:c1: b6:c3:ae:94:42:80:2f:61:78:35:77:32:78:cc:59:be:65:26: ba:27:a4:3c:6f:f6:70:0d:e8:b9:01:01:d4:2c:42:cc:ea:43: df:4a:7e:6e:5e:99:55:ee:43:67:3b:7f:0a:29:f6:c9:8c:e7: 7e:bc:1a:67:0b:e6:03:ab:dc:d0:63:b0:a5:14:6e:9f:6c:ed: d5:d1:c0:7f:f0:b3:44:ca:a3:d2:47:77:ef:3b:fd:db:48:b8: e2:63:9b:4e:3d:a8:8a:a9:0b:8e:c2:77:4a:b6:48:52:62:cf: a3:21:ee:ea:de:a4:03:23:70:f0:f2:31:df:8e:3b:da:59:26: 07:e2:a9:6a:5b:cc:3c:af:52:2d:c9:7a:d4:9e:82:c8:c8:43: a3:18:9d:a9:5b:66:9c:98:8e:0a:de:1a:9d:b7:6d:f8:8e:dc: 4a:37:86:56:59:fe:74:b2:71:a1:5b:07:cf:fe:2a:6b:f5:f5: db:c7:8c:e9:ba:5f:9d:71:dc:ed:01:bf:c6:58:2f:da:59:4c: 23:2f:a3:93:f2:d2:c3:3d:df:bf:7c:45:2d:5c:a0:42:0a:22: 99:b8:8c:4a:50:6a:b8:c6:7c:2d:d3:3e:ff:1c:bd:8f:fa:b0: 81:ea:f9:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQrjSCc17QdlH5cPOn6/Gg5/psn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTEyMzAxNDI1NDZaFw0yNTEyMzExNTIzNDZaMDMxMTAvBgNV BAMTKDM4MTBEOEE2QTBFOEIyOUNCOTMyMzdDREUyMTg1RDBDRDYyMUZGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPx38Ux5oEwUpVDphKTXwKZBiC 75Tg2CW7ouS5xiv0uZtQkB8w0XN8WYFO4DeNv7HzAfpvDRrWU22OAXWmNl4zuHPE JydjPJvwttIy1lpFrS9RJWv+cljw8CajYsesidfYdiqieZb2wnd1ruAdO8AppYAe ycz3BreGuC0jSs+4t2nwA6agCoD7PqH+jrWkQOwRaiyRH/fYnlF1VseyB4jUKD8h MDwuCzauRIO9Y9sEl35hfi4ES+8TDUpeiVZcupnlkpNrYFprBHBXqCz+dKZN/u2D sHfKKtjsMAmicw59fUHYYBcNoZz08aI5NQCk1GDpal2T+YdzHri5DEqm5sWXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOBDYpqDospy5MjfN4hhdDNYh/4IwHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfFqX6huqxzjTzxWXcZR3NEnBtsOulEKAL2F4NXcyeMxZvmUmuiekPG/2cA3o uQEB1CxCzOpD30p+bl6ZVe5DZzt/Cin2yYznfrwaZwvmA6vc0GOwpRRun2zt1dHA f/CzRMqj0kd37zv920i44mObTj2oiqkLjsJ3SrZIUmLPoyHu6t6kAyNw8PIx3447 2lkmB+KpalvMPK9SLcl61J6CyMhDoxidqVtmnJiOCt4anbdt+I7cSjeGVln+dLJx oVsHz/4qa/X128eM6bpfnXHc7QG/xlgv2llMIy+jk/LSwz3fv3xFLVygQgoimbiM SlBquMZ8LdM+/xy9j/qwger5ng== -----END CERTIFICATE-----Generated at Wed Dec 31 00:06:04 2025 by rpki-client