This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft File: B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft (raw, json) Hash identifier: IBliLPFqiNPAP5j1DaDNwigy3Jwh1sThLa4+EKjva3I= Subject key identifier: 59:3A:3D:51:91:63:B6:38:80:24:1F:CB:DD:EC:3E:8D:60:FF:13:6A Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8 Certificate issuer: /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8 Certificate serial: 15CC08002184F7ECC7FAAFE38DB0B9AC3F86A073 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft Manifest number: 02B8 Signing time: Mon 22 Dec 2025 19:50:38 +0000 Manifest this update: Mon 22 Dec 2025 19:45:38 +0000 Manifest next update: Tue 23 Dec 2025 21:15:38 +0000 Files and hashes: 1: 34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa (hash: yJ+X8AmbopY8pA/sN7brL5heSlvBgv7wLK1XuUxSrYI=) 2: B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl (hash: s63e3EVPLD4g5alSdJe6WBNGgVjWRWcs2jnfEpUHvJw=) 3: 323830343a353330343a3a2f33322d3438203d3e20323638353537.roa (hash: wqKlqVL7W+Kb2fvhbIalxcQZ7cEzpbHNTNi30laWQyU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 21:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cc:08:00:21:84:f7:ec:c7:fa:af:e3:8d:b0:b9:ac:3f:86:a0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8 Validity Not Before: Dec 22 19:45:38 2025 GMT Not After : Dec 23 21:15:38 2025 GMT Subject: CN=593A3D519163B63880241FCBDDEC3E8D60FF136A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:96:a3:8b:39:23:3d:db:9e:86:41:f0:a5:92: cf:a3:98:6d:e0:f8:36:72:b2:63:1b:d7:6d:8c:38: f3:a0:3a:67:bf:19:f1:cf:b9:8b:11:89:29:b9:87: e0:38:23:65:9d:cd:ee:6f:57:3e:19:b0:82:0b:7e: ec:db:74:89:02:7b:cc:f8:00:d3:1f:7f:bd:29:7c: 28:19:26:f2:03:25:7e:0f:45:8c:5a:b9:b9:94:66: d3:71:b4:cf:0e:b5:3d:8e:ee:86:3f:17:83:ce:49: 7e:fa:42:da:3e:14:7a:5e:b3:b6:4c:05:a2:ca:cc: cf:0b:ed:16:3e:c0:43:71:22:c8:1c:e7:ce:85:ff: 78:a5:ad:f8:82:1e:be:87:58:43:db:38:67:25:cf: e5:cf:64:3e:1a:ac:06:f2:fa:1b:3f:eb:33:e8:d0: 6f:08:c3:50:59:04:62:3f:0b:6a:ee:0a:a9:0e:20: 25:48:e5:88:79:c2:13:4c:3e:92:91:b6:6e:9e:8a: 8a:d4:4c:e0:20:14:9b:06:87:d7:25:aa:c9:d1:dc: 9a:9c:e5:cd:cf:91:0a:e3:46:4c:33:ab:27:94:63: 54:b2:bd:f8:8f:f1:10:fb:db:51:8d:5c:2f:c4:8b: 8b:00:77:27:c7:27:44:2c:a2:3e:0f:f8:cb:5e:75: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:3D:51:91:63:B6:38:80:24:1F:CB:DD:EC:3E:8D:60:FF:13:6A X509v3 Authority Key Identifier: keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:68:53:52:79:e0:d4:21:01:13:84:81:b3:1b:e0:51:0b:15: 0b:d4:b5:73:00:94:2c:89:42:d3:d2:61:c9:24:28:1a:41:43: 03:e3:cf:fd:8f:88:48:1a:85:b5:9c:6f:1f:0c:14:e7:2d:23: cc:c8:09:97:bc:0b:34:ea:75:3f:ec:96:16:ef:6d:e9:70:8f: 9f:51:22:74:b0:fc:5b:27:6c:22:65:90:03:ec:7e:75:6e:f7: 8a:1b:2c:72:47:11:f8:54:71:4c:87:2c:63:7d:57:e5:5e:29: 08:db:db:6f:7d:8c:26:1e:fc:68:e6:cf:03:08:f0:c6:96:53: 12:33:90:92:c8:8d:d5:4a:c5:75:92:92:2c:38:8b:d5:97:42: 65:00:fd:e4:8a:ac:3e:5e:92:4b:59:e2:3b:c8:93:a8:a0:f8: a3:22:c5:2c:58:de:a2:12:f0:d1:4e:40:70:e1:df:56:cd:46: da:b3:08:76:0f:ef:6a:91:ca:67:d7:98:d8:c1:6e:56:1b:cf: 41:89:90:da:2a:89:26:5c:d3:ad:99:4a:d4:79:a4:85:2f:5b: e5:30:78:11:a5:dd:fe:07:ff:b7:a6:5e:bf:fe:30:9d:15:a7: 54:fd:0f:56:52:e6:a2:0f:d0:de:7e:e1:c4:16:88:e7:69:c5: b7:62:c1:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFcwIACGE9+zH+q/jjbC5rD+GoHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBDQTY1RDlDMUNDOTZEQThEMDRENTI3RjJBQTEwQkE0 MERGREZGODAeFw0yNTEyMjIxOTQ1MzhaFw0yNTEyMjMyMTE1MzhaMDMxMTAvBgNV BAMTKDU5M0EzRDUxOTE2M0I2Mzg4MDI0MUZDQkRERUMzRThENjBGRjEzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlqOLOSM9256GQfClks+jmG3g +DZysmMb122MOPOgOme/GfHPuYsRiSm5h+A4I2Wdze5vVz4ZsIILfuzbdIkCe8z4 ANMff70pfCgZJvIDJX4PRYxaubmUZtNxtM8OtT2O7oY/F4POSX76Qto+FHpes7ZM BaLKzM8L7RY+wENxIsgc586F/3ilrfiCHr6HWEPbOGclz+XPZD4arAby+hs/6zPo 0G8Iw1BZBGI/C2ruCqkOICVI5Yh5whNMPpKRtm6eiorUTOAgFJsGh9clqsnR3Jqc 5c3PkQrjRkwzqyeUY1SyvfiP8RD721GNXC/Ei4sAdyfHJ0Qsoj4P+MtedfyBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWTo9UZFjtjiAJB/L3ew+jWD/E2owHwYDVR0j BBgwFoAUsMpl2cHMltqNBNUn8qoQukDf3/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0E5Zk5teHpSek5OWVBRdVB0cTJkTXFiUExjNVdpc3lacHN6ckxBSENM NGYvMC9CMENBNjVEOUMxQ0M5NkRBOEQwNEQ1MjdGMkFBMTBCQTQwREZERkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQ0E2NUQ5QzFDQzk2REE4 RDA0RDUyN0YyQUExMEJBNDBERkRGRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0E5Zk5teHpSek5OWVBRdVB0cTJkTXFiUExjNVdpc3lacHN6ckxBSENMNGYvMC9C MENBNjVEOUMxQ0M5NkRBOEQwNEQ1MjdGMkFBMTBCQTQwREZERkY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfWhTUnng1CEBE4SBsxvgUQsVC9S1cwCULIlC09JhySQoGkFDA+PP/Y+ISBqF tZxvHwwU5y0jzMgJl7wLNOp1P+yWFu9t6XCPn1EidLD8WydsImWQA+x+dW73ihss ckcR+FRxTIcsY31X5V4pCNvbb32MJh78aObPAwjwxpZTEjOQksiN1UrFdZKSLDiL 1ZdCZQD95IqsPl6SS1niO8iTqKD4oyLFLFjeohLw0U5AcOHfVs1G2rMIdg/vapHK Z9eY2MFuVhvPQYmQ2iqJJlzTrZlK1HmkhS9b5TB4EaXd/gf/t6Zev/4wnRWnVP0P VlLmog/Q3n7hxBaI52nFt2LBWQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:28:23 2025 by rpki-client