This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft File: 848EB2427D617D2F83AC459253A873E550C79E2D.mft (raw, json) Hash identifier: 4/Hm2G5iLXtYajwFXJjG0HoVMxG6PwXRr6f3QiQaTks= Subject key identifier: D0:E3:E1:9B:A9:6B:F2:0A:45:51:4F:69:19:27:32:8F:0E:BF:AC:A9 Authority key identifier: 84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D Certificate issuer: /CN=848EB2427D617D2F83AC459253A873E550C79E2D Certificate serial: 26ED60EB972E61F617E7D41F254C28D851A50B99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft Manifest number: 0113 Signing time: Wed 24 Dec 2025 00:13:49 +0000 Manifest this update: Wed 24 Dec 2025 00:08:49 +0000 Manifest next update: Thu 25 Dec 2025 01:05:49 +0000 Files and hashes: 1: 323830343a346331303a3a2f33322d3438203d3e20323637333437.roa (hash: 6ojMn0OC0/Tkj1yL1J7bJQxkUBcfNAQWyiS2pbokNQ8=) 2: 34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (hash: kVEUM0+/jn+r6zanlFczfAds1h+k32VTQiq8B3t1sbo=) 3: 848EB2427D617D2F83AC459253A873E550C79E2D.crl (hash: Wb1aE/DKCc5XUXNaiNwhPNo8a63tORkCJ0idwP0D18g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 01:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ed:60:eb:97:2e:61:f6:17:e7:d4:1f:25:4c:28:d8:51:a5:0b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848EB2427D617D2F83AC459253A873E550C79E2D Validity Not Before: Dec 24 00:08:49 2025 GMT Not After : Dec 25 01:05:49 2025 GMT Subject: CN=D0E3E19BA96BF20A45514F691927328F0EBFACA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:02:43:69:94:bc:7f:74:c4:9e:5e:f4:5c: d1:2f:f6:18:99:a0:b3:33:3d:81:82:38:92:64:84: 76:99:12:4c:40:22:ab:3f:9d:a1:95:6e:98:11:30: ed:36:7a:44:b0:23:52:99:4c:58:98:76:3f:ea:a6: 5a:85:23:de:bf:36:f7:30:91:54:6a:ad:1e:1a:c8: e1:70:51:ed:74:10:f0:78:66:aa:cf:cf:36:d1:be: 63:b9:56:09:cf:0a:bf:e4:a4:17:b6:50:3d:b1:0c: 19:02:f1:a8:04:e2:c1:28:4f:cf:07:38:f6:b7:43: 00:5e:e7:e9:13:8f:c2:89:c1:d8:e3:0e:a6:72:85: f2:23:ba:e5:43:da:61:25:85:f1:f5:05:13:7c:7e: 33:53:31:a4:e1:d6:27:06:f6:ab:a1:65:4b:1e:8d: 96:69:fe:fe:2b:73:19:4f:87:81:16:3d:83:47:36: aa:da:0f:ca:e0:d9:56:ae:25:c0:b1:71:e9:fd:55: 23:25:3b:27:38:b2:dd:90:6c:d6:1e:a4:17:e1:a6: a6:97:06:35:6b:dd:3a:5d:d2:18:e2:7d:0d:22:27: 93:3a:16:2b:c4:d5:26:70:9f:d6:a5:88:a0:dd:24: d8:78:70:7c:6d:d3:bf:ac:66:49:de:b3:1a:c4:3b: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E3:E1:9B:A9:6B:F2:0A:45:51:4F:69:19:27:32:8F:0E:BF:AC:A9 X509v3 Authority Key Identifier: keyid:84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:84:86:7c:97:3a:7b:12:ef:a5:37:17:89:f9:d8:87:5e:73: 06:95:de:59:b7:f7:78:38:ff:cd:96:19:73:3f:88:85:7b:e4: 9c:90:46:c9:eb:10:82:b7:b6:24:4a:f3:31:23:3b:ab:b6:d2: 88:9a:1e:91:9c:05:46:0e:2b:a0:97:1e:3a:2b:3a:42:d4:1d: 31:52:f6:1b:e9:7c:ea:b9:12:96:82:29:e1:13:c9:53:81:bb: cd:7a:4b:1b:b4:da:50:c4:39:cf:37:b1:bd:a9:a0:a2:17:71: 04:b5:6a:ef:ec:39:f2:00:26:96:4d:84:32:f8:86:52:e5:0c: 93:87:7f:ff:45:bb:5c:78:29:02:37:f2:bc:8b:a4:ae:58:b9: a2:f7:f3:5f:bf:ab:65:1f:3e:16:ee:bf:00:a1:f7:90:31:45: 3d:e2:18:8a:a2:4a:9b:61:11:15:dd:27:ce:ed:15:79:f8:e9: 24:7a:96:ec:6e:30:37:83:ac:60:0a:a5:d6:9f:29:33:c4:5e: 99:61:b6:fb:67:a2:bc:22:74:02:54:b2:21:6d:ab:5f:02:42: 1e:53:84:13:b4:c6:af:71:42:28:02:6f:32:b0:f8:dd:ba:5c: 47:7a:b8:40:a0:8e:fc:bf:48:97:40:24:ac:88:40:8d:bd:ec: a7:bd:51:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJu1g65cuYfYX59QfJUwo2FGlC5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4RUIyNDI3RDYxN0QyRjgzQUM0NTkyNTNBODczRTU1 MEM3OUUyRDAeFw0yNTEyMjQwMDA4NDlaFw0yNTEyMjUwMTA1NDlaMDMxMTAvBgNV BAMTKEQwRTNFMTlCQTk2QkYyMEE0NTUxNEY2OTE5MjczMjhGMEVCRkFDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OgJDaZS8f3TEnl70XNEv9hiZ oLMzPYGCOJJkhHaZEkxAIqs/naGVbpgRMO02ekSwI1KZTFiYdj/qplqFI96/Nvcw kVRqrR4ayOFwUe10EPB4ZqrPzzbRvmO5VgnPCr/kpBe2UD2xDBkC8agE4sEoT88H OPa3QwBe5+kTj8KJwdjjDqZyhfIjuuVD2mElhfH1BRN8fjNTMaTh1icG9quhZUse jZZp/v4rcxlPh4EWPYNHNqraD8rg2VauJcCxcen9VSMlOyc4st2QbNYepBfhpqaX BjVr3Tpd0hjifQ0iJ5M6FivE1SZwn9aliKDdJNh4cHxt07+sZknesxrEO6+lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0OPhm6lr8gpFUU9pGScyjw6/rKkwHwYDVR0j BBgwFoAUhI6yQn1hfS+DrEWSU6hz5VDHni0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2FQS0pzb0NVRThXOHl0YUZ2RmFwVHVyc1QzY0YzSmJMdzZ2NFlNNTFC aTYvMC84NDhFQjI0MjdENjE3RDJGODNBQzQ1OTI1M0E4NzNFNTUwQzc5RTJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OEVCMjQyN0Q2MTdEMkY4 M0FDNDU5MjUzQTg3M0U1NTBDNzlFMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2FQS0pzb0NVRThXOHl0YUZ2RmFwVHVyc1QzY0YzSmJMdzZ2NFlNNTFCaTYvMC84 NDhFQjI0MjdENjE3RDJGODNBQzQ1OTI1M0E4NzNFNTUwQzc5RTJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACISGfJc6exLvpTcXifnYh15zBpXeWbf3eDj/zZYZcz+IhXvknJBGyesQgre2 JErzMSM7q7bSiJoekZwFRg4roJceOis6QtQdMVL2G+l86rkSloIp4RPJU4G7zXpL G7TaUMQ5zzexvamgohdxBLVq7+w58gAmlk2EMviGUuUMk4d//0W7XHgpAjfyvIuk rli5ovfzX7+rZR8+Fu6/AKH3kDFFPeIYiqJKm2ERFd0nzu0VefjpJHqW7G4wN4Os YAql1p8pM8RemWG2+2eivCJ0AlSyIW2rXwJCHlOEE7TGr3FCKAJvMrD43bpcR3q4 QKCO/L9Il0AkrIhAjb3sp71R8A== -----END CERTIFICATE-----Generated at Wed Dec 24 03:02:06 2025 by rpki-client