This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft File: DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft (raw, json) Hash identifier: Zpfa5zsdcFQLr6Rnj+DGmmtwZPrfhZh3B4+9TtKzF1s= Subject key identifier: C2:E9:B0:A6:FA:62:24:8D:0B:8B:5B:9A:88:B5:70:B6:41:8C:4F:9E Authority key identifier: DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B Certificate issuer: /CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B Certificate serial: 3CF614AF9BE6A5FF43A9ABF8222C7056819E1220 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft Manifest number: 027E Signing time: Tue 23 Dec 2025 08:50:40 +0000 Manifest this update: Tue 23 Dec 2025 08:45:40 +0000 Manifest next update: Wed 24 Dec 2025 10:38:40 +0000 Files and hashes: 1: 323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (hash: QTNnzR+UYlBgLx4JqbZERJxck9MVaHyRwCbO/zvmHR4=) 2: 3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa (hash: ydnnka0+OlIVr22V1E7GQvPOVKsua6emsd0Y50DmFag=) 3: DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl (hash: pUfAVmAeZSUF/Ek6XBLRc3MNBjsaznpgkp6NzUmw6Kc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 10:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:14:af:9b:e6:a5:ff:43:a9:ab:f8:22:2c:70:56:81:9e:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B Validity Not Before: Dec 23 08:45:40 2025 GMT Not After : Dec 24 10:38:40 2025 GMT Subject: CN=C2E9B0A6FA62248D0B8B5B9A88B570B6418C4F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:43:a4:f4:cf:6b:80:f1:17:d9:e7:a0:5a: b9:3a:24:1c:c9:05:54:1e:e9:ae:74:6b:b8:44:3f: e8:a9:d2:b8:b0:67:8d:28:37:77:17:9f:14:63:f0: a7:16:5b:5d:b8:22:3b:05:f9:89:cc:f4:fb:0c:45: da:69:6e:78:a0:78:79:7e:1d:d3:93:e2:e9:02:b6: 7c:7d:a5:c3:1c:55:b9:dd:a0:2f:b3:dd:b9:2b:81: d1:63:ea:cc:cc:31:88:63:c2:14:d0:12:d3:0d:05: 52:a4:1b:7e:b3:0c:3d:87:44:5a:99:90:d9:a2:c6: 6d:ca:46:5d:dc:a9:59:ea:20:53:ad:fc:20:d7:de: 0f:34:e3:0f:1e:7d:b8:3c:9d:ec:8e:1f:c7:3f:40: ce:f4:54:94:69:fc:f4:4e:25:49:dc:ed:60:60:d7: 04:d4:14:f0:2c:2b:b2:1f:6a:bb:38:bf:74:b5:f1: ac:a4:86:ca:d3:44:de:6a:de:35:fd:63:4d:6e:37: e7:d4:32:16:64:2b:9c:99:4c:e3:28:79:a7:03:59: 60:c6:fc:b9:45:f0:cc:4d:87:7f:2f:6a:ec:15:03: 87:cf:fe:28:a9:db:05:34:0c:88:7c:81:a2:a5:4c: d6:9c:02:af:44:c0:8a:4e:0b:ac:bb:34:06:51:c5: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E9:B0:A6:FA:62:24:8D:0B:8B:5B:9A:88:B5:70:B6:41:8C:4F:9E X509v3 Authority Key Identifier: keyid:DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:80:23:7c:b2:25:6d:38:05:55:b6:9e:3f:a8:f9:8c:93:03: d6:b3:a8:9c:44:4e:33:ff:d2:d8:85:33:0e:bd:3e:84:8e:01: 09:61:cb:49:f7:bd:ea:d0:e9:25:2e:47:fa:e2:ac:a9:90:d7: 25:30:13:3d:f2:3c:17:f4:20:63:7a:b7:88:16:76:8d:a6:26: 97:00:a3:13:27:8d:a4:39:60:bf:cc:c4:a9:ca:24:60:08:c6: 35:47:d3:ac:b6:69:c1:d0:05:69:7c:02:3c:0d:29:f3:7f:db: 31:be:ed:65:01:b3:cc:fe:d4:4f:0d:67:62:89:06:a3:3f:bf: 21:e7:2d:6d:12:77:be:c1:7f:04:00:72:47:31:c4:45:37:a7: 5a:33:53:d1:99:98:f2:41:1f:15:93:19:5e:a4:c9:ef:27:d7: b9:2c:05:f8:b6:f1:6f:18:44:11:ae:86:62:fb:b9:95:fd:bc: 1d:80:53:83:80:ba:06:b2:94:2a:d1:43:05:b7:8b:c1:5f:5a: 9d:89:14:aa:2d:ce:4e:43:1d:1a:fc:33:8b:1f:d6:cc:d9:3e: d4:1b:93:5a:ba:14:5b:ca:81:d2:de:3e:2c:13:99:51:b5:1c: fe:18:c4:fd:38:12:e2:6c:b2:91:1e:6a:b6:88:46:c8:7e:c6: a0:6e:22:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPPYUr5vmpf9Dqav4IixwVoGeEiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxMUY4MTg1MjE0ODAwQ0E0QzcxQzJBNTMyMDA0Q0M3 QkU4RTAwQjAeFw0yNTEyMjMwODQ1NDBaFw0yNTEyMjQxMDM4NDBaMDMxMTAvBgNV BAMTKEMyRTlCMEE2RkE2MjI0OEQwQjhCNUI5QTg4QjU3MEI2NDE4QzRGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSckOk9M9rgPEX2eegWrk6JBzJ BVQe6a50a7hEP+ip0riwZ40oN3cXnxRj8KcWW124IjsF+YnM9PsMRdppbnigeHl+ HdOT4ukCtnx9pcMcVbndoC+z3bkrgdFj6szMMYhjwhTQEtMNBVKkG36zDD2HRFqZ kNmixm3KRl3cqVnqIFOt/CDX3g804w8efbg8neyOH8c/QM70VJRp/PROJUnc7WBg 1wTUFPAsK7Ifars4v3S18aykhsrTRN5q3jX9Y01uN+fUMhZkK5yZTOMoeacDWWDG /LlF8MxNh38vauwVA4fP/iip2wU0DIh8gaKlTNacAq9EwIpOC6y7NAZRxR+bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwumwpvpiJI0Li1uaiLVwtkGMT54wHwYDVR0j BBgwFoAU3hH4GFIUgAykxxwqUyAEzHvo4AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBY eXIvMC9ERTExRjgxODUyMTQ4MDBDQTRDNzFDMkE1MzIwMDRDQzdCRThFMDBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMTFGODE4NTIxNDgwMENB NEM3MUMyQTUzMjAwNENDN0JFOEUwMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBYeXIvMC9E RTExRjgxODUyMTQ4MDBDQTRDNzFDMkE1MzIwMDRDQzdCRThFMDBCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhIAjfLIlbTgFVbaeP6j5jJMD1rOonEROM//S2IUzDr0+hI4BCWHLSfe96tDp JS5H+uKsqZDXJTATPfI8F/QgY3q3iBZ2jaYmlwCjEyeNpDlgv8zEqcokYAjGNUfT rLZpwdAFaXwCPA0p83/bMb7tZQGzzP7UTw1nYokGoz+/IectbRJ3vsF/BAByRzHE RTenWjNT0ZmY8kEfFZMZXqTJ7yfXuSwF+LbxbxhEEa6GYvu5lf28HYBTg4C6BrKU KtFDBbeLwV9anYkUqi3OTkMdGvwzix/WzNk+1BuTWroUW8qB0t4+LBOZUbUc/hjE /TgS4myykR5qtohGyH7GoG4i7Q== -----END CERTIFICATE-----Generated at Tue Dec 23 22:09:06 2025 by rpki-client