This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft File: 3252E783D98B854BCC439007DE017EB6E4E2FF51.mft (raw, json) Hash identifier: hbIfFw6MPZrdV7OS5/crNd+H35VYnTKDiZVbbKEPcYI= Subject key identifier: 9F:B8:49:13:7B:90:08:E7:45:4B:55:50:99:0A:C6:9C:FF:37:DF:3E Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51 Certificate issuer: /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51 Certificate serial: 24E157F3C5E66B50BB11EBFB87DA786C94D29CDA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft Manifest number: 18 Signing time: Fri 19 Dec 2025 16:22:26 +0000 Manifest this update: Fri 19 Dec 2025 16:17:26 +0000 Manifest next update: Sat 20 Dec 2025 19:37:26 +0000 Files and hashes: 1: 3252E783D98B854BCC439007DE017EB6E4E2FF51.crl (hash: OWmtyu7e+ZcvxjrlJZExkNaLk3Am2BBs443khOHyjJQ=) 2: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: evcJoe8kl899b+xGomFq0rjQEr0vjGkY2XfjdeQy63c=) 3: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: Gp1PMxDQ40LAoeo7u3FrJiFb2mSa2LoBqbgag3h7iyw=) 4: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: TGqKcq5hhQvs292+DCyMD6YCLTrai4dDENZfetKhjsc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 19:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e1:57:f3:c5:e6:6b:50:bb:11:eb:fb:87:da:78:6c:94:d2:9c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51 Validity Not Before: Dec 19 16:17:26 2025 GMT Not After : Dec 20 19:37:26 2025 GMT Subject: CN=9FB849137B9008E7454B5550990AC69CFF37DF3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:d1:cf:9c:6c:b4:fb:a2:74:8e:b7:63:a4: 0c:54:45:e8:db:c7:ab:2c:d5:4d:b9:41:6d:8a:46: d0:6d:10:60:70:6e:78:0e:8c:70:38:f1:de:43:41: 11:3a:f7:ae:44:d8:60:00:fc:3a:9e:2d:b8:9f:50: f6:3e:2d:2e:db:f2:3e:cd:b0:30:58:25:9a:64:6f: ed:78:f1:41:66:16:bc:18:19:f3:2a:2e:6d:f2:ed: 80:44:02:2e:9e:e9:27:f9:60:66:09:0b:70:b5:47: a7:35:c4:b2:4b:0f:25:8f:6c:83:b6:72:70:42:58: 90:34:1b:95:0b:9f:33:e5:e4:f7:38:d0:1b:48:48: f6:22:f6:bf:e8:ba:7c:b6:2d:a2:4b:3e:a3:1e:f7: f4:9c:fc:ce:0d:10:53:6d:76:d0:be:b6:a0:98:2b: e0:c8:22:18:34:25:ea:b9:3c:b7:01:56:d2:07:c2: 16:85:2a:ac:e4:ea:79:25:90:43:cc:c0:f5:6c:a1: c5:20:de:60:46:c0:ca:7e:39:72:6d:fb:bf:f3:91: 6a:3c:76:c0:ae:a5:24:21:d3:9f:e7:f2:5a:0f:8a: ad:d7:53:98:96:e6:b5:b3:b8:26:14:65:3d:77:a2: 9a:7c:e2:58:f6:a5:e9:98:92:43:8a:4f:2b:ff:7f: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B8:49:13:7B:90:08:E7:45:4B:55:50:99:0A:C6:9C:FF:37:DF:3E X509v3 Authority Key Identifier: keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3d:8a:ee:46:19:10:db:f2:58:f6:23:2a:23:2a:54:2f:95: 9c:2b:42:ac:8d:52:a8:a9:6a:bd:5c:99:6a:11:3d:09:a9:23: ba:b9:f5:3b:81:69:ad:22:8d:f3:5d:1d:4b:f7:4e:9e:eb:51: 91:f4:3b:e3:10:35:6d:3c:9e:38:2b:14:ae:17:6f:2f:eb:fc: 76:53:e3:d6:78:95:d5:67:59:5d:cc:70:43:a1:85:28:2f:42: 4e:dd:96:52:22:7f:34:05:da:de:ff:70:0b:b6:38:46:41:59: b6:e3:1c:c6:34:60:19:a9:b4:67:ab:d1:b8:90:0e:7c:83:3b: 56:57:ee:68:e8:a9:40:aa:23:a1:07:52:66:12:32:48:c3:8f: db:81:e9:a8:63:2f:e7:bd:d7:1e:e3:3e:40:74:aa:87:47:03: 28:05:aa:22:ef:b5:41:d9:bc:ee:47:51:11:c0:0e:c6:8c:22: b3:7e:43:87:59:ba:d2:9e:03:c9:cf:88:b7:bb:20:13:b7:d5: b9:0f:60:bb:c8:b3:37:3b:05:a5:c6:a7:38:c4:ef:b3:ea:31: 64:c5:b8:f9:61:41:47:bc:68:a9:db:f0:ce:01:8a:58:cc:41: b7:c7:1e:f7:68:39:70:2a:a5:1c:11:b4:18:5e:51:a5:c9:0a: 5a:68:ed:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJOFX88Xma1C7Eev7h9p4bJTSnNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1MkU3ODNEOThCODU0QkNDNDM5MDA3REUwMTdFQjZF NEUyRkY1MTAeFw0yNTEyMTkxNjE3MjZaFw0yNTEyMjAxOTM3MjZaMDMxMTAvBgNV BAMTKDlGQjg0OTEzN0I5MDA4RTc0NTRCNTU1MDk5MEFDNjlDRkYzN0RGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQstHPnGy0+6J0jrdjpAxURejb x6ss1U25QW2KRtBtEGBwbngOjHA48d5DQRE6965E2GAA/DqeLbifUPY+LS7b8j7N sDBYJZpkb+148UFmFrwYGfMqLm3y7YBEAi6e6Sf5YGYJC3C1R6c1xLJLDyWPbIO2 cnBCWJA0G5ULnzPl5Pc40BtISPYi9r/ouny2LaJLPqMe9/Sc/M4NEFNtdtC+tqCY K+DIIhg0Jeq5PLcBVtIHwhaFKqzk6nklkEPMwPVsocUg3mBGwMp+OXJt+7/zkWo8 dsCupSQh05/n8loPiq3XU5iW5rWzuCYUZT13opp84lj2pemYkkOKTyv/f4AXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn7hJE3uQCOdFS1VQmQrGnP833z4wHwYDVR0j BBgwFoAUMlLng9mLhUvMQ5AH3gF+tuTi/1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU VVIvMC8zMjUyRTc4M0Q5OEI4NTRCQ0M0MzkwMDdERTAxN0VCNkU0RTJGRjUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyNTJFNzgzRDk4Qjg1NEJD QzQzOTAwN0RFMDE3RUI2RTRFMkZGNTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC8z MjUyRTc4M0Q5OEI4NTRCQ0M0MzkwMDdERTAxN0VCNkU0RTJGRjUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALD2K7kYZENvyWPYjKiMqVC+VnCtCrI1SqKlqvVyZahE9Cakjurn1O4FprSKN 810dS/dOnutRkfQ74xA1bTyeOCsUrhdvL+v8dlPj1niV1WdZXcxwQ6GFKC9CTt2W UiJ/NAXa3v9wC7Y4RkFZtuMcxjRgGam0Z6vRuJAOfIM7VlfuaOipQKojoQdSZhIy SMOP24HpqGMv573XHuM+QHSqh0cDKAWqIu+1Qdm87kdREcAOxowis35Dh1m60p4D yc+It7sgE7fVuQ9gu8izNzsFpcanOMTvs+oxZMW4+WFBR7xoqdvwzgGKWMxBt8ce 92g5cCqlHBG0GF5RpckKWmjtwA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:12 2025 by rpki-client