This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft File: 615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft (raw, json) Hash identifier: XAH0B+mm5Wnq/AbP6WhfVMZpTdTMzi21Z5rGenlHJJE= Subject key identifier: 5C:DB:A1:29:FE:8B:69:75:A8:92:A0:B7:49:8D:18:2B:31:22:D4:4C Authority key identifier: 61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E Certificate issuer: /CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E Certificate serial: 1E616B198E6B4D95506A788C5191B8DEB9180E0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft Manifest number: FD Signing time: Fri 19 Dec 2025 13:50:54 +0000 Manifest this update: Fri 19 Dec 2025 13:45:54 +0000 Manifest next update: Sat 20 Dec 2025 16:34:54 +0000 Files and hashes: 1: 3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa (hash: hw+YTABSbPeWCR8UTlP54KeiMFs8MqldHLFZApPfYG4=) 2: 323830343a373230303a3a2f33322d313238203d3e20323730383236.roa (hash: xcSFuqZca8BDhXKDKSjmIo7Z3ibuDlPqLMNRO8Fz0iM=) 3: 615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl (hash: yHpEvCqhx4UjQQST9Q7qjB9CwZce8fEC2LPgYb1TJI0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 16:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:61:6b:19:8e:6b:4d:95:50:6a:78:8c:51:91:b8:de:b9:18:0e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E Validity Not Before: Dec 19 13:45:54 2025 GMT Not After : Dec 20 16:34:54 2025 GMT Subject: CN=5CDBA129FE8B6975A892A0B7498D182B3122D44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:24:19:ad:6b:81:1d:d5:0b:96:c5:f0:ca: 16:89:64:45:95:a2:fb:80:60:c5:9c:70:86:39:e9: 38:9a:65:2e:3b:cd:cb:57:df:f8:91:c0:a4:40:66: f0:82:99:68:5c:62:e8:a7:a0:fa:c8:d1:44:4d:29: 48:de:50:47:5c:0d:81:cb:6f:ae:f7:34:9c:25:f0: dd:00:ea:7c:1f:e0:dc:6e:b2:31:f2:f7:88:e6:09: d7:6e:ec:c7:24:12:6f:51:e8:52:6d:e7:bf:c6:20: a3:3c:43:04:0b:49:c8:4f:d3:6c:aa:d1:6f:3a:f8: 69:16:15:dc:fb:15:59:7e:5a:46:9c:52:82:84:f5: bc:7a:8f:24:d5:f3:80:93:02:cb:3b:54:45:07:c8: eb:cc:4c:a2:1c:c1:ee:08:bc:88:35:cf:af:d1:7f: 12:1a:72:e3:27:c5:a7:18:13:ac:07:4b:2d:ed:ae: 7d:cf:a5:e8:bf:df:90:6d:c0:f0:ee:e1:57:d7:be: 14:a8:80:50:ca:89:3f:d8:54:32:a2:d8:4a:df:f3: 7c:f8:25:4e:94:98:4c:a3:e9:70:b5:f7:14:ab:b0: 97:80:fb:0b:81:94:0d:2f:98:52:3f:14:87:13:3b: 82:8a:e7:2e:f1:f5:e3:ac:8e:65:77:a2:96:11:ab: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DB:A1:29:FE:8B:69:75:A8:92:A0:B7:49:8D:18:2B:31:22:D4:4C X509v3 Authority Key Identifier: keyid:61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:3b:66:9d:ac:ab:30:67:d2:a0:e7:1e:e8:99:4a:c0:6e:a9: 3f:e1:77:63:f5:a6:c7:ae:09:e8:35:44:b7:01:17:ac:bf:0e: 0a:12:06:ed:64:3c:82:86:d6:6c:ac:78:57:c2:a7:10:57:7a: c0:59:d1:2c:34:1e:20:67:2d:00:82:69:07:b9:96:b9:05:a1: f7:60:f8:55:6e:03:a1:6a:0a:4b:db:64:e2:8a:2b:95:d2:74: 46:78:f8:0d:25:b3:86:6f:90:30:49:bb:74:b6:33:e0:e1:e9: b0:a8:a6:ae:3f:bf:73:88:48:3c:bf:c8:b2:5d:f9:fd:ec:93: d7:a9:10:af:b6:f4:54:53:1b:c8:d0:64:c3:10:4a:e8:5a:61: 88:48:c2:d2:e2:0e:72:ae:a2:6d:e3:5b:32:2f:f4:32:d7:7e: da:c5:42:d3:41:50:cb:8f:ad:b0:6c:8f:82:76:22:6c:b9:a4: b3:ff:fc:c8:65:e0:88:db:d9:18:7f:d3:ab:8c:d6:2e:47:40: c9:60:3f:aa:04:60:77:a6:59:64:2e:7f:b6:36:04:e1:73:8f: db:db:8a:75:21:fd:70:43:34:04:f5:35:08:bc:64:ab:5d:7f: 25:76:4e:ad:f7:71:06:82:e3:78:7d:7d:f8:16:c3:7b:cd:27: 47:23:f9:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHmFrGY5rTZVQaniMUZG43rkYDgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1QkJFMjREMzhFMkYzREVGMDVERTlCN0EzRkRBQUZD QkQzQjY3RTAeFw0yNTEyMTkxMzQ1NTRaFw0yNTEyMjAxNjM0NTRaMDMxMTAvBgNV BAMTKDVDREJBMTI5RkU4QjY5NzVBODkyQTBCNzQ5OEQxODJCMzEyMkQ0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKyQZrWuBHdULlsXwyhaJZEWV ovuAYMWccIY56TiaZS47zctX3/iRwKRAZvCCmWhcYuinoPrI0URNKUjeUEdcDYHL b673NJwl8N0A6nwf4NxusjHy94jmCddu7MckEm9R6FJt57/GIKM8QwQLSchP02yq 0W86+GkWFdz7FVl+WkacUoKE9bx6jyTV84CTAss7VEUHyOvMTKIcwe4IvIg1z6/R fxIacuMnxacYE6wHSy3trn3Ppei/35BtwPDu4VfXvhSogFDKiT/YVDKi2Erf83z4 JU6UmEyj6XC19xSrsJeA+wuBlA0vmFI/FIcTO4KK5y7x9eOsjmV3opYRq0CdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXNuhKf6LaXWokqC3SY0YKzEi1EwwHwYDVR0j BBgwFoAUYVu+JNOOLz3vBd6bej/ar8vTtn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWExVDRZbjlrWWViSm1TZ0Y2dVRuTXdROWtHTmdmUFhScWJFU2dyNkRp djYvMC82MTVCQkUyNEQzOEUyRjNERUYwNURFOUI3QTNGREFBRkNCRDNCNjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxNUJCRTI0RDM4RTJGM0RF RjA1REU5QjdBM0ZEQUFGQ0JEM0I2N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWExVDRZbjlrWWViSm1TZ0Y2dVRuTXdROWtHTmdmUFhScWJFU2dyNkRpdjYvMC82 MTVCQkUyNEQzOEUyRjNERUYwNURFOUI3QTNGREFBRkNCRDNCNjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0jtmnayrMGfSoOce6JlKwG6pP+F3Y/Wmx64J6DVEtwEXrL8OChIG7WQ8gobW bKx4V8KnEFd6wFnRLDQeIGctAIJpB7mWuQWh92D4VW4DoWoKS9tk4oorldJ0Rnj4 DSWzhm+QMEm7dLYz4OHpsKimrj+/c4hIPL/Isl35/eyT16kQr7b0VFMbyNBkwxBK 6FphiEjC0uIOcq6ibeNbMi/0Mtd+2sVC00FQy4+tsGyPgnYibLmks//8yGXgiNvZ GH/Tq4zWLkdAyWA/qgRgd6ZZZC5/tjYE4XOP29uKdSH9cEM0BPU1CLxkq11/JXZO rfdxBoLjeH19+BbDe80nRyP5Dw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:49:56 2025 by rpki-client