This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft File: 294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json) Hash identifier: o0XQwTqRjRpMLwqrRnfvddFKPLARJr/BPeYPFzKnvUI= Subject key identifier: 28:C2:C0:92:8C:DD:8C:A7:42:C2:9A:E3:55:96:29:CF:F5:CB:0E:A8 Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431 Certificate serial: 396FDBB42FA078B8702AD5AB1E31282E07862C96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft Manifest number: 034E Signing time: Sun 21 Dec 2025 20:35:21 +0000 Manifest this update: Sun 21 Dec 2025 20:30:21 +0000 Manifest next update: Mon 22 Dec 2025 20:56:21 +0000 Files and hashes: 1: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: ivcAtpmYYiz5WT2SumNxZUuxTrwHWnzy1vvPgOX69rM=) 2: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: 27TRK43DvGzctvUwTwZoruKts8GvTaqt7quiQch6ar4=) 3: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s=) 4: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: kP3yuOziQGvTs7gAqbrCAHPzpnd0+PYYuQOkH5wNORA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 20:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6f:db:b4:2f:a0:78:b8:70:2a:d5:ab:1e:31:28:2e:07:86:2c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431 Validity Not Before: Dec 21 20:30:21 2025 GMT Not After : Dec 22 20:56:21 2025 GMT Subject: CN=28C2C0928CDD8CA742C29AE3559629CFF5CB0EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:1c:bb:74:ad:60:0a:ba:2e:37:38:16:dd: 0a:5e:56:77:7f:5e:55:9e:e1:e5:d1:dd:63:15:1d: 43:62:fc:d6:d9:89:cd:22:40:10:88:75:b2:f4:5c: 2c:62:fc:61:5b:0a:55:5a:d3:12:fb:1f:75:7f:01: b4:64:ee:d8:df:e6:5e:4a:8e:59:46:12:ba:d1:f7: 3f:92:a1:77:e4:02:dd:3f:19:1e:d5:b8:ee:32:e3: 54:98:cb:b1:49:3c:8f:b3:02:bb:fb:23:30:b2:66: 42:9c:aa:5f:11:a1:75:58:a0:4e:80:14:2c:e8:2c: 6b:73:7d:5e:93:83:fb:11:8d:38:3f:ae:0e:20:b5: 9c:96:d9:96:31:34:cf:19:5e:8e:90:1c:e7:43:bf: 89:c4:2b:e7:b4:07:17:f4:35:e9:70:53:d9:e3:1f: 28:fb:f7:6e:39:f8:82:c3:95:3e:78:dc:ec:f8:10: 68:2a:a7:a4:49:30:75:a9:6b:2a:f3:3e:7f:77:0c: 9c:1e:44:b4:47:01:83:19:ff:b7:52:5c:16:4a:73: 64:66:d9:4c:c8:34:7e:60:fb:af:cc:7e:53:b6:0e: 6a:34:db:07:0c:e5:6a:fd:a0:e0:83:1a:fb:f9:fb: a0:79:cc:bc:19:c3:a1:29:23:42:15:fe:64:29:58: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C2:C0:92:8C:DD:8C:A7:42:C2:9A:E3:55:96:29:CF:F5:CB:0E:A8 X509v3 Authority Key Identifier: keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ff:fc:9f:f1:93:e8:e9:00:24:b9:78:5f:43:ad:67:1c:30: f8:4d:04:12:81:1c:4e:59:9b:d3:51:8a:26:79:37:7f:a8:92: 0d:aa:18:c5:9f:19:7d:2c:28:a8:cc:ce:01:eb:c4:67:39:8f: 14:cb:08:e8:89:8f:14:d3:7d:27:59:3b:8c:69:50:2e:ee:e0: 91:a4:87:86:f1:0b:68:dc:6e:e3:6a:e1:e1:7b:11:74:0e:01: cc:42:95:c2:b3:a0:1f:a4:62:2a:19:77:36:24:50:f9:1d:77: 26:61:14:17:d0:18:b9:64:0f:00:7e:7a:bd:27:c4:0a:43:8d: 58:bd:57:65:47:6e:19:f6:cb:c0:6d:c1:3f:ae:f9:d7:e9:e2: 90:fc:d2:cf:74:50:0f:a0:6e:43:1e:fe:48:bc:3f:2a:23:5e: 7c:40:4b:49:9b:7e:a0:1f:ec:f6:16:fb:34:90:34:80:bc:97: dd:d1:54:8d:4b:fa:54:34:fc:46:9a:3b:e9:93:be:10:c6:57: 8a:ae:47:08:7d:78:6a:1b:3f:da:49:c6:f6:ec:b5:66:11:2c: 9e:66:d6:a7:05:68:90:ce:5b:79:fe:1f:13:fe:b1:c2:2d:7d: b8:70:0d:cf:65:6b:53:8e:8a:f3:46:f7:0d:9d:e3:64:49:22: 9e:5f:aa:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOW/btC+geLhwKtWrHjEoLgeGLJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0NDI2RTMxQUVBRUJGMjczNjQ3NTQ5REQ0NTlERTk4 QTExMjQzMTAeFw0yNTEyMjEyMDMwMjFaFw0yNTEyMjIyMDU2MjFaMDMxMTAvBgNV BAMTKDI4QzJDMDkyOENERDhDQTc0MkMyOUFFMzU1OTYyOUNGRjVDQjBFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7By7dK1gCrouNzgW3QpeVnd/ XlWe4eXR3WMVHUNi/NbZic0iQBCIdbL0XCxi/GFbClVa0xL7H3V/AbRk7tjf5l5K jllGErrR9z+SoXfkAt0/GR7VuO4y41SYy7FJPI+zArv7IzCyZkKcql8RoXVYoE6A FCzoLGtzfV6Tg/sRjTg/rg4gtZyW2ZYxNM8ZXo6QHOdDv4nEK+e0Bxf0NelwU9nj Hyj79245+ILDlT543Oz4EGgqp6RJMHWpayrzPn93DJweRLRHAYMZ/7dSXBZKc2Rm 2UzINH5g+6/MflO2Dmo02wcM5Wr9oOCDGvv5+6B5zLwZw6EpI0IV/mQpWIB3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKMLAkozdjKdCwprjVZYpz/XLDqgwHwYDVR0j BBgwFoAUKUQm4xrq6/JzZHVJ3UWd6YoRJDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT bjQvMS8yOTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDQyNkUzMUFFQUVCRjI3 MzY0NzU0OURENDU5REU5OEExMTI0MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVTbjQvMS8y OTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkf/8n/GT6OkAJLl4X0OtZxww+E0EEoEcTlmb01GKJnk3f6iSDaoYxZ8ZfSwo qMzOAevEZzmPFMsI6ImPFNN9J1k7jGlQLu7gkaSHhvELaNxu42rh4XsRdA4BzEKV wrOgH6RiKhl3NiRQ+R13JmEUF9AYuWQPAH56vSfECkONWL1XZUduGfbLwG3BP675 1+nikPzSz3RQD6BuQx7+SLw/KiNefEBLSZt+oB/s9hb7NJA0gLyX3dFUjUv6VDT8 Rpo76ZO+EMZXiq5HCH14ahs/2knG9uy1ZhEsnmbWpwVokM5bef4fE/6xwi19uHAN z2VrU46K80b3DZ3jZEkinl+qpg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:52:21 2025 by rpki-client