This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FX5rd2LLQ25V4a4rSkNdrw1qc39cBBo2xYava9P5viWz/0/D96BC5ADDC34B93062CD8ED599DDE86245B55395.mft File: D96BC5ADDC34B93062CD8ED599DDE86245B55395.mft (raw, json) Hash identifier: EtPWpoG90FDdyyo3xeDfpldJT+96WbWmqDvsyiK3KPA= Subject key identifier: 71:82:2D:19:07:69:3F:78:62:16:81:1B:F7:78:0F:20:39:B5:38:19 Authority key identifier: D9:6B:C5:AD:DC:34:B9:30:62:CD:8E:D5:99:DD:E8:62:45:B5:53:95 Certificate issuer: /CN=D96BC5ADDC34B93062CD8ED599DDE86245B55395 Certificate serial: 4236B9A94DC2043A88ED0657E203E778869B8F0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96BC5ADDC34B93062CD8ED599DDE86245B55395.cer Subject info access: rsync://rpki-repo.registro.br/repo/FX5rd2LLQ25V4a4rSkNdrw1qc39cBBo2xYava9P5viWz/0/D96BC5ADDC34B93062CD8ED599DDE86245B55395.mft Manifest number: 014C Signing time: Sun 21 Dec 2025 04:05:00 +0000 Manifest this update: Sun 21 Dec 2025 04:00:00 +0000 Manifest next update: Mon 22 Dec 2025 04:17:00 +0000 Files and hashes: 1: D96BC5ADDC34B93062CD8ED599DDE86245B55395.crl (hash: glXVDzG/aquTLCuXdRe5IEP2+Ok7mn8dEe5TEH3wDf8=) 2: 323830343a393361383a3a2f33322d3332203d3e20323734373836.roa (hash: UG8CKWWMBWupDiyw6BxCXS2BLeczQ+XF4EfRLTCChjU=) 3: AS274786.asa (hash: 7eoo/shGFfqBt105nl8yHBd8wjURXw5gDnCGTEBy7jc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FX5rd2LLQ25V4a4rSkNdrw1qc39cBBo2xYava9P5viWz/0/D96BC5ADDC34B93062CD8ED599DDE86245B55395.crl rsync://rpki-repo.registro.br/repo/FX5rd2LLQ25V4a4rSkNdrw1qc39cBBo2xYava9P5viWz/0/D96BC5ADDC34B93062CD8ED599DDE86245B55395.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96BC5ADDC34B93062CD8ED599DDE86245B55395.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 04:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:36:b9:a9:4d:c2:04:3a:88:ed:06:57:e2:03:e7:78:86:9b:8f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96BC5ADDC34B93062CD8ED599DDE86245B55395 Validity Not Before: Dec 21 04:00:00 2025 GMT Not After : Dec 22 04:17:00 2025 GMT Subject: CN=71822D1907693F786216811BF7780F2039B53819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:16:ad:81:aa:64:de:d8:01:d9:f8:34:68: fd:0a:6f:ba:69:2c:8c:d7:17:09:b2:df:fc:04:74: b6:b9:8e:aa:70:49:d0:de:1f:09:e8:a8:4a:63:a2: bf:ff:7d:d8:ad:25:33:94:65:36:3b:3c:62:b4:9b: 9a:72:2c:84:c7:43:2e:3a:6d:b2:62:6e:35:62:4c: 9a:16:e2:e7:0a:20:60:41:a5:c6:9a:73:bd:47:e3: 6f:a9:ee:db:8f:4f:bc:94:d2:c6:66:c6:8c:8b:3c: 3a:3c:08:2e:45:f8:fa:a9:48:78:c4:82:6b:83:4e: b3:18:1a:40:0f:d7:de:76:ad:de:fc:6a:02:cf:3f: f4:23:ac:f1:8a:30:c1:0a:77:58:a6:ab:d2:d7:5e: 27:2d:cb:16:be:e5:5d:ea:12:7b:10:a5:30:66:90: 8f:41:19:57:bd:e5:00:2e:76:26:36:fb:73:05:66: 79:86:72:52:de:eb:7f:e3:df:cc:5b:47:78:ff:b9: d6:ae:fe:4f:e7:0c:b9:ec:6e:e4:e7:f6:4f:7b:48: cd:35:51:67:52:9d:d9:2d:b3:10:81:e7:30:a4:04: 69:79:c6:9f:46:d3:9e:8b:a0:b5:a0:6f:f2:3f:e2: 88:5f:f6:fc:a3:00:b8:dd:ae:2b:f1:c8:ec:e0:60: a1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:2D:19:07:69:3F:78:62:16:81:1B:F7:78:0F:20:39:B5:38:19 X509v3 Authority Key Identifier: keyid:D9:6B:C5:AD:DC:34:B9:30:62:CD:8E:D5:99:DD:E8:62:45:B5:53:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FX5rd2LLQ25V4a4rSkNdrw1qc39cBBo2xYava9P5viWz/0/D96BC5ADDC34B93062CD8ED599DDE86245B55395.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96BC5ADDC34B93062CD8ED599DDE86245B55395.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX5rd2LLQ25V4a4rSkNdrw1qc39cBBo2xYava9P5viWz/0/D96BC5ADDC34B93062CD8ED599DDE86245B55395.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a2:63:be:6e:c9:23:c3:bd:c3:1a:a9:b2:9a:22:e8:a5:28: f3:05:3f:90:8e:4b:1c:d9:9c:0f:73:76:f8:c0:f8:b2:fb:10: 4e:c5:62:a3:e1:50:55:d1:1a:5e:ae:96:25:f9:24:5e:f8:d8: a1:51:c8:2c:44:e0:fe:04:8d:45:56:23:7b:df:6e:49:b8:b0: d2:3b:3c:b6:46:4c:86:09:91:c2:be:ee:e9:ab:83:ed:36:12: c5:d2:d7:90:d4:81:8a:c7:3e:9e:9e:a2:39:fc:0b:42:75:89: 12:45:e6:cd:fc:b5:ed:2c:ac:20:96:4c:55:e9:d1:01:1e:0a: 6c:7f:ba:4b:dd:90:29:7d:1f:48:42:62:51:9c:fe:df:d6:e0: ab:44:af:6c:af:07:58:e0:43:99:4f:3b:ee:01:f4:fb:9a:ad: ed:98:01:9e:5a:85:42:7b:90:a8:64:32:66:06:14:4d:fc:b8: 7f:db:1f:7d:e4:28:10:30:7d:b4:fa:66:70:5d:9a:e6:38:d0: 3c:42:d8:6d:c1:87:02:f1:4d:02:0e:4f:66:3e:55:de:31:13: a9:10:51:7b:8c:81:69:df:a4:81:71:87:27:d6:f4:56:e0:d8: ca:b2:4a:16:51:f1:17:c4:77:8a:92:2f:dd:16:cf:1d:26:af: ce:42:f5:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQja5qU3CBDqI7QZX4gPneIabjwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2QkM1QUREQzM0QjkzMDYyQ0Q4RUQ1OTlEREU4NjI0 NUI1NTM5NTAeFw0yNTEyMjEwNDAwMDBaFw0yNTEyMjIwNDE3MDBaMDMxMTAvBgNV BAMTKDcxODIyRDE5MDc2OTNGNzg2MjE2ODExQkY3NzgwRjIwMzlCNTM4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxBatgapk3tgB2fg0aP0Kb7pp LIzXFwmy3/wEdLa5jqpwSdDeHwnoqEpjor//fditJTOUZTY7PGK0m5pyLITHQy46 bbJibjViTJoW4ucKIGBBpcaac71H42+p7tuPT7yU0sZmxoyLPDo8CC5F+PqpSHjE gmuDTrMYGkAP1952rd78agLPP/QjrPGKMMEKd1imq9LXXictyxa+5V3qEnsQpTBm kI9BGVe95QAudiY2+3MFZnmGclLe63/j38xbR3j/udau/k/nDLnsbuTn9k97SM01 UWdSndktsxCB5zCkBGl5xp9G056LoLWgb/I/4ohf9vyjALjdrivxyOzgYKGZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcYItGQdpP3hiFoEb93gPIDm1OBkwHwYDVR0j BBgwFoAU2WvFrdw0uTBizY7Vmd3oYkW1U5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlg1cmQyTExRMjVWNGE0clNrTmRydzFxYzM5Y0JCbzJ4WWF2YTlQNXZp V3ovMC9EOTZCQzVBRERDMzRCOTMwNjJDRDhFRDU5OURERTg2MjQ1QjU1Mzk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NkJDNUFEREMzNEI5MzA2 MkNEOEVENTk5RERFODYyNDVCNTUzOTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rlg1cmQyTExRMjVWNGE0clNrTmRydzFxYzM5Y0JCbzJ4WWF2YTlQNXZpV3ovMC9E OTZCQzVBRERDMzRCOTMwNjJDRDhFRDU5OURERTg2MjQ1QjU1Mzk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsKJjvm7JI8O9wxqpspoi6KUo8wU/kI5LHNmcD3N2+MD4svsQTsVio+FQVdEa Xq6WJfkkXvjYoVHILETg/gSNRVYje99uSbiw0js8tkZMhgmRwr7u6auD7TYSxdLX kNSBisc+np6iOfwLQnWJEkXmzfy17SysIJZMVenRAR4KbH+6S92QKX0fSEJiUZz+ 39bgq0SvbK8HWOBDmU877gH0+5qt7ZgBnlqFQnuQqGQyZgYUTfy4f9sffeQoEDB9 tPpmcF2a5jjQPELYbcGHAvFNAg5PZj5V3jETqRBRe4yBad+kgXGHJ9b0VuDYyrJK FlHxF8R3ipIv3RbPHSavzkL1Sw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:01:03 2025 by rpki-client