This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft File: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft (raw, json) Hash identifier: lj07cYpBa7qTrsUDLnGZEYFoPtqBJXkb0vw9I5O+lmw= Subject key identifier: 51:81:5D:4A:78:E4:A0:87:A6:C9:49:27:52:7F:20:27:40:2C:92:FE Authority key identifier: 8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 Certificate issuer: /CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Certificate serial: 79707332D2054A1CBAED3B7CDA2D56F127D110C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject info access: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft Manifest number: 022E Signing time: Wed 31 Dec 2025 12:47:34 +0000 Manifest this update: Wed 31 Dec 2025 12:42:34 +0000 Manifest next update: Thu 01 Jan 2026 14:42:34 +0000 Files and hashes: 1: 3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa (hash: V5tvgEYxwqyrBiZbfBmfrrGfxjZimkFzr+SP4Ye2TY8=) 2: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl (hash: yRFgpPUJ1ITdjte6tzgoZcl1ePj6+tTkTO9LXi/Gz2w=) 3: 323830343a323531303a3a2f33322d3438203d3e20323634323537.roa (hash: nto9EgJXC/dWG0WEdavSKMEwi3srLv0jSlA+N/kLPP4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Jan 2026 14:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:70:73:32:d2:05:4a:1c:ba:ed:3b:7c:da:2d:56:f1:27:d1:10:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Validity Not Before: Dec 31 12:42:34 2025 GMT Not After : Jan 1 14:42:34 2026 GMT Subject: CN=51815D4A78E4A087A6C94927527F2027402C92FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:b7:df:a9:3e:e5:ae:53:05:db:63:1c:54: f3:1f:81:e7:7f:3a:b6:0b:2a:73:79:c7:38:34:ad: a5:db:0e:5b:f5:5f:2d:2a:c1:1a:d6:bf:39:d9:45: 86:c5:cf:65:45:3b:43:0c:91:75:8b:92:73:e2:e0: 6a:77:9c:22:53:67:0e:01:36:80:54:cc:6f:96:e3: 03:6a:91:ac:ab:ce:45:51:10:93:35:20:c5:c2:f8: 86:8b:02:a4:fe:d2:12:e8:de:c5:b3:20:73:63:98: 5f:b8:29:60:57:cd:98:30:8d:39:87:1f:1e:dd:76: 8a:2b:b5:7d:0d:8f:a9:71:d9:4e:0f:c8:e8:8c:1e: aa:70:87:27:49:6f:eb:17:1f:59:85:d0:21:30:f4: b7:2c:39:55:f2:2e:aa:6a:42:6e:18:e1:57:4b:1c: 36:51:ff:05:c4:5a:8d:9f:37:cc:42:ee:4a:73:c0: a1:c8:c1:e1:f0:9f:c3:c8:1b:e6:fb:b0:68:37:56: 8a:c0:1a:4b:14:2b:1c:6e:6b:f9:88:e7:04:c5:30: 1a:ae:3a:ae:a1:61:e5:c6:5f:81:dd:65:7f:eb:d9: d7:b8:18:27:8e:be:ad:89:74:9f:d7:72:31:de:bf: 3c:68:1c:59:ac:40:f0:af:7a:20:18:d8:3a:69:8a: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:81:5D:4A:78:E4:A0:87:A6:C9:49:27:52:7F:20:27:40:2C:92:FE X509v3 Authority Key Identifier: keyid:8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:32:d3:93:98:f3:a6:b2:2e:cc:4a:ce:2f:1a:69:ea:1f:96: 7c:01:53:53:02:b5:82:d1:a0:05:71:ec:42:3e:c2:7f:8b:73: 66:63:43:17:f7:e6:68:df:43:f3:5e:85:60:6d:b0:db:5d:b6: c5:14:16:f8:84:64:de:a2:c3:f3:f3:43:fc:d2:9a:e6:25:e2: 64:3f:ad:83:91:53:52:4f:1e:46:79:10:09:46:ba:0b:01:68: 2d:67:0a:3b:21:bb:da:de:87:47:ff:2a:8d:20:c9:0f:e6:71: 03:ef:79:47:f6:dd:09:06:5d:ef:5d:5e:03:fe:c6:b0:9d:93: 65:fc:12:ca:99:32:4f:9d:ba:d7:3d:2c:cf:c9:8d:37:98:68: f0:eb:11:e6:22:67:7b:b4:34:2c:b6:a6:8f:88:f8:28:59:dc: 3b:25:60:30:5f:3b:db:1d:b8:27:71:00:a5:70:b0:86:de:48: aa:53:6d:a5:a0:24:a0:66:7b:d2:11:9e:8c:e8:fd:88:af:24: bf:fe:77:52:5f:75:0e:54:b8:f8:6b:e8:5c:b8:84:02:61:e5: 3b:cc:6c:b6:d4:cb:be:18:3a:e6:fd:83:a9:eb:20:20:bb:99: c5:f2:a6:78:45:1c:1e:9d:9f:b0:4f:7a:3e:11:04:77:e0:8b: 10:4b:0b:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeXBzMtIFShy67Tt82i1W8SfREMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFNTRCMEIyM0E1QUVDMDI4MUFGQzYwOTk1QkJDRTEx M0E5MjQyMzAeFw0yNTEyMzExMjQyMzRaFw0yNjAxMDExNDQyMzRaMDMxMTAvBgNV BAMTKDUxODE1RDRBNzhFNEEwODdBNkM5NDkyNzUyN0YyMDI3NDAyQzkyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVbffqT7lrlMF22McVPMfged/ OrYLKnN5xzg0raXbDlv1Xy0qwRrWvznZRYbFz2VFO0MMkXWLknPi4Gp3nCJTZw4B NoBUzG+W4wNqkayrzkVREJM1IMXC+IaLAqT+0hLo3sWzIHNjmF+4KWBXzZgwjTmH Hx7ddoortX0Nj6lx2U4PyOiMHqpwhydJb+sXH1mF0CEw9LcsOVXyLqpqQm4Y4VdL HDZR/wXEWo2fN8xC7kpzwKHIweHwn8PIG+b7sGg3VorAGksUKxxua/mI5wTFMBqu Oq6hYeXGX4HdZX/r2de4GCeOvq2JdJ/XcjHevzxoHFmsQPCveiAY2Dppin4BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUYFdSnjkoIemyUknUn8gJ0Askv4wHwYDVR0j BBgwFoAUjeVLCyOlrsAoGvxgmVu84ROpJCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlw OFYvMS84REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTU0QjBCMjNBNUFFQzAy ODFBRkM2MDk5NUJCQ0UxMTNBOTI0MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlwOFYvMS84 REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANzLTk5jzprIuzErOLxpp6h+WfAFTUwK1gtGgBXHsQj7Cf4tzZmNDF/fmaN9D 816FYG2w2122xRQW+IRk3qLD8/ND/NKa5iXiZD+tg5FTUk8eRnkQCUa6CwFoLWcK OyG72t6HR/8qjSDJD+ZxA+95R/bdCQZd711eA/7GsJ2TZfwSypkyT5261z0sz8mN N5ho8OsR5iJne7Q0LLamj4j4KFncOyVgMF872x24J3EApXCwht5IqlNtpaAkoGZ7 0hGejOj9iK8kv/53Ul91DlS4+GvoXLiEAmHlO8xsttTLvhg65v2DqesgILuZxfKm eEUcHp2fsE96PhEEd+CLEEsLQQ== -----END CERTIFICATE-----Generated at Thu Jan 1 07:39:02 2026 by rpki-client