This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft File: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft (raw, json) Hash identifier: GL7JHwfhXXbJDb7gGRjuVpOID2ozdyGASuLdzGyeGM4= Subject key identifier: 85:71:27:D8:AE:33:08:2B:80:18:CD:38:2E:30:9B:79:C1:99:52:A0 Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 Certificate issuer: /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Certificate serial: 3975E4CB9C0BF3E3957D7BE5910332B9F688AE8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject info access: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft Manifest number: 0341 Signing time: Wed 31 Dec 2025 23:10:48 +0000 Manifest this update: Wed 31 Dec 2025 23:05:48 +0000 Manifest next update: Fri 02 Jan 2026 02:07:48 +0000 Files and hashes: 1: 323830343a373836303a3a2f33322d3332203d3e20323731323338.roa (hash: ob/Dwvax52q+vhxyPcSWE0mkKcMCWrMtLj4d7yXoKhY=) 2: 3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (hash: I9G3ex2XveORcAEqGBwplD5mNPbZvqU6abd1zjBCLKY=) 3: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl (hash: VJR/dEh2nAndX1ow4oQFoEMmebdbtaqZPxyALuPwVIg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 02:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:75:e4:cb:9c:0b:f3:e3:95:7d:7b:e5:91:03:32:b9:f6:88:ae:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Validity Not Before: Dec 31 23:05:48 2025 GMT Not After : Jan 2 02:07:48 2026 GMT Subject: CN=857127D8AE33082B8018CD382E309B79C19952A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3c:32:49:0c:95:eb:a6:ad:d9:9f:d6:4d:c2: b8:3b:86:eb:e0:57:68:4f:2d:eb:f8:de:1c:38:40: 9a:50:90:b4:24:da:7c:b8:95:6e:0e:a3:20:dd:f9: f1:fd:25:6e:3c:0a:e2:e6:c9:49:07:c9:3a:58:53: 35:e5:f1:1f:04:9a:8f:d9:2b:a9:83:bb:20:fd:42: 53:38:b0:5f:4a:f2:39:7d:e6:9f:25:02:eb:4d:ea: 3c:e2:ad:1d:57:31:df:93:ca:08:85:31:ac:12:a7: 17:bb:67:83:9f:e0:4a:1f:84:ab:89:62:c8:4e:d6: 9b:5e:41:7e:f6:e2:4f:04:5a:75:d8:0d:db:00:4f: 2f:c1:21:0a:21:83:c8:86:df:4e:48:e4:4d:cd:f1: 96:7b:4c:b1:e5:bc:fe:59:d8:c4:b1:9e:a4:12:19: 3b:b9:8c:92:31:2f:10:80:51:81:39:37:ed:b0:ec: ab:50:c9:cd:5b:68:61:35:9c:27:ca:a9:af:b6:d4: 8a:78:eb:ab:3d:c8:6d:ef:00:50:cf:60:33:cd:a8: e7:3b:9c:24:a8:e1:bc:39:88:be:1a:57:9a:63:56: 90:b7:18:75:af:44:21:45:ef:7a:0d:e7:a0:81:ec: bb:68:6e:ff:ca:78:be:0f:e5:2f:d3:91:2b:1f:92: 54:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:71:27:D8:AE:33:08:2B:80:18:CD:38:2E:30:9B:79:C1:99:52:A0 X509v3 Authority Key Identifier: keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:03:fd:bb:b7:6b:f0:9d:2a:c9:b0:a0:b5:b0:73:18:44:e2: 53:9f:19:77:a1:70:de:d6:54:52:2f:ac:87:4c:30:39:93:c2: 6a:77:68:4b:1a:fe:87:ab:c6:3d:e4:79:8b:58:05:b7:d1:c6: 38:d9:19:06:48:47:e3:3e:29:1b:14:ea:d3:11:b3:85:b2:10: 93:3b:ab:ad:e2:d9:ca:da:ec:09:56:88:f6:40:bf:6f:b0:01: 13:a7:fa:24:5f:c4:84:db:36:6a:9a:6d:31:fa:ac:5b:7d:e7: 3b:30:0b:45:59:3c:61:d2:cc:5f:ab:0b:5d:a9:9e:7e:bc:b8: fb:ba:70:8f:ae:8b:1d:c6:04:5b:fb:e1:d4:cc:ff:f0:28:59: 20:78:55:74:38:75:cb:83:f6:9c:18:5f:17:e8:9b:15:92:20: 10:53:43:9a:df:c7:aa:4a:aa:dc:54:ee:2f:52:f5:cd:9c:84: 3a:22:7c:83:d1:a4:b4:03:b0:99:23:ce:f3:ea:c7:3c:e6:27: c6:6c:a7:5d:48:8b:f7:e8:46:30:ef:ca:a8:04:d1:c1:3e:e9: 1b:c9:ea:5b:a5:66:99:9b:f2:48:a0:69:31:a1:98:52:6b:dc: e3:28:61:a1:57:b2:7a:01:7d:1c:40:99:d2:de:9e:73:d3:0a: 3b:26:60:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOXXky5wL8+OVfXvlkQMyufaIrowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0 OTYxQkU3MTAeFw0yNTEyMzEyMzA1NDhaFw0yNjAxMDIwMjA3NDhaMDMxMTAvBgNV BAMTKDg1NzEyN0Q4QUUzMzA4MkI4MDE4Q0QzODJFMzA5Qjc5QzE5OTUyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtPDJJDJXrpq3Zn9ZNwrg7huvg V2hPLev43hw4QJpQkLQk2ny4lW4OoyDd+fH9JW48CuLmyUkHyTpYUzXl8R8Emo/Z K6mDuyD9QlM4sF9K8jl95p8lAutN6jzirR1XMd+TygiFMawSpxe7Z4Of4EofhKuJ YshO1pteQX724k8EWnXYDdsATy/BIQohg8iG305I5E3N8ZZ7TLHlvP5Z2MSxnqQS GTu5jJIxLxCAUYE5N+2w7KtQyc1baGE1nCfKqa+21Ip466s9yG3vAFDPYDPNqOc7 nCSo4bw5iL4aV5pjVpC3GHWvRCFF73oN56CB7Ltobv/KeL4P5S/TkSsfklQBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhXEn2K4zCCuAGM04LjCbecGZUqAwHwYDVR0j BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQc2cvMC80 ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALQP9u7dr8J0qybCgtbBzGETiU58Zd6Fw3tZUUi+sh0wwOZPCandoSxr+h6vG PeR5i1gFt9HGONkZBkhH4z4pGxTq0xGzhbIQkzurreLZytrsCVaI9kC/b7ABE6f6 JF/EhNs2apptMfqsW33nOzALRVk8YdLMX6sLXamefry4+7pwj66LHcYEW/vh1Mz/ 8ChZIHhVdDh1y4P2nBhfF+ibFZIgEFNDmt/Hqkqq3FTuL1L1zZyEOiJ8g9GktAOw mSPO8+rHPOYnxmynXUiL9+hGMO/KqATRwT7pG8nqW6VmmZvySKBpMaGYUmvc4yhh oVeyegF9HECZ0t6ec9MKOyZgZg== -----END CERTIFICATE-----Generated at Thu Jan 1 12:34:22 2026 by rpki-client