This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft File: C952C93A676BA611AEC114DD4983F2B03168FE10.mft (raw, json) Hash identifier: 9sFI9yW9teFi2e0378uFcV8SEMnCmKecU9peyyygfyg= Subject key identifier: B0:AF:17:2E:11:CB:F7:D3:4D:2B:11:BE:C6:AE:A6:5E:E7:D3:1F:ED Authority key identifier: C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10 Certificate issuer: /CN=C952C93A676BA611AEC114DD4983F2B03168FE10 Certificate serial: 1BD13A3F8DEB6F4B70ACF57C78A896A2C2987777 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft Manifest number: C2 Signing time: Sun 21 Dec 2025 05:22:41 +0000 Manifest this update: Sun 21 Dec 2025 05:17:41 +0000 Manifest next update: Mon 22 Dec 2025 09:16:41 +0000 Files and hashes: 1: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: CinqX1j3jyRc5maom4CkOjawfLigGHk+YxdzO16vL9s=) 2: C952C93A676BA611AEC114DD4983F2B03168FE10.crl (hash: HvshQO9l22S1AEvxe4ztmqFDl6asmDnG1b48XVN63mw=) 3: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: FX7CxEwMe77oGVOke0pJc/KWM5ZKvh54JurYKVnN8TM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 06:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d1:3a:3f:8d:eb:6f:4b:70:ac:f5:7c:78:a8:96:a2:c2:98:77:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C952C93A676BA611AEC114DD4983F2B03168FE10 Validity Not Before: Dec 21 05:17:41 2025 GMT Not After : Dec 22 09:16:41 2025 GMT Subject: CN=B0AF172E11CBF7D34D2B11BEC6AEA65EE7D31FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:57:1d:c0:24:c0:f2:77:d0:46:b4:4a:e6: f5:9c:84:7f:17:ff:72:ee:a6:0b:36:38:d3:2c:ab: 1d:3c:21:79:a7:89:66:50:7f:e2:af:36:df:88:8a: d3:75:6a:84:87:b7:5e:0a:42:31:52:22:f8:8c:8c: 9a:38:9d:99:3f:ae:1e:a0:16:7a:a0:fe:ab:16:c4: 82:1e:ca:08:4a:6b:72:23:05:18:ca:52:e1:eb:2d: 1a:3d:74:5a:13:97:58:99:99:0b:0a:e6:7c:ae:b9: 56:2b:c9:2a:74:1e:b3:80:a6:dd:42:a3:48:b7:e6: 0e:62:74:c3:ed:d7:8f:d2:de:33:7d:ae:ce:73:af: 21:22:2b:8e:39:1f:57:44:6b:16:19:cc:39:08:f0: 99:a6:52:6e:1c:21:97:ab:f3:2a:b8:36:e2:2e:81: 58:04:b5:a2:8a:72:cb:ab:94:f1:ba:a5:f3:2a:c4: 43:06:98:14:fd:51:af:6b:98:dd:6d:e2:20:af:25: a6:48:b9:fe:5c:62:90:25:51:f6:24:bf:72:35:ab: 54:ae:35:af:e0:a7:74:ba:e6:03:68:1c:07:0a:94: ae:29:47:5f:6e:e9:2d:11:8e:3c:04:a0:ea:f8:58: 36:5c:4c:f7:a3:7e:c8:4f:c7:45:bc:b4:fc:6a:01: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AF:17:2E:11:CB:F7:D3:4D:2B:11:BE:C6:AE:A6:5E:E7:D3:1F:ED X509v3 Authority Key Identifier: keyid:C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a9:00:ce:6c:35:bc:38:81:78:e8:12:38:5b:d1:32:e4:52: b8:00:88:4e:ea:a0:d2:4d:00:88:9e:95:c1:1e:9f:10:25:43: 20:08:2d:95:c5:7f:e5:c1:f1:a5:83:40:d2:aa:bc:96:00:55: 49:0f:43:52:de:4b:7e:05:f5:a4:5b:06:2d:4c:4d:ed:d0:c5: a5:4d:e2:09:e8:b6:ca:a3:1c:86:4e:f8:06:31:dd:76:57:94: ec:ac:e0:d6:43:f2:c8:c0:97:b6:88:8e:32:a4:3b:e5:80:fe: ef:28:df:27:6d:fc:9e:a2:7d:40:8c:fa:b9:48:ba:c3:e8:e0: 9a:a3:00:74:d7:05:8f:8d:3a:c2:71:fb:14:6f:75:c5:23:5f: a1:ff:50:20:8f:fc:74:6b:56:6c:72:3f:8b:8e:0f:9e:df:9e: b0:1d:8e:cb:d4:87:22:c7:03:20:5b:dd:75:e0:d0:de:52:45: 71:26:50:de:6b:af:60:28:a3:f2:bd:94:a6:2b:9f:4a:1d:1b: 8c:1e:0d:78:96:9b:92:a7:cf:59:f0:b0:a1:2c:8b:d7:78:c3: b6:a0:5d:cf:92:5e:e2:5c:94:51:0e:8e:11:bf:ae:81:a0:f9: 13:db:58:53:26:21:ba:9d:5b:b5:5f:84:e1:e2:89:f2:a6:0b: 7d:69:75:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG9E6P43rb0twrPV8eKiWosKYd3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MkM5M0E2NzZCQTYxMUFFQzExNERENDk4M0YyQjAz MTY4RkUxMDAeFw0yNTEyMjEwNTE3NDFaFw0yNTEyMjIwOTE2NDFaMDMxMTAvBgNV BAMTKEIwQUYxNzJFMTFDQkY3RDM0RDJCMTFCRUM2QUVBNjVFRTdEMzFGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/lcdwCTA8nfQRrRK5vWchH8X /3Lupgs2ONMsqx08IXmniWZQf+KvNt+IitN1aoSHt14KQjFSIviMjJo4nZk/rh6g Fnqg/qsWxIIeyghKa3IjBRjKUuHrLRo9dFoTl1iZmQsK5nyuuVYrySp0HrOApt1C o0i35g5idMPt14/S3jN9rs5zryEiK445H1dEaxYZzDkI8JmmUm4cIZer8yq4NuIu gVgEtaKKcsurlPG6pfMqxEMGmBT9Ua9rmN1t4iCvJaZIuf5cYpAlUfYkv3I1q1Su Na/gp3S65gNoHAcKlK4pR19u6S0RjjwEoOr4WDZcTPejfshPx0W8tPxqAfs7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsK8XLhHL99NNKxG+xq6mXufTH+0wHwYDVR0j BBgwFoAUyVLJOmdrphGuwRTdSYPysDFo/hAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC9DOTUyQzkzQTY3NkJBNjExQUVDMTE0REQ0OTgzRjJCMDMxNjhGRTEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5NTJDOTNBNjc2QkE2MTFB RUMxMTRERDQ5ODNGMkIwMzE2OEZFMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC9D OTUyQzkzQTY3NkJBNjExQUVDMTE0REQ0OTgzRjJCMDMxNjhGRTEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh6kAzmw1vDiBeOgSOFvRMuRSuACITuqg0k0AiJ6VwR6fECVDIAgtlcV/5cHx pYNA0qq8lgBVSQ9DUt5LfgX1pFsGLUxN7dDFpU3iCei2yqMchk74BjHddleU7Kzg 1kPyyMCXtoiOMqQ75YD+7yjfJ238nqJ9QIz6uUi6w+jgmqMAdNcFj406wnH7FG91 xSNfof9QII/8dGtWbHI/i44Pnt+esB2Oy9SHIscDIFvddeDQ3lJFcSZQ3muvYCij 8r2UpiufSh0bjB4NeJabkqfPWfCwoSyL13jDtqBdz5Je4lyUUQ6OEb+ugaD5E9tY UyYhup1btV+E4eKJ8qYLfWl18g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:34 2025 by rpki-client