This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft File: C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft (raw, json) Hash identifier: xbl4JU0ndmQ5bYAtuA5ifnqGDX88u4OEbdBog0Few4k= Subject key identifier: 70:83:F8:EE:46:E8:7C:11:26:56:2A:A2:6C:F8:9D:7B:E6:85:98:F7 Authority key identifier: C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48 Certificate issuer: /CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648 Certificate serial: 784B145FF55547C06EFF03642EABFF0BC199C8DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer Subject info access: rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft Manifest number: 031C Signing time: Mon 22 Dec 2025 01:15:35 +0000 Manifest this update: Mon 22 Dec 2025 01:10:35 +0000 Manifest next update: Tue 23 Dec 2025 04:59:35 +0000 Files and hashes: 1: C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl (hash: MA0vQb0RCSZW5CtJ4xhVi10npBIrQ87WH1xv5aDvmUM=) 2: 34352e3136302e3233362e302f32322d3234203d3e20323638343334.roa (hash: MRDJZnxwxFrCGgYjkRGEcHpzQ74ilO1b7trT9O4CHPU=) 3: 323830343a353132383a3a2f33322d3438203d3e20323638343334.roa (hash: eHMzUrusULOYVKB60JDhi97xMjONFDrfKgYdxrlcM6o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 04:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4b:14:5f:f5:55:47:c0:6e:ff:03:64:2e:ab:ff:0b:c1:99:c8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648 Validity Not Before: Dec 22 01:10:35 2025 GMT Not After : Dec 23 04:59:35 2025 GMT Subject: CN=7083F8EE46E87C1126562AA26CF89D7BE68598F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:3c:6f:47:fe:b3:a2:c2:86:38:87:c2:4a: ef:97:4e:58:d9:57:37:67:2b:17:8c:be:87:8c:65: 6f:c1:8d:0f:41:33:eb:fb:f9:4f:83:c0:ca:0f:3a: 86:af:38:ce:f5:74:58:db:e3:81:fa:1e:fa:65:55: d6:25:d6:07:72:c9:21:9c:f2:ce:40:5f:99:f3:a8: a0:35:3d:59:51:09:c1:fa:e5:54:da:2f:41:88:35: 34:1e:7c:39:53:12:9e:3b:d5:c9:55:73:0b:27:f5: 24:78:6e:65:f6:0a:25:e6:74:85:2e:8b:c5:f6:47: 78:74:b8:d8:f2:d0:34:5c:1e:8d:5f:4b:ef:4b:4d: 7d:ca:20:fe:14:f6:b9:00:3e:ee:b1:47:5d:31:99: d9:b3:34:a3:bb:5d:1e:1f:ef:de:f3:46:4f:18:fb: 7c:5b:b1:8d:ca:a8:47:85:c8:94:07:b8:ae:30:ee: a7:51:3f:2e:d2:ef:58:1c:36:e8:1b:9e:77:7c:8a: 05:19:80:f3:8a:a2:dc:ba:67:32:c7:83:76:6c:03: c6:b7:48:30:9f:27:89:28:bf:0a:5d:99:47:27:2c: 0c:c8:ba:2e:0e:c9:27:1c:35:bf:3e:cb:35:6c:1d: ab:d6:8f:9e:2a:7c:7a:65:6c:8b:6f:a7:54:67:2a: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:F8:EE:46:E8:7C:11:26:56:2A:A2:6C:F8:9D:7B:E6:85:98:F7 X509v3 Authority Key Identifier: keyid:C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:df:4b:06:15:7f:24:eb:b8:f3:5c:db:5e:af:4d:49:e7:fe: 6a:a1:30:6c:8c:4f:b8:0d:94:0d:67:d3:16:99:aa:5f:e6:73: 1f:94:1a:72:8b:da:9e:c7:e3:37:8e:d2:d0:2c:54:fa:a3:c0: 43:bf:14:64:77:4e:41:24:69:7f:94:50:28:81:1b:93:0a:97: 69:38:bb:a7:60:26:10:27:53:dd:c2:0a:9d:2f:06:4f:ba:1a: a8:c3:76:6f:a1:b4:6e:81:2e:93:39:cc:e3:35:56:59:0b:27: 18:13:8d:f7:56:99:d1:bd:94:9f:0c:a3:9d:40:fa:95:3a:90: 02:14:ad:18:48:85:32:10:ee:0f:f5:5b:55:9c:67:75:bd:c1: 15:a6:ed:ad:ee:6f:02:2a:3f:07:48:f8:30:20:00:04:02:e0: 65:7e:b2:3b:f6:47:88:65:21:af:a7:62:77:99:24:72:18:5f: fe:df:02:d9:fd:42:fb:b9:50:fc:98:9a:0f:48:a6:14:cc:d0: 77:fa:44:bd:e1:c2:d6:90:7d:a3:fd:a6:85:ec:b5:5e:a0:06: 2a:85:ed:cd:cf:18:4f:77:23:5e:e2:19:47:d5:28:c2:a8:16: 6b:86:15:c9:96:bb:82:ce:83:83:b2:b5:65:07:72:a1:c0:86: d2:3a:04:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeEsUX/VVR8Bu/wNkLqv/C8GZyNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBRkRBRkIzQUY3NEE4Q0EwODMyQjA3NjkxNEQ3QTRB NDQyNTY0ODAeFw0yNTEyMjIwMTEwMzVaFw0yNTEyMjMwNDU5MzVaMDMxMTAvBgNV BAMTKDcwODNGOEVFNDZFODdDMTEyNjU2MkFBMjZDRjg5RDdCRTY4NTk4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCjxvR/6zosKGOIfCSu+XTljZ VzdnKxeMvoeMZW/BjQ9BM+v7+U+DwMoPOoavOM71dFjb44H6HvplVdYl1gdyySGc 8s5AX5nzqKA1PVlRCcH65VTaL0GINTQefDlTEp471clVcwsn9SR4bmX2CiXmdIUu i8X2R3h0uNjy0DRcHo1fS+9LTX3KIP4U9rkAPu6xR10xmdmzNKO7XR4f797zRk8Y +3xbsY3KqEeFyJQHuK4w7qdRPy7S71gcNugbnnd8igUZgPOKoty6ZzLHg3ZsA8a3 SDCfJ4kovwpdmUcnLAzIui4OySccNb8+yzVsHavWj54qfHplbItvp1RnKvyjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcIP47kbofBEmViqibPide+aFmPcwHwYDVR0j BBgwFoAUya/a+zr3SoyggysHaRTXpKRCVkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3FhUFhDR3RORldqOG1DcThCS1djd0VDWWZWMWZVUmJ1YjRqRnkxUEFI RHIvMC9DOUFGREFGQjNBRjc0QThDQTA4MzJCMDc2OTE0RDdBNEE0NDI1NjQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QUZEQUZCM0FGNzRBOENB MDgzMkIwNzY5MTREN0E0QTQ0MjU2NDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3FhUFhDR3RORldqOG1DcThCS1djd0VDWWZWMWZVUmJ1YjRqRnkxUEFIRHIvMC9D OUFGREFGQjNBRjc0QThDQTA4MzJCMDc2OTE0RDdBNEE0NDI1NjQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWd9LBhV/JOu481zbXq9NSef+aqEwbIxPuA2UDWfTFpmqX+ZzH5Qacovansfj N47S0CxU+qPAQ78UZHdOQSRpf5RQKIEbkwqXaTi7p2AmECdT3cIKnS8GT7oaqMN2 b6G0boEukznM4zVWWQsnGBON91aZ0b2UnwyjnUD6lTqQAhStGEiFMhDuD/VbVZxn db3BFabtre5vAio/B0j4MCAABALgZX6yO/ZHiGUhr6did5kkchhf/t8C2f1C+7lQ /JiaD0imFMzQd/pEveHC1pB9o/2mhey1XqAGKoXtzc8YT3cjXuIZR9UowqgWa4YV yZa7gs6Dg7K1ZQdyocCG0joEnw== -----END CERTIFICATE-----Generated at Mon Dec 22 09:34:33 2025 by rpki-client