This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft File: CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json) Hash identifier: 9ZR7KRVtG4uwg+zLf9h7Nz6fc2Bem7+ZmOry0OpKBtE= Subject key identifier: E4:C6:70:F0:7A:A8:93:9E:30:C1:8C:A1:77:4D:C3:67:DC:E6:DE:F0 Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 Certificate issuer: /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Certificate serial: 38DD7B1098135B52C21AD9784C4E2C61D915107A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft Manifest number: 034A Signing time: Tue 30 Dec 2025 15:14:51 +0000 Manifest this update: Tue 30 Dec 2025 15:09:51 +0000 Manifest next update: Wed 31 Dec 2025 17:52:51 +0000 Files and hashes: 1: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: VJdH/xHpD6ecg3kwn9yL7bslKKlhAKJoZBYlUI+LMxk=) 2: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: Bhu/eGNOOWFc2ep8aUehLXvNs4ymREZ2pdLGTh+BKL4=) 3: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: gIrBLSmpElcXKdJ5oXq/xBKXkPtbom9S3QmkkRI3P7s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 31 Dec 2025 17:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:dd:7b:10:98:13:5b:52:c2:1a:d9:78:4c:4e:2c:61:d9:15:10:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Validity Not Before: Dec 30 15:09:51 2025 GMT Not After : Dec 31 17:52:51 2025 GMT Subject: CN=E4C670F07AA8939E30C18CA1774DC367DCE6DEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:57:7e:8c:f1:ba:76:7c:b8:af:1a:95:ae: 9c:6b:b0:9d:b3:02:22:16:88:6d:bb:1f:9f:8f:97: b5:39:35:f6:2e:bd:42:99:9c:91:14:ae:45:e4:a8: 2c:53:5a:9d:d7:0a:c5:41:39:22:4c:a8:59:06:4c: 8c:b8:27:3e:55:45:49:3d:1d:82:d7:56:da:e4:ea: 30:ab:0e:39:91:c1:7b:e6:62:3d:fd:36:25:22:12: 7d:1f:15:89:8a:1f:f6:ba:fa:a1:64:70:e2:52:a2: b4:ab:49:f4:8d:cb:69:34:42:83:74:08:d9:f8:67: 4e:13:68:17:d5:5a:7a:8b:99:63:13:a4:bd:67:5b: 23:50:f3:23:ed:c2:85:8d:f4:2a:74:f2:fb:87:ab: 27:35:ab:fb:84:ac:c4:d1:4a:25:68:3c:82:8f:5b: ed:2c:02:6a:7c:98:41:b4:8f:4c:97:c2:b3:4b:15: 96:b2:aa:47:0e:66:83:7a:b7:57:31:7c:c7:9f:43: 94:39:88:69:8f:92:62:2c:32:26:08:fe:40:b6:82: 8f:b9:f3:44:ae:12:a8:dc:19:39:af:a4:0a:44:98: 92:c7:ff:69:a7:f7:84:7f:4e:68:ea:ee:81:46:31: 03:fe:61:06:7e:7e:41:3e:b7:d0:83:0f:c7:99:8d: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:70:F0:7A:A8:93:9E:30:C1:8C:A1:77:4D:C3:67:DC:E6:DE:F0 X509v3 Authority Key Identifier: keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:23:f0:0a:2a:10:50:87:f2:21:9b:bf:c4:00:a6:37:a2:52: 50:c9:ce:4f:67:b8:d9:0e:ee:f7:7d:b3:31:44:1c:61:b0:46: 19:2d:17:72:d7:1b:cc:3d:21:34:39:4e:32:c8:4f:3c:d2:9a: 1b:92:ce:79:e1:df:fe:c7:54:51:9c:56:c7:42:fa:f5:bf:74: 36:83:8d:06:49:7d:2b:4c:4a:33:09:43:f7:50:37:24:36:85: c5:df:f3:b8:f2:d9:e6:45:a0:e0:46:de:42:dc:1c:20:03:4e: 8a:68:0d:73:ea:2b:ed:e8:68:f9:f0:8e:95:c3:31:d2:76:0b: d0:82:8e:e0:f1:73:02:f6:9a:68:b4:3c:a8:7e:4b:cb:a7:9b: 1f:d7:e3:1f:38:22:b7:e9:8b:5a:d9:1f:57:62:49:03:b0:46: a3:e2:80:a2:e9:19:22:71:9f:d6:c3:fd:57:0a:ce:ea:0b:c4: 17:cd:a1:af:28:03:be:07:09:25:e4:10:3c:55:b6:30:db:b2: 6c:bf:da:89:08:ed:be:e5:8c:97:0c:e9:d9:66:38:83:64:48: de:ae:6f:91:8c:c8:d9:51:b2:64:98:ac:f6:85:4f:e3:08:c5: 95:1d:58:75:8d:b5:3e:95:80:aa:5c:e3:58:dd:67:6d:14:58: ea:79:5d:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUON17EJgTW1LCGtl4TE4sYdkVEHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODE4MjVBNzVGM0RGM0IwMzNEMzU0NEY4ODI2NDg4 RjNGQThBNDAeFw0yNTEyMzAxNTA5NTFaFw0yNTEyMzExNzUyNTFaMDMxMTAvBgNV BAMTKEU0QzY3MEYwN0FBODkzOUUzMEMxOENBMTc3NERDMzY3RENFNkRFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUsld+jPG6dny4rxqVrpxrsJ2z AiIWiG27H5+Pl7U5NfYuvUKZnJEUrkXkqCxTWp3XCsVBOSJMqFkGTIy4Jz5VRUk9 HYLXVtrk6jCrDjmRwXvmYj39NiUiEn0fFYmKH/a6+qFkcOJSorSrSfSNy2k0QoN0 CNn4Z04TaBfVWnqLmWMTpL1nWyNQ8yPtwoWN9Cp08vuHqyc1q/uErMTRSiVoPIKP W+0sAmp8mEG0j0yXwrNLFZayqkcOZoN6t1cxfMefQ5Q5iGmPkmIsMiYI/kC2go+5 80SuEqjcGTmvpApEmJLH/2mn94R/Tmjq7oFGMQP+YQZ+fkE+t9CDD8eZjfN1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5MZw8Hqok54wwYyhd03DZ9zm3vAwHwYDVR0j BBgwFoAUzWgYJadfPfOwM9NUT4gmSI8/qKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5 aW4vMS9DRDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENjgxODI1QTc1RjNERjNC MDMzRDM1NDRGODgyNjQ4OEYzRkE4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5aW4vMS9D RDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATCPwCioQUIfyIZu/xACmN6JSUMnOT2e42Q7u932zMUQcYbBGGS0XctcbzD0h NDlOMshPPNKaG5LOeeHf/sdUUZxWx0L69b90NoONBkl9K0xKMwlD91A3JDaFxd/z uPLZ5kWg4EbeQtwcIANOimgNc+or7eho+fCOlcMx0nYL0IKO4PFzAvaaaLQ8qH5L y6ebH9fjHzgit+mLWtkfV2JJA7BGo+KAoukZInGf1sP9VwrO6gvEF82hrygDvgcJ JeQQPFW2MNuybL/aiQjtvuWMlwzp2WY4g2RI3q5vkYzI2VGyZJis9oVP4wjFlR1Y dY21PpWAqlzjWN1nbRRY6nlduQ== -----END CERTIFICATE-----Generated at Wed Dec 31 05:23:19 2025 by rpki-client