This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft File: D272B79940440721190429AABBA45B0BB5589F3E.mft (raw, json) Hash identifier: HLgExWmwEWZ2aun6Cf4hsqQHNKskEh3xSwSaWbTO8do= Subject key identifier: 98:02:E3:56:58:8E:42:99:53:89:13:30:82:E3:CE:80:3D:09:8E:A2 Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E Certificate issuer: /CN=D272B79940440721190429AABBA45B0BB5589F3E Certificate serial: 33405967A0A799443D89F175107E8DAD48C341CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft Manifest number: 01C5 Signing time: Tue 30 Dec 2025 06:49:55 +0000 Manifest this update: Tue 30 Dec 2025 06:44:55 +0000 Manifest next update: Wed 31 Dec 2025 10:14:55 +0000 Files and hashes: 1: 34352e352e39362e302f32322d3234203d3e20323636303931.roa (hash: TpP0pyyBddetIefEQp+tbjSdfBvTQ1UGHo5796I3wNk=) 2: 323830343a336137383a3a2f33322d3438203d3e20323636303931.roa (hash: EZVes/T3eOPUmikgpWX7VMptgq3WkVAYcR28QtUPSJs=) 3: D272B79940440721190429AABBA45B0BB5589F3E.crl (hash: xz2XBZvLffc01OrYaC+c0LuQpRUMtH/q+flZgZsV0MA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 31 Dec 2025 10:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:40:59:67:a0:a7:99:44:3d:89:f1:75:10:7e:8d:ad:48:c3:41:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E Validity Not Before: Dec 30 06:44:55 2025 GMT Not After : Dec 31 10:14:55 2025 GMT Subject: CN=9802E356588E42995389133082E3CE803D098EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:e1:16:3d:8b:43:75:3a:11:0f:f4:93:8b: 54:5f:5c:ba:9f:1a:b0:c4:75:e1:81:b4:0e:7e:e9: 6d:7d:61:ec:c2:71:8c:bb:ff:e6:e5:e2:7b:c4:d7: 5d:dc:f3:dd:2f:38:1c:4d:00:45:90:19:58:82:d7: 13:04:72:01:e5:ea:f2:18:18:3c:3e:90:ff:3e:30: cf:a4:c3:85:d2:bc:4e:41:f0:76:ed:0b:6a:4a:d7: c4:61:70:c5:cd:29:c1:b5:cd:69:2f:d6:c1:3e:23: 01:6b:9e:33:1f:11:1d:1e:49:56:79:f6:c6:a8:a8: d1:26:63:c7:27:aa:11:88:38:2c:17:f9:0d:5b:da: 32:4e:10:cd:bf:71:05:ab:12:d8:3c:f1:b1:45:d4: f7:b9:6e:ff:ed:be:13:bc:b4:95:03:cf:c9:63:4a: 1c:b1:7a:15:8d:3f:1d:c3:ad:4c:91:a6:d5:e2:e6: 27:69:be:09:1a:93:1b:d7:d1:38:5b:1b:af:b4:ea: 87:c5:e2:77:ea:16:fc:fd:f1:6f:ba:fc:6b:71:59: 54:a3:07:d3:b1:78:da:29:b6:39:68:35:96:cc:3e: c8:74:97:78:f1:40:b6:7d:b8:87:41:85:a3:78:55: 4e:40:2f:b6:05:05:7c:f1:b2:c0:d0:b7:93:68:3c: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:02:E3:56:58:8E:42:99:53:89:13:30:82:E3:CE:80:3D:09:8E:A2 X509v3 Authority Key Identifier: keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:88:3f:4d:e6:a9:28:0c:26:40:a5:b9:28:7a:d4:64:0b:9c: 62:3c:2e:32:83:d4:28:24:ed:09:0b:6b:67:6f:e5:f5:4d:23: 99:86:2e:ec:9f:57:f5:c8:9d:03:ec:22:5c:06:02:80:43:b4: 93:ee:b0:28:3f:13:d1:2f:2f:60:bf:65:a9:26:43:ac:4f:85: 38:28:60:6a:38:02:ff:6c:13:cb:41:42:27:2c:d6:65:46:5c: f2:f2:30:4e:82:3d:20:35:05:e1:51:45:51:a5:a0:1b:d8:69: 39:46:24:7d:97:12:a0:50:51:10:68:82:ea:42:ce:b4:2c:ac: 8f:b3:8a:57:9a:c6:60:96:0b:20:10:f9:36:38:96:68:1a:ac: 4b:ef:58:4a:44:0d:a3:33:b2:ec:65:20:78:44:38:af:db:74: f2:f4:78:30:4d:0b:3e:d7:43:da:78:1f:3f:10:fd:5a:10:a9: c0:40:cc:b3:0a:9c:0f:25:bc:f6:80:17:9f:44:70:71:4d:3f: bb:c6:97:e8:eb:91:2d:a4:c2:59:25:74:ea:a6:bd:c0:63:25: 33:a7:9c:c3:3c:08:9c:32:13:e1:fc:ef:4d:37:43:54:5e:f5: a4:2c:32:87:47:6d:6c:a1:2e:18:7d:fc:42:9b:42:29:97:a4: ce:10:d4:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM0BZZ6CnmUQ9ifF1EH6NrUjDQcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MkI3OTk0MDQ0MDcyMTE5MDQyOUFBQkJBNDVCMEJC NTU4OUYzRTAeFw0yNTEyMzAwNjQ0NTVaFw0yNTEyMzExMDE0NTVaMDMxMTAvBgNV BAMTKDk4MDJFMzU2NTg4RTQyOTk1Mzg5MTMzMDgyRTNDRTgwM0QwOThFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuu+EWPYtDdToRD/STi1RfXLqf GrDEdeGBtA5+6W19YezCcYy7/+bl4nvE113c890vOBxNAEWQGViC1xMEcgHl6vIY GDw+kP8+MM+kw4XSvE5B8HbtC2pK18RhcMXNKcG1zWkv1sE+IwFrnjMfER0eSVZ5 9saoqNEmY8cnqhGIOCwX+Q1b2jJOEM2/cQWrEtg88bFF1Pe5bv/tvhO8tJUDz8lj ShyxehWNPx3DrUyRptXi5idpvgkakxvX0ThbG6+06ofF4nfqFvz98W+6/GtxWVSj B9OxeNoptjloNZbMPsh0l3jxQLZ9uIdBhaN4VU5AL7YFBXzxssDQt5NoPM17AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmALjVliOQplTiRMwguPOgD0JjqIwHwYDVR0j BBgwFoAU0nK3mUBEByEZBCmqu6RbC7VYnz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpW d1QvMC9EMjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNzJCNzk5NDA0NDA3MjEx OTA0MjlBQUJCQTQ1QjBCQjU1ODlGM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpWd1QvMC9E MjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANog/TeapKAwmQKW5KHrUZAucYjwuMoPUKCTtCQtrZ2/l9U0jmYYu7J9X9cid A+wiXAYCgEO0k+6wKD8T0S8vYL9lqSZDrE+FOChgajgC/2wTy0FCJyzWZUZc8vIw ToI9IDUF4VFFUaWgG9hpOUYkfZcSoFBREGiC6kLOtCysj7OKV5rGYJYLIBD5NjiW aBqsS+9YSkQNozOy7GUgeEQ4r9t08vR4ME0LPtdD2ngfPxD9WhCpwEDMswqcDyW8 9oAXn0RwcU0/u8aX6OuRLaTCWSV06qa9wGMlM6ecwzwInDIT4fzvTTdDVF71pCwy h0dtbKEuGH38QptCKZekzhDUDQ== -----END CERTIFICATE-----Generated at Tue Dec 30 08:21:40 2025 by rpki-client