This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft File: 32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft (raw, json) Hash identifier: 6QWQnmjYhzc6n53Jkh5vk+3zmCxvsZN/tO1VwmukYxU= Subject key identifier: 96:FC:2F:AF:62:D3:EC:8B:D7:76:D5:12:5E:9A:D7:48:20:AF:FE:86 Authority key identifier: 32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6 Certificate issuer: /CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6 Certificate serial: 04D7DAF3C854621731A921FC6AE6E74388829970 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft Manifest number: 034A Signing time: Fri 26 Dec 2025 13:52:38 +0000 Manifest this update: Fri 26 Dec 2025 13:47:38 +0000 Manifest next update: Sat 27 Dec 2025 13:59:38 +0000 Files and hashes: 1: 34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa (hash: hCE1ogHvH4qPcn8sv5t/TqhqO7XMK+TsAzSGeeGlX4c=) 2: 323830343a343466633a3a2f33322d3438203d3e20323637363635.roa (hash: RsCOhvN4MGfJWmq57LP2VpX6n/NJKUkecTyptjuT3cE=) 3: 32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl (hash: 2/Yoxoew5zhzQmF/X4T7suiA97ua5gB+IECBjPDVKtc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 27 Dec 2025 13:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d7:da:f3:c8:54:62:17:31:a9:21:fc:6a:e6:e7:43:88:82:99:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6 Validity Not Before: Dec 26 13:47:38 2025 GMT Not After : Dec 27 13:59:38 2025 GMT Subject: CN=96FC2FAF62D3EC8BD776D5125E9AD74820AFFE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:11:b9:48:61:96:49:17:f1:73:d2:b5:55: 30:4c:ad:18:52:c9:bd:39:d6:50:61:8c:41:34:5f: e5:26:f2:e9:ee:3d:47:e6:78:12:cd:90:f2:6b:42: 3a:85:8d:fe:f6:ad:c4:d8:31:28:64:30:d1:9c:28: 76:d0:f6:fc:ad:b2:ce:88:b7:f8:30:43:d3:34:20: 5b:7b:7c:9c:f7:c2:5f:0a:81:47:e2:bc:e3:d8:7e: 56:44:59:0b:be:de:61:6e:e4:07:9e:28:f0:7b:ba: b0:09:50:ef:da:b9:60:f1:74:47:6f:e1:28:6c:eb: 24:74:00:19:bf:7f:6d:db:80:78:21:0b:29:2d:18: d5:51:96:b4:15:a5:80:93:57:d3:e1:79:82:95:0c: ce:a7:c3:89:8a:30:13:83:44:60:94:ce:85:db:63: e2:b1:93:da:fa:b2:cc:f7:02:da:5e:32:83:c4:a5: e0:51:83:b7:b9:95:be:c3:4a:21:5d:ee:c0:4a:25: a2:e1:39:4e:25:51:95:bb:ea:c7:89:1c:b8:af:c2: d0:d8:b3:cd:c3:71:81:d6:aa:66:a9:34:06:d3:0d: 31:4c:2d:a5:e4:7b:bd:26:3a:8e:53:7f:7c:d6:b4: 82:47:b5:a1:80:00:b7:c0:c6:61:3d:61:92:7e:7e: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FC:2F:AF:62:D3:EC:8B:D7:76:D5:12:5E:9A:D7:48:20:AF:FE:86 X509v3 Authority Key Identifier: keyid:32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:05:76:3e:16:df:9d:20:75:82:f9:5f:b0:00:8c:fa:a8:24: e5:e1:c4:88:6c:3f:f7:c7:d7:91:6b:e3:f8:df:45:c4:89:b7: fa:26:db:b7:97:f2:e5:b9:0c:c4:be:40:14:b0:8d:de:a3:91: b6:42:1f:aa:25:0a:14:ea:7f:61:64:e1:f3:4f:61:00:94:7c: 7a:f8:fa:93:ff:2c:4c:2d:44:40:25:62:f0:80:df:d8:64:9c: d9:0b:5c:f3:61:cf:d8:51:42:b2:9a:68:da:bf:34:13:b0:cb: 9a:7f:8d:22:4a:d8:4d:62:94:3a:e3:37:a4:bf:a2:e2:d6:63: f1:dd:36:86:f3:02:2e:43:47:41:6c:0b:ef:87:0e:19:16:2b: 3f:1e:0b:2f:41:02:f3:77:14:98:f4:7a:99:53:34:52:0a:28: b7:a8:8c:88:d6:b6:86:25:42:ef:1d:c8:1c:19:96:ba:16:bc: 7e:b3:33:d7:97:3a:a8:b1:78:a9:d2:28:0a:ec:ec:ee:70:27: 2d:8d:55:93:47:e7:ed:af:7c:f2:59:c6:d6:5f:27:41:54:36: fa:e2:78:7c:d7:b7:bf:92:bb:a5:3c:4a:95:02:dd:15:bd:5a: c8:87:97:ee:cd:53:89:10:f9:dc:40:4f:5c:8d:c5:1e:bf:77: ac:d6:50:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBNfa88hUYhcxqSH8aubnQ4iCmXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCQjE1RkJDMkNDRDMyOTgzOUQ0MENFRjU5Q0VGNkRG RTNDREFGNjAeFw0yNTEyMjYxMzQ3MzhaFw0yNTEyMjcxMzU5MzhaMDMxMTAvBgNV BAMTKDk2RkMyRkFGNjJEM0VDOEJENzc2RDUxMjVFOUFENzQ4MjBBRkZFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30BG5SGGWSRfxc9K1VTBMrRhS yb051lBhjEE0X+Um8unuPUfmeBLNkPJrQjqFjf72rcTYMShkMNGcKHbQ9vytss6I t/gwQ9M0IFt7fJz3wl8KgUfivOPYflZEWQu+3mFu5AeeKPB7urAJUO/auWDxdEdv 4Shs6yR0ABm/f23bgHghCyktGNVRlrQVpYCTV9PheYKVDM6nw4mKMBODRGCUzoXb Y+Kxk9r6ssz3AtpeMoPEpeBRg7e5lb7DSiFd7sBKJaLhOU4lUZW76seJHLivwtDY s83DcYHWqmapNAbTDTFMLaXke70mOo5Tf3zWtIJHtaGAALfAxmE9YZJ+fr3xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlvwvr2LT7IvXdtUSXprXSCCv/oYwHwYDVR0j BBgwFoAUMrsV+8LM0ymDnUDO9Zzvbf482vYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEFxTE1Dc0dBSkd6S3JabjVRRlpwZUpXSDFVNlFxenhFYkNkOFV3cEM2 cXovMS8zMkJCMTVGQkMyQ0NEMzI5ODM5RDQwQ0VGNTlDRUY2REZFM0NEQUY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQkIxNUZCQzJDQ0QzMjk4 MzlENDBDRUY1OUNFRjZERkUzQ0RBRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEFxTE1Dc0dBSkd6S3JabjVRRlpwZUpXSDFVNlFxenhFYkNkOFV3cEM2cXovMS8z MkJCMTVGQkMyQ0NEMzI5ODM5RDQwQ0VGNTlDRUY2REZFM0NEQUY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFQV2PhbfnSB1gvlfsACM+qgk5eHEiGw/98fXkWvj+N9FxIm3+ibbt5fy5bkM xL5AFLCN3qORtkIfqiUKFOp/YWTh809hAJR8evj6k/8sTC1EQCVi8IDf2GSc2Qtc 82HP2FFCsppo2r80E7DLmn+NIkrYTWKUOuM3pL+i4tZj8d02hvMCLkNHQWwL74cO GRYrPx4LL0EC83cUmPR6mVM0Ugoot6iMiNa2hiVC7x3IHBmWuha8frMz15c6qLF4 qdIoCuzs7nAnLY1Vk0fn7a988lnG1l8nQVQ2+uJ4fNe3v5K7pTxKlQLdFb1ayIeX 7s1TiRD53EBPXI3FHr93rNZQvg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:08:39 2025 by rpki-client