This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft File: 0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft (raw, json) Hash identifier: wImFpAtG1ze9+s3ohqFXFigsX3LDRLH+Ze1khTL79uU= Subject key identifier: A3:13:DC:EF:B6:DE:4E:54:20:77:F4:9E:65:D7:A2:5C:5C:F1:D3:69 Authority key identifier: 0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05 Certificate issuer: /CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05 Certificate serial: 020F0BE3FF85D88A8143A0B891FA8F8FDAB5DF7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer Subject info access: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft Manifest number: 74 Signing time: Fri 19 Dec 2025 21:29:09 +0000 Manifest this update: Fri 19 Dec 2025 21:24:09 +0000 Manifest next update: Sat 20 Dec 2025 23:21:09 +0000 Files and hashes: 1: 3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa (hash: UMQhuETAP3mo2VT6DbKKQ75ltp0Z6mOrCpfi41HCarM=) 2: 0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl (hash: GodQReIqQ82L8a1ugYfKvLEPsP1uj5pEma9ccXTBJ58=) 3: 323830343a323066343a3a2f33322d313238203d3e20323634353233.roa (hash: iHbjXbQYJnpbLyThD8ntb7N9gcirtc1ZLnFEEOo/IsY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 23:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0f:0b:e3:ff:85:d8:8a:81:43:a0:b8:91:fa:8f:8f:da:b5:df:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05 Validity Not Before: Dec 19 21:24:09 2025 GMT Not After : Dec 20 23:21:09 2025 GMT Subject: CN=A313DCEFB6DE4E542077F49E65D7A25C5CF1D369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:81:1d:c0:a9:9c:68:f1:43:88:3b:c3:e6: 0c:9b:11:d1:b8:a4:41:93:9a:59:4e:47:ed:9e:48: df:5e:06:26:14:9d:4d:fe:80:45:9a:52:21:ea:af: 50:12:59:7b:56:dd:8f:1b:0d:08:d7:d8:a7:e2:01: 55:fe:eb:67:c8:35:ea:28:3a:77:75:1f:a3:f5:8e: 73:b9:65:3b:f4:e7:8c:bf:9b:32:5a:a6:05:8d:b5: e6:e0:b6:b6:d4:54:ac:44:13:09:5c:ea:70:c0:0f: 2a:45:3b:44:5a:bb:d5:52:d4:a7:2e:7c:24:7f:e1: d3:bf:3d:2b:71:16:33:44:47:f7:45:66:ee:f8:c7: 92:3e:75:71:c4:32:d2:4b:59:e8:f2:19:c0:8b:d7: fa:0a:81:be:46:74:dd:4c:0d:47:1e:48:7d:f9:f7: fc:f1:ea:03:d4:70:95:db:59:a2:eb:67:b8:bd:40: 17:07:72:a0:8b:67:53:c6:23:0b:77:f8:5d:9a:ca: ec:f4:2c:cf:b4:77:8b:39:aa:be:53:1f:7a:e4:29: fa:bd:70:bf:94:12:9f:1f:fd:6c:df:05:f6:5b:95: 4e:82:be:ec:83:88:f6:e0:cb:a2:60:04:cc:fb:3d: 22:87:d9:27:78:78:dc:00:91:13:80:2f:1a:8b:2a: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:DC:EF:B6:DE:4E:54:20:77:F4:9E:65:D7:A2:5C:5C:F1:D3:69 X509v3 Authority Key Identifier: keyid:0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:83:dd:7d:19:61:9b:52:f4:1b:13:bd:bf:ca:bd:70:81:d6: bb:15:11:f5:ce:a0:7c:64:08:0e:6f:f4:bd:24:f5:70:5e:ca: 11:4b:75:03:24:b5:27:bb:26:7f:c9:13:45:ef:50:57:51:41: 78:2d:2b:85:e7:27:1d:17:6c:61:5d:32:00:53:bd:93:27:d4: 22:65:a8:2d:8c:a7:1b:39:7d:65:49:56:90:b9:f7:00:71:0e: fa:18:86:79:54:39:67:1a:75:8f:fd:f1:9b:d9:68:e9:03:3a: 04:db:82:24:3b:a2:d7:f4:d0:5f:4c:7c:c4:0b:0f:0c:dc:f6: 33:35:cf:58:7b:b7:72:8d:2e:20:cf:48:17:28:10:a4:29:09: e8:d3:d8:19:5e:fc:79:e8:93:d0:96:92:d6:a2:8a:82:51:75: 86:fc:5d:da:f3:85:56:1e:94:f8:c2:a6:10:99:ed:4b:a0:80: 9a:19:ca:11:84:c4:c5:bd:2e:60:75:ab:21:d9:a2:75:a4:e1: f8:83:61:1d:de:6f:50:5b:32:d7:ba:13:17:f2:49:55:fc:4a: ca:40:9f:a7:51:86:f7:dd:cd:4c:4b:87:7e:31:df:bd:fb:9a: b7:40:9c:63:1b:b3:99:2b:46:80:bc:e1:d2:83:62:78:13:20: 07:a1:79:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAg8L4/+F2IqBQ6C4kfqPj9q133swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4RDREMjg3NTFDNzFDRTMxMkIxMUM4MkUyMTg4QkM3 RjU0RkIwNTAeFw0yNTEyMTkyMTI0MDlaFw0yNTEyMjAyMzIxMDlaMDMxMTAvBgNV BAMTKEEzMTNEQ0VGQjZERTRFNTQyMDc3RjQ5RTY1RDdBMjVDNUNGMUQzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4e4EdwKmcaPFDiDvD5gybEdG4 pEGTmllOR+2eSN9eBiYUnU3+gEWaUiHqr1ASWXtW3Y8bDQjX2KfiAVX+62fINeoo Ond1H6P1jnO5ZTv054y/mzJapgWNtebgtrbUVKxEEwlc6nDADypFO0Rau9VS1Kcu fCR/4dO/PStxFjNER/dFZu74x5I+dXHEMtJLWejyGcCL1/oKgb5GdN1MDUceSH35 9/zx6gPUcJXbWaLrZ7i9QBcHcqCLZ1PGIwt3+F2ayuz0LM+0d4s5qr5TH3rkKfq9 cL+UEp8f/WzfBfZblU6CvuyDiPbgy6JgBMz7PSKH2Sd4eNwAkROALxqLKgclAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoxPc77beTlQgd/SeZdeiXFzx02kwHwYDVR0j BBgwFoAUDo1NKHUccc4xKxHILiGIvH9U+wUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEF6OUZqQlN0TEhCdTVYVGRqYjhLRXNTRmcyMkJXWDRhRTFvd2toY0RV cjkvMC8wRThENEQyODc1MUM3MUNFMzEyQjExQzgyRTIxODhCQzdGNTRGQjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFOEQ0RDI4NzUxQzcxQ0Uz MTJCMTFDODJFMjE4OEJDN0Y1NEZCMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEF6OUZqQlN0TEhCdTVYVGRqYjhLRXNTRmcyMkJXWDRhRTFvd2toY0RVcjkvMC8w RThENEQyODc1MUM3MUNFMzEyQjExQzgyRTIxODhCQzdGNTRGQjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUYPdfRlhm1L0GxO9v8q9cIHWuxUR9c6gfGQIDm/0vST1cF7KEUt1AyS1J7sm f8kTRe9QV1FBeC0rhecnHRdsYV0yAFO9kyfUImWoLYynGzl9ZUlWkLn3AHEO+hiG eVQ5Zxp1j/3xm9lo6QM6BNuCJDui1/TQX0x8xAsPDNz2MzXPWHu3co0uIM9IFygQ pCkJ6NPYGV78eeiT0JaS1qKKglF1hvxd2vOFVh6U+MKmEJntS6CAmhnKEYTExb0u YHWrIdmidaTh+INhHd5vUFsy17oTF/JJVfxKykCfp1GG993NTEuHfjHfvfuat0Cc YxuzmStGgLzh0oNieBMgB6F5JQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:29:38 2025 by rpki-client