This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json) Hash identifier: vuuXM0040vQpVGKekaIGm+fSj3MrjFVl3kxIoAFj6Hk= Subject key identifier: 0A:9A:98:27:81:4F:16:41:72:27:3B:FB:F7:E2:26:4D:1C:3F:E4:6D Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 466165DD025C73F9BBC6E601512C4851176829EB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft Manifest number: 66 Signing time: Sat 20 Dec 2025 03:54:44 +0000 Manifest this update: Sat 20 Dec 2025 03:49:44 +0000 Manifest next update: Sun 21 Dec 2025 07:32:44 +0000 Files and hashes: 1: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=) 2: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=) 3: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: jzk64jA1G33+iUDC6ZVP/EpdhqS/U9nvi0EpEmBazlI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 07:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:61:65:dd:02:5c:73:f9:bb:c6:e6:01:51:2c:48:51:17:68:29:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Dec 20 03:49:44 2025 GMT Not After : Dec 21 07:32:44 2025 GMT Subject: CN=0A9A9827814F164172273BFBF7E2264D1C3FE46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:9a:c1:dd:69:59:0d:05:7f:53:cd:fa:31: 72:cf:65:ab:72:42:f7:52:2c:1e:f4:1d:28:a3:58: 35:ce:21:08:05:86:91:4f:2d:89:d8:94:28:4d:5b: 52:cc:a4:12:23:aa:9d:63:b2:6d:68:bb:b3:1a:b0: c1:ac:4a:9a:f5:0f:e5:46:c5:74:4f:83:a3:18:be: 28:e9:ce:3a:db:de:16:e0:a7:d6:44:42:86:c2:cc: 6f:4f:7f:f0:84:1a:c2:95:7f:80:26:84:1e:0e:d0: 8b:c2:9e:29:66:f5:07:41:c5:91:52:40:36:fb:db: 33:8e:9c:97:0a:26:2a:e2:b6:8e:74:52:45:1e:48: 2b:55:32:82:03:e7:d4:64:62:09:fe:6a:d6:59:79: b6:9b:04:0b:df:3d:9b:f2:7c:da:eb:2a:33:f8:e0: 74:16:ab:b8:40:93:79:f7:85:28:09:b3:b8:6a:e1: d3:ea:b5:6a:56:8f:4d:92:58:20:62:64:37:ec:10: 95:b8:82:0a:9d:6c:0f:0b:73:32:d8:45:b0:c8:77: 01:3a:b4:d9:3e:ab:f0:52:bc:01:1f:85:ab:eb:ba: 70:5d:42:28:24:f8:88:a6:bf:a7:48:48:dd:ae:d1: 65:10:c0:03:a3:ce:14:6c:1f:c4:a8:fa:5e:b3:ea: 31:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9A:98:27:81:4F:16:41:72:27:3B:FB:F7:E2:26:4D:1C:3F:E4:6D X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:09:d6:ed:20:95:ee:07:a7:84:db:5b:3b:8c:59:a2:35:ba: 82:db:8c:06:15:bb:a5:37:5e:f2:2b:c6:83:de:01:8d:65:f1: 24:aa:72:59:2a:62:68:f7:3f:fd:b0:7a:01:7f:af:65:a9:63: 4a:63:27:35:e9:f7:17:84:a6:38:15:9d:cc:fa:13:c0:b6:98: 1d:87:b5:b2:cb:88:22:c0:ab:56:45:88:2c:6b:24:d6:7c:18: 2c:1f:ca:84:95:23:a6:3f:d0:c8:f8:94:3d:ae:7c:91:4f:08: 67:5c:bc:29:7b:0e:51:91:81:2c:38:e2:69:fe:a6:20:dd:c6: 7e:9f:86:51:b3:01:1f:7d:06:90:65:6b:de:a2:86:91:c2:13: 93:8e:7a:db:bb:5b:3b:b0:7a:d7:bf:58:69:8e:1a:22:a3:5d: cd:5f:6c:64:70:66:0c:9b:ff:42:e1:c4:a1:da:c3:83:c7:42: 22:30:a2:3d:91:51:87:f7:55:6e:e8:0d:1b:a1:3a:fd:2e:36: cb:2b:c3:a1:08:7b:77:1c:c3:42:ff:64:83:cc:94:f9:d6:da: 80:e1:77:59:cb:00:c6:b8:13:90:ef:48:2c:0d:df:c7:d1:d8: 44:36:7b:3e:a6:c7:df:7f:db:34:54:0d:a1:35:c1:29:9b:46: 90:d4:80:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURmFl3QJcc/m7xuYBUSxIURdoKeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNTEyMjAwMzQ5NDRaFw0yNTEyMjEwNzMyNDRaMDMxMTAvBgNV BAMTKDBBOUE5ODI3ODE0RjE2NDE3MjI3M0JGQkY3RTIyNjREMUMzRkU0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobprB3WlZDQV/U836MXLPZaty QvdSLB70HSijWDXOIQgFhpFPLYnYlChNW1LMpBIjqp1jsm1ou7MasMGsSpr1D+VG xXRPg6MYvijpzjrb3hbgp9ZEQobCzG9Pf/CEGsKVf4AmhB4O0IvCnilm9QdBxZFS QDb72zOOnJcKJirito50UkUeSCtVMoID59RkYgn+atZZebabBAvfPZvyfNrrKjP4 4HQWq7hAk3n3hSgJs7hq4dPqtWpWj02SWCBiZDfsEJW4ggqdbA8LczLYRbDIdwE6 tNk+q/BSvAEfhavrunBdQigk+Iimv6dISN2u0WUQwAOjzhRsH8So+l6z6jGxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCpqYJ4FPFkFyJzv79+ImTRw/5G0wHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8y NUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEgnW7SCV7genhNtbO4xZojW6gtuMBhW7pTde8ivGg94BjWXxJKpyWSpiaPc/ /bB6AX+vZaljSmMnNen3F4SmOBWdzPoTwLaYHYe1ssuIIsCrVkWILGsk1nwYLB/K hJUjpj/QyPiUPa58kU8IZ1y8KXsOUZGBLDjiaf6mIN3Gfp+GUbMBH30GkGVr3qKG kcITk45627tbO7B6179YaY4aIqNdzV9sZHBmDJv/QuHEodrDg8dCIjCiPZFRh/dV bugNG6E6/S42yyvDoQh7dxzDQv9kg8yU+dbagOF3WcsAxrgTkO9ILA3fx9HYRDZ7 PqbH33/bNFQNoTXBKZtGkNSAgg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:57:41 2025 by rpki-client