This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft File: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft (raw, json) Hash identifier: WnOrhdrCWZc/G5+0RyHnnm/2muxzygfTPZ13IykOI3U= Subject key identifier: 1A:B4:F5:E4:90:52:9D:06:22:19:33:0A:58:E9:37:1E:E1:B7:BB:05 Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 Certificate issuer: /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Certificate serial: 5D0EA7039C4EF1C2E22F5A7F8957A05AFA2D23E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft Manifest number: 01B8 Signing time: Sat 20 Dec 2025 01:50:30 +0000 Manifest this update: Sat 20 Dec 2025 01:45:30 +0000 Manifest next update: Sun 21 Dec 2025 02:03:30 +0000 Files and hashes: 1: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (hash: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=) 2: 323830343a363933303a3a2f33322d3338203d3e20323730323534.roa (hash: Vi58jILCPaGdfjCNKSlfegkMsczPE3KoQ/bs4WgeL5s=) 3: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl (hash: 2Cd3zynaO6+dHw1CWvyoopRbMmTs191UeL1WE4r99gw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 02:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0e:a7:03:9c:4e:f1:c2:e2:2f:5a:7f:89:57:a0:5a:fa:2d:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Validity Not Before: Dec 20 01:45:30 2025 GMT Not After : Dec 21 02:03:30 2025 GMT Subject: CN=1AB4F5E490529D062219330A58E9371EE1B7BB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:a6:74:e0:7f:ae:80:7f:05:f4:01:4f:2e: 5f:ed:b9:a1:76:1f:79:7a:30:7d:3c:e7:84:ff:25: bf:db:59:c9:04:b4:7f:34:48:f9:ed:c2:e0:ee:34: f0:e4:39:02:f8:3e:10:6d:aa:8c:d6:3b:31:12:88: 43:c5:3d:d2:7d:db:95:5d:dd:c4:03:af:e2:38:6d: ca:68:a9:48:d1:41:6e:41:32:c5:f1:ec:d7:c8:7f: 46:a3:70:aa:bf:19:7b:e7:fa:77:dc:3d:56:4b:36: 8a:b6:21:f0:32:19:d6:c2:46:cb:a7:9b:38:24:b7: eb:db:bc:33:b2:d3:68:2a:0a:15:3e:8b:00:b1:12: e7:20:5e:e0:2f:46:6a:d9:10:1a:12:51:f8:07:2b: e6:06:7a:9e:e8:69:5b:b1:5c:2a:7c:92:96:a1:4f: 51:4d:1d:f3:87:3f:fe:e5:9f:e8:83:0e:12:5f:1a: 35:bd:3f:55:12:66:92:fa:9d:d1:c1:50:56:b8:6b: b7:e6:7e:c9:4c:a9:bc:64:a0:0d:a4:4b:90:56:ae: 29:bd:a3:00:b5:f5:13:a7:56:da:a0:87:21:93:8e: 1d:2a:a0:8d:46:23:25:0a:b4:03:d6:d3:2b:cf:38: 82:53:af:59:e6:2d:72:dc:0c:8e:ba:99:88:ec:84: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B4:F5:E4:90:52:9D:06:22:19:33:0A:58:E9:37:1E:E1:B7:BB:05 X509v3 Authority Key Identifier: keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:19:c7:d0:8a:ef:41:09:0c:58:80:9f:5c:81:ed:64:f3:ad: 52:3a:a0:c6:4d:8c:f2:88:a1:01:b1:e1:5c:cc:f1:d9:6d:3b: b9:a0:ef:99:0b:94:37:2b:63:75:4c:b0:be:e2:44:88:6d:a0: 79:55:69:52:fd:aa:e2:90:39:0b:da:e9:54:84:a1:74:26:7a: fb:f7:81:ad:aa:d0:78:68:f4:f8:a6:7a:1d:95:80:78:dd:e5: 9f:eb:62:da:a6:85:41:f7:58:ff:73:1d:5e:d8:47:37:89:65: 29:9f:eb:48:46:9f:02:3b:7c:33:35:3d:73:53:84:1c:7a:24: 14:79:b2:50:24:73:67:64:25:c9:eb:d7:88:83:25:25:be:92: f3:8d:0f:e4:14:41:0b:fb:7e:f5:5c:b2:15:62:07:fd:d4:bc: e7:c0:55:b1:6a:3b:df:5a:20:f6:b8:5f:b5:1e:b7:81:ce:1c: 71:59:a7:c5:f1:c3:91:a4:03:13:c6:81:ec:92:1e:2e:82:23: f8:71:55:51:94:29:df:7e:34:f8:02:42:af:3d:aa:a2:6a:02: 9e:65:05:32:1a:75:3e:ff:34:f8:7a:24:99:2d:dc:6a:aa:61: 08:f5:05:ee:60:c5:8d:26:64:13:b5:d6:54:bf:31:b5:e9:c1: 05:2b:61:21 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUXQ6nA5xO8cLiL1p/iVegWvotI+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJC MzA5RUNFMzAeFw0yNTEyMjAwMTQ1MzBaFw0yNTEyMjEwMjAzMzBaMDMxMTAvBgNV BAMTKDFBQjRGNUU0OTA1MjlEMDYyMjE5MzMwQTU4RTkzNzFFRTFCN0JCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXgqZ04H+ugH8F9AFPLl/tuaF2 H3l6MH0854T/Jb/bWckEtH80SPntwuDuNPDkOQL4PhBtqozWOzESiEPFPdJ925Vd 3cQDr+I4bcpoqUjRQW5BMsXx7NfIf0ajcKq/GXvn+nfcPVZLNoq2IfAyGdbCRsun mzgkt+vbvDOy02gqChU+iwCxEucgXuAvRmrZEBoSUfgHK+YGep7oaVuxXCp8kpah T1FNHfOHP/7ln+iDDhJfGjW9P1USZpL6ndHBUFa4a7fmfslMqbxkoA2kS5BWrim9 owC19ROnVtqghyGTjh0qoI1GIyUKtAPW0yvPOIJTr1nmLXLcDI66mYjshBWfAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUGrT15JBSnQYiGTMKWOk3HuG3uwUwHwYDVR0j BBgwFoAUwATyzMmsuewBom76/1OhW7MJ7OMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJCMzA5RUNFMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMDA0RjJDQ0M5QUNCOUVDMDFB MjZFRkFGRjUzQTE1QkIzMDlFQ0UzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hE dmJxVDhGZ2hQQng1UExOWkVQM2Qyd2s0N3g3WjZkb0NnWFY4aWtmS3MvMC9DMDA0 RjJDQ0M5QUNCOUVDMDFBMjZFRkFGRjUzQTE1QkIzMDlFQ0UzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fxnH0IrvQQkMWICfXIHtZPOtUjqgxk2M8oihAbHhXMzx2W07uaDvmQuUNytjdUyw vuJEiG2geVVpUv2q4pA5C9rpVIShdCZ6+/eBrarQeGj0+KZ6HZWAeN3ln+ti2qaF QfdY/3MdXthHN4llKZ/rSEafAjt8MzU9c1OEHHokFHmyUCRzZ2QlyevXiIMlJb6S 840P5BRBC/t+9VyyFWIH/dS858BVsWo731og9rhftR63gc4ccVmnxfHDkaQDE8aB 7JIeLoIj+HFVUZQp3340+AJCrz2qomoCnmUFMhp1Pv80+HokmS3caqphCPUF7mDF jSZkE7XWVL8xtenBBSthIQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:08:56 2025 by rpki-client