This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft File: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft (raw, json) Hash identifier: t5KwomeQXm4TTetwsm/RUB7MhJGYLcuYJ30x+mkNt1g= Subject key identifier: 4B:00:C7:11:14:7A:B0:26:9C:45:E4:D5:61:80:97:A5:65:17:2F:98 Authority key identifier: 12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 Certificate issuer: /CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8 Certificate serial: 7CF06643E24B38C8BB65BD42D0A1BBFFF6C9BFF8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft Manifest number: B1 Signing time: Mon 22 Dec 2025 10:24:50 +0000 Manifest this update: Mon 22 Dec 2025 10:19:50 +0000 Manifest next update: Tue 23 Dec 2025 11:57:50 +0000 Files and hashes: 1: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl (hash: 0itErHhWtGkvOcyAJ4Gja6y1ZgVA10aRUPFqKEjv7To=) 2: 323830343a346536343a3a2f33322d313238203d3e20323638323538.roa (hash: cIPRrBZKrOj9lWuWyZWYEmXaWAtDm4pOx+RC7zQlZq4=) 3: 34352e3233372e382e302f32322d3332203d3e20323638323538.roa (hash: gT6g9/y/7vUl+2G7uUJcrg2sfzhdljWwUSKvbqMYsLs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 11:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f0:66:43:e2:4b:38:c8:bb:65:bd:42:d0:a1:bb:ff:f6:c9:bf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8 Validity Not Before: Dec 22 10:19:50 2025 GMT Not After : Dec 23 11:57:50 2025 GMT Subject: CN=4B00C711147AB0269C45E4D5618097A565172F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:b3:46:89:02:68:da:6e:56:7c:35:38:c0: 80:4b:4a:b3:f9:79:4b:50:45:c3:0f:50:80:1d:77: dc:ef:89:4b:5d:f0:48:07:5c:f5:03:e0:cd:6b:fd: 34:e8:40:d1:d5:25:f5:36:df:9d:a3:05:6b:26:a6: eb:a6:93:b6:32:d4:fb:bd:0e:61:dc:2f:8e:37:4a: 90:8d:44:91:8c:02:77:03:ba:f3:fc:af:37:50:c0: ac:2c:51:ba:0a:81:5e:e2:3d:97:81:c0:d4:78:5a: 8d:cf:21:92:7e:b7:64:6d:e5:ef:86:b0:12:5e:28: e7:dc:0f:86:5e:67:9c:7b:5f:da:97:c0:fe:9e:42: eb:83:43:b6:25:6f:fd:4f:3c:5a:c9:43:b1:9f:fc: cd:00:1a:b2:66:42:c0:b6:7a:b7:8e:4c:23:94:5a: f1:06:57:79:64:64:2b:98:67:f8:a4:b8:5b:43:17: 60:06:85:f2:af:51:4b:c1:23:5d:7b:6d:21:6d:3a: ba:96:4c:29:b6:43:ce:4e:0d:c1:33:a9:a1:b5:78: 80:5a:b7:ae:b5:96:7e:7d:be:7d:db:af:d2:3c:89: 22:dc:b3:35:2a:9f:92:d8:bf:d9:08:28:01:cd:5b: 66:66:41:09:45:ba:00:64:4e:99:2a:2d:17:79:7b: 4c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:00:C7:11:14:7A:B0:26:9C:45:E4:D5:61:80:97:A5:65:17:2F:98 X509v3 Authority Key Identifier: keyid:12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2b:ee:92:3b:3a:0e:4c:68:79:22:2f:27:ce:63:e0:a7:ac: 6b:06:7f:88:0c:09:c2:bd:d8:9e:4d:94:0c:bf:ec:40:e0:43: 6c:1f:af:34:da:41:29:3c:8c:df:8e:9b:c0:64:29:24:2b:e9: 02:1b:a9:69:8d:4e:8c:25:e6:1b:38:9f:b2:c7:25:9c:4c:c5: 21:47:18:f8:06:76:b8:60:ef:73:78:68:37:c9:53:84:73:fc: b3:97:d2:0b:e0:78:0d:0a:bc:de:3c:e8:9b:a3:7b:78:01:af: d5:49:fb:2d:f8:06:23:32:ea:bb:84:08:b7:49:5f:58:47:0e: 18:a6:5f:22:2d:ee:49:c9:7b:7c:91:4a:1d:85:6f:da:2d:0f: 81:3c:65:bc:6a:df:da:58:fa:12:fe:ba:35:88:48:6a:f1:7e: 0d:fd:67:22:5f:6c:cf:dc:74:c8:bf:1b:f1:72:c9:bc:21:a8: ad:4f:de:62:5d:64:dd:da:00:91:56:cd:5c:58:f3:88:a8:f3: b7:e7:83:6d:7c:0c:32:eb:da:f6:f2:0f:dc:91:a8:14:8c:33: 45:a9:45:99:2d:36:82:9c:e0:c6:36:74:f8:1e:2a:c5:d1:5f: 2c:33:d4:d7:11:5b:8c:3d:d9:cb:ef:3b:af:39:c3:b4:59:04: 1b:a7:26:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfPBmQ+JLOMi7Zb1C0KG7//bJv/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4NjQ0RUNFQjMwODY4RjdEREQ4QjUwQkRFM0NEMEE1 QTNBMDZCODAeFw0yNTEyMjIxMDE5NTBaFw0yNTEyMjMxMTU3NTBaMDMxMTAvBgNV BAMTKDRCMDBDNzExMTQ3QUIwMjY5QzQ1RTRENTYxODA5N0E1NjUxNzJGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWbNGiQJo2m5WfDU4wIBLSrP5 eUtQRcMPUIAdd9zviUtd8EgHXPUD4M1r/TToQNHVJfU2352jBWsmpuumk7Yy1Pu9 DmHcL443SpCNRJGMAncDuvP8rzdQwKwsUboKgV7iPZeBwNR4Wo3PIZJ+t2Rt5e+G sBJeKOfcD4ZeZ5x7X9qXwP6eQuuDQ7Ylb/1PPFrJQ7Gf/M0AGrJmQsC2ereOTCOU WvEGV3lkZCuYZ/ikuFtDF2AGhfKvUUvBI117bSFtOrqWTCm2Q85ODcEzqaG1eIBa t661ln59vn3br9I8iSLcszUqn5LYv9kIKAHNW2ZmQQlFugBkTpkqLRd5e0w3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSwDHERR6sCacReTVYYCXpWUXL5gwHwYDVR0j BBgwFoAUEoZE7Oswho993YtQvePNClo6BrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1m QlQvMC8xMjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyODY0NEVDRUIzMDg2OEY3 REREOEI1MEJERTNDRDBBNUEzQTA2QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMC8x Mjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHyvukjs6DkxoeSIvJ85j4KesawZ/iAwJwr3Ynk2UDL/sQOBDbB+vNNpBKTyM 346bwGQpJCvpAhupaY1OjCXmGzifssclnEzFIUcY+AZ2uGDvc3hoN8lThHP8s5fS C+B4DQq83jzom6N7eAGv1Un7LfgGIzLqu4QIt0lfWEcOGKZfIi3uScl7fJFKHYVv 2i0PgTxlvGrf2lj6Ev66NYhIavF+Df1nIl9sz9x0yL8b8XLJvCGorU/eYl1k3doA kVbNXFjziKjzt+eDbXwMMuva9vIP3JGoFIwzRalFmS02gpzgxjZ0+B4qxdFfLDPU 1xFbjD3Zy+87rznDtFkEG6cmmw== -----END CERTIFICATE-----Generated at Mon Dec 22 18:59:45 2025 by rpki-client