This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft File: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft (raw, json) Hash identifier: PHYWsYD9NcQZgdftfwRBuu2EJH+L7MOtBbREnPhgG3M= Subject key identifier: 38:9D:D9:BF:DC:6C:3E:EA:87:FE:3D:E7:29:D2:65:7D:2C:B4:65:F2 Authority key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC Certificate issuer: /CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC Certificate serial: 122953F559FF9A137107E1521694A61B3B265886 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft Manifest number: 033E Signing time: Tue 23 Dec 2025 13:18:22 +0000 Manifest this update: Tue 23 Dec 2025 13:13:22 +0000 Manifest next update: Wed 24 Dec 2025 14:57:22 +0000 Files and hashes: 1: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl (hash: L5dBcJUYxUk1oSeNF0S2nyfQZic6JefupcYfHate1kk=) 2: 323830343a373463343a3a2f33322d3334203d3e20323731303032.roa (hash: 2z6cwJyjlekxvSjiL4r/a9H/dyNy1DqA2JvIUkW4Ktw=) 3: 3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (hash: WAKTZENyc+SXTjS17ENHCayGO2lN3xVXsJCR6n3fjtA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 14:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:29:53:f5:59:ff:9a:13:71:07:e1:52:16:94:a6:1b:3b:26:58:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC Validity Not Before: Dec 23 13:13:22 2025 GMT Not After : Dec 24 14:57:22 2025 GMT Subject: CN=389DD9BFDC6C3EEA87FE3DE729D2657D2CB465F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:74:86:d3:20:d9:23:44:69:8a:b1:e6:ad: 63:49:d8:a3:c7:cd:94:86:24:7a:c5:73:7c:c7:47: b4:fc:ba:95:b4:0f:d5:b7:a5:62:36:b6:c6:c5:40: 46:63:33:1b:c9:e6:24:95:3c:47:cd:a7:63:a7:b9: 72:e1:cc:38:b7:78:e3:b9:19:66:e5:8d:38:9d:3e: d9:93:1e:a4:30:64:59:f6:84:03:48:83:3a:c1:22: 24:83:28:6a:e5:c3:2e:90:41:0d:6e:29:32:7f:7b: 5d:c6:0c:15:a0:aa:a3:59:fd:ec:ce:28:19:80:38: c1:cb:c1:47:c0:c7:2c:24:2d:f4:01:7d:1e:b5:93: 5e:be:91:c9:54:f3:8e:76:8b:a2:ed:76:91:41:10: 78:99:e2:86:6f:b4:bd:00:2c:1e:01:74:9c:77:b3: 3b:d6:de:45:fa:21:d5:8a:27:ca:9d:66:9c:f2:dc: a3:1d:2f:f6:08:d9:ec:9a:f0:f4:d6:4c:72:a8:f7: 9b:cf:bf:31:36:e6:c9:d8:5b:08:c8:84:c9:18:e8: bc:ef:08:61:fe:fa:d2:20:47:54:d4:07:a7:38:13: 48:96:d7:bb:4a:15:9f:dd:c1:bd:87:12:03:20:47: 6d:a0:6a:6a:be:76:5a:4a:2b:82:cb:44:6f:5a:dc: 65:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:D9:BF:DC:6C:3E:EA:87:FE:3D:E7:29:D2:65:7D:2C:B4:65:F2 X509v3 Authority Key Identifier: keyid:16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:33:23:0d:13:38:b6:75:ce:9f:17:bf:d2:2f:7c:af:fe: d8:9d:db:1d:e6:6a:37:7a:6b:1a:3c:52:70:52:02:4e:7b:68: 15:17:9f:87:f6:c4:35:f9:89:cd:c7:c1:71:14:7c:dc:04:9c: d0:c8:32:ae:ed:95:f1:87:6e:c0:09:15:18:43:72:7a:f2:f5: eb:1a:5a:8e:dc:0e:30:42:d8:ce:20:f0:8b:e1:89:76:15:3d: b2:e9:bc:93:1b:de:32:9e:3a:3d:36:52:96:70:a6:f1:51:ab: c8:25:6b:e8:e5:39:c5:80:b8:03:f2:ad:c0:3d:f7:c6:84:07: 78:a6:54:78:a3:31:71:82:03:e1:b5:df:df:45:f8:12:47:e2: 68:f0:8a:f4:3b:9d:7d:38:02:f1:83:14:d7:83:03:a5:98:40: 24:23:00:e5:93:14:12:14:ab:d1:2e:47:07:8a:c4:41:4c:56: 95:b7:17:96:f5:6e:6e:44:cd:dc:f8:37:1f:5c:fa:3d:a4:4b: 73:77:09:67:7e:54:ed:c0:7c:4c:60:4b:48:d6:cc:8c:ca:36: 8e:a2:45:f7:3a:2e:f9:d8:6f:1b:2f:7e:2c:59:19:77:1c:d4: 0c:bc:62:08:1e:61:3b:89:4b:b9:34:28:12:fe:78:5f:c1:eb: dc:83:61:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEilT9Vn/mhNxB+FSFpSmGzsmWIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3MkE2QUM1REZCRTg1QjdCMTBDRkM4QURBQ0RGNkJC QTA4QTRDQzAeFw0yNTEyMjMxMzEzMjJaFw0yNTEyMjQxNDU3MjJaMDMxMTAvBgNV BAMTKDM4OUREOUJGREM2QzNFRUE4N0ZFM0RFNzI5RDI2NTdEMkNCNDY1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbnSG0yDZI0RpirHmrWNJ2KPH zZSGJHrFc3zHR7T8upW0D9W3pWI2tsbFQEZjMxvJ5iSVPEfNp2OnuXLhzDi3eOO5 GWbljTidPtmTHqQwZFn2hANIgzrBIiSDKGrlwy6QQQ1uKTJ/e13GDBWgqqNZ/ezO KBmAOMHLwUfAxywkLfQBfR61k16+kclU8452i6LtdpFBEHiZ4oZvtL0ALB4BdJx3 szvW3kX6IdWKJ8qdZpzy3KMdL/YI2eya8PTWTHKo95vPvzE25snYWwjIhMkY6Lzv CGH++tIgR1TUB6c4E0iW17tKFZ/dwb2HEgMgR22gamq+dlpKK4LLRG9a3GXHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOJ3Zv9xsPuqH/j3nKdJlfSy0ZfIwHwYDVR0j BBgwFoAUFnKmrF376Ft7EM/Irazfa7oIpMwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkQ2YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpu U3cvMS8xNjcyQTZBQzVERkJFODVCN0IxMENGQzhBREFDREY2QkJBMDhBNENDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NzJBNkFDNURGQkU4NUI3 QjEwQ0ZDOEFEQUNERjZCQkEwOEE0Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkQ2YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpuU3cvMS8x NjcyQTZBQzVERkJFODVCN0IxMENGQzhBREFDREY2QkJBMDhBNENDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkaIzIw0TOLZ1zp8Xv9IvfK/+2J3bHeZqN3prGjxScFICTntoFRefh/bENfmJ zcfBcRR83ASc0Mgyru2V8YduwAkVGENyevL16xpajtwOMELYziDwi+GJdhU9sum8 kxveMp46PTZSlnCm8VGryCVr6OU5xYC4A/KtwD33xoQHeKZUeKMxcYID4bXf30X4 EkfiaPCK9DudfTgC8YMU14MDpZhAJCMA5ZMUEhSr0S5HB4rEQUxWlbcXlvVubkTN 3Pg3H1z6PaRLc3cJZ35U7cB8TGBLSNbMjMo2jqJF9zou+dhvGy9+LFkZdxzUDLxi CB5hO4lLuTQoEv54X8Hr3INhXg== -----END CERTIFICATE-----Generated at Tue Dec 23 21:52:56 2025 by rpki-client