This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft File: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json) Hash identifier: XUp0c9GbjPlv+90Gra3SI+X3fHMta0wOl6Rv4XFvu3k= Subject key identifier: AE:19:ED:50:04:71:33:E1:9F:25:B9:EA:A3:80:67:A5:A9:AA:A8:DC Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 Certificate issuer: /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Certificate serial: 7653340377069755CE5F090B1D7C89B5CBF3C765 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft Manifest number: 010A Signing time: Fri 19 Dec 2025 02:48:15 +0000 Manifest this update: Fri 19 Dec 2025 02:43:15 +0000 Manifest next update: Sat 20 Dec 2025 06:34:15 +0000 Files and hashes: 1: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=) 2: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: eeFLWPafrkXuPYLMIydfNtVIbd+fPdxkrXIvn8hVQ+w=) 3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 04:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:53:34:03:77:06:97:55:ce:5f:09:0b:1d:7c:89:b5:cb:f3:c7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Validity Not Before: Dec 19 02:43:15 2025 GMT Not After : Dec 20 06:34:15 2025 GMT Subject: CN=AE19ED50047133E19F25B9EAA38067A5A9AAA8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:66:10:ca:34:6b:05:c0:75:4f:f6:d3:51: df:36:10:1b:9e:ae:43:b7:8e:39:d3:a9:06:a3:8b: ae:2b:6a:88:32:17:47:f6:03:8b:e5:5d:b2:e8:a7: 48:90:57:6c:97:63:3a:9e:cb:94:6b:48:5c:fe:22: 37:bd:d2:82:d7:b1:40:51:3e:4e:36:3a:04:71:a6: bb:a5:3b:2c:3b:56:92:83:78:af:72:8e:b9:57:ca: c6:3e:02:cc:75:a3:73:46:f4:74:05:a2:01:7a:10: 1a:4a:59:96:2c:d8:15:72:25:8c:c5:c9:64:c8:fe: 37:39:15:06:7e:57:8d:9a:4b:c4:de:1e:d4:d6:96: 2f:c8:a8:11:2f:ab:b1:52:d6:1d:3f:c9:f0:d3:db: 59:93:e8:d7:87:aa:b1:8d:7a:41:57:08:89:ba:30: 2c:36:3d:1f:d4:b9:75:e9:99:fe:02:aa:9c:20:64: cb:7a:a3:0d:97:47:54:f6:1f:56:df:fa:e0:98:5e: 73:ef:c5:03:63:1e:31:a3:ba:4b:26:09:b2:f4:8c: 4e:52:ce:3c:a4:d0:fc:1b:32:fd:94:e3:53:54:20: d2:4c:d5:2c:44:40:f7:62:b3:f2:bc:8a:45:3d:a8: 8f:ae:6b:d2:d2:c2:ef:c3:14:96:42:86:e2:35:d3: 2e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:19:ED:50:04:71:33:E1:9F:25:B9:EA:A3:80:67:A5:A9:AA:A8:DC X509v3 Authority Key Identifier: keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1d:30:e8:ec:75:87:06:77:4f:3a:78:80:e6:22:47:e9:45: 6b:2c:27:fb:db:09:c4:90:ae:26:dd:91:fb:f6:dd:1d:55:21: 91:33:67:c1:c8:95:28:a6:63:96:0a:79:56:28:f4:7f:06:01: 74:da:03:01:1f:d7:29:2a:52:66:11:21:71:94:58:3f:36:74: 84:9e:76:6f:18:31:76:b0:f4:c1:a0:1b:e9:8c:a8:b2:70:5f: 71:bc:ac:bc:b5:7c:22:51:a2:f2:81:cd:3e:51:a9:78:c7:9b: d6:02:44:e0:b3:2a:40:a0:6d:89:38:38:27:51:46:8f:07:2b: d4:a0:c2:7c:51:c2:41:06:a9:d2:e9:c2:52:06:53:8b:a4:46: 36:a1:12:f6:3e:db:f2:ea:4c:e4:7c:35:ad:d1:f6:45:a3:ce: f3:87:25:fd:73:8c:c1:58:63:98:18:6d:15:39:70:e4:c0:c5: 36:a0:20:9d:dc:47:c5:32:9a:48:7e:14:e2:be:2d:74:57:ac: 0b:44:69:81:64:fe:5d:bc:9a:86:7f:39:75:20:fc:92:7f:d1: e4:7f:68:f4:54:59:b4:46:6f:c5:fd:cf:1e:a6:32:6e:6d:57: 5d:53:4b:dd:e0:28:9e:d6:e6:d5:3c:6e:09:41:6e:f9:99:17: e6:79:54:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdlM0A3cGl1XOXwkLHXyJtcvzx2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZDODg2RUM0RDlGMkM0QTMxRUU1M0FDMTU3MTRCRDRF NzAyODc1MjAeFw0yNTEyMTkwMjQzMTVaFw0yNTEyMjAwNjM0MTVaMDMxMTAvBgNV BAMTKEFFMTlFRDUwMDQ3MTMzRTE5RjI1QjlFQUEzODA2N0E1QTlBQUE4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4mYQyjRrBcB1T/bTUd82EBue rkO3jjnTqQaji64raogyF0f2A4vlXbLop0iQV2yXYzqey5RrSFz+Ije90oLXsUBR Pk42OgRxprulOyw7VpKDeK9yjrlXysY+Asx1o3NG9HQFogF6EBpKWZYs2BVyJYzF yWTI/jc5FQZ+V42aS8TeHtTWli/IqBEvq7FS1h0/yfDT21mT6NeHqrGNekFXCIm6 MCw2PR/UuXXpmf4CqpwgZMt6ow2XR1T2H1bf+uCYXnPvxQNjHjGjuksmCbL0jE5S zjyk0PwbMv2U41NUINJM1SxEQPdis/K8ikU9qI+ua9LSwu/DFJZChuI10y7pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrhntUARxM+GfJbnqo4BnpamqqNwwHwYDVR0j BBgwFoAUz8iG7E2fLEox7lOsFXFL1OcCh1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4 U0wvMC9DRkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQzg4NkVDNEQ5RjJDNEEz MUVFNTNBQzE1NzE0QkQ0RTcwMjg3NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4U0wvMC9D RkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWR0w6Ox1hwZ3Tzp4gOYiR+lFaywn+9sJxJCuJt2R+/bdHVUhkTNnwciVKKZj lgp5Vij0fwYBdNoDAR/XKSpSZhEhcZRYPzZ0hJ52bxgxdrD0waAb6YyosnBfcbys vLV8IlGi8oHNPlGpeMeb1gJE4LMqQKBtiTg4J1FGjwcr1KDCfFHCQQap0unCUgZT i6RGNqES9j7b8upM5Hw1rdH2RaPO84cl/XOMwVhjmBhtFTlw5MDFNqAgndxHxTKa SH4U4r4tdFesC0RpgWT+Xbyahn85dSD8kn/R5H9o9FRZtEZvxf3PHqYybm1XXVNL 3eAontbm1TxuCUFu+ZkX5nlUig== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:57 2025 by rpki-client