This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: VB3cCNQi92thkCijrPH2LXCFEj5Mt6pkFMOCmBb6efM= Subject key identifier: 2D:BB:03:96:4E:42:39:C1:21:10:39:D5:E7:F5:9E:18:D5:E3:0E:1E Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 12661C23B49B7B815CAC25747D57E867A8535B25 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 02BF Signing time: Fri 19 Dec 2025 00:58:01 +0000 Manifest this update: Fri 19 Dec 2025 00:53:01 +0000 Manifest next update: Sat 20 Dec 2025 01:17:01 +0000 Files and hashes: 1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) 2: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) 3: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: vOLqSZTUu0D94gCYv92w6m/NjMDytAh2qH+tQsrCFeY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 01:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:66:1c:23:b4:9b:7b:81:5c:ac:25:74:7d:57:e8:67:a8:53:5b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Dec 19 00:53:01 2025 GMT Not After : Dec 20 01:17:01 2025 GMT Subject: CN=2DBB03964E4239C1211039D5E7F59E18D5E30E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:a3:cf:88:31:eb:e7:4c:d6:66:fa:31:a2: 81:37:ae:e6:62:2a:e2:a5:3e:d2:3e:23:b9:34:70: 5c:7f:f6:ad:b3:31:72:da:5e:7c:f6:bf:12:8e:da: 9d:99:59:34:3f:8b:c4:6b:98:1e:19:0f:42:2d:8e: 3f:ef:bb:9a:f5:2b:8c:cb:76:c0:02:79:92:91:bf: 64:4e:ff:29:3f:79:e8:16:bb:37:36:9b:08:8c:ff: 5b:8e:14:20:1e:7f:8f:31:20:7a:3f:74:9e:9a:a4: f8:84:3f:b4:30:38:b1:a6:4e:cb:0b:bf:d9:cd:b2: 9f:9c:4e:72:f6:e8:99:b1:f5:84:9a:63:8e:f0:46: 29:9a:b3:37:6d:95:96:30:de:8d:0f:87:fe:f8:c9: 2c:a3:21:2c:5f:74:6d:04:54:64:39:2c:e9:13:83: 5d:7a:f9:f2:05:87:4c:63:6d:85:93:0a:14:8f:7a: 9e:2d:75:fd:ba:0d:4b:55:7c:e2:a6:87:60:61:89: f2:35:c4:fd:2c:c0:77:54:db:8e:36:dd:59:4f:4f: 89:00:ca:08:1d:19:8f:3a:8c:d8:07:a5:37:24:af: 1d:c4:25:ad:77:d0:6a:f4:41:fb:6d:ba:d1:3a:34: 21:0a:8d:8d:c8:74:bc:98:da:b5:54:a9:be:7a:e9: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BB:03:96:4E:42:39:C1:21:10:39:D5:E7:F5:9E:18:D5:E3:0E:1E X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:ce:d4:37:e5:fa:78:a3:92:5e:49:5b:02:41:96:7f:60: 9c:74:98:12:bd:e9:44:2d:c9:03:a7:3b:0c:68:6a:1e:06:c9: d9:97:73:70:a5:85:e1:96:f1:0a:37:fa:58:0b:26:1e:33:e8: 63:47:67:e1:0b:4b:d0:0b:2d:5e:39:6f:95:e1:dd:47:59:00: 47:f9:3a:f7:0d:d6:75:b1:04:df:d2:7f:a4:14:42:ac:14:d6: 26:d9:2b:33:56:9b:2d:a3:34:08:af:53:e6:b3:1d:20:2e:ae: f6:e9:2d:03:7e:03:28:18:67:d0:c5:9c:31:bf:71:ca:0f:39: e9:2a:19:d9:c6:33:01:0a:61:00:6e:e8:d9:76:0d:6d:7a:1a: 4b:c2:14:67:a8:17:13:ce:2b:21:df:e4:4c:ed:88:ad:b2:39: 75:4d:93:27:80:70:f1:56:20:1d:fd:65:47:7f:28:7c:21:e6: 8c:2a:68:c6:83:1d:b5:44:46:40:84:c6:92:4d:b0:02:f8:9a: 09:2d:fa:85:b8:30:d5:44:c1:2e:00:43:c0:f7:18:77:3b:9f: e0:a0:e0:0c:37:a2:33:31:f5:eb:43:aa:2f:94:24:52:0c:84: 43:8c:8b:6a:34:47:25:cd:94:7f:26:f4:e1:60:0b:c4:8d:2d: ae:9d:e2:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEmYcI7Sbe4FcrCV0fVfoZ6hTWyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTEyMTkwMDUzMDFaFw0yNTEyMjAwMTE3MDFaMDMxMTAvBgNV BAMTKDJEQkIwMzk2NEU0MjM5QzEyMTEwMzlENUU3RjU5RTE4RDVFMzBFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4qPPiDHr50zWZvoxooE3ruZi KuKlPtI+I7k0cFx/9q2zMXLaXnz2vxKO2p2ZWTQ/i8RrmB4ZD0Itjj/vu5r1K4zL dsACeZKRv2RO/yk/eegWuzc2mwiM/1uOFCAef48xIHo/dJ6apPiEP7QwOLGmTssL v9nNsp+cTnL26Jmx9YSaY47wRimaszdtlZYw3o0Ph/74ySyjISxfdG0EVGQ5LOkT g116+fIFh0xjbYWTChSPep4tdf26DUtVfOKmh2BhifI1xP0swHdU24423VlPT4kA yggdGY86jNgHpTckrx3EJa130Gr0QfttutE6NCEKjY3IdLyY2rVUqb566bFbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULbsDlk5COcEhEDnV5/WeGNXjDh4wHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJDbO1Dfl+nijkl5JWwJBln9gnHSYEr3pRC3JA6c7DGhqHgbJ2ZdzcKWF4Zbx Cjf6WAsmHjPoY0dn4QtL0AstXjlvleHdR1kAR/k69w3WdbEE39J/pBRCrBTWJtkr M1abLaM0CK9T5rMdIC6u9uktA34DKBhn0MWcMb9xyg856SoZ2cYzAQphAG7o2XYN bXoaS8IUZ6gXE84rId/kTO2IrbI5dU2TJ4Bw8VYgHf1lR38ofCHmjCpoxoMdtURG QITGkk2wAviaCS36hbgw1UTBLgBDwPcYdzuf4KDgDDeiMzH160OqL5QkUgyEQ4yL ajRHJc2Ufyb04WALxI0trp3iMA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:14:05 2025 by rpki-client