This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json) Hash identifier: cbu+InyLJAnparPBqinw9DioptTlmZJGCyenlbvpws8= Subject key identifier: 96:E2:F6:1B:3B:3F:63:06:49:FC:3D:87:8A:73:C5:40:33:1E:BA:2C Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Certificate serial: 6B399D1366FF6D91334DE0B6AD9D67474865AF37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft Manifest number: FF Signing time: Fri 19 Dec 2025 15:45:54 +0000 Manifest this update: Fri 19 Dec 2025 15:40:54 +0000 Manifest next update: Sat 20 Dec 2025 16:43:54 +0000 Files and hashes: 1: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: 2G3qVsPKDLkOprxlWb+BmGv9r23W0JiXmzpGlXjkyjA=) 2: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=) 3: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 16:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:39:9d:13:66:ff:6d:91:33:4d:e0:b6:ad:9d:67:47:48:65:af:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB Validity Not Before: Dec 19 15:40:54 2025 GMT Not After : Dec 20 16:43:54 2025 GMT Subject: CN=96E2F61B3B3F630649FC3D878A73C540331EBA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:ca:2b:67:03:da:93:7a:42:6c:23:2c:71: 1e:e5:41:5c:96:21:6d:f0:46:40:f3:c7:5b:72:6a: 8b:01:b0:58:c0:cc:35:09:3e:5d:0f:31:1b:16:c6: 63:c9:c0:54:56:81:74:a0:0d:43:25:17:a3:e6:34: dd:f0:54:6d:00:86:3a:34:dc:75:a4:b2:dd:98:2b: b8:e1:11:53:4c:b2:ad:97:71:5b:32:ef:c1:3f:b6: b8:2d:b8:6b:4e:dd:dc:60:d2:6f:40:c2:d1:c2:18: bb:a3:c7:cf:9b:e0:09:46:49:74:cd:4a:ec:c4:1c: d1:90:15:66:aa:7a:ff:d1:3d:2c:2b:39:86:4f:37: 1d:bd:e0:42:86:51:28:d4:5e:a8:c6:0b:04:eb:8a: 76:67:f8:45:7b:f3:e5:bb:d1:32:2e:3a:08:e1:c2: 18:14:34:1b:30:88:ee:1a:85:49:53:94:eb:0a:be: 48:65:9d:41:82:9f:d0:b7:00:00:19:93:0c:a8:5f: 95:bc:59:7f:91:05:d3:f1:58:2e:41:b7:59:3b:0a: c1:69:24:7f:6c:18:0a:73:18:d6:2b:1e:60:84:50: bc:bb:3a:ca:3e:a9:bb:85:36:24:d1:25:ae:62:ad: 81:a7:a4:7a:4d:96:bd:0a:4b:6d:1f:48:87:42:b9: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E2:F6:1B:3B:3F:63:06:49:FC:3D:87:8A:73:C5:40:33:1E:BA:2C X509v3 Authority Key Identifier: keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:33:30:7e:da:5e:0d:f1:de:47:cb:c6:78:44:dc:0f:3f:0f: 5e:b7:6a:16:22:67:58:62:51:b8:f7:04:cd:46:e6:ae:1b:5b: 5d:54:2e:c1:9d:c2:90:0c:81:cb:b6:95:4b:75:a1:66:2a:b3: 28:58:ff:f0:61:c4:b9:5f:f8:cd:bd:8a:1c:e1:f7:9e:32:20: 81:4d:e8:9a:31:ce:7d:0b:4a:12:e6:cb:fc:8e:e5:40:30:ba: 28:5c:74:71:ba:31:85:a5:40:31:20:89:05:5d:76:d5:6b:44: 83:fc:db:24:73:52:3b:12:f7:f9:80:6d:2f:79:a4:5d:c6:ba: 4d:a3:3b:ee:d5:20:5b:ec:eb:33:2c:aa:c8:b1:9f:9a:32:00: 26:8d:a6:0a:6e:54:fc:1f:ae:57:19:38:24:56:07:60:41:61: 35:bf:63:a2:00:61:31:67:8a:ba:f6:7d:98:e0:c9:eb:80:39: 3e:a1:fa:4f:dc:fb:1d:8a:11:c7:92:84:08:4b:16:03:51:62: 30:c7:d0:d9:45:c4:5a:d3:8b:55:b2:f9:13:ac:ab:99:83:e1: 00:bc:52:88:eb:f1:45:2c:e0:ba:c1:4b:d6:62:c7:84:8b:7c: 2d:b5:73:0d:92:b4:e7:7e:95:76:41:06:4e:b5:f5:12:39:4b: 61:6e:4b:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUazmdE2b/bZEzTeC2rZ1nR0hlrzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGODgzOTVFOTk3OUVGRkMwMzM1MTMwN0Q4Q0QwRTU0 NTU0QkJEQjAeFw0yNTEyMTkxNTQwNTRaFw0yNTEyMjAxNjQzNTRaMDMxMTAvBgNV BAMTKDk2RTJGNjFCM0IzRjYzMDY0OUZDM0Q4NzhBNzNDNTQwMzMxRUJBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVT8orZwPak3pCbCMscR7lQVyW IW3wRkDzx1tyaosBsFjAzDUJPl0PMRsWxmPJwFRWgXSgDUMlF6PmNN3wVG0Ahjo0 3HWkst2YK7jhEVNMsq2XcVsy78E/trgtuGtO3dxg0m9AwtHCGLujx8+b4AlGSXTN SuzEHNGQFWaqev/RPSwrOYZPNx294EKGUSjUXqjGCwTrinZn+EV78+W70TIuOgjh whgUNBswiO4ahUlTlOsKvkhlnUGCn9C3AAAZkwyoX5W8WX+RBdPxWC5Bt1k7CsFp JH9sGApzGNYrHmCEULy7Oso+qbuFNiTRJa5irYGnpHpNlr0KS20fSIdCuU6xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUluL2Gzs/YwZJ/D2HinPFQDMeuiwwHwYDVR0j BBgwFoAUyviDlemXnv/AM1EwfYzQ5UVUu9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0 OTgvMC9DQUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjg4Mzk1RTk5NzlFRkZD MDMzNTEzMDdEOENEMEU1NDU1NEJCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0OTgvMC9D QUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeDMwftpeDfHeR8vGeETcDz8PXrdqFiJnWGJRuPcEzUbmrhtbXVQuwZ3CkAyB y7aVS3WhZiqzKFj/8GHEuV/4zb2KHOH3njIggU3omjHOfQtKEubL/I7lQDC6KFx0 cboxhaVAMSCJBV121WtEg/zbJHNSOxL3+YBtL3mkXca6TaM77tUgW+zrMyyqyLGf mjIAJo2mCm5U/B+uVxk4JFYHYEFhNb9jogBhMWeKuvZ9mODJ64A5PqH6T9z7HYoR x5KECEsWA1FiMMfQ2UXEWtOLVbL5E6yrmYPhALxSiOvxRSzgusFL1mLHhIt8LbVz DZK0536VdkEGTrX1EjlLYW5LcQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:54:38 2025 by rpki-client