This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.mft File: E8FAEA9CA5E59718C329A558433A6076FF4425BF.mft (raw, json) Hash identifier: Xnz9JfHwdCItx5XSyT+Lx/mrjdsf1bzlSlHVsTRn2co= Subject key identifier: 2E:72:5B:E8:B4:AF:E3:37:0A:71:CC:47:50:20:3F:3D:25:E9:38:0F Authority key identifier: E8:FA:EA:9C:A5:E5:97:18:C3:29:A5:58:43:3A:60:76:FF:44:25:BF Certificate issuer: /CN=E8FAEA9CA5E59718C329A558433A6076FF4425BF Certificate serial: 444B1724E657EE9A124848A623416EAAA930CEE3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8FAEA9CA5E59718C329A558433A6076FF4425BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.mft Manifest number: 28 Signing time: Mon 15 Dec 2025 15:01:36 +0000 Manifest this update: Mon 15 Dec 2025 14:56:36 +0000 Manifest next update: Tue 16 Dec 2025 15:52:36 +0000 Files and hashes: 1: 323830343a356634633a3a2f33322d3334203d3e20323639303930.roa (hash: al5hqjEGl7NKcz+/wkTLV6zpZPGq+qir4AXbfWPqiS0=) 2: 34352e3137382e37362e302f32322d3234203d3e20323639303930.roa (hash: uS3atLPaPImdmIsfFz6zewnkGl9hnLTURhPUPw6fkKc=) 3: E8FAEA9CA5E59718C329A558433A6076FF4425BF.crl (hash: 4BmKn6JDZE7UWywBYoXLbYVLiMIchj6jbQ+1rGF7JsQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.crl rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8FAEA9CA5E59718C329A558433A6076FF4425BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Dec 2025 15:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4b:17:24:e6:57:ee:9a:12:48:48:a6:23:41:6e:aa:a9:30:ce:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8FAEA9CA5E59718C329A558433A6076FF4425BF Validity Not Before: Dec 15 14:56:36 2025 GMT Not After : Dec 16 15:52:36 2025 GMT Subject: CN=2E725BE8B4AFE3370A71CC4750203F3D25E9380F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:3f:13:01:c1:cc:62:77:79:8b:f7:c0:d6: 95:55:41:09:44:2a:3a:3d:8a:7a:de:ab:ff:c3:37: 22:7b:7e:64:90:e2:49:d0:3f:57:a6:d4:fc:b3:12: 25:5e:83:9a:16:4d:d1:87:38:05:a4:b3:aa:e9:bd: 2d:b3:3b:bf:e0:c7:4d:19:2c:10:97:5b:39:02:b0: 8d:4c:a0:41:d8:e7:c5:67:92:0b:9a:ac:a2:19:1a: a7:44:c0:28:91:1a:88:1c:53:d7:5a:90:d5:9a:70: 14:13:16:e3:4e:3e:b7:76:f7:d8:28:c3:67:0c:d4: c4:24:71:f0:e6:b0:54:02:bf:35:f6:00:22:e7:9d: 7f:cb:4d:be:f5:06:bc:f0:ff:23:1e:c2:89:9b:70: 0f:09:b8:bf:a8:84:77:b8:c1:c3:38:33:d5:e3:81: 59:e0:87:9c:be:ec:1c:7f:05:47:7d:e1:20:09:f8: b6:e8:76:23:f2:c5:81:06:b3:e5:5c:93:00:bb:10: 85:4c:0c:99:2e:a7:f3:8c:61:1d:9d:cf:a6:9f:0f: 48:65:4b:20:92:9f:37:6e:d9:5a:89:d9:ed:e0:74: c0:d5:4e:c3:03:6e:8b:73:54:3a:30:74:4e:0e:cf: 86:a0:27:b3:37:f3:d4:44:d1:13:6b:ec:62:8e:cc: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:72:5B:E8:B4:AF:E3:37:0A:71:CC:47:50:20:3F:3D:25:E9:38:0F X509v3 Authority Key Identifier: keyid:E8:FA:EA:9C:A5:E5:97:18:C3:29:A5:58:43:3A:60:76:FF:44:25:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8FAEA9CA5E59718C329A558433A6076FF4425BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/E8FAEA9CA5E59718C329A558433A6076FF4425BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7c:8f:36:f6:21:50:78:75:71:ac:6d:bf:8d:47:aa:b1:f1: c0:14:2a:b1:49:e2:2c:98:e0:25:4e:07:76:58:ae:57:ed:dd: f5:bd:12:ac:6a:04:5b:00:97:80:92:ce:cc:60:54:e2:f2:84: e6:d7:1e:1c:85:9a:85:6d:1d:28:6e:02:41:0e:a3:78:b7:a1: 94:7e:0e:af:76:e0:f2:7a:0e:42:8a:4b:d8:cb:9a:b8:b6:55: 2c:6b:34:cc:08:3b:8b:7d:1f:92:f7:4d:6e:f9:42:ee:1e:f5: a3:42:1f:d3:e3:3f:ae:ca:01:fb:df:31:8c:a9:d4:bb:fe:c8: 6c:7b:9d:8d:e9:4a:d9:fc:9f:f2:a6:54:77:3d:b1:33:b8:97: 2a:a6:09:0f:4c:93:9c:1d:d0:51:c4:d5:e6:8b:4b:e2:91:7c: 1d:fc:6a:f4:fd:67:75:6d:26:0d:ae:1d:9b:ab:82:40:23:d0: 2c:94:5f:d2:5f:77:4f:66:fd:42:66:6d:79:80:69:6c:6e:e5: 72:86:f5:a1:47:ed:9b:37:91:db:01:e4:51:1e:e4:87:90:d8: 62:c9:04:7c:8b:1d:f2:6e:aa:4e:a6:38:5f:0c:7f:0d:cf:86: 70:e8:86:97:ce:6d:39:29:6a:6a:76:c6:1c:c4:72:b8:0c:0e: 51:4d:8a:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUREsXJOZX7poSSEimI0FuqqkwzuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGQUVBOUNBNUU1OTcxOEMzMjlBNTU4NDMzQTYwNzZG RjQ0MjVCRjAeFw0yNTEyMTUxNDU2MzZaFw0yNTEyMTYxNTUyMzZaMDMxMTAvBgNV BAMTKDJFNzI1QkU4QjRBRkUzMzcwQTcxQ0M0NzUwMjAzRjNEMjVFOTM4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpqT8TAcHMYnd5i/fA1pVVQQlE Kjo9inreq//DNyJ7fmSQ4knQP1em1PyzEiVeg5oWTdGHOAWks6rpvS2zO7/gx00Z LBCXWzkCsI1MoEHY58VnkguarKIZGqdEwCiRGogcU9dakNWacBQTFuNOPrd299go w2cM1MQkcfDmsFQCvzX2ACLnnX/LTb71Brzw/yMewombcA8JuL+ohHe4wcM4M9Xj gVngh5y+7Bx/BUd94SAJ+LbodiPyxYEGs+VckwC7EIVMDJkup/OMYR2dz6afD0hl SyCSnzdu2VqJ2e3gdMDVTsMDbotzVDowdE4Oz4agJ7M389RE0RNr7GKOzN2VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULnJb6LSv4zcKccxHUCA/PSXpOA8wHwYDVR0j BBgwFoAU6PrqnKXllxjDKaVYQzpgdv9EJb8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRLODNyVDcxcmZYak44RHpUN0FLdDhxRlh1dnU1SGVLS2h0emczOVFv a2UvMC9FOEZBRUE5Q0E1RTU5NzE4QzMyOUE1NTg0MzNBNjA3NkZGNDQyNUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4RkFFQTlDQTVFNTk3MThD MzI5QTU1ODQzM0E2MDc2RkY0NDI1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRLODNyVDcxcmZYak44RHpUN0FLdDhxRlh1dnU1SGVLS2h0emczOVFva2UvMC9F OEZBRUE5Q0E1RTU5NzE4QzMyOUE1NTg0MzNBNjA3NkZGNDQyNUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALXyPNvYhUHh1caxtv41HqrHxwBQqsUniLJjgJU4HdliuV+3d9b0SrGoEWwCX gJLOzGBU4vKE5tceHIWahW0dKG4CQQ6jeLehlH4Or3bg8noOQopL2MuauLZVLGs0 zAg7i30fkvdNbvlC7h71o0If0+M/rsoB+98xjKnUu/7IbHudjelK2fyf8qZUdz2x M7iXKqYJD0yTnB3QUcTV5otL4pF8Hfxq9P1ndW0mDa4dm6uCQCPQLJRf0l93T2b9 QmZteYBpbG7lcob1oUftmzeR2wHkUR7kh5DYYskEfIsd8m6qTqY4Xwx/Dc+GcOiG l85tOSlqanbGHMRyuAwOUU2KQw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:40:06 2025 by rpki-client