This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft File: 020AFECF727CE88A459FCBC17D694507CE9ADE22.mft (raw, json) Hash identifier: l8sqUdzc6w+TiYJS3NS0XKnRAF9j4+H5wlqVs5HeLQw= Subject key identifier: 9A:AB:95:C2:8F:32:34:7F:E7:94:16:15:1E:87:C9:FF:98:34:5E:62 Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22 Certificate issuer: /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22 Certificate serial: 6B48A160F3D9507CA14A0274E78DE5DD5EF998 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer Subject info access: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft Manifest number: 01EC Signing time: Sat 20 Dec 2025 10:19:35 +0000 Manifest this update: Sat 20 Dec 2025 10:14:35 +0000 Manifest next update: Sun 21 Dec 2025 10:53:35 +0000 Files and hashes: 1: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (hash: JSrN2QrOp4mvWs4tfdMlhACA5kJW39lUGtJvvCvm+W0=) 2: 323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (hash: VGZMBxywOT6eMn/obggfUBg48R1BMRQHc1qiRhOgaq4=) 3: 020AFECF727CE88A459FCBC17D694507CE9ADE22.crl (hash: 6FWT67+LKHm6YUxcZoZeNPr5C08kogrLD5kU6kp3MUc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 10:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:48:a1:60:f3:d9:50:7c:a1:4a:02:74:e7:8d:e5:dd:5e:f9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22 Validity Not Before: Dec 20 10:14:35 2025 GMT Not After : Dec 21 10:53:35 2025 GMT Subject: CN=9AAB95C28F32347FE79416151E87C9FF98345E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:67:7e:2c:b1:23:5f:35:53:72:f1:9e:e6: 41:fa:2a:c7:f9:ee:b1:9e:01:12:f8:c9:aa:a0:3b: 0e:ea:7c:81:61:6b:d6:c9:5f:36:c4:36:2e:4f:7f: 1d:3b:85:82:06:c2:a2:2d:f5:d7:6c:8e:b9:94:e8: e5:8a:85:5a:3c:c3:27:43:66:f9:13:f7:80:01:9a: dc:a6:63:e6:81:30:b1:97:0e:3a:67:6e:89:7b:b4: 51:c5:81:35:c5:d9:13:b9:72:c6:57:aa:4a:05:a3: ed:37:7a:c3:3b:2e:4a:d9:a0:ab:22:e1:2e:c3:99: 90:06:eb:07:eb:71:03:9a:02:9f:49:92:08:40:87: 23:fa:83:d5:57:a2:47:f8:c8:df:12:90:6a:8c:54: 49:01:be:f5:95:d1:9c:6f:82:31:40:e8:88:4b:36: ea:ef:40:31:6d:b5:af:13:e9:d4:42:da:45:f4:13: 84:14:13:fe:94:cc:54:91:b6:99:72:93:4d:b5:f5: 3a:c2:ff:d3:5a:e1:d2:3a:15:b0:c3:ad:3b:82:87: 8b:94:6b:50:51:cb:9c:72:83:e6:0d:06:d2:b9:e7: a3:2c:21:94:96:d3:2e:81:8a:c4:2f:2b:b0:3e:4a: 4e:6a:61:a2:31:83:02:9d:f1:4b:9d:96:59:80:15: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AB:95:C2:8F:32:34:7F:E7:94:16:15:1E:87:C9:FF:98:34:5E:62 X509v3 Authority Key Identifier: keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:dd:23:8d:ef:37:ef:b1:6b:61:f4:17:f4:79:d7:6d:1d:fa: b5:36:59:07:ba:a0:40:98:51:5f:c8:61:53:00:3f:75:c0:7f: a6:d0:38:29:79:b1:d6:97:ad:38:8a:ce:9c:fd:27:78:6e:d9: 34:be:4d:e3:6a:15:25:79:45:a3:5f:34:88:0e:28:fd:16:2a: 8d:a4:6e:60:67:e1:e2:b0:e8:97:85:8a:33:6c:dc:a3:f4:f1: 78:92:51:2c:1b:1e:a2:65:d5:43:b8:8b:8f:b2:4b:33:e2:3a: 22:e5:d7:68:26:fa:5d:14:02:3f:cb:64:4d:31:21:2d:f3:35: 89:66:bd:57:17:fb:0c:51:fd:81:3a:91:d6:9b:e4:f7:8e:fb: 21:70:de:c5:fa:21:85:52:7b:81:c4:01:7f:e9:d1:c6:ac:d7: 70:d3:a2:07:40:bc:c0:64:bc:af:a9:1d:db:b1:5f:98:1b:3f: 82:37:3e:b1:68:67:4d:dc:fb:2f:f0:cf:5a:d5:66:62:df:8c: 58:7a:c9:ca:96:be:dd:dc:8e:04:8b:34:09:b6:2d:d2:cd:ae: 0f:00:89:e1:04:b7:59:dc:18:e5:ef:b3:68:3a:05:ee:bd:7e: a1:6f:56:63:f8:9b:29:75:13:b9:d9:41:20:8c:e2:e2:ec:cd: e4:d0:82:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITa0ihYPPZUHyhSgJ0543l3V75mDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwMjBBRkVDRjcyN0NFODhBNDU5RkNCQzE3RDY5NDUwN0NF OUFERTIyMB4XDTI1MTIyMDEwMTQzNVoXDTI1MTIyMTEwNTMzNVowMzExMC8GA1UE AxMoOUFBQjk1QzI4RjMyMzQ3RkU3OTQxNjE1MUU4N0M5RkY5ODM0NUU2MjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL21Z34ssSNfNVNy8Z7mQfoqx/nu sZ4BEvjJqqA7Dup8gWFr1slfNsQ2Lk9/HTuFggbCoi3112yOuZTo5YqFWjzDJ0Nm +RP3gAGa3KZj5oEwsZcOOmduiXu0UcWBNcXZE7lyxleqSgWj7Td6wzsuStmgqyLh LsOZkAbrB+txA5oCn0mSCECHI/qD1VeiR/jI3xKQaoxUSQG+9ZXRnG+CMUDoiEs2 6u9AMW21rxPp1ELaRfQThBQT/pTMVJG2mXKTTbX1OsL/01rh0joVsMOtO4KHi5Rr UFHLnHKD5g0G0rnnoywhlJbTLoGKxC8rsD5KTmphojGDAp3xS52WWYAVV8UCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBSaq5XCjzI0f+eUFhUeh8n/mDReYjAfBgNVHSME GDAWgBQCCv7PcnzoikWfy8F9aUUHzpreIjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9FRGc4V0daUDRHQnN4YllVMjVOcEhvcTJOQTRHMnQ2WHlCM3piMkNlZ25h Ri8wLzAyMEFGRUNGNzI3Q0U4OEE0NTlGQ0JDMTdENjk0NTA3Q0U5QURFMjIuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMDIwQUZFQ0Y3MjdDRTg4QTQ1 OUZDQkMxN0Q2OTQ1MDdDRTlBREUyMi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F RGc4V0daUDRHQnN4YllVMjVOcEhvcTJOQTRHMnQ2WHlCM3piMkNlZ25hRi8wLzAy MEFGRUNGNzI3Q0U4OEE0NTlGQ0JDMTdENjk0NTA3Q0U5QURFMjIubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDB3SON7zfvsWth9Bf0eddtHfq1NlkHuqBAmFFfyGFTAD91wH+m0DgpebHWl604 is6c/Sd4btk0vk3jahUleUWjXzSIDij9FiqNpG5gZ+HisOiXhYozbNyj9PF4klEs Gx6iZdVDuIuPsksz4joi5ddoJvpdFAI/y2RNMSEt8zWJZr1XF/sMUf2BOpHWm+T3 jvshcN7F+iGFUnuBxAF/6dHGrNdw06IHQLzAZLyvqR3bsV+YGz+CNz6xaGdN3Psv 8M9a1WZi34xYesnKlr7d3I4EizQJti3Sza4PAInhBLdZ3Bjl77NoOgXuvX6hb1Zj +JspdRO52UEgjOLi7M3k0IJo -----END CERTIFICATE-----Generated at Sun Dec 21 00:07:36 2025 by rpki-client