This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.mft File: 67F27968B2623AE45716B41A7C397D600B3D2686.mft (raw, json) Hash identifier: 30btkUKG99VrCr18gl6G2Gw3muOyIg+X5IUk0ru08fk= Subject key identifier: 07:DB:38:BE:33:47:AD:BA:DD:84:48:14:15:EF:C9:EE:B6:3E:DC:FF Authority key identifier: 67:F2:79:68:B2:62:3A:E4:57:16:B4:1A:7C:39:7D:60:0B:3D:26:86 Certificate issuer: /CN=67F27968B2623AE45716B41A7C397D600B3D2686 Certificate serial: 6CF6E43FC20990E5DDC41AC0D71A8C9049E5F5EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F27968B2623AE45716B41A7C397D600B3D2686.cer Subject info access: rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.mft Manifest number: 9D Signing time: Sun 21 Dec 2025 13:38:32 +0000 Manifest this update: Sun 21 Dec 2025 13:33:32 +0000 Manifest next update: Mon 22 Dec 2025 15:08:32 +0000 Files and hashes: 1: 34352e3136382e3137362e302f32322d3234203d3e20323638303738.roa (hash: fw5nJ4JEe53LbGVfIIKmNQ7NKzwmnWKnMcwkA/IJc+0=) 2: 67F27968B2623AE45716B41A7C397D600B3D2686.crl (hash: Ttr08vqoU2R3R7JRfR0K+8hj7+CoBoZbFLcAz9D/4WM=) 3: 323830343a353761383a3a2f33322d3334203d3e20323638303738.roa (hash: h2hguY2KXrSQC7kBwhrHvht0C52/pbxNOoPVEGKNcCc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.crl rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F27968B2623AE45716B41A7C397D600B3D2686.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 15:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f6:e4:3f:c2:09:90:e5:dd:c4:1a:c0:d7:1a:8c:90:49:e5:f5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67F27968B2623AE45716B41A7C397D600B3D2686 Validity Not Before: Dec 21 13:33:32 2025 GMT Not After : Dec 22 15:08:32 2025 GMT Subject: CN=07DB38BE3347ADBADD84481415EFC9EEB63EDCFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:e1:c0:d0:ed:0e:f4:73:a1:65:a6:c2:54: 4a:a2:ca:b1:4a:fe:0f:36:31:a9:8b:4b:97:38:ea: 3d:04:ec:64:74:e4:64:13:13:48:cb:07:60:8c:5b: 74:e8:ba:b3:30:a5:1b:1a:60:06:0a:20:81:8e:26: 3b:ab:a4:c5:1e:c7:9a:15:39:6a:0d:19:03:4a:96: 61:0a:ab:56:02:29:e4:80:1f:84:96:0c:7f:01:fb: b0:10:9c:41:e3:a0:cf:a2:ae:1c:d3:47:52:1d:23: 0a:b1:89:45:be:ba:f7:93:f3:f9:70:e7:0a:f8:36: 88:d4:f0:9d:27:0c:3d:5a:3b:c3:59:17:61:fe:e8: 49:64:86:0f:df:21:c5:a9:37:e1:b6:f7:24:b1:e1: 98:f8:49:af:5c:c7:58:b9:a5:45:1f:63:b3:f0:48: c7:73:ca:2e:0e:20:20:c1:b2:49:1e:37:a2:8f:6e: 00:81:ee:8e:b1:f5:00:61:da:3d:ff:c3:9b:bd:e9: 64:b7:77:4d:5a:78:c6:b6:53:f7:d6:b6:b6:fa:11: 30:29:dd:fb:ca:ba:dc:4d:89:00:7d:a7:ed:75:20: d2:17:1f:5e:3f:28:8a:fe:40:96:f8:5c:79:19:9d: 4f:2b:72:dc:df:c9:6b:35:ff:50:f2:42:ed:27:3f: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DB:38:BE:33:47:AD:BA:DD:84:48:14:15:EF:C9:EE:B6:3E:DC:FF X509v3 Authority Key Identifier: keyid:67:F2:79:68:B2:62:3A:E4:57:16:B4:1A:7C:39:7D:60:0B:3D:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F27968B2623AE45716B41A7C397D600B3D2686.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cd:01:24:d1:63:32:08:54:3a:24:64:86:62:39:5e:16:18: 90:72:3e:cf:96:47:fe:01:1a:a3:ba:df:27:9a:f8:b4:b9:d9: f4:d6:2f:6e:2b:42:b9:62:44:0f:d4:e8:91:1a:b2:48:2b:de: 95:33:16:5e:c2:34:67:69:ac:62:06:71:61:be:a7:44:42:f9: d3:4e:f5:a6:cc:9a:c2:08:cb:4c:bf:f8:0c:4e:84:f3:69:31: 45:f3:5d:6e:cb:b8:8a:9d:65:bf:97:d9:ed:60:a8:1b:37:f9: 84:81:1a:50:e2:52:f8:bf:72:13:ef:18:a3:59:55:eb:c4:17: ff:15:fa:d6:a2:32:e4:ad:6f:f7:97:f3:54:de:d0:07:ef:fe: 44:83:81:1f:ac:4c:54:ac:52:7d:da:97:66:bb:dd:71:cd:e7: 1a:5f:8f:3d:83:e6:38:93:20:0e:00:03:63:bc:2e:d7:27:41: e5:1f:d7:11:28:aa:7f:b9:61:fc:e9:3f:a7:db:a1:33:72:c7: c5:2a:c5:a5:99:ce:05:dc:a8:64:77:ff:c0:01:a5:c3:cd:ad: bf:d3:1a:7a:47:c0:3e:37:35:ea:d4:74:e0:5d:20:98:bb:63: 02:05:f5:7b:3e:ce:02:b6:f5:90:15:76:ae:02:45:83:14:e9: 0e:7f:e8:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbPbkP8IJkOXdxBrA1xqMkEnl9e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdGMjc5NjhCMjYyM0FFNDU3MTZCNDFBN0MzOTdENjAw QjNEMjY4NjAeFw0yNTEyMjExMzMzMzJaFw0yNTEyMjIxNTA4MzJaMDMxMTAvBgNV BAMTKDA3REIzOEJFMzM0N0FEQkFERDg0NDgxNDE1RUZDOUVFQjYzRURDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCuHA0O0O9HOhZabCVEqiyrFK /g82MamLS5c46j0E7GR05GQTE0jLB2CMW3TourMwpRsaYAYKIIGOJjurpMUex5oV OWoNGQNKlmEKq1YCKeSAH4SWDH8B+7AQnEHjoM+irhzTR1IdIwqxiUW+uveT8/lw 5wr4NojU8J0nDD1aO8NZF2H+6Elkhg/fIcWpN+G29ySx4Zj4Sa9cx1i5pUUfY7Pw SMdzyi4OICDBskkeN6KPbgCB7o6x9QBh2j3/w5u96WS3d01aeMa2U/fWtrb6ETAp 3fvKutxNiQB9p+11INIXH14/KIr+QJb4XHkZnU8rctzfyWs1/1DyQu0nP47dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB9s4vjNHrbrdhEgUFe/J7rY+3P8wHwYDVR0j BBgwFoAUZ/J5aLJiOuRXFrQafDl9YAs9JoYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWFwS1JGN3B1OHZvZnBWV01tMmM5WGt1djNDcDIyMVRNTktWRURLTHlE WEsvMC82N0YyNzk2OEIyNjIzQUU0NTcxNkI0MUE3QzM5N0Q2MDBCM0QyNjg2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3RjI3OTY4QjI2MjNBRTQ1 NzE2QjQxQTdDMzk3RDYwMEIzRDI2ODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWFwS1JGN3B1OHZvZnBWV01tMmM5WGt1djNDcDIyMVRNTktWRURLTHlEWEsvMC82 N0YyNzk2OEIyNjIzQUU0NTcxNkI0MUE3QzM5N0Q2MDBCM0QyNjg2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbc0BJNFjMghUOiRkhmI5XhYYkHI+z5ZH/gEao7rfJ5r4tLnZ9NYvbitCuWJE D9TokRqySCvelTMWXsI0Z2msYgZxYb6nREL50071psyawgjLTL/4DE6E82kxRfNd bsu4ip1lv5fZ7WCoGzf5hIEaUOJS+L9yE+8Yo1lV68QX/xX61qIy5K1v95fzVN7Q B+/+RIOBH6xMVKxSfdqXZrvdcc3nGl+PPYPmOJMgDgADY7wu1ydB5R/XESiqf7lh /Ok/p9uhM3LHxSrFpZnOBdyoZHf/wAGlw82tv9MaekfAPjc16tR04F0gmLtjAgX1 ez7OArb1kBV2rgJFgxTpDn/opQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:36:37 2025 by rpki-client