This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: yo98twuV5GXStBKyGS4i+Y3q6vY8tWvMpnzNeLAFsbw= Subject key identifier: 2B:29:7D:F8:F4:54:42:1D:79:59:D7:26:85:AB:F4:21:4B:30:AB:A7 Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 7873A2C687230E3DC4EE60CA19744F4CC28D6B9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: 01A0 Signing time: Mon 22 Dec 2025 19:40:40 +0000 Manifest this update: Mon 22 Dec 2025 19:35:40 +0000 Manifest next update: Tue 23 Dec 2025 20:33:40 +0000 Files and hashes: 1: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: Iiw3MDeV1f1mvtGeF4opH1xhqvZYTh0ffNrMpdLwBiM=) 2: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) 3: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:73:a2:c6:87:23:0e:3d:c4:ee:60:ca:19:74:4f:4c:c2:8d:6b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Dec 22 19:35:40 2025 GMT Not After : Dec 23 20:33:40 2025 GMT Subject: CN=2B297DF8F454421D7959D72685ABF4214B30ABA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:d6:df:b7:d6:dd:0c:d3:bd:72:ec:dc:af: 4d:9f:bc:cb:c0:c9:38:f1:2e:e6:3a:f6:40:ac:5b: db:c7:9e:b3:43:38:d7:3b:a3:50:df:8b:57:b1:88: 26:50:29:36:d5:6b:4d:41:f5:1e:c8:c9:c5:cf:b4: 76:2a:4b:32:87:13:ed:18:bf:aa:ee:53:84:24:7c: b0:55:0a:19:19:6a:b3:26:75:b6:ad:ec:47:f9:39: aa:3a:c4:b8:1e:07:25:a2:81:b8:80:6f:78:2f:58: 0c:fa:b9:30:7a:a8:cf:41:66:46:ee:85:10:f3:0e: fe:93:68:69:57:b3:07:5b:ba:ed:65:a4:3b:f6:d5: 03:85:3c:b4:5a:b6:f5:2a:bb:56:f0:d1:bf:99:e4: b7:30:9f:7b:e6:71:47:9e:de:5f:df:13:e9:79:74: 75:30:e0:81:98:a9:e2:d6:ed:ca:5f:e3:c2:98:a5: 9a:cc:75:c5:dc:0c:90:97:7d:b2:48:e5:61:04:97: 14:be:fe:25:8b:04:84:0b:b2:de:e5:da:19:81:76: 1a:af:1f:66:dc:fe:6b:a3:31:e4:5c:34:ac:44:35: 84:c6:52:b4:f6:13:4c:d4:5b:45:73:fd:3b:f8:6a: 34:f4:2e:eb:bd:8d:54:7d:41:6f:ad:df:2e:47:f4: 6b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:29:7D:F8:F4:54:42:1D:79:59:D7:26:85:AB:F4:21:4B:30:AB:A7 X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:31:29:04:05:a9:28:18:7c:fd:3e:b4:fa:39:74:18:f1:e4: 4b:99:05:92:db:d0:d0:bd:f8:cf:53:58:37:fa:15:2e:77:24: 4b:d2:fe:a4:0b:d5:7e:40:0b:e6:c5:a4:ea:eb:5e:7f:ab:84: 4c:b2:dc:f7:fb:45:0c:56:f6:c7:b9:97:51:94:66:40:5a:9f: e7:66:ad:a0:33:ae:e6:69:21:10:5f:e7:36:72:e6:05:1d:52: 21:c6:46:3f:6b:f2:31:eb:aa:24:b6:f2:b5:bd:d6:e1:47:a4: 71:a7:e2:0b:37:e0:ee:44:2b:14:c4:5d:18:bd:d0:7c:5f:f8: da:86:5f:1a:1c:bf:45:98:bb:5c:5b:da:25:e2:56:8e:71:73: d3:b6:4a:f1:ff:8d:36:6d:8e:8a:13:1c:52:6a:97:78:ec:b9: 12:41:30:c1:b9:19:7b:9b:d6:ab:3d:36:a5:80:90:22:59:3c: a0:be:61:39:b4:cf:f9:fc:59:e0:25:82:78:72:c8:3c:92:41: f7:83:e0:34:c3:8b:ff:07:4c:5c:0a:ac:08:ba:35:2d:89:c0: 65:c2:ab:32:5f:fb:f0:7e:ba:d6:e5:8c:e9:cd:d3:80:dc:75: a4:59:71:57:1b:66:a2:3c:c9:56:93:03:ba:a4:9c:de:aa:2a: 90:b1:f9:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeHOixocjDj3E7mDKGXRPTMKNa5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNTEyMjIxOTM1NDBaFw0yNTEyMjMyMDMzNDBaMDMxMTAvBgNV BAMTKDJCMjk3REY4RjQ1NDQyMUQ3OTU5RDcyNjg1QUJGNDIxNEIzMEFCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZ9bft9bdDNO9cuzcr02fvMvA yTjxLuY69kCsW9vHnrNDONc7o1Dfi1exiCZQKTbVa01B9R7IycXPtHYqSzKHE+0Y v6ruU4QkfLBVChkZarMmdbat7Ef5Oao6xLgeByWigbiAb3gvWAz6uTB6qM9BZkbu hRDzDv6TaGlXswdbuu1lpDv21QOFPLRatvUqu1bw0b+Z5Lcwn3vmcUee3l/fE+l5 dHUw4IGYqeLW7cpf48KYpZrMdcXcDJCXfbJI5WEElxS+/iWLBIQLst7l2hmBdhqv H2bc/mujMeRcNKxENYTGUrT2E0zUW0Vz/Tv4ajT0Luu9jVR9QW+t3y5H9GtzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKyl9+PRUQh15Wdcmhav0IUswq6cwHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXDEpBAWpKBh8/T60+jl0GPHkS5kFktvQ0L34z1NYN/oVLnckS9L+pAvVfkAL 5sWk6utef6uETLLc9/tFDFb2x7mXUZRmQFqf52atoDOu5mkhEF/nNnLmBR1SIcZG P2vyMeuqJLbytb3W4UekcafiCzfg7kQrFMRdGL3QfF/42oZfGhy/RZi7XFvaJeJW jnFz07ZK8f+NNm2OihMcUmqXeOy5EkEwwbkZe5vWqz02pYCQIlk8oL5hObTP+fxZ 4CWCeHLIPJJB94PgNMOL/wdMXAqsCLo1LYnAZcKrMl/78H661uWM6c3TgNx1pFlx VxtmojzJVpMDuqSc3qoqkLH5sA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:15:46 2025 by rpki-client