This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: byU+Pn3Udk3TSkVJEALJMWst/Lagj9X+yHOWC3aAB88= Subject key identifier: 60:20:2F:F6:4B:22:D3:64:89:3F:7C:2D:10:F7:D3:30:DF:A0:2C:11 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 0AFAAE915586FFC2E4A5C92546656EF1CA372D49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 0343 Signing time: Fri 19 Dec 2025 16:25:33 +0000 Manifest this update: Fri 19 Dec 2025 16:20:33 +0000 Manifest next update: Sat 20 Dec 2025 18:28:33 +0000 Files and hashes: 1: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: YRwpO+qV9F49NAjD4t6i+dZs654OmXK5qpgT8nKdEac=) 2: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: bwNSpjziHmAnK4QTC1/5OnxuX3bkMWPFqG5rGjkvMDQ=) 3: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 18:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fa:ae:91:55:86:ff:c2:e4:a5:c9:25:46:65:6e:f1:ca:37:2d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Dec 19 16:20:33 2025 GMT Not After : Dec 20 18:28:33 2025 GMT Subject: CN=60202FF64B22D364893F7C2D10F7D330DFA02C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:66:c5:7b:18:8b:32:08:5b:20:53:02:bc: e8:f9:e3:cd:a7:a0:9a:d3:04:92:06:4b:34:a1:72: 40:4c:7b:b5:e4:c0:e1:69:9f:d2:6b:59:c7:f3:50: 86:77:30:a7:74:f5:f8:a8:9a:4b:f8:c6:8c:da:bb: ed:ba:64:8e:15:5f:d0:2d:0d:92:ff:d3:ce:5e:7e: 61:29:28:94:25:c4:93:6d:c1:53:0a:ab:7c:37:71: fa:0a:22:42:d2:a0:ef:bb:a2:e3:a5:1d:20:56:66: c0:a3:97:b1:60:7c:5c:c1:7a:47:df:25:76:d4:9b: df:14:5e:c7:4a:f5:3e:12:d7:ad:f3:cc:ae:82:7f: 87:78:d6:8d:b0:8f:c9:33:05:9b:f3:32:c4:fc:9a: d9:1a:67:f4:fa:07:b5:46:7a:a7:5c:ab:ff:d0:60: fd:6c:a4:30:40:d0:2e:fd:40:b3:25:6e:db:3a:7b: 5b:96:5d:30:d9:16:03:89:88:bb:93:8e:1a:b0:8e: 7a:e8:88:17:21:0b:e7:45:6c:b7:50:f6:fe:ee:08: d0:5f:1b:62:dd:93:cc:d2:30:5c:7b:c4:1f:80:d0: a5:56:51:b7:c0:84:ff:35:c1:15:5f:f8:42:bb:96: 66:cc:e5:77:44:d4:a8:45:b5:cf:68:3b:1f:47:fc: 03:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:20:2F:F6:4B:22:D3:64:89:3F:7C:2D:10:F7:D3:30:DF:A0:2C:11 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2f:6f:4b:db:c1:8e:d5:a7:d0:0d:33:36:d2:2d:6d:e9:e1: f1:c8:9e:2b:6e:e8:05:56:da:16:8d:32:07:de:a1:01:f5:21: fa:c2:c2:50:9e:ed:95:a2:75:7f:43:83:8a:b8:38:67:32:97: da:54:19:22:6e:4e:1d:f9:d8:5f:36:20:64:27:64:16:52:a3: 9d:9c:ff:9f:75:d5:4c:08:93:c7:de:a8:f1:4b:2f:8d:ae:9e: 89:a6:ec:95:47:7e:be:a6:05:59:e7:d7:03:3b:f5:25:84:ca: ca:66:8a:ae:d8:6f:18:46:7b:d4:80:78:c9:b6:6d:cc:f7:0e: 02:ff:f1:a8:24:79:2f:3e:87:49:56:b9:90:5e:68:92:60:40: de:4a:ac:4f:32:dd:eb:73:fd:f1:4f:11:6c:51:9c:77:f0:67: 75:4b:ad:bb:97:32:fb:52:00:38:46:ed:b8:88:8d:7a:aa:2a: db:a6:54:0e:a0:b1:71:5e:7d:e8:c3:59:30:67:a2:f8:e3:eb: 36:19:67:b2:cb:c5:d7:d7:b7:dc:05:09:6e:29:b6:06:a8:2c: 33:17:c8:ad:31:e6:19:d4:3a:22:22:11:52:8d:76:4d:86:ed: 31:10:de:c4:b4:a4:47:f3:b0:5a:15:6d:63:f9:33:74:90:0d: e0:12:86:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCvqukVWG/8LkpcklRmVu8co3LUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTEyMTkxNjIwMzNaFw0yNTEyMjAxODI4MzNaMDMxMTAvBgNV BAMTKDYwMjAyRkY2NEIyMkQzNjQ4OTNGN0MyRDEwRjdEMzMwREZBMDJDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0k2bFexiLMghbIFMCvOj5482n oJrTBJIGSzShckBMe7XkwOFpn9JrWcfzUIZ3MKd09fiomkv4xozau+26ZI4VX9At DZL/085efmEpKJQlxJNtwVMKq3w3cfoKIkLSoO+7ouOlHSBWZsCjl7FgfFzBekff JXbUm98UXsdK9T4S163zzK6Cf4d41o2wj8kzBZvzMsT8mtkaZ/T6B7VGeqdcq//Q YP1spDBA0C79QLMlbts6e1uWXTDZFgOJiLuTjhqwjnroiBchC+dFbLdQ9v7uCNBf G2Ldk8zSMFx7xB+A0KVWUbfAhP81wRVf+EK7lmbM5XdE1KhFtc9oOx9H/ANjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYCAv9ksi02SJP3wtEPfTMN+gLBEwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnS9vS9vBjtWn0A0zNtItbenh8cieK27oBVbaFo0yB96hAfUh+sLCUJ7tlaJ1 f0ODirg4ZzKX2lQZIm5OHfnYXzYgZCdkFlKjnZz/n3XVTAiTx96o8Usvja6eiabs lUd+vqYFWefXAzv1JYTKymaKrthvGEZ71IB4ybZtzPcOAv/xqCR5Lz6HSVa5kF5o kmBA3kqsTzLd63P98U8RbFGcd/BndUutu5cy+1IAOEbtuIiNeqoq26ZUDqCxcV59 6MNZMGei+OPrNhlnssvF19e33AUJbim2BqgsMxfIrTHmGdQ6IiIRUo12TYbtMRDe xLSkR/OwWhVtY/kzdJAN4BKGXg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:35:05 2025 by rpki-client