This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.mft File: 5BD9E4DF292A678071B59785706268C92A671EA2.mft (raw, json) Hash identifier: vz6BDPMrzcWSB8qXhNu2O66jEreLhqKdgELkLoyiSUM= Subject key identifier: 9C:19:07:CF:2B:98:CD:CA:0A:1B:86:AB:C1:9F:C5:3E:B9:47:28:01 Authority key identifier: 5B:D9:E4:DF:29:2A:67:80:71:B5:97:85:70:62:68:C9:2A:67:1E:A2 Certificate issuer: /CN=5BD9E4DF292A678071B59785706268C92A671EA2 Certificate serial: 3CEAADB1AA0C2771AA28248C1B9FCB10D36EE9ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD9E4DF292A678071B59785706268C92A671EA2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.mft Manifest number: 3A Signing time: Wed 24 Dec 2025 01:49:54 +0000 Manifest this update: Wed 24 Dec 2025 01:44:54 +0000 Manifest next update: Thu 25 Dec 2025 03:15:54 +0000 Files and hashes: 1: 5BD9E4DF292A678071B59785706268C92A671EA2.crl (hash: d/9KyKf2C0QhG/L6Q7AC9SOVMobYANhlqU3x19isEMM=) 2: 323830343a393438383a3a2f33322d3332203d3e20323734343634.roa (hash: rwwxvyIXRwmJfjAnguCApcMWv9gWB+wrUmjt+JBgBII=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.crl rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD9E4DF292A678071B59785706268C92A671EA2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 03:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ea:ad:b1:aa:0c:27:71:aa:28:24:8c:1b:9f:cb:10:d3:6e:e9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD9E4DF292A678071B59785706268C92A671EA2 Validity Not Before: Dec 24 01:44:54 2025 GMT Not After : Dec 25 03:15:54 2025 GMT Subject: CN=9C1907CF2B98CDCA0A1B86ABC19FC53EB9472801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:07:e0:da:a9:39:3a:0a:c1:6d:b8:38:95: 26:65:d9:e0:ce:96:47:49:e3:20:3c:39:57:6f:bb: 8e:fa:24:9d:5d:6c:12:58:f1:45:c5:27:3e:a3:01: 72:8f:2b:0e:eb:a3:f5:35:37:43:5b:6c:88:0d:a7: e6:48:29:33:80:f5:81:59:db:71:df:0d:eb:81:ee: a3:2e:dd:99:45:ce:62:95:00:6b:79:a5:3f:9b:3e: 40:5c:41:11:03:58:fd:ec:d4:db:90:5d:d7:b8:64: 2d:46:92:b0:f3:b9:ca:bc:72:cc:fe:39:03:86:03: 48:21:82:ba:0c:23:bb:ca:16:c2:c0:4f:3e:4f:db: 95:a3:72:51:ef:77:3a:f5:f5:3b:54:6c:10:e6:c7: aa:33:2e:bd:05:cf:e5:dc:e6:e1:2f:07:2a:f8:89: 91:f8:db:b3:0b:4d:4d:64:37:96:fd:9f:86:3f:63: 30:62:5d:f0:58:5d:d9:b7:0f:b2:63:6b:1e:a6:2f: 53:a0:aa:f3:87:30:13:36:11:dd:2b:a0:e1:92:43: 90:ec:53:f9:21:0c:6e:b9:ae:53:6e:a3:89:96:94: 06:af:0d:84:93:8f:5d:19:93:38:8f:44:85:e9:b0: cb:4b:4e:44:f2:f6:99:aa:8b:92:7e:42:10:e9:c9: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:19:07:CF:2B:98:CD:CA:0A:1B:86:AB:C1:9F:C5:3E:B9:47:28:01 X509v3 Authority Key Identifier: keyid:5B:D9:E4:DF:29:2A:67:80:71:B5:97:85:70:62:68:C9:2A:67:1E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD9E4DF292A678071B59785706268C92A671EA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/5BD9E4DF292A678071B59785706268C92A671EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5f:2f:f2:aa:ca:cd:d3:f0:e4:25:5a:5f:33:4e:79:f0:6f: fa:b4:80:66:d6:bf:bd:5c:29:59:cf:b1:7f:8e:f4:e6:b8:23: 69:27:f7:6a:ce:70:cf:c4:32:85:83:72:17:9c:fd:0b:4c:5d: 13:21:9f:d7:73:aa:34:74:90:77:c5:08:cc:1c:df:19:50:fe: 62:b3:d2:8f:59:5b:6b:7c:43:35:ba:e3:82:45:4a:95:d3:ee: aa:12:e4:fc:e7:1a:fd:c7:87:83:7c:60:eb:e8:71:a2:e5:6a: 24:ad:c1:5b:a7:94:df:06:b9:f1:44:4c:8c:c2:a1:d9:be:79: 6f:97:f0:df:2a:df:af:77:07:cf:6a:12:2c:da:de:a3:0c:cf: e3:57:f6:8a:06:c7:0b:2b:96:a4:9f:65:75:a1:4f:1f:37:93: 9f:5d:48:2e:c2:b0:0e:75:5e:4c:0a:0b:cf:6c:78:56:01:13: 10:85:69:ef:ad:72:7e:0a:72:34:c9:bf:3c:2a:cc:11:b7:dd: 48:88:b3:83:76:be:a6:2a:6d:77:ae:a4:fe:c3:cf:84:23:80: 0b:1c:8d:ce:99:1b:9a:85:b0:e7:df:80:17:b5:81:46:db:7e: 4e:10:46:ac:10:4c:c1:a8:6b:2d:b4:fe:d5:9d:40:84:36:e5: a4:f1:07:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPOqtsaoMJ3GqKCSMG5/LENNu6e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEOUU0REYyOTJBNjc4MDcxQjU5Nzg1NzA2MjY4Qzky QTY3MUVBMjAeFw0yNTEyMjQwMTQ0NTRaFw0yNTEyMjUwMzE1NTRaMDMxMTAvBgNV BAMTKDlDMTkwN0NGMkI5OENEQ0EwQTFCODZBQkMxOUZDNTNFQjk0NzI4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWgfg2qk5OgrBbbg4lSZl2eDO lkdJ4yA8OVdvu476JJ1dbBJY8UXFJz6jAXKPKw7ro/U1N0NbbIgNp+ZIKTOA9YFZ 23HfDeuB7qMu3ZlFzmKVAGt5pT+bPkBcQREDWP3s1NuQXde4ZC1GkrDzucq8csz+ OQOGA0ghgroMI7vKFsLATz5P25WjclHvdzr19TtUbBDmx6ozLr0Fz+Xc5uEvByr4 iZH427MLTU1kN5b9n4Y/YzBiXfBYXdm3D7Jjax6mL1OgqvOHMBM2Ed0roOGSQ5Ds U/khDG65rlNuo4mWlAavDYSTj10ZkziPRIXpsMtLTkTy9pmqi5J+QhDpyQzPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnBkHzyuYzcoKG4arwZ/FPrlHKAEwHwYDVR0j BBgwFoAUW9nk3ykqZ4BxtZeFcGJoySpnHqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pXV0U0QjhMUFBDcE1XTUhMbTkxRE5aN3BDaHc5WkFTSDFDWU00TktL a0wvMC81QkQ5RTRERjI5MkE2NzgwNzFCNTk3ODU3MDYyNjhDOTJBNjcxRUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRDlFNERGMjkyQTY3ODA3 MUI1OTc4NTcwNjI2OEM5MkE2NzFFQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pXV0U0QjhMUFBDcE1XTUhMbTkxRE5aN3BDaHc5WkFTSDFDWU00TktLa0wvMC81 QkQ5RTRERjI5MkE2NzgwNzFCNTk3ODU3MDYyNjhDOTJBNjcxRUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARl8v8qrKzdPw5CVaXzNOefBv+rSAZta/vVwpWc+xf4705rgjaSf3as5wz8Qy hYNyF5z9C0xdEyGf13OqNHSQd8UIzBzfGVD+YrPSj1lba3xDNbrjgkVKldPuqhLk /Oca/ceHg3xg6+hxouVqJK3BW6eU3wa58URMjMKh2b55b5fw3yrfr3cHz2oSLNre owzP41f2igbHCyuWpJ9ldaFPHzeTn11ILsKwDnVeTAoLz2x4VgETEIVp761yfgpy NMm/PCrMEbfdSIizg3a+piptd66k/sPPhCOACxyNzpkbmoWw59+AF7WBRtt+ThBG rBBMwahrLbT+1Z1AhDblpPEHuQ== -----END CERTIFICATE-----Generated at Wed Dec 24 17:41:23 2025 by rpki-client