This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft File: 0F0B8A867772B2436759E0F012765DC77C12ACB5.mft (raw, json) Hash identifier: TPKaaTtW2RW3c+qpIlDFFY9bDkif13DNJ9m9ON8/WAg= Subject key identifier: EA:21:C2:21:27:1B:6B:3A:68:24:FB:6E:85:B3:72:EF:2D:C0:2D:A3 Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5 Certificate issuer: /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5 Certificate serial: 1574E97C73963D7A3FA6487F1137F7384D06D72B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft Manifest number: 033B Signing time: Wed 24 Dec 2025 00:06:10 +0000 Manifest this update: Wed 24 Dec 2025 00:01:10 +0000 Manifest next update: Thu 25 Dec 2025 01:49:10 +0000 Files and hashes: 1: 323830343a316533343a3a2f33322d3438203d3e20323634343134.roa (hash: RHzfWlmyT+GDNaub4ZdnDTBPhmfhXe6ZfuhuThBP/EE=) 2: 3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa (hash: 8KeY5Gq3yZKw+IrAyQ4nBcjKExan/7utIpZ5Fql/6O8=) 3: 0F0B8A867772B2436759E0F012765DC77C12ACB5.crl (hash: McmT2GEVQ0x+vBAR9Hrsr70S172hVZzHT8vRHxUoJPk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 01:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:74:e9:7c:73:96:3d:7a:3f:a6:48:7f:11:37:f7:38:4d:06:d7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5 Validity Not Before: Dec 24 00:01:10 2025 GMT Not After : Dec 25 01:49:10 2025 GMT Subject: CN=EA21C221271B6B3A6824FB6E85B372EF2DC02DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:6f:db:ff:fe:4a:e2:87:95:34:f7:77:6d: 26:d7:62:1a:25:be:db:02:32:5a:2f:ff:bb:cf:d5: 53:7c:87:03:54:c1:ad:73:9f:eb:b0:4f:cc:c5:7b: d5:a1:ea:10:ed:1f:fd:4b:2c:01:de:a3:2a:34:30: 49:96:53:96:0b:1f:95:79:99:ff:7f:61:03:38:bf: d6:b6:33:46:7b:10:69:c9:a1:51:7a:24:77:0e:4c: f6:69:b9:4d:a4:04:4c:30:f4:49:34:95:9c:6e:66: c5:0f:07:e3:57:6c:d9:0d:75:92:86:a0:e8:37:32: 6a:66:26:cc:31:ff:4b:bc:af:ae:3a:75:04:29:8a: ef:7c:76:18:80:51:47:8a:bf:97:06:b4:f8:a3:21: e3:17:01:9a:65:c2:ae:0f:4a:d0:80:27:4a:be:3f: ab:89:f0:27:17:fe:e1:8b:8d:3f:2c:3c:b1:db:2c: 9b:27:c4:47:54:c9:59:d5:75:e9:68:68:b5:48:81: 6c:f6:72:a9:7e:be:c3:48:84:8b:b3:f6:87:9b:a9: eb:12:bc:63:03:c3:4d:90:83:10:82:53:a1:1c:73: cf:11:49:19:9d:e5:a5:d2:e2:32:36:4d:3a:f7:51: c3:27:e2:b1:29:d8:f9:5e:3f:b5:29:f8:a4:0e:1c: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:C2:21:27:1B:6B:3A:68:24:FB:6E:85:B3:72:EF:2D:C0:2D:A3 X509v3 Authority Key Identifier: keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:21:14:40:33:67:07:8b:62:8a:3d:1e:e0:7d:99:b2:a9:39: 70:e4:8d:2a:72:6a:e8:1c:33:79:a6:df:1c:dd:8c:73:c2:51: c0:6d:10:b1:8f:a0:38:fb:0d:44:39:40:13:1d:3f:ee:45:f8: 0e:a3:67:cd:74:00:d6:8d:41:76:64:93:c8:86:aa:67:8f:3a: 06:bd:cf:b1:2b:29:5a:32:fe:9d:11:6f:81:8e:08:92:63:f4: 4b:0a:de:f1:c4:f4:8f:12:06:b0:e9:7d:c9:10:98:89:01:0c: 73:e1:83:9a:aa:e3:05:c4:9d:54:99:a7:d8:4d:ee:17:2b:ef: 1a:54:e5:7b:d0:82:0c:0b:1e:be:39:37:ff:c6:65:71:03:12: 6d:0c:48:37:45:b4:62:2a:40:63:dd:1b:92:0e:9f:b3:df:37: 1f:1d:bb:4c:69:97:0e:4f:a1:44:2c:0e:ba:d9:a7:d4:25:37: 59:50:7e:14:06:1c:18:5a:51:f5:7f:a6:fc:ad:a7:46:60:84: 78:b9:48:be:5b:ba:7b:40:26:56:bd:04:c7:1c:41:4d:ed:2c: bb:32:81:b5:3f:5f:0b:6e:26:c7:ce:42:d6:76:3e:41:52:b7: 2e:bf:a1:9c:93:ed:af:e4:66:e4:d5:9a:fb:c1:b9:f9:74:bd: 0d:eb:8c:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFXTpfHOWPXo/pkh/ETf3OE0G1yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYwQjhBODY3NzcyQjI0MzY3NTlFMEYwMTI3NjVEQzc3 QzEyQUNCNTAeFw0yNTEyMjQwMDAxMTBaFw0yNTEyMjUwMTQ5MTBaMDMxMTAvBgNV BAMTKEVBMjFDMjIxMjcxQjZCM0E2ODI0RkI2RTg1QjM3MkVGMkRDMDJEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBd2/b//5K4oeVNPd3bSbXYhol vtsCMlov/7vP1VN8hwNUwa1zn+uwT8zFe9Wh6hDtH/1LLAHeoyo0MEmWU5YLH5V5 mf9/YQM4v9a2M0Z7EGnJoVF6JHcOTPZpuU2kBEww9Ek0lZxuZsUPB+NXbNkNdZKG oOg3MmpmJswx/0u8r646dQQpiu98dhiAUUeKv5cGtPijIeMXAZplwq4PStCAJ0q+ P6uJ8CcX/uGLjT8sPLHbLJsnxEdUyVnVdeloaLVIgWz2cql+vsNIhIuz9oebqesS vGMDw02QgxCCU6Ecc88RSRmd5aXS4jI2TTr3UcMn4rEp2PleP7Up+KQOHEjdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6iHCIScbazpoJPtuhbNy7y3ALaMwHwYDVR0j BBgwFoAUDwuKhndyskNnWeDwEnZdx3wSrLUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZh OE0vMC8wRjBCOEE4Njc3NzJCMjQzNjc1OUUwRjAxMjc2NURDNzdDMTJBQ0I1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMEI4QTg2Nzc3MkIyNDM2 NzU5RTBGMDEyNzY1REM3N0MxMkFDQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZhOE0vMC8w RjBCOEE4Njc3NzJCMjQzNjc1OUUwRjAxMjc2NURDNzdDMTJBQ0I1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqyEUQDNnB4tiij0e4H2Zsqk5cOSNKnJq6BwzeabfHN2Mc8JRwG0QsY+gOPsN RDlAEx0/7kX4DqNnzXQA1o1BdmSTyIaqZ486Br3PsSspWjL+nRFvgY4IkmP0Swre 8cT0jxIGsOl9yRCYiQEMc+GDmqrjBcSdVJmn2E3uFyvvGlTle9CCDAsevjk3/8Zl cQMSbQxIN0W0YipAY90bkg6fs983Hx27TGmXDk+hRCwOutmn1CU3WVB+FAYcGFpR 9X+m/K2nRmCEeLlIvlu6e0AmVr0ExxxBTe0suzKBtT9fC24mx85C1nY+QVK3Lr+h nJPtr+Rm5NWa+8G5+XS9DeuMjQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:27:37 2025 by rpki-client