This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft File: EEAED5639DA591A226FB7469252567652499ADA3.mft (raw, json) Hash identifier: jULhkpR1SRaurMldAKBEdHnkDmAM6aW3vkP7iaCjJGs= Subject key identifier: 88:57:A8:D4:24:B7:EC:92:30:2B:DA:4D:D3:AA:3F:BC:BD:47:F8:C3 Authority key identifier: EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3 Certificate issuer: /CN=EEAED5639DA591A226FB7469252567652499ADA3 Certificate serial: 067F9D9FBD62534A87E129637592AE43288FCB7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft Manifest number: 037A Signing time: Sat 20 Dec 2025 04:55:27 +0000 Manifest this update: Sat 20 Dec 2025 04:50:27 +0000 Manifest next update: Sun 21 Dec 2025 06:44:27 +0000 Files and hashes: 1: EEAED5639DA591A226FB7469252567652499ADA3.crl (hash: ZKbDDkkWAgScjQQaeFe7i4YVzzBu2aQWng8b21Yiq6Q=) 2: 323830343a353761343a3a2f33322d3438203d3e20323638303737.roa (hash: xOAryiKkqUDKW6aNgHf2rJf5ix7LCiDpJpfsS2iAuBc=) 3: 34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (hash: DlRy1y/Z2vFaI3A8vZACKQaNnQ+8f/8SWb2Il29shkQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 06:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:9d:9f:bd:62:53:4a:87:e1:29:63:75:92:ae:43:28:8f:cb:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEAED5639DA591A226FB7469252567652499ADA3 Validity Not Before: Dec 20 04:50:27 2025 GMT Not After : Dec 21 06:44:27 2025 GMT Subject: CN=8857A8D424B7EC92302BDA4DD3AA3FBCBD47F8C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:a4:51:92:4b:a8:0d:c1:39:2d:5e:66:40: 04:24:2e:b9:ee:9d:4f:3f:e7:70:38:9c:50:18:56: 0b:8f:8c:b9:0b:99:c2:87:1f:72:3c:2c:25:88:dd: 96:4c:71:c0:e8:f9:9c:47:c3:64:eb:e0:b7:aa:e6: 68:ce:69:63:b7:f1:61:c4:43:58:18:fb:79:1a:31: 59:15:3e:ed:f9:13:69:66:9f:22:f1:89:2c:e2:a0: 27:89:65:5d:f9:90:fa:f9:ba:3d:ff:81:1e:c7:9c: 40:4f:26:29:61:c6:8e:77:0a:d3:13:ce:25:36:18: e9:5c:e8:03:b9:bf:fa:94:9d:27:b0:6d:9c:cd:c4: ce:b8:44:ac:92:78:f4:4c:12:b5:df:e0:eb:a0:b3: 77:de:38:d7:72:28:9c:e9:1d:9e:f6:48:7e:66:7d: 6a:a1:8e:9a:bf:4f:13:af:cc:e3:c7:ec:8a:81:b7: c9:1e:8f:fd:09:c1:22:c8:1e:99:91:43:0f:92:80: ec:b6:9d:8b:b5:0c:8e:d7:0c:ff:13:c2:d5:f1:6c: 56:05:18:87:a6:a1:61:17:67:39:dc:4c:4a:c4:2f: 10:d0:44:bd:d6:4f:16:45:e5:dc:79:22:b2:79:cd: 25:c2:b1:09:80:f8:00:f1:68:a9:e4:f8:bc:cf:c6: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:A8:D4:24:B7:EC:92:30:2B:DA:4D:D3:AA:3F:BC:BD:47:F8:C3 X509v3 Authority Key Identifier: keyid:EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:21:c3:db:64:1c:2a:07:72:7f:64:5b:0e:1b:37:59:2f:31: 7e:f3:5c:ea:09:41:81:b3:af:d5:01:92:9f:db:4f:94:57:ac: cb:91:0e:6c:29:59:b4:65:cf:16:ec:68:ae:71:65:76:a1:cb: 49:62:2c:17:6f:ef:8c:31:2a:c2:6d:c5:c9:8b:bf:f6:f0:95: 9a:6a:dc:9a:1a:8b:80:fb:55:b6:8e:cc:d1:95:36:17:00:3d: 36:44:3f:44:ff:ec:69:7d:46:50:39:23:cd:7f:9b:19:19:b4: 0d:5d:2b:5b:98:26:76:60:27:78:61:30:84:a7:2a:84:4b:7b: 5b:f4:fd:31:c9:de:19:c5:7e:1e:f1:e2:e9:9c:cc:55:0c:6e: 48:07:88:79:55:1a:5b:0e:c8:30:98:f5:09:f5:06:46:c6:98: 21:25:90:7b:03:d0:61:c2:0f:9d:3f:10:e3:5c:59:94:19:79: 3a:6a:9a:dd:ba:60:5e:a3:cc:95:b3:97:7c:33:17:23:19:61: 3a:03:b8:4b:c5:3c:ef:e2:38:d7:d2:69:fc:2c:33:e3:8d:5a: 57:91:e7:9c:83:3c:88:c7:d3:06:7d:03:71:b5:18:f9:e4:fd: 1e:35:29:dd:da:5e:9b:0d:23:b5:dd:b8:43:65:dd:8d:23:e3: 92:8b:ae:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBn+dn71iU0qH4SljdZKuQyiPy30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVBRUQ1NjM5REE1OTFBMjI2RkI3NDY5MjUyNTY3NjUy NDk5QURBMzAeFw0yNTEyMjAwNDUwMjdaFw0yNTEyMjEwNjQ0MjdaMDMxMTAvBgNV BAMTKDg4NTdBOEQ0MjRCN0VDOTIzMDJCREE0REQzQUEzRkJDQkQ0N0Y4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g6RRkkuoDcE5LV5mQAQkLrnu nU8/53A4nFAYVguPjLkLmcKHH3I8LCWI3ZZMccDo+ZxHw2Tr4Leq5mjOaWO38WHE Q1gY+3kaMVkVPu35E2lmnyLxiSzioCeJZV35kPr5uj3/gR7HnEBPJilhxo53CtMT ziU2GOlc6AO5v/qUnSewbZzNxM64RKySePRMErXf4Ougs3feONdyKJzpHZ72SH5m fWqhjpq/TxOvzOPH7IqBt8kej/0JwSLIHpmRQw+SgOy2nYu1DI7XDP8TwtXxbFYF GIemoWEXZzncTErELxDQRL3WTxZF5dx5IrJ5zSXCsQmA+ADxaKnk+LzPxg3JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiFeo1CS37JIwK9pN06o/vL1H+MMwHwYDVR0j BBgwFoAU7q7VY52lkaIm+3RpJSVnZSSZraMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVR djcvMS9FRUFFRDU2MzlEQTU5MUEyMjZGQjc0NjkyNTI1Njc2NTI0OTlBREEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFQUVENTYzOURBNTkxQTIy NkZCNzQ2OTI1MjU2NzY1MjQ5OUFEQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENOTWJTUHU4cE01RGdNVExmdEd1Rk41SnVwZVFubkxRMnAzbzdiSHVRdjcvMS9F RUFFRDU2MzlEQTU5MUEyMjZGQjc0NjkyNTI1Njc2NTI0OTlBREEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzCHD22QcKgdyf2RbDhs3WS8xfvNc6glBgbOv1QGSn9tPlFesy5EObClZtGXP FuxornFldqHLSWIsF2/vjDEqwm3FyYu/9vCVmmrcmhqLgPtVto7M0ZU2FwA9NkQ/ RP/saX1GUDkjzX+bGRm0DV0rW5gmdmAneGEwhKcqhEt7W/T9McneGcV+HvHi6ZzM VQxuSAeIeVUaWw7IMJj1CfUGRsaYISWQewPQYcIPnT8Q41xZlBl5Omqa3bpgXqPM lbOXfDMXIxlhOgO4S8U87+I419Jp/Cwz441aV5HnnIM8iMfTBn0DcbUY+eT9HjUp 3dpemw0jtd24Q2XdjSPjkouuiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:34:00 2025 by rpki-client