This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft File: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft (raw, json) Hash identifier: GuLWIE7EOFPX3yIFDxSng9zRtb018ugtdpMIGWRsoSc= Subject key identifier: 23:F0:73:00:AA:7F:45:E4:1A:F9:F3:5B:4E:07:9D:9E:F8:3B:4F:CC Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26 Certificate issuer: /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26 Certificate serial: E6D976E153FFE6E1D54851195A6A9CE0E7FAEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft Manifest number: 032D Signing time: Fri 19 Dec 2025 19:51:02 +0000 Manifest this update: Fri 19 Dec 2025 19:46:02 +0000 Manifest next update: Sat 20 Dec 2025 22:27:02 +0000 Files and hashes: 1: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl (hash: KSQed/yQwNnZwf3bPpw1pk7Czc9BeX2II1ASB/Sx9Yg=) 2: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (hash: +vkDLgW06ADX84gA1CLRdVqziUPHQH1KnbJn/VuJnSU=) 3: 3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (hash: UvH9nIlLV7MTTlk+ySp3aQIuOQfzxZDqD2RXeggUE+U=) 4: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (hash: JEf8pXy01p6LMl3AMIH7leZQ45M0qwFi0UCbJ3ks1zQ=) 5: 323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (hash: NiYQ1Oj4jlQxAf7CG9stE44f6zRfyXp+SMr92oO0Sk4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e6:d9:76:e1:53:ff:e6:e1:d5:48:51:19:5a:6a:9c:e0:e7:fa:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26 Validity Not Before: Dec 19 19:46:02 2025 GMT Not After : Dec 20 22:27:02 2025 GMT Subject: CN=23F07300AA7F45E41AF9F35B4E079D9EF83B4FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:8b:ab:82:ec:b8:5d:d8:ae:1d:28:39:ff: 33:d1:48:eb:33:f6:5c:12:47:29:67:b5:41:a3:bc: 21:c1:af:64:11:b5:3b:b8:38:1f:1d:35:54:81:fd: c2:52:3c:67:11:96:3e:c2:0a:f8:62:98:f9:4c:e1: e5:a9:9b:af:8e:7d:cb:ee:c9:d0:9e:d5:4c:b9:d7: a6:5d:96:ad:b4:aa:54:5d:8d:3f:23:67:3d:77:b6: a1:88:fb:de:a6:0a:6f:f2:03:c9:a2:bb:f8:30:df: a6:c4:58:dd:a2:2a:02:cc:14:06:aa:d5:4b:49:40: 57:e3:63:33:7f:a9:f2:e8:4d:17:a9:e9:a9:6f:a9: 17:4c:ac:01:a4:e6:6b:16:6e:37:d3:60:30:3f:87: 6b:bb:70:31:79:e5:b4:cc:9f:54:5c:b1:61:66:71: a4:b8:09:5c:0c:cb:48:92:7d:95:cc:2f:38:38:07: 7e:d7:36:3d:4c:82:b2:7f:e4:57:e3:e8:af:9d:95: 9c:48:c5:71:4f:20:10:13:d3:31:98:76:c9:08:54: ec:88:e0:04:8c:27:0e:4e:2e:da:14:fe:7a:b4:e9: 92:58:8c:03:a1:dd:cf:d6:9f:b3:c0:0c:1f:63:13: 49:9e:c1:e5:f4:ba:83:de:51:d2:b6:b7:d7:67:c0: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F0:73:00:AA:7F:45:E4:1A:F9:F3:5B:4E:07:9D:9E:F8:3B:4F:CC X509v3 Authority Key Identifier: keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d5:93:57:8f:9a:81:0b:c2:0b:6d:3b:65:09:e8:9f:68:bb: bb:fc:59:99:9b:00:6b:8d:14:24:0f:ec:bc:c6:e8:7c:d4:a1: 9f:32:42:d0:dd:f1:12:ad:41:4c:ce:54:27:b5:98:bf:77:66: 6b:96:f8:7b:19:85:f9:25:c5:e6:5c:f7:24:12:8a:8f:88:fa: 45:b7:9f:49:d9:61:30:30:49:8c:58:a4:40:1e:c0:11:cb:d4: f9:e2:a0:f4:30:d0:a6:89:c7:29:d9:f1:d6:05:e8:ea:0c:38: 26:ad:5e:30:6b:e2:98:18:fd:0d:30:92:8c:bc:09:cb:a4:1f: 41:78:b3:fb:35:4e:d1:82:eb:2f:8c:16:bf:bc:e1:a4:ff:79: 2e:2e:24:71:8a:bd:b7:85:0b:16:0f:f7:ea:1a:f9:29:eb:72: 07:f1:42:e2:fd:de:ba:17:6c:aa:b1:1c:4c:7a:5e:55:76:3f: 03:7e:9f:45:11:3c:dd:2a:0c:54:d8:d5:a3:a8:ba:aa:a4:c7: 87:00:be:ec:c2:c5:7b:29:60:0f:fe:df:5e:07:36:a2:16:12: c1:87:3f:95:39:b2:77:22:68:bd:a0:11:92:45:4d:c6:97:6b: 34:05:cf:6d:2e:11:9f:aa:da:98:5b:07:07:7c:3d:6e:c7:d4: 4c:4d:32:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAObZduFT/+bh1UhRGVpqnODn+u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM0MEExRkEyQzczRTU1MEY5NDEyNzU0RkREQUEyMkU5 OTNBMEQyNjAeFw0yNTEyMTkxOTQ2MDJaFw0yNTEyMjAyMjI3MDJaMDMxMTAvBgNV BAMTKDIzRjA3MzAwQUE3RjQ1RTQxQUY5RjM1QjRFMDc5RDlFRjgzQjRGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGYurguy4XdiuHSg5/zPRSOsz 9lwSRylntUGjvCHBr2QRtTu4OB8dNVSB/cJSPGcRlj7CCvhimPlM4eWpm6+Ofcvu ydCe1Uy516Zdlq20qlRdjT8jZz13tqGI+96mCm/yA8miu/gw36bEWN2iKgLMFAaq 1UtJQFfjYzN/qfLoTRep6alvqRdMrAGk5msWbjfTYDA/h2u7cDF55bTMn1RcsWFm caS4CVwMy0iSfZXMLzg4B37XNj1MgrJ/5Ffj6K+dlZxIxXFPIBAT0zGYdskIVOyI 4ASMJw5OLtoU/nq06ZJYjAOh3c/Wn7PADB9jE0meweX0uoPeUdK2t9dnwE6NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI/BzAKp/ReQa+fNbTgednvg7T8wwHwYDVR0j BBgwFoAUrECh+ixz5VD5QSdU/dqiLpk6DSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE51QVM2NTdkNEJ4cExCZGlEOGVUS3FKc3lXTmJnNmI0aWdmZE1ydXNx cXIvMS9BQzQwQTFGQTJDNzNFNTUwRjk0MTI3NTRGRERBQTIyRTk5M0EwRDI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNDBBMUZBMkM3M0U1NTBG OTQxMjc1NEZEREFBMjJFOTkzQTBEMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE51QVM2NTdkNEJ4cExCZGlEOGVUS3FKc3lXTmJnNmI0aWdmZE1ydXNxcXIvMS9B QzQwQTFGQTJDNzNFNTUwRjk0MTI3NTRGRERBQTIyRTk5M0EwRDI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY9WTV4+agQvCC207ZQnon2i7u/xZmZsAa40UJA/svMbofNShnzJC0N3xEq1B TM5UJ7WYv3dma5b4exmF+SXF5lz3JBKKj4j6RbefSdlhMDBJjFikQB7AEcvU+eKg 9DDQponHKdnx1gXo6gw4Jq1eMGvimBj9DTCSjLwJy6QfQXiz+zVO0YLrL4wWv7zh pP95Li4kcYq9t4ULFg/36hr5KetyB/FC4v3euhdsqrEcTHpeVXY/A36fRRE83SoM VNjVo6i6qqTHhwC+7MLFeylgD/7fXgc2ohYSwYc/lTmydyJovaARkkVNxpdrNAXP bS4Rn6ramFsHB3w9bsfUTE0yVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:14 2025 by rpki-client