This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft File: CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft (raw, json) Hash identifier: 4C9dkle2+AkXt/UrGHm7xbPOQPvx/oshaYX+RyZbT1s= Subject key identifier: 48:D5:1F:B8:7A:74:E6:1E:4E:81:8B:6F:DA:21:BD:25:71:F3:A4:45 Authority key identifier: CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F Certificate issuer: /CN=CA1CADDF6DC2750F6D5D18A7F1425AE13486385F Certificate serial: 5C4229DC9156F31D24C9E64836095806227C3582 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer Subject info access: rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft Manifest number: 19 Signing time: Thu 18 Dec 2025 04:26:08 +0000 Manifest this update: Thu 18 Dec 2025 04:21:08 +0000 Manifest next update: Fri 19 Dec 2025 06:49:08 +0000 Files and hashes: 1: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: 1gpLziXMEm5Gaj6XBFqM4YKMYoLov6pbubzfCgNkF88=) 2: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: cUSb3xGZji/PVYflxGYzoQBBJzeEF3qTS0JH9zJ4eWo=) 3: CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl (hash: KloWbYXd2YWLhv8LXSyWA8aG+nMsZ5FZdQHQ/0EZnwU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 06:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:42:29:dc:91:56:f3:1d:24:c9:e6:48:36:09:58:06:22:7c:35:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1CADDF6DC2750F6D5D18A7F1425AE13486385F Validity Not Before: Dec 18 04:21:08 2025 GMT Not After : Dec 19 06:49:08 2025 GMT Subject: CN=48D51FB87A74E61E4E818B6FDA21BD2571F3A445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8e:86:ed:28:a7:50:67:42:9c:4e:2d:61:7c: 1e:04:06:e2:7d:d1:3a:5b:e4:97:98:39:d3:57:6a: 29:44:64:ee:9e:b1:9a:60:98:4f:b5:0c:d3:11:e8: c0:7d:7c:f7:b4:84:99:6d:a2:6e:13:e6:93:dc:48: 40:fd:fb:53:22:a1:1b:9e:8c:74:bf:e5:48:17:f0: ec:83:f6:5f:db:6d:5b:66:b0:53:f0:55:b3:72:1f: 92:c6:e7:c8:b7:3d:96:9c:2f:3f:8e:f0:f5:4e:a8: 1d:ff:16:74:90:01:b2:16:74:04:30:cf:12:10:18: 98:0b:75:aa:9e:1e:12:47:a2:8d:78:84:1a:1a:33: 2f:b6:7e:27:35:db:ea:98:bd:2c:29:39:a2:bd:c5: 5b:9b:ac:fc:4c:7e:f3:ab:81:73:97:4e:8a:b7:67: 67:c9:28:9a:8d:30:cb:00:36:e7:a3:5b:b1:6a:9c: 4a:85:72:f4:fc:87:21:4f:fc:5e:6e:fe:63:be:0f: 80:38:64:2d:57:f4:00:46:aa:83:44:dc:ed:31:e8: 73:2b:45:91:a3:98:63:f7:a4:01:46:c1:47:8f:bc: d8:22:a4:1d:3b:09:1c:7b:fa:89:d7:55:8b:40:ce: 24:14:c9:5a:96:70:af:b8:88:38:1c:eb:3f:98:5e: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D5:1F:B8:7A:74:E6:1E:4E:81:8B:6F:DA:21:BD:25:71:F3:A4:45 X509v3 Authority Key Identifier: keyid:CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f7:49:34:af:f5:f4:84:e6:f0:e3:b4:98:e0:da:bf:26:d6: 67:41:08:4d:9c:f8:85:ce:2d:7e:46:8e:8e:42:0f:4d:90:72: 59:7a:18:73:37:ba:13:6d:cd:ea:76:5d:36:be:8b:73:7d:fc: bb:5b:46:9c:0d:f6:b4:b0:d9:d9:0f:eb:6a:64:62:84:6b:dc: b4:94:c9:f6:1b:b3:2f:05:d4:a1:ca:ac:d7:96:74:b6:41:d9: 4b:02:07:26:2e:83:65:2f:47:2e:51:95:13:64:89:bc:bf:4d: fe:2d:5e:8b:0b:3b:01:a1:dc:dd:21:d9:21:7e:13:9f:f6:65: 2e:c8:0b:53:eb:8a:a2:48:c4:90:85:32:89:b0:31:44:7c:16: b9:74:17:10:56:35:19:8d:8e:b2:cb:38:0c:d8:fb:83:cd:73: 63:bb:fb:5e:30:3f:f7:9e:f0:e0:3d:97:9c:c8:f8:76:29:29: da:c9:bf:63:86:7b:36:6c:5b:69:f9:54:e1:ab:91:6c:f6:36: 44:2f:74:f6:e3:70:53:a8:a1:65:0f:a2:fd:7e:a4:37:9d:38: 35:77:48:c8:8a:6a:4f:cb:d8:01:0c:c2:9a:ac:f9:45:98:f3: 54:25:2d:66:04:9a:8b:f0:1e:a4:98:23:1f:b3:4a:02:d4:ea: dc:78:6b:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXEIp3JFW8x0kyeZINglYBiJ8NYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQ0FEREY2REMyNzUwRjZENUQxOEE3RjE0MjVBRTEz NDg2Mzg1RjAeFw0yNTEyMTgwNDIxMDhaFw0yNTEyMTkwNjQ5MDhaMDMxMTAvBgNV BAMTKDQ4RDUxRkI4N0E3NEU2MUU0RTgxOEI2RkRBMjFCRDI1NzFGM0E0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjobtKKdQZ0KcTi1hfB4EBuJ9 0Tpb5JeYOdNXailEZO6esZpgmE+1DNMR6MB9fPe0hJltom4T5pPcSED9+1MioRue jHS/5UgX8OyD9l/bbVtmsFPwVbNyH5LG58i3PZacLz+O8PVOqB3/FnSQAbIWdAQw zxIQGJgLdaqeHhJHoo14hBoaMy+2fic12+qYvSwpOaK9xVubrPxMfvOrgXOXToq3 Z2fJKJqNMMsANuejW7FqnEqFcvT8hyFP/F5u/mO+D4A4ZC1X9ABGqoNE3O0x6HMr RZGjmGP3pAFGwUePvNgipB07CRx7+onXVYtAziQUyVqWcK+4iDgc6z+YXqMDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSNUfuHp05h5OgYtv2iG9JXHzpEUwHwYDVR0j BBgwFoAUyhyt323CdQ9tXRin8UJa4TSGOF8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFn aW8vMC9DQTFDQURERjZEQzI3NTBGNkQ1RDE4QTdGMTQyNUFFMTM0ODYzODVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUNBRERGNkRDMjc1MEY2 RDVEMThBN0YxNDI1QUUxMzQ4NjM4NUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFnaW8vMC9D QTFDQURERjZEQzI3NTBGNkQ1RDE4QTdGMTQyNUFFMTM0ODYzODVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi/dJNK/19ITm8OO0mODavybWZ0EITZz4hc4tfkaOjkIPTZByWXoYcze6E23N 6nZdNr6Lc338u1tGnA32tLDZ2Q/ramRihGvctJTJ9huzLwXUocqs15Z0tkHZSwIH Ji6DZS9HLlGVE2SJvL9N/i1eiws7AaHc3SHZIX4Tn/ZlLsgLU+uKokjEkIUyibAx RHwWuXQXEFY1GY2Osss4DNj7g81zY7v7XjA/957w4D2XnMj4dikp2sm/Y4Z7Nmxb aflU4auRbPY2RC909uNwU6ihZQ+i/X6kN504NXdIyIpqT8vYAQzCmqz5RZjzVCUt ZgSai/AepJgjH7NKAtTq3HhrAQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:29:56 2025 by rpki-client