This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft File: F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft (raw, json) Hash identifier: eKSmxOR0AM4d7zCra3/Sc0jMTx19x0ZOTCPX0Y0WpLI= Subject key identifier: B4:7A:F1:FC:10:16:CE:F9:BA:6A:A3:E7:65:7D:95:CC:F5:E1:F1:9E Authority key identifier: F1:53:C6:C5:16:AC:81:BC:29:F5:8C:07:FE:9D:29:85:AC:F7:68:BC Certificate issuer: /CN=F153C6C516AC81BC29F58C07FE9D2985ACF768BC Certificate serial: 551D28DED4A56130E3DFC6236CAEED978C2B8234 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft Manifest number: 28 Signing time: Mon 15 Dec 2025 18:38:15 +0000 Manifest this update: Mon 15 Dec 2025 18:33:15 +0000 Manifest next update: Tue 16 Dec 2025 22:28:15 +0000 Files and hashes: 1: 323830343a353539303a3a2f33322d313238203d3e20323637393432.roa (hash: UWk9gqYHwtJZWKGBxg3oJitLjqYJzG1BNmS3vXWXB6s=) 2: 34352e3136362e342e302f32322d3332203d3e20323637393432.roa (hash: j//fqHSL1RlHQ+b31UNZMtLQuk0YNsAH3a4ZLm+hXZQ=) 3: F153C6C516AC81BC29F58C07FE9D2985ACF768BC.crl (hash: bHFlkGDN3yZRRHuVVPc/UQ2O5XKEKOUZOKXOsv6Lm+o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.crl rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Dec 2025 22:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1d:28:de:d4:a5:61:30:e3:df:c6:23:6c:ae:ed:97:8c:2b:82:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F153C6C516AC81BC29F58C07FE9D2985ACF768BC Validity Not Before: Dec 15 18:33:15 2025 GMT Not After : Dec 16 22:28:15 2025 GMT Subject: CN=B47AF1FC1016CEF9BA6AA3E7657D95CCF5E1F19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:79:93:c8:19:22:73:35:1b:db:fa:96:da: 3b:4c:1b:a9:c0:c7:8b:97:58:7f:b0:02:99:47:74: 98:c1:f5:44:ec:47:56:5d:24:86:b7:fc:a7:b3:ef: 31:42:a8:c0:bd:77:80:09:97:31:3d:1f:aa:9c:f6: 79:2c:a7:17:93:9a:2c:08:23:12:f1:11:c4:b0:a7: c5:53:b0:99:65:93:6e:62:c6:cd:c2:7f:e5:a6:b1: 83:f5:21:be:b9:5f:e2:7e:70:5b:c8:28:42:61:80: 29:37:29:28:87:94:88:fb:0b:ee:ba:e0:38:2c:87: d3:b3:ce:b8:e4:43:ab:d6:4c:dc:22:c9:8d:28:ab: f7:db:36:ae:78:21:7b:31:87:31:ec:0d:3f:ee:71: 04:d6:77:b1:80:69:cc:1c:f2:5a:58:e3:55:70:dd: 0d:b8:c5:6e:fe:d2:b3:79:c0:ab:7c:6a:6f:b5:3e: 18:2c:ba:48:aa:11:14:74:68:b6:9e:1d:ce:b7:7e: 1f:25:39:77:58:b5:b9:5d:7a:28:c2:9a:59:1b:fc: b3:12:0a:f2:86:70:e3:50:18:fd:61:fe:ec:0d:c2: 96:e8:86:ca:77:2c:9a:b4:23:da:3f:83:bd:c1:c6: c0:1a:88:b0:03:39:b3:18:65:71:5c:90:e0:41:92: 5d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7A:F1:FC:10:16:CE:F9:BA:6A:A3:E7:65:7D:95:CC:F5:E1:F1:9E X509v3 Authority Key Identifier: keyid:F1:53:C6:C5:16:AC:81:BC:29:F5:8C:07:FE:9D:29:85:AC:F7:68:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F153C6C516AC81BC29F58C07FE9D2985ACF768BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:52:b7:c2:87:fa:03:a0:4f:2f:ad:8e:14:6c:45:92:cd:72: 99:5b:a8:f2:ae:75:53:9a:65:d0:5e:f8:8f:4e:ed:88:05:34: ae:dd:8d:45:6b:83:48:f7:a7:9f:6b:a8:05:c6:82:d4:8c:1a: f4:2c:ec:cb:23:10:76:18:0f:45:aa:e6:89:fd:80:ca:3a:da: f8:32:39:56:20:c7:2c:58:37:64:97:6f:65:37:3e:5c:a4:8f: 97:58:c4:82:57:e3:e3:be:6b:2e:ee:b8:06:0e:4f:17:21:f9: 40:44:74:a8:f0:30:9d:67:5c:b4:ec:b2:b7:7a:e7:81:db:8a: 73:84:7b:a3:85:e5:27:5a:91:af:6b:3f:20:de:67:2e:7e:88: 13:f7:60:d0:9f:28:d2:9b:29:ba:8e:47:bc:87:e2:1b:bd:5e: 67:f0:e4:8d:d4:07:9d:87:b4:60:0a:9a:6e:1d:48:e8:79:63: fe:be:bc:22:bd:42:b3:c9:2e:e1:f6:d6:50:94:b7:1d:32:54: 01:7c:90:e5:fe:98:77:8c:a7:e7:87:90:0c:52:15:06:83:a1: 87:b2:92:6c:6d:ef:78:3e:98:42:37:fc:ea:d0:ad:e6:23:e2: 2d:7f:a7:c4:f7:a4:7e:62:07:6f:3f:18:6a:e5:ce:d2:d8:e3: 5d:a1:37:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVR0o3tSlYTDj38YjbK7tl4wrgjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE1M0M2QzUxNkFDODFCQzI5RjU4QzA3RkU5RDI5ODVB Q0Y3NjhCQzAeFw0yNTEyMTUxODMzMTVaFw0yNTEyMTYyMjI4MTVaMDMxMTAvBgNV BAMTKEI0N0FGMUZDMTAxNkNFRjlCQTZBQTNFNzY1N0Q5NUNDRjVFMUYxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4XmTyBkiczUb2/qW2jtMG6nA x4uXWH+wAplHdJjB9UTsR1ZdJIa3/Kez7zFCqMC9d4AJlzE9H6qc9nkspxeTmiwI IxLxEcSwp8VTsJllk25ixs3Cf+WmsYP1Ib65X+J+cFvIKEJhgCk3KSiHlIj7C+66 4Dgsh9OzzrjkQ6vWTNwiyY0oq/fbNq54IXsxhzHsDT/ucQTWd7GAacwc8lpY41Vw 3Q24xW7+0rN5wKt8am+1PhgsukiqERR0aLaeHc63fh8lOXdYtbldeijCmlkb/LMS CvKGcONQGP1h/uwNwpbohsp3LJq0I9o/g73BxsAaiLADObMYZXFckOBBkl2LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtHrx/BAWzvm6aqPnZX2VzPXh8Z4wHwYDVR0j BBgwFoAU8VPGxRasgbwp9YwH/p0phaz3aLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0 aUEvMC9GMTUzQzZDNTE2QUM4MUJDMjlGNThDMDdGRTlEMjk4NUFDRjc2OEJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxNTNDNkM1MTZBQzgxQkMy OUY1OEMwN0ZFOUQyOTg1QUNGNzY4QkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUNCbkZOcGNrdlBlTjFwVXB2WVU3alI1MkhwYjFYNkRINFV3eFB5d3J0aUEvMC9G MTUzQzZDNTE2QUM4MUJDMjlGNThDMDdGRTlEMjk4NUFDRjc2OEJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATFK3wof6A6BPL62OFGxFks1ymVuo8q51U5pl0F74j07tiAU0rt2NRWuDSPen n2uoBcaC1Iwa9CzsyyMQdhgPRarmif2Ayjra+DI5ViDHLFg3ZJdvZTc+XKSPl1jE glfj475rLu64Bg5PFyH5QER0qPAwnWdctOyyt3rngduKc4R7o4XlJ1qRr2s/IN5n Ln6IE/dg0J8o0pspuo5HvIfiG71eZ/DkjdQHnYe0YAqabh1I6Hlj/r68Ir1Cs8ku 4fbWUJS3HTJUAXyQ5f6Yd4yn54eQDFIVBoOhh7KSbG3veD6YQjf86tCt5iPiLX+n xPekfmIHbz8YauXO0tjjXaE3KQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:15:48 2025 by rpki-client