This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft File: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft (raw, json) Hash identifier: yc1VoLPMfBifCBnKf9FH2+dG/cm+8gc6Muc4VHKOxpY= Subject key identifier: 4B:77:04:9E:A9:D3:9E:1C:3E:75:8D:28:06:10:59:52:2A:27:DB:A3 Authority key identifier: 1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 Certificate issuer: /CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5 Certificate serial: 32547B6B361F604A1CA8868376E44626255BFE47 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft Manifest number: 40 Signing time: Sun 21 Dec 2025 11:33:40 +0000 Manifest this update: Sun 21 Dec 2025 11:28:40 +0000 Manifest next update: Mon 22 Dec 2025 11:34:40 +0000 Files and hashes: 1: 34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (hash: aQLIYYVoiILAmoQD4DtX+QNXyDT1k5rL+bEaFnakAss=) 2: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl (hash: G0IwneJcj6Cc5vTdeP/Syw9egcPX/YdOnXESiYc7ufw=) 3: 323830343a363738303a3a2f33322d3430203d3e20323639363332.roa (hash: SX2dU0cds+iLnyJtcs06QjqpHxXnJw1YEktYayh/TlE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 11:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:54:7b:6b:36:1f:60:4a:1c:a8:86:83:76:e4:46:26:25:5b:fe:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5 Validity Not Before: Dec 21 11:28:40 2025 GMT Not After : Dec 22 11:34:40 2025 GMT Subject: CN=4B77049EA9D39E1C3E758D28061059522A27DBA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:e7:1d:cb:da:87:9e:d0:60:02:8f:09:11: e1:84:3b:3b:84:58:6b:3e:64:14:57:16:93:9c:e3: a6:30:7b:e6:d4:c9:98:81:59:d5:82:55:48:2b:59: d0:ad:6a:b3:ea:fc:6d:74:dd:85:12:94:65:16:33: 36:6a:c8:f5:a4:1d:4d:09:27:fe:4c:0f:ea:d0:43: 77:54:b5:7a:5c:b7:f0:0f:31:62:86:3e:43:2c:61: 90:e1:ae:cb:bd:ca:7b:01:04:59:36:c9:a4:08:21: 31:78:c9:af:03:c9:fa:39:e8:38:e9:75:23:21:53: 52:1b:30:14:4e:a3:f1:47:74:a5:64:35:b6:35:68: b0:62:85:4d:06:18:d2:b1:b6:2d:cc:ed:50:54:7b: 22:c0:8f:f1:84:4c:ed:6b:01:57:37:2c:ca:95:a3: 7b:c8:66:f5:9a:bc:64:8d:bf:cf:17:7a:ee:8c:4c: e0:4f:08:16:6b:6f:d4:76:29:10:ff:51:2e:8a:2f: 76:21:fc:c0:27:0f:9e:e3:84:1e:a5:b8:fa:d9:4c: 09:b2:bc:9f:f0:22:0e:44:45:ad:e3:52:8e:c9:cf: ef:00:c7:a2:45:1c:3a:57:88:13:13:85:94:2e:18: 7c:5c:20:d6:77:d6:fa:e3:a4:0b:c6:54:ff:73:28: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:77:04:9E:A9:D3:9E:1C:3E:75:8D:28:06:10:59:52:2A:27:DB:A3 X509v3 Authority Key Identifier: keyid:1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d1:06:3c:2c:ab:50:f8:af:84:2b:ca:6c:2b:da:cd:34:0d: 8a:ca:f8:38:19:4a:ea:e5:0e:3b:06:26:bf:5c:f4:a8:43:d0: 52:80:9d:38:eb:87:61:98:e8:df:4b:99:b8:8f:5e:ce:f7:3e: a4:6e:9a:90:59:47:55:0a:64:e9:9d:29:1e:47:f0:ea:c1:aa: 3c:a1:5f:2d:de:d4:06:40:e9:e8:ca:98:2b:34:d3:fe:92:54: b6:1c:fd:3b:89:7f:7b:00:ac:d2:dd:9c:45:bc:19:48:36:1e: 0a:dc:7b:6d:92:9f:73:0a:57:8f:f2:f7:69:96:53:a1:44:7a: b0:56:d9:cf:2b:00:4f:65:fc:5b:f2:5a:87:87:0e:6d:e1:0d: b9:b3:58:a3:d7:02:29:4c:f5:93:be:c3:d4:56:a4:48:0b:9d: fe:2d:91:97:3b:f0:04:6e:d2:1e:49:f5:2c:98:e0:2a:21:57: e7:c4:e9:40:11:dc:c7:58:60:88:6c:3a:a3:a4:bc:07:4c:4a: 38:b3:81:3a:60:9a:8f:b4:ba:71:21:e2:13:64:0f:90:04:cf: 97:2a:25:01:78:2b:5c:56:3e:79:ef:a3:a1:91:3c:d6:f4:d5: 29:36:9d:f3:47:42:e9:15:1a:36:bf:69:d1:15:1c:a1:df:7e: 1f:8c:f3:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMlR7azYfYEocqIaDduRGJiVb/kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGQTcwQzNCRjk5QUZDQThFMUM5Njk5RDVGNjQ4REYy Q0I0NDFBNTAeFw0yNTEyMjExMTI4NDBaFw0yNTEyMjIxMTM0NDBaMDMxMTAvBgNV BAMTKDRCNzcwNDlFQTlEMzlFMUMzRTc1OEQyODA2MTA1OTUyMkEyN0RCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdecdy9qHntBgAo8JEeGEOzuE WGs+ZBRXFpOc46Ywe+bUyZiBWdWCVUgrWdCtarPq/G103YUSlGUWMzZqyPWkHU0J J/5MD+rQQ3dUtXpct/APMWKGPkMsYZDhrsu9ynsBBFk2yaQIITF4ya8Dyfo56Djp dSMhU1IbMBROo/FHdKVkNbY1aLBihU0GGNKxti3M7VBUeyLAj/GETO1rAVc3LMqV o3vIZvWavGSNv88Xeu6MTOBPCBZrb9R2KRD/US6KL3Yh/MAnD57jhB6luPrZTAmy vJ/wIg5ERa3jUo7Jz+8Ax6JFHDpXiBMThZQuGHxcINZ31vrjpAvGVP9zKII5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS3cEnqnTnhw+dY0oBhBZUion26MwHwYDVR0j BBgwFoAUG/pww7+Zr8qOHJaZ1fZI3yy0QaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1 TDgvMC8xQkZBNzBDM0JGOTlBRkNBOEUxQzk2OTlENUY2NDhERjJDQjQ0MUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRkE3MEMzQkY5OUFGQ0E4 RTFDOTY5OUQ1RjY0OERGMkNCNDQxQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1TDgvMC8x QkZBNzBDM0JGOTlBRkNBOEUxQzk2OTlENUY2NDhERjJDQjQ0MUE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9EGPCyrUPivhCvKbCvazTQNisr4OBlK6uUOOwYmv1z0qEPQUoCdOOuHYZjo 30uZuI9ezvc+pG6akFlHVQpk6Z0pHkfw6sGqPKFfLd7UBkDp6MqYKzTT/pJUthz9 O4l/ewCs0t2cRbwZSDYeCtx7bZKfcwpXj/L3aZZToUR6sFbZzysAT2X8W/Jah4cO beENubNYo9cCKUz1k77D1FakSAud/i2RlzvwBG7SHkn1LJjgKiFX58TpQBHcx1hg iGw6o6S8B0xKOLOBOmCaj7S6cSHiE2QPkATPlyolAXgrXFY+ee+joZE81vTVKTad 80dC6RUaNr9p0RUcod9+H4zz0g== -----END CERTIFICATE-----Generated at Sun Dec 21 23:16:26 2025 by rpki-client