This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft File: 85338CFAF888C0350AE9CB844AEBC476C4367656.mft (raw, json) Hash identifier: a/0K+5V+A1KYJnrJcmGxO5A/IwooEmJvqyxzhC+r+GY= Subject key identifier: 94:BD:F7:83:6D:69:B9:E8:25:65:6E:43:77:7D:BD:B6:1E:39:8F:8B Authority key identifier: 85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 Certificate issuer: /CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Certificate serial: 644258296D1A5B6581FEA5683DDF5C4D829F8EDB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject info access: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft Manifest number: 02AE Signing time: Thu 18 Dec 2025 14:41:04 +0000 Manifest this update: Thu 18 Dec 2025 14:36:04 +0000 Manifest next update: Fri 19 Dec 2025 18:08:04 +0000 Files and hashes: 1: 85338CFAF888C0350AE9CB844AEBC476C4367656.crl (hash: kJlk7m6Kp/WtCkjhoA8qXqNUmTP9XwgzkqOUoZeLGKo=) 2: 34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa (hash: 4MTe5q9v1+RODyYpXAl+hTOa6qdVAoueHQymY2Pvcuo=) 3: 323830343a356563383a3a2f33322d3438203d3e20323639303536.roa (hash: iVzGwIcktrLJfi4MMxN4YYOLT8qF41PrYjqdCiMjJL8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 18:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:42:58:29:6d:1a:5b:65:81:fe:a5:68:3d:df:5c:4d:82:9f:8e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Validity Not Before: Dec 18 14:36:04 2025 GMT Not After : Dec 19 18:08:04 2025 GMT Subject: CN=94BDF7836D69B9E825656E43777DBDB61E398F8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:62:7e:cb:d0:fd:35:00:a3:c6:53:5a:3e: 6b:79:0a:54:6a:16:89:13:85:ac:9e:73:20:e7:75: b5:67:db:5b:2e:d8:8a:ec:a0:57:1f:1d:7d:f6:fe: 3f:46:68:5c:00:9d:f3:67:11:65:7e:c1:48:0b:82: b5:cb:16:a3:02:4f:60:28:10:5a:d3:d4:d1:ee:8f: 8a:93:ae:36:63:bc:9f:a3:3e:42:6c:15:2e:1d:14: c1:e7:73:41:bb:b4:73:46:64:69:0a:79:d5:2a:47: 60:94:e9:9d:1d:b1:15:03:a8:91:e7:34:7d:cb:4f: 30:4a:a1:1f:28:c1:05:51:b3:60:48:3e:67:cb:1c: 37:39:a0:55:eb:3f:5c:3a:a1:a6:85:ad:f2:06:a5: d7:f9:c4:74:67:f4:83:6b:a1:e9:b7:57:67:4c:51: 65:c6:69:75:85:7b:67:78:82:a7:27:02:f3:13:24: 61:fe:b0:da:bb:85:c1:16:74:84:73:b9:fb:58:34: 51:cb:85:c6:1a:44:ca:70:6a:fa:65:08:d9:a2:45: a0:0c:8e:5b:ea:86:71:b1:15:61:0e:86:c8:6e:01: 1e:66:b8:b7:ef:aa:26:67:8b:4f:d5:65:c4:d2:dd: 9e:81:4a:5a:75:f4:34:c5:10:a4:d9:bd:29:5b:20: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:F7:83:6D:69:B9:E8:25:65:6E:43:77:7D:BD:B6:1E:39:8F:8B X509v3 Authority Key Identifier: keyid:85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2e:40:ba:6b:ae:c3:d7:ee:cc:75:b2:ac:0e:98:37:fb:76: 20:f9:33:e5:49:a7:e9:34:fe:46:0f:f3:22:0a:07:d7:75:c3: 29:4a:b3:76:77:d8:f9:6e:b4:59:11:59:b1:d1:d4:8d:a4:3e: 85:7b:c1:76:d5:d7:82:b2:ce:5f:e7:1c:c8:43:c9:65:65:30: fb:3c:69:e1:79:09:41:8a:91:e7:22:6e:9a:01:6a:d1:80:9a: f1:31:99:81:f9:7a:14:1f:24:30:ad:8a:01:33:35:7c:2c:36: a1:5f:80:89:30:14:aa:d2:50:cc:a9:94:b9:2e:69:63:fd:c5: f4:70:3f:4e:0b:5d:c8:67:bc:92:ff:13:a3:13:cb:46:ab:83: ae:e7:39:5b:7b:c2:6c:02:ae:11:0c:3d:56:5b:f5:0b:8e:a3: 3c:64:19:df:eb:43:58:d9:22:05:ac:67:cd:77:3d:61:9b:cf: 96:f6:36:47:f4:36:50:ad:ae:cf:ff:04:de:22:39:18:83:4c: 45:d8:1c:6a:aa:b3:2c:26:70:3d:c0:3d:40:ec:8e:4d:c2:27: 68:8c:8f:3b:49:92:b8:aa:cc:4d:ee:0d:59:28:d8:34:3b:16: ef:80:09:b7:2d:75:55:dd:c3:e0:11:c3:f4:14:92:44:f9:f6: 0a:86:15:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZEJYKW0aW2WB/qVoPd9cTYKfjtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzMzhDRkFGODg4QzAzNTBBRTlDQjg0NEFFQkM0NzZD NDM2NzY1NjAeFw0yNTEyMTgxNDM2MDRaFw0yNTEyMTkxODA4MDRaMDMxMTAvBgNV BAMTKDk0QkRGNzgzNkQ2OUI5RTgyNTY1NkU0Mzc3N0RCREI2MUUzOThGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDGJ+y9D9NQCjxlNaPmt5ClRq FokThayecyDndbVn21su2IrsoFcfHX32/j9GaFwAnfNnEWV+wUgLgrXLFqMCT2Ao EFrT1NHuj4qTrjZjvJ+jPkJsFS4dFMHnc0G7tHNGZGkKedUqR2CU6Z0dsRUDqJHn NH3LTzBKoR8owQVRs2BIPmfLHDc5oFXrP1w6oaaFrfIGpdf5xHRn9INroem3V2dM UWXGaXWFe2d4gqcnAvMTJGH+sNq7hcEWdIRzuftYNFHLhcYaRMpwavplCNmiRaAM jlvqhnGxFWEOhshuAR5muLfvqiZni0/VZcTS3Z6BSlp19DTFEKTZvSlbIEiXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlL33g21pueglZW5Dd329th45j4swHwYDVR0j BBgwFoAUhTOM+viIwDUK6cuESuvEdsQ2dlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZCWjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThM Q2EvMC84NTMzOENGQUY4ODhDMDM1MEFFOUNCODQ0QUVCQzQ3NkM0MzY3NjU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MzM4Q0ZBRjg4OEMwMzUw QUU5Q0I4NDRBRUJDNDc2QzQzNjc2NTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZCWjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThMQ2EvMC84 NTMzOENGQUY4ODhDMDM1MEFFOUNCODQ0QUVCQzQ3NkM0MzY3NjU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAS5Aumuuw9fuzHWyrA6YN/t2IPkz5Umn6TT+Rg/zIgoH13XDKUqzdnfY+W60 WRFZsdHUjaQ+hXvBdtXXgrLOX+ccyEPJZWUw+zxp4XkJQYqR5yJumgFq0YCa8TGZ gfl6FB8kMK2KATM1fCw2oV+AiTAUqtJQzKmUuS5pY/3F9HA/TgtdyGe8kv8ToxPL RquDruc5W3vCbAKuEQw9Vlv1C46jPGQZ3+tDWNkiBaxnzXc9YZvPlvY2R/Q2UK2u z/8E3iI5GINMRdgcaqqzLCZwPcA9QOyOTcInaIyPO0mSuKrMTe4NWSjYNDsW74AJ ty11Vd3D4BHD9BSSRPn2CoYVQg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:25:58 2025 by rpki-client