This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft File: 509EF942F9C12C94CB01E7B74661B47CACA9126F.mft (raw, json) Hash identifier: QM3WswwIzaY+AjgPt/4g2T6mX9eGse3OPKbzJXskbyo= Subject key identifier: 72:EE:28:04:29:C2:5B:80:0C:E3:C2:4A:EA:27:EA:30:3E:14:6D:25 Authority key identifier: 50:9E:F9:42:F9:C1:2C:94:CB:01:E7:B7:46:61:B4:7C:AC:A9:12:6F Certificate issuer: /CN=509EF942F9C12C94CB01E7B74661B47CACA9126F Certificate serial: 54970EF31DBEDFBD2E9F7EC9419F3FF64F0D5F12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/509EF942F9C12C94CB01E7B74661B47CACA9126F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft Manifest number: 15 Signing time: Fri 19 Dec 2025 08:33:22 +0000 Manifest this update: Fri 19 Dec 2025 08:28:22 +0000 Manifest next update: Sat 20 Dec 2025 11:19:22 +0000 Files and hashes: 1: 509EF942F9C12C94CB01E7B74661B47CACA9126F.crl (hash: PN5jzKQ+JQlf+Lz2qcCUJCO6rkxnZFhfKAvNZLuYUwo=) 2: 3230302e33362e3139362e302f32322d3332203d3e20323731343233.roa (hash: zVXFZl6oxvg6BnkEjHSyyicCu0b5hIdAWvYFvXFjrMI=) 3: 323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (hash: Oht/tItHzp7Hz6Rczt/pKC8R1gBj0x0nH788dlXzZrE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.crl rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/509EF942F9C12C94CB01E7B74661B47CACA9126F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 11:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:97:0e:f3:1d:be:df:bd:2e:9f:7e:c9:41:9f:3f:f6:4f:0d:5f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509EF942F9C12C94CB01E7B74661B47CACA9126F Validity Not Before: Dec 19 08:28:22 2025 GMT Not After : Dec 20 11:19:22 2025 GMT Subject: CN=72EE280429C25B800CE3C24AEA27EA303E146D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:69:f4:95:3b:2f:45:cc:b9:ff:4f:90:7c: e2:86:67:7f:a6:35:c4:61:6d:c5:c0:34:52:5c:d2: 48:3c:8b:b9:b9:eb:4f:73:da:de:f4:59:e0:68:69: e3:c9:e5:3b:65:d2:f0:1d:a2:d7:a1:05:4a:c3:e1: b3:66:9f:b2:bc:8b:7d:7b:4e:c5:89:47:46:b1:54: 98:49:10:f7:c9:0c:ef:51:07:78:67:6d:65:c0:53: 34:7b:94:8e:e3:66:db:f7:a5:7e:91:1c:6c:cf:38: 0b:5d:a9:aa:cc:dc:1d:e4:05:24:04:36:07:42:4a: b7:87:01:66:d0:c6:93:e1:58:aa:41:3c:29:59:6d: 85:6d:ec:e6:57:0f:b6:bb:ca:21:aa:13:73:9e:86: 04:ce:12:88:31:0a:6d:c6:09:58:4f:62:d5:38:e4: 45:a8:a3:22:44:ca:ee:6e:46:d9:d3:c7:1b:14:36: f4:0e:6f:e0:35:a0:d6:82:77:7f:f3:78:aa:e9:f1: 37:cf:c3:3c:a9:3f:f3:13:84:4c:17:6f:0a:cf:81: be:87:6a:91:22:84:28:9c:22:a3:95:76:c8:14:2f: 32:d4:22:20:e0:cc:2d:c4:af:94:ce:04:91:37:3e: 4c:db:90:92:84:57:9f:51:7b:1d:64:8f:ea:49:bc: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EE:28:04:29:C2:5B:80:0C:E3:C2:4A:EA:27:EA:30:3E:14:6D:25 X509v3 Authority Key Identifier: keyid:50:9E:F9:42:F9:C1:2C:94:CB:01:E7:B7:46:61:B4:7C:AC:A9:12:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/509EF942F9C12C94CB01E7B74661B47CACA9126F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:20:a7:d6:8d:26:a3:43:e2:bb:2f:5e:f1:fd:5d:6c:0a:e5: 81:45:38:4a:1a:9a:b8:26:d7:f0:89:93:93:06:01:89:c7:40: 98:b6:8d:d4:67:82:71:ac:7d:0a:8f:50:52:53:93:21:03:a1: 76:fb:f3:8c:b2:20:ba:cd:5b:67:6c:eb:8b:96:06:bc:45:77: 30:3d:29:09:14:df:63:ee:30:3c:49:20:56:07:f0:05:bd:ac: 60:7c:36:17:55:14:71:9e:d5:d3:27:46:74:73:58:0e:72:ce: 09:90:60:6a:f1:cd:4b:3c:7c:68:be:39:9a:fc:da:5b:30:b5: 0f:4f:0c:3a:42:73:6e:de:cf:9e:50:12:8e:65:bd:05:57:29: 6a:0e:48:51:71:48:15:fe:14:13:ff:b2:88:77:26:6c:8c:70: 9b:7a:e2:e9:a4:a5:44:70:11:5c:9a:47:32:1b:09:99:34:87: a3:ef:e2:1f:ff:43:58:7d:54:d9:c4:9f:c8:16:3f:33:a2:78: 1c:46:d0:66:04:b1:79:10:5d:b5:6f:be:b8:3f:c9:61:16:9e: 60:86:d1:c9:e9:8d:bf:db:b2:d4:d1:09:4a:a6:ac:21:b4:18: e7:8a:a4:b7:da:61:e9:e0:b6:e9:1f:e7:4a:bd:a2:68:fb:d1: 46:ae:42:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVJcO8x2+370un37JQZ8/9k8NXxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RUY5NDJGOUMxMkM5NENCMDFFN0I3NDY2MUI0N0NB Q0E5MTI2RjAeFw0yNTEyMTkwODI4MjJaFw0yNTEyMjAxMTE5MjJaMDMxMTAvBgNV BAMTKDcyRUUyODA0MjlDMjVCODAwQ0UzQzI0QUVBMjdFQTMwM0UxNDZEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYA2n0lTsvRcy5/0+QfOKGZ3+m NcRhbcXANFJc0kg8i7m5609z2t70WeBoaePJ5Ttl0vAdotehBUrD4bNmn7K8i317 TsWJR0axVJhJEPfJDO9RB3hnbWXAUzR7lI7jZtv3pX6RHGzPOAtdqarM3B3kBSQE NgdCSreHAWbQxpPhWKpBPClZbYVt7OZXD7a7yiGqE3OehgTOEogxCm3GCVhPYtU4 5EWooyJEyu5uRtnTxxsUNvQOb+A1oNaCd3/zeKrp8TfPwzypP/MThEwXbwrPgb6H apEihCicIqOVdsgULzLUIiDgzC3Er5TOBJE3PkzbkJKEV59Rex1kj+pJvL3zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcu4oBCnCW4AM48JK6ifqMD4UbSUwHwYDVR0j BBgwFoAUUJ75QvnBLJTLAee3RmG0fKypEm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUy czYvMC81MDlFRjk0MkY5QzEyQzk0Q0IwMUU3Qjc0NjYxQjQ3Q0FDQTkxMjZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwOUVGOTQyRjlDMTJDOTRD QjAxRTdCNzQ2NjFCNDdDQUNBOTEyNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUyczYvMC81 MDlFRjk0MkY5QzEyQzk0Q0IwMUU3Qjc0NjYxQjQ3Q0FDQTkxMjZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUCCn1o0mo0Piuy9e8f1dbArlgUU4ShqauCbX8ImTkwYBicdAmLaN1GeCcax9 Co9QUlOTIQOhdvvzjLIgus1bZ2zri5YGvEV3MD0pCRTfY+4wPEkgVgfwBb2sYHw2 F1UUcZ7V0ydGdHNYDnLOCZBgavHNSzx8aL45mvzaWzC1D08MOkJzbt7PnlASjmW9 BVcpag5IUXFIFf4UE/+yiHcmbIxwm3ri6aSlRHARXJpHMhsJmTSHo+/iH/9DWH1U 2cSfyBY/M6J4HEbQZgSxeRBdtW++uD/JYRaeYIbRyemNv9uy1NEJSqasIbQY54qk t9ph6eC26R/nSr2iaPvRRq5CDA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:18:38 2025 by rpki-client