This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.mft File: 594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.mft (raw, json) Hash identifier: KCu5eYcIF+xUcoo+FBvplgGqVmzoTJXTLVwflid+S5U= Subject key identifier: 3F:02:2A:D8:E9:50:13:A4:51:03:6E:EF:4C:A2:BF:7A:59:E8:BE:F5 Authority key identifier: 59:4C:6F:1C:FD:DD:89:3E:BE:5B:4B:CD:19:CF:53:B6:0A:96:D4:0D Certificate issuer: /CN=594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D Certificate serial: 08A166A5BEB14E51785C6712125A76CD6A43178C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.mft Manifest number: 61 Signing time: Tue 23 Dec 2025 20:29:23 +0000 Manifest this update: Tue 23 Dec 2025 20:24:23 +0000 Manifest next update: Wed 24 Dec 2025 23:01:23 +0000 Files and hashes: 1: 323830343a363735343a3a2f33322d3438203d3e20323639363230.roa (hash: jdiFpXR++wUuESGlQkYFFh8KHSrbrYhip6hGyN0VVLE=) 2: 594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.crl (hash: VGTQhAWrVHGsgmAmEE1/Kda6jZhkXnx/0aPbdNI4FAQ=) 3: 34352e3139302e36302e302f32322d3234203d3e20323639363230.roa (hash: 3aDx5UZaj+G6Hj4U7BqRJhhXqMlJ5AieeStZgv6QJ24=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.crl rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 23:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a1:66:a5:be:b1:4e:51:78:5c:67:12:12:5a:76:cd:6a:43:17:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D Validity Not Before: Dec 23 20:24:23 2025 GMT Not After : Dec 24 23:01:23 2025 GMT Subject: CN=3F022AD8E95013A451036EEF4CA2BF7A59E8BEF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:3a:9d:b2:53:d6:19:ed:1c:02:9d:cd:96: d0:d2:64:9f:e5:ed:f3:be:83:f7:7c:d8:07:84:54: e5:d4:d5:64:c8:ec:10:cf:a4:fa:fb:84:33:22:5f: b4:2d:b8:ff:66:20:cb:18:0f:44:2f:73:c3:09:5a: 01:4b:52:4f:06:d3:98:2b:b2:e9:2e:20:f4:5c:cf: 8c:8c:b5:67:5e:64:b5:bf:bf:1b:d7:21:44:2f:10: d8:6a:15:82:81:e9:87:43:cc:d9:f4:2e:4e:b1:60: c8:34:0c:f3:1a:5a:96:e3:34:e0:84:74:89:03:e5: 40:74:e4:45:13:54:9a:d2:e3:11:d3:43:67:d8:40: 1f:08:a1:0c:11:86:03:78:d9:3a:86:c0:4d:df:ef: fd:18:f1:cb:66:af:5e:d3:d4:b2:ed:f4:73:77:72: 3c:b9:77:74:cc:b1:04:80:3a:21:10:c7:d9:29:2a: 9a:45:4d:f3:b6:8b:58:63:8b:3f:7f:9a:b5:4c:4e: 36:e0:87:7c:df:da:17:e1:85:58:ed:a5:14:7f:72: 24:3b:ba:79:7b:65:fb:57:be:3e:e6:e5:a8:23:76: d6:53:d7:b6:1c:d7:39:ae:da:82:15:cc:c0:b4:e6: b8:02:e1:42:8c:76:94:dd:92:eb:a3:97:c6:ed:0b: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:02:2A:D8:E9:50:13:A4:51:03:6E:EF:4C:A2:BF:7A:59:E8:BE:F5 X509v3 Authority Key Identifier: keyid:59:4C:6F:1C:FD:DD:89:3E:BE:5B:4B:CD:19:CF:53:B6:0A:96:D4:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/594C6F1CFDDD893EBE5B4BCD19CF53B60A96D40D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:31:e4:44:5f:48:f9:62:89:70:48:04:9f:2c:ce:b8:53:f6: 1f:07:1d:74:79:f6:c0:92:50:5a:f8:a3:51:81:cf:75:8d:2c: 97:49:d7:f4:a7:26:ef:6b:84:af:fa:13:b5:3a:f9:a4:54:24: 27:10:77:0a:53:85:fd:3a:c8:b8:d9:48:76:3f:b0:de:cc:bd: cc:c2:c0:a7:01:a9:c7:06:32:1b:bb:f1:5d:18:be:48:da:42: 6f:c5:f6:6a:ba:3c:f4:08:b7:39:7c:54:ef:fa:c1:17:7b:c6: b2:b5:9f:01:03:32:6f:be:1b:5c:8e:86:83:46:29:cb:52:6f: 38:a3:9a:2a:94:89:f0:45:a2:cc:63:2c:ca:7c:75:f1:6a:3e: 7d:a8:fb:54:9b:03:50:db:66:65:12:79:8c:58:33:63:66:7d: d3:a2:57:30:df:87:99:c2:82:ee:15:57:ce:ac:82:52:0b:fc: 68:64:cd:71:27:f9:01:b0:10:8a:7a:33:f7:9f:d8:61:b5:e2: 7b:a7:8d:56:5c:0c:1c:94:d1:6e:e4:7e:5d:23:12:75:27:f6: e2:04:c0:eb:62:0d:cc:7d:10:99:77:3a:e0:04:b6:47:fd:0c: b7:7c:f2:ce:f1:62:8b:32:18:69:de:8d:a1:46:83:11:12:c4: 72:b6:f0:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCKFmpb6xTlF4XGcSElp2zWpDF4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0QzZGMUNGREREODkzRUJFNUI0QkNEMTlDRjUzQjYw QTk2RDQwRDAeFw0yNTEyMjMyMDI0MjNaFw0yNTEyMjQyMzAxMjNaMDMxMTAvBgNV BAMTKDNGMDIyQUQ4RTk1MDEzQTQ1MTAzNkVFRjRDQTJCRjdBNTlFOEJFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XDqdslPWGe0cAp3NltDSZJ/l 7fO+g/d82AeEVOXU1WTI7BDPpPr7hDMiX7QtuP9mIMsYD0Qvc8MJWgFLUk8G05gr sukuIPRcz4yMtWdeZLW/vxvXIUQvENhqFYKB6YdDzNn0Lk6xYMg0DPMaWpbjNOCE dIkD5UB05EUTVJrS4xHTQ2fYQB8IoQwRhgN42TqGwE3f7/0Y8ctmr17T1LLt9HN3 cjy5d3TMsQSAOiEQx9kpKppFTfO2i1hjiz9/mrVMTjbgh3zf2hfhhVjtpRR/ciQ7 unl7ZftXvj7m5agjdtZT17Yc1zmu2oIVzMC05rgC4UKMdpTdkuujl8btC5ERAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPwIq2OlQE6RRA27vTKK/elnovvUwHwYDVR0j BBgwFoAUWUxvHP3diT6+W0vNGc9TtgqW1A0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWpVbVUxbjhEUDh5MkdMTXpvR01iOW9vNFF4TXhOY2pIaU5KOWMyTFdR aFIvMC81OTRDNkYxQ0ZEREQ4OTNFQkU1QjRCQ0QxOUNGNTNCNjBBOTZENDBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5NEM2RjFDRkRERDg5M0VC RTVCNEJDRDE5Q0Y1M0I2MEE5NkQ0MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWpVbVUxbjhEUDh5MkdMTXpvR01iOW9vNFF4TXhOY2pIaU5KOWMyTFdRaFIvMC81 OTRDNkYxQ0ZEREQ4OTNFQkU1QjRCQ0QxOUNGNTNCNjBBOTZENDBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaTHkRF9I+WKJcEgEnyzOuFP2HwcddHn2wJJQWvijUYHPdY0sl0nX9Kcm72uE r/oTtTr5pFQkJxB3ClOF/TrIuNlIdj+w3sy9zMLApwGpxwYyG7vxXRi+SNpCb8X2 aro89Ai3OXxU7/rBF3vGsrWfAQMyb74bXI6Gg0Ypy1JvOKOaKpSJ8EWizGMsynx1 8Wo+faj7VJsDUNtmZRJ5jFgzY2Z906JXMN+HmcKC7hVXzqyCUgv8aGTNcSf5AbAQ inoz95/YYbXie6eNVlwMHJTRbuR+XSMSdSf24gTA62INzH0QmXc64AS2R/0Mt3zy zvFiizIYad6NoUaDERLEcrbwiA== -----END CERTIFICATE-----Generated at Wed Dec 24 14:27:28 2025 by rpki-client