This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/B3640268A2F63553CC11A086A2EE16DEC0937450.mft File: B3640268A2F63553CC11A086A2EE16DEC0937450.mft (raw, json) Hash identifier: DeRevHqAyNZdcMQmi4DvB5SVtB5v12v6FMqROfTC4lg= Subject key identifier: 49:33:01:38:AD:41:EB:72:3D:19:8D:8A:01:04:24:84:3E:0E:2D:73 Authority key identifier: B3:64:02:68:A2:F6:35:53:CC:11:A0:86:A2:EE:16:DE:C0:93:74:50 Certificate issuer: /CN=B3640268A2F63553CC11A086A2EE16DEC0937450 Certificate serial: 75736722CDAA41CA32ED2FC852673CD4365D2A4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3640268A2F63553CC11A086A2EE16DEC0937450.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/B3640268A2F63553CC11A086A2EE16DEC0937450.mft Manifest number: 42 Signing time: Tue 23 Dec 2025 01:35:48 +0000 Manifest this update: Tue 23 Dec 2025 01:30:48 +0000 Manifest next update: Wed 24 Dec 2025 02:34:48 +0000 Files and hashes: 1: B3640268A2F63553CC11A086A2EE16DEC0937450.crl (hash: S3JKQbMwLqPft5bMa+Fbe66eUVTHKX10iqy0lyfuXXU=) 2: 323830313a38303a333935303a3a2f34382d3438203d3e20323730363831.roa (hash: KdkdQHdqTihZiHoFf+/ERGOImTvhx6Y5iPuxMGg96oE=) 3: 3230302e362e34392e302f32342d3234203d3e20323730363831.roa (hash: nH/VZ6PCvjx0zGFhjg3EhZ9+Wt2Q/yu4V3fdLNpTslA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/B3640268A2F63553CC11A086A2EE16DEC0937450.crl rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/B3640268A2F63553CC11A086A2EE16DEC0937450.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3640268A2F63553CC11A086A2EE16DEC0937450.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 02:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:73:67:22:cd:aa:41:ca:32:ed:2f:c8:52:67:3c:d4:36:5d:2a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3640268A2F63553CC11A086A2EE16DEC0937450 Validity Not Before: Dec 23 01:30:48 2025 GMT Not After : Dec 24 02:34:48 2025 GMT Subject: CN=49330138AD41EB723D198D8A010424843E0E2D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:ab:f4:7b:2f:1e:be:38:18:28:84:2e:cf: 49:2f:51:53:56:4b:f0:67:82:51:02:af:85:b2:f7: 46:b3:1e:73:01:5d:2e:c0:0c:b1:88:79:db:f0:21: 44:f3:4d:2d:bb:0d:16:c2:41:88:2b:b1:3d:79:18: 09:c2:ea:fd:b4:1f:f9:1b:0d:83:22:51:b5:ae:0c: f2:a8:ad:d4:83:31:4e:d4:70:c1:43:73:4b:1b:1d: c6:7c:76:4e:79:76:58:8a:ce:f9:69:d5:76:5f:ec: 09:ca:fe:ba:70:3a:0e:9d:53:b0:7a:ee:ae:26:de: a4:e4:08:6f:41:2d:7a:91:59:e8:5a:9d:ac:30:4b: b0:07:7d:78:c4:a9:63:bc:08:d4:a1:ed:65:0c:2d: 65:17:67:19:c0:99:19:8a:a6:55:79:b1:e2:c9:70: 2f:e3:c4:9e:51:f5:e6:e2:2e:2c:9e:0c:f8:fa:1a: 9d:47:ad:a0:0f:31:56:ee:11:a7:b9:f0:71:5b:3a: 76:dd:87:07:63:5f:0b:1a:45:e7:01:4b:5f:30:f0: 08:48:dc:96:23:e1:a8:b3:7a:3c:90:69:59:80:2e: 5c:76:ed:72:cc:c5:9f:09:b7:4c:85:11:63:c8:a5: 87:11:0a:6b:97:63:35:d2:c6:8b:48:03:5a:08:28: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:33:01:38:AD:41:EB:72:3D:19:8D:8A:01:04:24:84:3E:0E:2D:73 X509v3 Authority Key Identifier: keyid:B3:64:02:68:A2:F6:35:53:CC:11:A0:86:A2:EE:16:DE:C0:93:74:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/B3640268A2F63553CC11A086A2EE16DEC0937450.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3640268A2F63553CC11A086A2EE16DEC0937450.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/B3640268A2F63553CC11A086A2EE16DEC0937450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c6:dc:11:d7:0c:58:56:19:d7:61:19:01:5f:c2:a6:08:79: 75:02:9d:c0:7c:ab:f6:e1:80:cd:2e:0e:35:35:32:11:19:b1: 14:57:ba:dd:9b:61:07:68:07:63:45:eb:97:24:ef:07:f7:9a: fa:de:52:bf:e5:a7:dd:78:4d:a6:d9:cd:0f:28:44:b1:7f:61: ef:09:88:a1:c5:56:f9:bc:00:9e:aa:da:95:4c:73:23:60:2e: 34:e2:5c:8c:09:02:fb:87:f7:06:77:22:09:a9:87:19:cc:90: 43:07:08:c3:02:d8:e8:57:ce:63:b4:dc:03:8b:2e:41:de:b4: 72:37:ea:ff:75:2b:07:33:ef:59:b7:c9:3c:75:81:84:27:39: 83:bb:cf:09:1b:05:94:50:c3:67:29:ba:47:b0:54:67:34:97: 71:cb:62:32:16:ee:14:c3:c9:9f:bd:0f:29:9b:a8:9f:73:5f: d8:df:00:69:7f:18:c2:c1:7f:75:65:dd:8b:e0:03:21:ea:44: f7:47:8c:f7:4f:f0:16:b6:99:64:84:78:cc:ee:9f:4a:32:27: 50:9d:01:74:f4:fb:1d:77:2e:70:bb:e9:b9:90:0c:0c:dc:73: b8:00:77:0b:d7:19:e9:df:65:d6:e7:a9:3d:11:91:21:32:9a: d2:71:99:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdXNnIs2qQcoy7S/IUmc81DZdKk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2NDAyNjhBMkY2MzU1M0NDMTFBMDg2QTJFRTE2REVD MDkzNzQ1MDAeFw0yNTEyMjMwMTMwNDhaFw0yNTEyMjQwMjM0NDhaMDMxMTAvBgNV BAMTKDQ5MzMwMTM4QUQ0MUVCNzIzRDE5OEQ4QTAxMDQyNDg0M0UwRTJENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8av0ey8evjgYKIQuz0kvUVNW S/BnglECr4Wy90azHnMBXS7ADLGIedvwIUTzTS27DRbCQYgrsT15GAnC6v20H/kb DYMiUbWuDPKordSDMU7UcMFDc0sbHcZ8dk55dliKzvlp1XZf7AnK/rpwOg6dU7B6 7q4m3qTkCG9BLXqRWehanawwS7AHfXjEqWO8CNSh7WUMLWUXZxnAmRmKplV5seLJ cC/jxJ5R9ebiLiyeDPj6Gp1HraAPMVbuEae58HFbOnbdhwdjXwsaRecBS18w8AhI 3JYj4aizejyQaVmALlx27XLMxZ8Jt0yFEWPIpYcRCmuXYzXSxotIA1oIKIgBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSTMBOK1B63I9GY2KAQQkhD4OLXMwHwYDVR0j BBgwFoAUs2QCaKL2NVPMEaCGou4W3sCTdFAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhvd3BDN0RlUWUyemg1SHFWU3ZnYlhMWlVyNW5VWVlYZVA2Y1plQjlI amkvMC9CMzY0MDI2OEEyRjYzNTUzQ0MxMUEwODZBMkVFMTZERUMwOTM3NDUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzNjQwMjY4QTJGNjM1NTND QzExQTA4NkEyRUUxNkRFQzA5Mzc0NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nkhvd3BDN0RlUWUyemg1SHFWU3ZnYlhMWlVyNW5VWVlYZVA2Y1plQjlIamkvMC9C MzY0MDI2OEEyRjYzNTUzQ0MxMUEwODZBMkVFMTZERUMwOTM3NDUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeMbcEdcMWFYZ12EZAV/Cpgh5dQKdwHyr9uGAzS4ONTUyERmxFFe63ZthB2gH Y0XrlyTvB/ea+t5Sv+Wn3XhNptnNDyhEsX9h7wmIocVW+bwAnqralUxzI2AuNOJc jAkC+4f3BnciCamHGcyQQwcIwwLY6FfOY7TcA4suQd60cjfq/3UrBzPvWbfJPHWB hCc5g7vPCRsFlFDDZym6R7BUZzSXcctiMhbuFMPJn70PKZuon3Nf2N8AaX8YwsF/ dWXdi+ADIepE90eM90/wFraZZIR4zO6fSjInUJ0BdPT7HXcucLvpuZAMDNxzuAB3 C9cZ6d9l1uepPRGRITKa0nGZkA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:48:16 2025 by rpki-client