This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.mft File: 0E89BA0F1B8976E93E5667B6247B76FED8354084.mft (raw, json) Hash identifier: J8W9E5m9Clcv8mfBBrMYCYXMQbuJtlAtv9psQQ3aWjQ= Subject key identifier: 64:F9:E8:11:B7:C7:19:36:8F:C3:07:73:45:51:42:40:F0:09:18:A7 Authority key identifier: 0E:89:BA:0F:1B:89:76:E9:3E:56:67:B6:24:7B:76:FE:D8:35:40:84 Certificate issuer: /CN=0E89BA0F1B8976E93E5667B6247B76FED8354084 Certificate serial: 2AB25A97DF8C978C417E73B4A0B8412BF499F30A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E89BA0F1B8976E93E5667B6247B76FED8354084.cer Subject info access: rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.mft Manifest number: 017F Signing time: Sun 21 Dec 2025 13:37:22 +0000 Manifest this update: Sun 21 Dec 2025 13:32:22 +0000 Manifest next update: Mon 22 Dec 2025 14:16:22 +0000 Files and hashes: 1: 323830343a346462633a3a2f33322d313238203d3e20323638323136.roa (hash: bZq8n/9lm0bx8MQFkboGGDKtueTQT1WxapXCCQnk1jw=) 2: 34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (hash: kDjxK1HFVci49JjezuUeIeg2CGI+pZ7fxkHjXfF050E=) 3: 0E89BA0F1B8976E93E5667B6247B76FED8354084.crl (hash: sdn4b1KPr0Vm/mzWmNuTYLg/6xjnsxky9YcWbcgxG6U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.crl rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E89BA0F1B8976E93E5667B6247B76FED8354084.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 14:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b2:5a:97:df:8c:97:8c:41:7e:73:b4:a0:b8:41:2b:f4:99:f3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E89BA0F1B8976E93E5667B6247B76FED8354084 Validity Not Before: Dec 21 13:32:22 2025 GMT Not After : Dec 22 14:16:22 2025 GMT Subject: CN=64F9E811B7C719368FC3077345514240F00918A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:33:03:a9:cd:cf:69:09:9f:88:56:e6:90:0d: 6a:bb:09:cf:32:ad:83:6d:50:bd:0a:39:2e:4f:55: 4d:c9:66:5a:82:61:a8:6d:07:00:d8:79:5b:51:7a: f3:7c:7c:38:5b:33:a1:c3:13:bc:28:0b:b8:61:95: ab:e3:91:1e:19:e6:18:2d:a1:a0:71:1c:2e:99:45: b8:52:8d:db:19:2a:3f:32:c6:60:3b:4c:04:51:73: 96:8e:d2:6b:3a:60:d2:0f:66:94:4a:58:55:4a:1a: 4a:98:45:d9:28:e0:41:9b:df:b6:2c:4e:04:d2:b1: c3:a4:11:21:b9:01:43:f7:d8:00:e7:05:2c:2a:5c: 3d:7e:35:07:14:45:aa:b4:19:0e:aa:74:9c:5d:b3: 14:08:2d:d7:f7:4d:75:9f:02:eb:a8:7d:73:97:9f: 2b:da:82:42:90:da:3f:35:5f:15:48:6e:ea:a5:c8: f7:5d:13:7a:19:fc:cf:9e:65:2a:d2:d7:84:74:5e: 7d:53:47:56:b3:95:ae:09:2d:ce:93:0f:70:cf:53: 20:2d:3b:f8:42:de:25:4b:3a:a9:06:18:00:e2:a9: ce:65:b9:04:23:79:5f:45:fa:d6:a6:5e:ca:27:62: db:77:d9:60:bd:fa:4e:89:42:ca:4c:73:d1:bc:26: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F9:E8:11:B7:C7:19:36:8F:C3:07:73:45:51:42:40:F0:09:18:A7 X509v3 Authority Key Identifier: keyid:0E:89:BA:0F:1B:89:76:E9:3E:56:67:B6:24:7B:76:FE:D8:35:40:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E89BA0F1B8976E93E5667B6247B76FED8354084.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:86:d0:b9:16:ae:99:00:2d:9d:57:03:6b:1f:a4:f6:84:19: 7c:77:e1:5b:ed:7e:a0:cb:4a:70:a0:90:8b:cf:1d:76:4d:c2: 29:96:0a:04:55:5a:6c:52:70:80:c1:fd:c4:47:17:f0:f9:b2: ba:21:aa:22:05:49:ce:e1:2d:aa:ef:81:a7:19:84:c6:de:0d: a6:51:2f:71:61:1d:f7:72:a0:56:82:d1:0d:19:10:9a:54:4e: 5f:0e:7d:ad:50:a3:7d:f1:83:ac:9e:03:9e:d2:0e:84:a3:2d: 84:2e:df:76:8c:49:5d:da:3e:80:fc:4a:69:56:c2:47:1b:82: 7c:3c:18:29:28:34:84:5d:8f:fa:29:70:20:03:b1:90:24:33: a2:a3:29:38:ff:ee:2c:05:65:ea:e0:37:8b:63:6a:1f:76:ee: b7:c7:91:96:f6:65:f2:22:59:02:be:2c:9f:2c:00:f2:67:78: b1:f1:30:ed:4c:a8:a3:4d:70:b6:a3:46:01:17:d9:72:a2:91: 2f:52:40:51:9e:3c:2c:ec:fb:f5:fb:eb:88:8f:cd:b6:67:3b: 76:41:9e:27:8d:31:72:ee:3a:f4:c2:9b:c0:61:3e:79:a0:8b: 60:d8:60:99:0c:42:93:7e:20:f9:91:e5:f1:5a:bd:e3:a0:29: 49:d6:39:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKrJal9+Ml4xBfnO0oLhBK/SZ8wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4OUJBMEYxQjg5NzZFOTNFNTY2N0I2MjQ3Qjc2RkVE ODM1NDA4NDAeFw0yNTEyMjExMzMyMjJaFw0yNTEyMjIxNDE2MjJaMDMxMTAvBgNV BAMTKDY0RjlFODExQjdDNzE5MzY4RkMzMDc3MzQ1NTE0MjQwRjAwOTE4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdMwOpzc9pCZ+IVuaQDWq7Cc8y rYNtUL0KOS5PVU3JZlqCYahtBwDYeVtRevN8fDhbM6HDE7woC7hhlavjkR4Z5hgt oaBxHC6ZRbhSjdsZKj8yxmA7TARRc5aO0ms6YNIPZpRKWFVKGkqYRdko4EGb37Ys TgTSscOkESG5AUP32ADnBSwqXD1+NQcURaq0GQ6qdJxdsxQILdf3TXWfAuuofXOX nyvagkKQ2j81XxVIbuqlyPddE3oZ/M+eZSrS14R0Xn1TR1azla4JLc6TD3DPUyAt O/hC3iVLOqkGGADiqc5luQQjeV9F+tamXsonYtt32WC9+k6JQspMc9G8JoJLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZPnoEbfHGTaPwwdzRVFCQPAJGKcwHwYDVR0j BBgwFoAUDom6DxuJduk+Vme2JHt2/tg1QIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmFybjVSZ0NHWVgzSEExVlQ2Y3RtNjE2amg0NzZwZ2lyZ25OUzRtUnJD aXkvMC8wRTg5QkEwRjFCODk3NkU5M0U1NjY3QjYyNDdCNzZGRUQ4MzU0MDg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFODlCQTBGMUI4OTc2RTkz RTU2NjdCNjI0N0I3NkZFRDgzNTQwODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmFybjVSZ0NHWVgzSEExVlQ2Y3RtNjE2amg0NzZwZ2lyZ25OUzRtUnJDaXkvMC8w RTg5QkEwRjFCODk3NkU5M0U1NjY3QjYyNDdCNzZGRUQ4MzU0MDg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIobQuRaumQAtnVcDax+k9oQZfHfhW+1+oMtKcKCQi88ddk3CKZYKBFVabFJw gMH9xEcX8PmyuiGqIgVJzuEtqu+BpxmExt4NplEvcWEd93KgVoLRDRkQmlROXw59 rVCjffGDrJ4DntIOhKMthC7fdoxJXdo+gPxKaVbCRxuCfDwYKSg0hF2P+ilwIAOx kCQzoqMpOP/uLAVl6uA3i2NqH3but8eRlvZl8iJZAr4snywA8md4sfEw7Uyoo01w tqNGARfZcqKRL1JAUZ48LOz79fvriI/Ntmc7dkGeJ40xcu469MKbwGE+eaCLYNhg mQxCk34g+ZHl8Vq946ApSdY5nw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:08:51 2025 by rpki-client