This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft File: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft (raw, json) Hash identifier: QHhIsOVM25EDZr1Vdnai3E1xX9xLEapt9W2XLYTTlA4= Subject key identifier: 05:62:24:2D:21:AE:13:76:94:98:97:4D:2D:6E:B2:58:27:40:D2:C0 Authority key identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 Certificate issuer: /CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Certificate serial: 3784CF34A872C84D9747239BECDE65F503CB0A6A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft Manifest number: 70 Signing time: Fri 19 Dec 2025 17:53:59 +0000 Manifest this update: Fri 19 Dec 2025 17:48:59 +0000 Manifest next update: Sat 20 Dec 2025 18:44:59 +0000 Files and hashes: 1: 3139322e3134312e37362e302f32322d3233203d3e20323637343731.roa (hash: BAIjoYlkoz30iWzjTTZ7rECmmuGLwYnw0gEYlRfBtXA=) 2: D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl (hash: 2QGiiOCxgUZWzl9m5MJTGenaQreqoFGpUjXXLwBgmkg=) 3: 323830343a343230303a3a2f33322d3333203d3e20323637343731.roa (hash: ENOTPp+Zx/+E9r3MsBtUJ8AK0ZmsIRTEgOgOR3Mab9k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 18:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:84:cf:34:a8:72:c8:4d:97:47:23:9b:ec:de:65:f5:03:cb:0a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02 Validity Not Before: Dec 19 17:48:59 2025 GMT Not After : Dec 20 18:44:59 2025 GMT Subject: CN=0562242D21AE13769498974D2D6EB2582740D2C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:21:e2:8d:94:0c:42:46:d3:5d:35:91:18:06: 86:b7:a9:8d:f7:9b:4e:de:5a:ab:a1:c6:41:77:e2: 1a:f9:60:6f:5f:53:92:5b:80:98:01:c2:8f:86:89: 75:9f:1f:53:19:01:50:b9:0e:21:70:63:3c:16:84: 30:7a:9a:9f:fd:8f:5a:15:e4:82:ee:8b:59:73:ca: 94:dc:5e:1b:b5:52:3b:ae:39:c4:8e:80:9a:b1:b6: 9a:3a:b8:22:59:a9:aa:92:7b:7d:8a:97:34:ee:52: aa:7f:93:2e:91:f7:2d:e5:73:26:8c:4d:18:4a:33: 70:15:31:a3:c8:05:ab:36:ec:48:2d:49:bb:2a:a2: 4b:3c:ba:ee:c8:58:db:26:5f:f8:8e:58:e9:76:46: ca:0b:a1:e6:fb:49:d4:40:b9:12:54:14:65:95:1d: 59:6b:51:24:8d:3f:07:ce:e9:19:9d:5b:b6:00:93: 78:86:91:2b:92:e0:a1:6d:8a:c8:c1:c8:5b:2e:7f: 20:3d:a5:3c:e2:a5:ff:1d:3a:c1:46:6c:44:65:5c: be:a8:23:5c:16:07:bf:d7:87:e8:65:b5:ed:fb:d7: ec:86:77:42:87:67:7b:ff:a8:14:ec:30:12:a8:65: 26:64:85:65:d9:a9:33:8c:f3:42:75:32:db:7d:69: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:24:2D:21:AE:13:76:94:98:97:4D:2D:6E:B2:58:27:40:D2:C0 X509v3 Authority Key Identifier: keyid:D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:61:85:57:c5:73:80:7d:0c:1b:a1:c7:4d:b8:ef:fb:e3:41: d6:ff:dd:24:ae:f6:9f:46:33:00:c4:cc:f8:01:e4:cf:2a:31: 4e:be:ae:0e:6d:4b:98:b4:75:87:f2:28:19:e2:5a:b7:37:4e: f7:c8:95:84:52:24:2d:af:3e:91:85:2c:72:27:a9:19:f2:30: 15:0f:13:59:9d:25:36:e7:50:bc:9b:b7:6d:80:c4:49:4b:76: 0a:d2:b0:a5:32:83:f1:37:37:2d:fd:7f:69:30:25:a0:92:38: f3:f6:54:37:a1:4a:3a:66:a5:98:fc:8d:c0:cb:24:34:c1:36: 5f:cd:cc:f1:ec:98:73:a8:4d:7c:f1:a0:fe:f9:3a:a2:6d:2e: 4e:8f:9c:a9:1d:2e:84:af:a6:04:9d:58:f9:42:45:bc:8a:c0: ee:fa:8b:87:12:af:0c:14:3e:0d:47:fb:18:bb:74:55:04:52: ef:e7:cc:15:b7:cd:58:49:69:ca:26:73:1b:5b:dc:4c:dd:96: b4:51:e9:79:e8:d7:6e:c9:ec:49:3a:2c:e3:47:37:58:1b:dc: d6:bc:de:48:80:9f:d0:55:7e:31:9b:48:59:d6:15:3e:5e:7e: 06:54:bb:e3:88:b5:ea:44:e9:fe:ff:b3:c3:77:b2:6c:af:cf: cd:65:b1:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN4TPNKhyyE2XRyOb7N5l9QPLCmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1RDQzRjFCNjBBREZEMkZFMzM5OTZBOTBCQkI2MkVG NTVBMUQwMjAeFw0yNTEyMTkxNzQ4NTlaFw0yNTEyMjAxODQ0NTlaMDMxMTAvBgNV BAMTKDA1NjIyNDJEMjFBRTEzNzY5NDk4OTc0RDJENkVCMjU4Mjc0MEQyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCIeKNlAxCRtNdNZEYBoa3qY33 m07eWquhxkF34hr5YG9fU5JbgJgBwo+GiXWfH1MZAVC5DiFwYzwWhDB6mp/9j1oV 5ILui1lzypTcXhu1UjuuOcSOgJqxtpo6uCJZqaqSe32KlzTuUqp/ky6R9y3lcyaM TRhKM3AVMaPIBas27EgtSbsqoks8uu7IWNsmX/iOWOl2RsoLoeb7SdRAuRJUFGWV HVlrUSSNPwfO6RmdW7YAk3iGkSuS4KFtisjByFsufyA9pTzipf8dOsFGbERlXL6o I1wWB7/Xh+hlte371+yGd0KHZ3v/qBTsMBKoZSZkhWXZqTOM80J1Mtt9afwjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBWIkLSGuE3aUmJdNLW6yWCdA0sAwHwYDVR0j BBgwFoAU1F1D8bYK39L+M5lqkLu2LvVaHQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4 RHAvMC9ENDVENDNGMUI2MEFERkQyRkUzMzk5NkE5MEJCQjYyRUY1NUExRDAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUQ0M0YxQjYwQURGRDJG RTMzOTk2QTkwQkJCNjJFRjU1QTFEMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4RHAvMC9E NDVENDNGMUI2MEFERkQyRkUzMzk5NkE5MEJCQjYyRUY1NUExRDAyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANWGFV8VzgH0MG6HHTbjv++NB1v/dJK72n0YzAMTM+AHkzyoxTr6uDm1LmLR1 h/IoGeJatzdO98iVhFIkLa8+kYUsciepGfIwFQ8TWZ0lNudQvJu3bYDESUt2CtKw pTKD8Tc3Lf1/aTAloJI48/ZUN6FKOmalmPyNwMskNME2X83M8eyYc6hNfPGg/vk6 om0uTo+cqR0uhK+mBJ1Y+UJFvIrA7vqLhxKvDBQ+DUf7GLt0VQRS7+fMFbfNWElp yiZzG1vcTN2WtFHpeejXbsnsSTos40c3WBvc1rzeSICf0FV+MZtIWdYVPl5+BlS7 44i16kTp/v+zw3eybK/PzWWxpw== -----END CERTIFICATE-----Generated at Fri Dec 19 19:19:20 2025 by rpki-client