This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.mft File: 8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.mft (raw, json) Hash identifier: /4DI5seTAWJEYuDFWPa3orFcvHizFx7K64WCqzldAbo= Subject key identifier: 2D:F3:DB:2E:69:2D:B5:E3:76:5F:E2:BA:03:CF:5A:92:E4:5E:6B:1E Authority key identifier: 8D:B9:FC:9E:FA:6C:CC:DA:5E:94:CD:F3:87:B5:C8:C4:C2:1E:99:4D Certificate issuer: /CN=8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D Certificate serial: 323F4038452C15BC3CEE0F6ACDDD603AA175F9DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.mft Manifest number: 10 Signing time: Fri 19 Dec 2025 01:21:19 +0000 Manifest this update: Fri 19 Dec 2025 01:16:19 +0000 Manifest next update: Sat 20 Dec 2025 01:22:19 +0000 Files and hashes: 1: 323830343a353737383a3a2f33322d3438203d3e20323638303637.roa (hash: /+KzSCJ64gMjSDz5R/h6p01c6UWxShEouNTOzf/aoG4=) 2: 8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.crl (hash: Fsv6CmNvnm9bAisVw7XSKpXTHF8SK75dvyD/vTOT0qI=) 3: 34352e3136372e3133362e302f32322d3234203d3e20323638303637.roa (hash: RzvhbClWxHJkiI5A5Hr0ZJlsQX1ASVQ9TqcdESobUh0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.crl rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 01:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3f:40:38:45:2c:15:bc:3c:ee:0f:6a:cd:dd:60:3a:a1:75:f9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D Validity Not Before: Dec 19 01:16:19 2025 GMT Not After : Dec 20 01:22:19 2025 GMT Subject: CN=2DF3DB2E692DB5E3765FE2BA03CF5A92E45E6B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c9:12:60:46:2c:87:db:91:d1:69:0b:86:32: 78:9d:09:6e:25:86:0d:74:02:59:11:2f:d9:cb:80: 4e:8a:b6:41:74:95:1c:f4:5f:69:4d:21:da:51:4f: 6d:f8:e9:0b:39:bb:2d:3e:39:73:e7:0b:8a:c0:b7: 39:2e:58:cd:29:ac:00:d7:5b:cb:91:75:62:c1:55: 5d:d6:ef:ba:59:49:4e:18:95:0c:90:a9:2d:d2:43: b2:26:97:71:49:8a:ae:ae:01:51:d6:ff:8e:57:a3: b8:59:23:ad:10:5f:44:fb:58:72:c7:fe:ab:fc:0c: 24:ab:a8:8f:7a:5c:47:c4:4f:1a:a6:1f:83:96:de: 9d:80:29:36:cd:37:16:fe:f1:43:b0:30:d7:ca:8f: 46:49:7f:90:9a:a8:c0:db:2d:58:90:aa:00:46:1a: 4c:ae:52:93:3c:f4:1f:ad:22:23:33:c6:61:90:11: b3:91:e0:bf:8d:0f:f6:08:24:cf:05:43:9c:89:31: 66:ba:7f:54:6e:c4:5b:51:33:26:f1:2e:99:6b:08: ac:ab:df:20:d7:d4:74:33:4d:97:20:01:82:32:6a: 79:14:d5:f6:ba:bd:36:f4:ac:04:85:ce:60:6e:0f: 72:c0:7d:ea:49:0d:b6:0f:ec:75:52:ca:48:0e:27: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F3:DB:2E:69:2D:B5:E3:76:5F:E2:BA:03:CF:5A:92:E4:5E:6B:1E X509v3 Authority Key Identifier: keyid:8D:B9:FC:9E:FA:6C:CC:DA:5E:94:CD:F3:87:B5:C8:C4:C2:1E:99:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/8DB9FC9EFA6CCCDA5E94CDF387B5C8C4C21E994D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8d:68:bb:84:67:2f:b4:59:f3:ae:c6:e3:88:bd:de:cc:58: 8a:64:3a:a0:fd:76:e8:f9:54:eb:73:44:ac:3d:af:87:14:4b: a1:e6:99:74:94:89:55:a1:05:6a:e5:03:4e:17:42:17:d3:cd: e5:0e:81:6d:bb:78:1b:25:6f:58:13:21:8b:cf:21:d0:75:b2: d8:63:f8:38:86:8f:8e:19:8e:ea:f2:5c:ba:97:55:3e:e2:b3: 9c:21:da:94:dd:f3:ea:eb:c1:54:a8:a7:b0:35:c9:4f:4a:fc: 63:8d:6d:bf:e3:25:14:f5:bb:5f:8b:d7:96:8b:0e:3e:eb:22: 3d:12:69:7c:b1:2e:05:74:49:f7:2d:91:ec:f0:c6:cc:df:0d: 9c:c1:56:2f:f5:1b:7d:80:16:97:b8:64:0d:a6:63:1c:88:4f: bd:28:49:55:e6:e7:53:5c:12:22:e8:c9:df:af:7e:04:62:73: ae:48:91:0e:32:c3:fe:eb:75:a5:62:fe:82:05:cf:67:50:df: f5:3e:df:48:b3:40:65:61:f9:3b:82:14:ed:02:70:05:95:e9: b7:6c:02:06:c8:6f:d0:31:1b:f1:fc:5c:35:ed:a3:a0:a1:a1: a1:de:f8:85:97:68:b2:b9:82:db:fd:93:6e:33:d7:ad:27:b0: 14:9b:60:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMj9AOEUsFbw87g9qzd1gOqF1+dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCOUZDOUVGQTZDQ0NEQTVFOTRDREYzODdCNUM4QzRD MjFFOTk0RDAeFw0yNTEyMTkwMTE2MTlaFw0yNTEyMjAwMTIyMTlaMDMxMTAvBgNV BAMTKDJERjNEQjJFNjkyREI1RTM3NjVGRTJCQTAzQ0Y1QTkyRTQ1RTZCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyRJgRiyH25HRaQuGMnidCW4l hg10AlkRL9nLgE6KtkF0lRz0X2lNIdpRT2346Qs5uy0+OXPnC4rAtzkuWM0prADX W8uRdWLBVV3W77pZSU4YlQyQqS3SQ7Iml3FJiq6uAVHW/45Xo7hZI60QX0T7WHLH /qv8DCSrqI96XEfETxqmH4OW3p2AKTbNNxb+8UOwMNfKj0ZJf5CaqMDbLViQqgBG GkyuUpM89B+tIiMzxmGQEbOR4L+ND/YIJM8FQ5yJMWa6f1RuxFtRMybxLplrCKyr 3yDX1HQzTZcgAYIyankU1fa6vTb0rASFzmBuD3LAfepJDbYP7HVSykgOJxARAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULfPbLmktteN2X+K6A89akuReax4wHwYDVR0j BBgwFoAUjbn8nvpszNpelM3zh7XIxMIemU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1pyNXd6SDVZRjhWU2hmYnFkeG9HOXdtQ0ZlV0tIZXJ2bUw3M3dmMnFM dWYvMC84REI5RkM5RUZBNkNDQ0RBNUU5NENERjM4N0I1QzhDNEMyMUU5OTRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQjlGQzlFRkE2Q0NDREE1 RTk0Q0RGMzg3QjVDOEM0QzIxRTk5NEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1pyNXd6SDVZRjhWU2hmYnFkeG9HOXdtQ0ZlV0tIZXJ2bUw3M3dmMnFMdWYvMC84 REI5RkM5RUZBNkNDQ0RBNUU5NENERjM4N0I1QzhDNEMyMUU5OTRELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhI1ou4RnL7RZ867G44i93sxYimQ6oP126PlU63NErD2vhxRLoeaZdJSJVaEF auUDThdCF9PN5Q6Bbbt4GyVvWBMhi88h0HWy2GP4OIaPjhmO6vJcupdVPuKznCHa lN3z6uvBVKinsDXJT0r8Y41tv+MlFPW7X4vXlosOPusiPRJpfLEuBXRJ9y2R7PDG zN8NnMFWL/UbfYAWl7hkDaZjHIhPvShJVebnU1wSIujJ369+BGJzrkiRDjLD/ut1 pWL+ggXPZ1Df9T7fSLNAZWH5O4IU7QJwBZXpt2wCBshv0DEb8fxcNe2joKGhod74 hZdosrmC2/2TbjPXrSewFJtgyA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:26:53 2025 by rpki-client