This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: gMaJ+xco2alGwx2a89L3oM7tsnCz9XlnkKxuArzUams= Subject key identifier: 7F:5E:7E:9B:71:29:02:B7:AF:BE:3D:7E:AA:99:29:6D:B3:62:20:49 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 65E6AD81A0B63D2DC19C33AEFCC0A8BD7FCFB91E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 0343 Signing time: Sat 20 Dec 2025 09:25:11 +0000 Manifest this update: Sat 20 Dec 2025 09:20:11 +0000 Manifest next update: Sun 21 Dec 2025 09:39:11 +0000 Files and hashes: 1: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: 5c5yVSzeJM+JVvRijN8LJuBZHDJyOvo8tOksxX5/Zfo=) 2: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 3: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 09:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e6:ad:81:a0:b6:3d:2d:c1:9c:33:ae:fc:c0:a8:bd:7f:cf:b9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Dec 20 09:20:11 2025 GMT Not After : Dec 21 09:39:11 2025 GMT Subject: CN=7F5E7E9B712902B7AFBE3D7EAA99296DB3622049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c7:e3:09:52:36:72:5c:44:0f:89:b2:14:58: d0:c5:c2:de:0d:94:8b:a5:17:41:48:1c:ff:9e:b9: b3:35:81:20:70:17:ab:a7:5c:fd:ce:21:29:01:d4: 95:21:d8:ef:ee:b6:6c:45:11:b9:16:82:3a:85:a9: c2:d6:2f:ee:69:a5:68:1c:3c:c2:4c:7f:75:89:bf: 7d:98:95:59:44:46:1d:59:0f:d7:12:d8:19:02:0f: ec:86:5e:7c:20:54:df:89:7c:5b:3d:7c:74:86:71: d5:75:76:a7:c9:c1:ab:56:00:2a:c1:3f:87:09:eb: ca:fc:9e:dc:11:90:84:fe:a1:57:92:30:5a:b6:44: 3b:85:fa:fe:bd:20:5f:64:26:54:86:6d:b5:c7:fe: 2e:ca:dc:e4:8d:91:1a:e0:ac:92:7c:74:50:3b:ad: 03:be:16:a7:e3:27:51:88:76:33:1d:9b:ed:eb:4c: e3:b6:4f:16:ff:23:1b:e4:eb:d1:b3:56:46:eb:27: 04:5c:ad:cd:20:43:d0:ac:59:70:fb:8b:ab:9d:3f: 7c:56:4a:4d:6a:9c:14:8e:0a:20:a9:83:12:74:7d: 1e:e9:f6:3a:95:1e:57:cc:a3:d8:66:44:e8:94:18: fc:d9:d8:a1:7a:4b:fc:38:fd:68:de:33:f0:13:0e: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:7E:9B:71:29:02:B7:AF:BE:3D:7E:AA:99:29:6D:B3:62:20:49 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:80:3c:6e:cc:cc:64:c7:d9:16:6a:10:e2:7b:0e:11:d8:2c: 45:a2:83:5b:8c:96:f6:e9:f5:83:e1:3c:7b:1b:2c:b2:b9:13: 83:47:29:ef:8c:e8:a3:1e:1e:59:99:60:3a:ce:ee:81:dd:2f: af:fe:8f:18:20:5f:3a:72:9e:58:5f:a3:4e:b7:07:88:dd:b7: c5:2e:57:1e:88:93:7d:48:43:dd:fc:99:4e:84:7e:bd:69:30: d7:61:5a:b2:a4:84:d3:c5:e7:4e:6b:63:37:16:99:82:cd:06: 2c:56:18:87:f8:ed:70:b9:2a:4c:16:60:a8:b4:31:96:fe:00: 9c:d1:f5:22:33:81:69:cd:fb:1e:c4:2f:38:b8:75:83:c0:58: 7a:21:0e:16:a4:b2:89:8c:05:79:99:90:01:c5:ef:6a:ba:36: e0:e7:ad:e3:78:79:48:65:ce:1f:4b:6f:c3:f9:8c:00:99:be: bd:96:2c:b2:bd:38:d2:76:8f:cd:21:0f:de:4c:cf:29:14:67: bb:d9:62:88:f7:5c:bd:b2:96:00:ac:1f:f9:e3:aa:ac:01:67: db:3e:29:b9:50:56:0a:5c:f7:b1:31:ad:ed:c6:2e:7f:87:2b: fb:77:a7:4a:1f:e6:0c:38:2c:c0:7c:62:93:ea:3e:82:c4:b2: d4:93:87:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZeatgaC2PS3BnDOu/MCovX/PuR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTEyMjAwOTIwMTFaFw0yNTEyMjEwOTM5MTFaMDMxMTAvBgNV BAMTKDdGNUU3RTlCNzEyOTAyQjdBRkJFM0Q3RUFBOTkyOTZEQjM2MjIwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDox+MJUjZyXEQPibIUWNDFwt4N lIulF0FIHP+eubM1gSBwF6unXP3OISkB1JUh2O/utmxFEbkWgjqFqcLWL+5ppWgc PMJMf3WJv32YlVlERh1ZD9cS2BkCD+yGXnwgVN+JfFs9fHSGcdV1dqfJwatWACrB P4cJ68r8ntwRkIT+oVeSMFq2RDuF+v69IF9kJlSGbbXH/i7K3OSNkRrgrJJ8dFA7 rQO+FqfjJ1GIdjMdm+3rTOO2Txb/Ixvk69GzVkbrJwRcrc0gQ9CsWXD7i6udP3xW Sk1qnBSOCiCpgxJ0fR7p9jqVHlfMo9hmROiUGPzZ2KF6S/w4/WjeM/ATDoXNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf15+m3EpArevvj1+qpkpbbNiIEkwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnYA8bszMZMfZFmoQ4nsOEdgsRaKDW4yW9un1g+E8exsssrkTg0cp74zoox4e WZlgOs7ugd0vr/6PGCBfOnKeWF+jTrcHiN23xS5XHoiTfUhD3fyZToR+vWkw12Fa sqSE08XnTmtjNxaZgs0GLFYYh/jtcLkqTBZgqLQxlv4AnNH1IjOBac37HsQvOLh1 g8BYeiEOFqSyiYwFeZmQAcXvaro24Oet43h5SGXOH0tvw/mMAJm+vZYssr040naP zSEP3kzPKRRnu9liiPdcvbKWAKwf+eOqrAFn2z4puVBWClz3sTGt7cYuf4cr+3en Sh/mDDgswHxik+o+gsSy1JOHmA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:05 2025 by rpki-client