This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft File: CF357620357B25129A68E7D55D716CED7E4E1516.mft (raw, json) Hash identifier: wEeTDhoN7E/7jsI+AbVnGqcbi3bY0PflaRnyGArmt3w= Subject key identifier: 2F:6F:0D:AB:67:60:B6:52:10:0F:11:ED:BA:F9:04:A2:8A:AF:7D:19 Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16 Certificate issuer: /CN=CF357620357B25129A68E7D55D716CED7E4E1516 Certificate serial: 47D6ADAA239B4285FD064914B7053D035E035446 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer Subject info access: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft Manifest number: 0225 Signing time: Sun 21 Dec 2025 17:11:48 +0000 Manifest this update: Sun 21 Dec 2025 17:06:48 +0000 Manifest next update: Mon 22 Dec 2025 17:43:48 +0000 Files and hashes: 1: CF357620357B25129A68E7D55D716CED7E4E1516.crl (hash: pzYjGmTi7O0Q++lUzy61SjbL5KwF3Pge4OZ0RiIQxQw=) 2: 323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (hash: lU6VrvpBYvmFhj9XMV8wCL1iuM4M5kJ+oQfWSvxRzlc=) 3: 3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (hash: FrtYQgGX76cnE7uQafuRYboGA917Ay3diGxJLT0XKGM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 17:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d6:ad:aa:23:9b:42:85:fd:06:49:14:b7:05:3d:03:5e:03:54:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516 Validity Not Before: Dec 21 17:06:48 2025 GMT Not After : Dec 22 17:43:48 2025 GMT Subject: CN=2F6F0DAB6760B652100F11EDBAF904A28AAF7D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:30:65:db:6b:32:22:3b:08:a9:e6:7c:71: 3a:62:9b:86:1a:1b:9c:5b:68:23:b9:cc:32:4d:11: 7a:d4:d9:a3:7d:a7:06:b8:25:da:b5:fb:ba:e2:3f: 7e:93:4e:d2:05:1c:32:60:81:4e:72:a8:1b:8a:d8: 9f:f0:65:05:e1:ef:81:7d:1d:5b:ba:2d:a2:b1:2d: dc:39:6a:77:00:41:f9:d6:3e:62:73:f9:5f:81:11: 29:7f:65:ca:85:50:e4:c7:67:6b:e0:7c:c4:ca:dd: e4:61:13:6b:88:dd:95:21:39:24:da:3b:40:be:ba: d2:ec:09:e7:c5:d9:96:38:20:77:f4:f5:22:2d:fd: 04:19:86:b5:00:cc:3e:b4:d3:9b:75:37:0c:b5:91: 8d:5e:76:a6:35:d5:5b:b5:68:9a:8e:ff:fa:6c:47: e7:65:cc:37:ec:52:c8:53:1b:58:95:51:1c:6d:53: de:dc:7f:2a:d5:ed:8b:a1:aa:3f:aa:9e:33:ac:e3: be:74:b2:a0:a9:f1:3b:b2:37:5a:33:16:37:2b:71: db:9a:51:be:b8:b4:e2:80:16:28:0c:2d:63:26:38: 93:b8:6d:b4:68:02:54:0e:ef:80:4a:89:c3:70:75: dd:d7:86:28:2c:b9:cc:73:ad:e8:78:43:28:bf:36: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6F:0D:AB:67:60:B6:52:10:0F:11:ED:BA:F9:04:A2:8A:AF:7D:19 X509v3 Authority Key Identifier: keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:71:de:16:b5:e1:43:af:d0:10:08:aa:49:38:73:bb:fe:52: cd:d9:b7:90:ea:0b:fb:b8:bf:12:62:98:c6:a1:40:5d:8d:ad: 6c:b3:80:f4:57:f7:8b:80:ab:5c:77:be:b1:25:3d:e2:09:c4: a8:16:01:6d:86:2c:04:48:82:8e:5f:b5:6a:60:0c:9f:7e:56: db:0f:6c:7a:a9:c0:39:8c:c5:1e:21:66:29:11:d2:81:77:a4: 12:c9:a9:cc:c3:86:6f:1c:ae:53:68:82:46:3a:be:63:57:58: 71:32:61:f3:22:ec:b8:45:2d:2d:c2:9d:b8:b2:9c:6c:4a:00: 7a:1c:b8:64:7a:ef:e3:6c:49:e5:dc:af:fe:33:1a:61:f6:71: 65:79:9a:c4:0f:ac:8d:c9:34:52:13:ad:39:5a:f4:b3:78:c9: 67:9f:5d:4b:c0:ab:fb:65:1f:74:9c:21:05:b0:64:2c:2c:bd: 27:8f:ae:36:88:85:a1:3e:3f:12:07:f1:27:ca:99:f4:d1:df: bb:45:b4:82:14:09:a2:76:d4:ef:15:12:22:8c:99:0f:67:ef: a1:97:67:39:15:d3:0a:c4:5f:34:0d:e2:be:27:c3:d8:68:f7: 15:8e:aa:3b:77:c6:f1:7b:66:bd:df:4e:f5:13:85:41:9c:6d: f2:cd:99:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR9atqiObQoX9BkkUtwU9A14DVEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YzNTc2MjAzNTdCMjUxMjlBNjhFN0Q1NUQ3MTZDRUQ3 RTRFMTUxNjAeFw0yNTEyMjExNzA2NDhaFw0yNTEyMjIxNzQzNDhaMDMxMTAvBgNV BAMTKDJGNkYwREFCNjc2MEI2NTIxMDBGMTFFREJBRjkwNEEyOEFBRjdEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdTBl22syIjsIqeZ8cTpim4Ya G5xbaCO5zDJNEXrU2aN9pwa4Jdq1+7riP36TTtIFHDJggU5yqBuK2J/wZQXh74F9 HVu6LaKxLdw5ancAQfnWPmJz+V+BESl/ZcqFUOTHZ2vgfMTK3eRhE2uI3ZUhOSTa O0C+utLsCefF2ZY4IHf09SIt/QQZhrUAzD6005t1Nwy1kY1edqY11Vu1aJqO//ps R+dlzDfsUshTG1iVURxtU97cfyrV7Yuhqj+qnjOs4750sqCp8TuyN1ozFjcrcdua Ub64tOKAFigMLWMmOJO4bbRoAlQO74BKicNwdd3Xhigsucxzreh4Qyi/NuYJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL28Nq2dgtlIQDxHtuvkEooqvfRkwHwYDVR0j BBgwFoAUzzV2IDV7JRKaaOfVXXFs7X5OFRYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEFBUm9ZRTZuZzVlR1p6ZjMxRVI2SGV2YmVNNWVpcnF2UEQ1NENrcExZ Y3ovMC9DRjM1NzYyMDM1N0IyNTEyOUE2OEU3RDU1RDcxNkNFRDdFNEUxNTE2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMzU3NjIwMzU3QjI1MTI5 QTY4RTdENTVENzE2Q0VEN0U0RTE1MTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEFBUm9ZRTZuZzVlR1p6ZjMxRVI2SGV2YmVNNWVpcnF2UEQ1NENrcExZY3ovMC9D RjM1NzYyMDM1N0IyNTEyOUE2OEU3RDU1RDcxNkNFRDdFNEUxNTE2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ3HeFrXhQ6/QEAiqSThzu/5Szdm3kOoL+7i/EmKYxqFAXY2tbLOA9Ff3i4Cr XHe+sSU94gnEqBYBbYYsBEiCjl+1amAMn35W2w9seqnAOYzFHiFmKRHSgXekEsmp zMOGbxyuU2iCRjq+Y1dYcTJh8yLsuEUtLcKduLKcbEoAehy4ZHrv42xJ5dyv/jMa YfZxZXmaxA+sjck0UhOtOVr0s3jJZ59dS8Cr+2UfdJwhBbBkLCy9J4+uNoiFoT4/ EgfxJ8qZ9NHfu0W0ghQJonbU7xUSIoyZD2fvoZdnORXTCsRfNA3ivifD2Gj3FY6q O3fG8Xtmvd9O9ROFQZxt8s2ZgQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:00:55 2025 by rpki-client