This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft File: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json) Hash identifier: zZbqHYQLxYS6Up0WM1yyMkqts0WO5eECJHd2YNkOCM4= Subject key identifier: 2C:25:F6:50:1B:2C:C0:4B:63:41:6C:1A:54:81:52:E6:54:63:3D:6E Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 Certificate issuer: /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Certificate serial: 1145E4E5BC7516CDDBA7FC5E114F1F33931E3FEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft Manifest number: 033E Signing time: Tue 23 Dec 2025 06:16:24 +0000 Manifest this update: Tue 23 Dec 2025 06:11:24 +0000 Manifest next update: Wed 24 Dec 2025 10:12:24 +0000 Files and hashes: 1: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: t7wZjfHEHsD5Rmlff5gVkl4UrV8eQCO1lvq1c9DJVOw=) 2: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: mXVXROdrhx5zziqcEEeWD0Vzy58pLNqk9Cz+8buZybE=) 3: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: 136rQUihFHGLuL9piqzMCJKzb/X/LkDr3T66FoDbz7g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 07:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:45:e4:e5:bc:75:16:cd:db:a7:fc:5e:11:4f:1f:33:93:1e:3f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Validity Not Before: Dec 23 06:11:24 2025 GMT Not After : Dec 24 10:12:24 2025 GMT Subject: CN=2C25F6501B2CC04B63416C1A548152E654633D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:1e:1b:59:69:9e:9f:33:ea:43:9c:86:cd: 3d:f3:2c:51:6f:3e:4f:58:0f:d9:c1:12:b2:13:fd: 66:9b:16:e2:3f:be:fb:aa:3e:a4:1d:7e:49:35:a1: c2:0d:1d:95:7e:df:a9:c7:96:f8:09:17:65:e5:c8: 7f:1b:ee:22:ed:40:5f:87:0b:f4:ac:47:e3:42:fc: ad:a3:b3:32:42:51:71:f4:34:a4:26:b4:0a:a5:8a: d7:47:81:3c:79:67:07:3e:7a:48:63:12:78:a0:79: 18:ec:aa:f9:e9:15:e1:53:bb:dd:42:21:c6:74:0c: 34:f8:a2:36:e4:0a:0e:88:9d:50:16:85:b1:8a:9e: b0:53:b0:ee:5d:61:bb:4c:d7:f8:47:00:9f:d2:d0: f8:a0:d6:55:46:ee:1d:36:16:8c:34:15:94:cf:09: a4:55:2b:f5:33:f8:92:9b:84:0b:b0:2e:67:ab:00: 00:5d:0d:3e:d6:f0:e6:5d:cb:16:89:ec:50:91:48: 9f:25:f3:bd:f8:bb:37:38:4a:f4:93:0c:96:1d:6a: eb:fd:0f:3f:c5:63:2f:5e:e5:e4:50:4c:e0:16:55: 25:1c:4b:f8:5f:d4:d7:43:54:f2:80:d2:2e:af:03: 0d:5e:cd:2d:7b:50:2a:26:30:3b:bd:fa:82:8f:1a: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:25:F6:50:1B:2C:C0:4B:63:41:6C:1A:54:81:52:E6:54:63:3D:6E X509v3 Authority Key Identifier: keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:05:63:c5:da:ed:12:d1:42:9f:f6:f2:55:af:cf:55:df:d8: 43:92:f0:43:88:0c:8a:be:a5:18:de:e6:c5:38:f2:cf:45:cf: 9e:96:dc:50:1a:7d:66:a8:9e:fe:bd:48:c1:e7:8b:ef:70:54: 16:fd:80:76:4c:8e:88:c9:ce:d2:72:6f:96:78:47:f2:2d:0b: be:4b:fc:7f:b6:9e:06:06:9c:d8:9d:eb:34:dd:e1:a1:05:19: 64:d4:61:6c:b5:b7:18:3d:e3:48:4f:d9:4d:28:b4:40:25:b3: e6:f0:d7:7e:07:ba:69:40:e9:d3:22:2b:b1:79:fe:81:3f:18: 73:58:c8:c2:3c:51:04:6c:b1:5b:8b:c5:a0:ba:56:31:fe:c3: a3:12:93:e2:9c:23:ae:d1:73:b2:a3:ee:d8:af:dc:80:75:94: 11:ed:b0:5a:88:f6:a9:76:f1:89:07:43:ff:11:db:50:7e:1d: 2d:0a:1f:b4:40:6b:07:97:45:f4:1f:e8:93:da:7b:a1:1f:3e: 0b:c5:87:d0:c0:eb:96:7e:70:b1:cb:29:98:07:ae:e2:d6:b3: 58:8c:a7:08:00:1b:86:21:01:8b:5d:9f:14:eb:77:9d:71:6f: f9:25:a2:6a:68:aa:d2:87:ac:6f:68:6e:2d:b2:43:da:ee:8b: 7f:3b:08:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEUXk5bx1Fs3bp/xeEU8fM5MeP+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFRjJEM0VBNUJEMTg3QzQ1RUE2RDNBOEZBRjcxQ0Qx NUY3RDJBNzAeFw0yNTEyMjMwNjExMjRaFw0yNTEyMjQxMDEyMjRaMDMxMTAvBgNV BAMTKDJDMjVGNjUwMUIyQ0MwNEI2MzQxNkMxQTU0ODE1MkU2NTQ2MzNENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetB4bWWmenzPqQ5yGzT3zLFFv Pk9YD9nBErIT/WabFuI/vvuqPqQdfkk1ocINHZV+36nHlvgJF2XlyH8b7iLtQF+H C/SsR+NC/K2jszJCUXH0NKQmtAqlitdHgTx5Zwc+ekhjEnigeRjsqvnpFeFTu91C IcZ0DDT4ojbkCg6InVAWhbGKnrBTsO5dYbtM1/hHAJ/S0Pig1lVG7h02Fow0FZTP CaRVK/Uz+JKbhAuwLmerAABdDT7W8OZdyxaJ7FCRSJ8l8734uzc4SvSTDJYdauv9 Dz/FYy9e5eRQTOAWVSUcS/hf1NdDVPKA0i6vAw1ezS17UComMDu9+oKPGlFvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULCX2UBsswEtjQWwaVIFS5lRjPW4wHwYDVR0j BBgwFoAUzO8tPqW9GHxF6m06j69xzRX30qcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1 WDYvMS9DQ0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRUYyRDNFQTVCRDE4N0M0 NUVBNkQzQThGQUY3MUNEMTVGN0QyQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1WDYvMS9D Q0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQQVjxdrtEtFCn/byVa/PVd/YQ5LwQ4gMir6lGN7mxTjyz0XPnpbcUBp9Zqie /r1IweeL73BUFv2AdkyOiMnO0nJvlnhH8i0Lvkv8f7aeBgac2J3rNN3hoQUZZNRh bLW3GD3jSE/ZTSi0QCWz5vDXfge6aUDp0yIrsXn+gT8Yc1jIwjxRBGyxW4vFoLpW Mf7DoxKT4pwjrtFzsqPu2K/cgHWUEe2wWoj2qXbxiQdD/xHbUH4dLQoftEBrB5dF 9B/ok9p7oR8+C8WH0MDrln5wscspmAeu4tazWIynCAAbhiEBi12fFOt3nXFv+SWi amiq0oesb2huLbJD2u6LfzsIXQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:15 2025 by rpki-client