This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft File: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json) Hash identifier: bk6HN9PKBEey/VqNYNYlpW9vXU8PINxlJs1EKZ/csuA= Subject key identifier: CA:F1:34:03:D7:27:04:FF:64:D1:46:60:4A:9E:67:2C:71:F5:2B:CD Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 Certificate issuer: /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Certificate serial: 45F3B3B8A2283F60A83346DBD1EEB1F0B7F4F19F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft Manifest number: 033D Signing time: Mon 22 Dec 2025 14:10:39 +0000 Manifest this update: Mon 22 Dec 2025 14:05:39 +0000 Manifest next update: Tue 23 Dec 2025 14:13:39 +0000 Files and hashes: 1: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: t7wZjfHEHsD5Rmlff5gVkl4UrV8eQCO1lvq1c9DJVOw=) 2: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: ZiqE9zY7Mdr9+W55BXMF5GLpvg7WiC3UCol2LFbkO8M=) 3: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: mXVXROdrhx5zziqcEEeWD0Vzy58pLNqk9Cz+8buZybE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 14:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f3:b3:b8:a2:28:3f:60:a8:33:46:db:d1:ee:b1:f0:b7:f4:f1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Validity Not Before: Dec 22 14:05:39 2025 GMT Not After : Dec 23 14:13:39 2025 GMT Subject: CN=CAF13403D72704FF64D146604A9E672C71F52BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:87:7b:25:46:d2:0d:b0:2f:b8:25:68:0b: e9:00:18:d2:26:ce:a5:d2:3c:bb:7a:f9:3b:97:f0: ba:07:c7:75:94:08:dd:04:7e:de:d8:02:04:06:59: 97:d1:f1:f9:42:9a:14:a8:02:dc:c6:a8:9a:ea:df: 89:2e:b8:0b:ed:0e:e4:e4:e9:cc:01:11:8d:49:ce: 20:02:51:45:88:de:30:1d:74:91:1b:b6:10:52:ef: a6:33:b4:75:53:41:71:c1:69:85:bd:6e:c3:e2:f4: 5f:5c:7a:ef:cf:8a:86:ba:68:12:62:3b:ef:e3:ad: f0:b3:c8:8a:87:a6:bc:3b:bd:54:d5:8b:58:f3:95: e2:82:f5:71:49:8b:66:3f:27:34:db:af:1d:45:7d: e9:a8:01:44:f7:3c:79:1e:8f:77:de:fc:05:21:9f: a3:c9:5d:1d:40:7c:31:80:47:89:69:f4:2e:4b:6c: ee:46:d1:23:11:1e:da:a7:b3:03:a2:e7:1c:3a:bd: 62:b3:cb:04:7c:1c:a1:41:47:67:1f:ba:d4:84:6e: 37:ce:37:9f:1e:7c:be:dc:b5:58:95:d3:9c:b7:36: 09:96:96:6e:ca:30:d0:13:37:d0:d3:81:8f:28:f9: 5e:48:57:b7:58:31:a7:27:1c:60:8a:c0:d0:25:09: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F1:34:03:D7:27:04:FF:64:D1:46:60:4A:9E:67:2C:71:F5:2B:CD X509v3 Authority Key Identifier: keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a8:e2:6e:39:77:a9:c5:07:64:29:9d:6c:76:29:dd:29:3b: 2d:66:25:a7:60:45:26:34:81:b6:d4:44:44:0b:9b:e7:2a:a5: ac:ea:2f:f3:9b:6d:2b:b8:91:5c:f0:9a:19:15:06:34:9a:7d: bf:11:82:c6:15:30:d1:02:26:87:ce:78:f3:07:b1:b7:9a:a3: 7c:7f:8d:ff:26:f5:43:88:e1:91:da:ca:ae:23:a3:35:6f:f6: 6e:d0:32:3a:b7:0a:e9:82:9f:0a:b2:9c:84:ac:14:91:f1:b5: f3:96:b1:6f:b2:fd:3d:50:f7:c2:35:de:eb:71:81:e9:84:dc: ae:4f:58:bb:dc:08:e6:5f:5c:cf:9a:a4:28:b7:da:51:6a:24: 5a:b4:06:d2:ca:08:82:32:f8:fb:87:c8:e1:1f:a4:d7:b0:f0: fd:6f:1f:68:d3:75:15:cb:c4:8a:26:2e:77:89:ed:c8:2e:4d: 83:e8:37:91:41:6e:3d:36:c3:d2:f6:af:00:9b:2b:82:d2:26: 38:72:ce:f4:16:0e:36:39:82:0b:69:a5:cd:32:b6:cd:e0:09: 76:19:19:c9:ba:cd:b0:1a:80:dc:c1:34:70:f3:76:4d:df:f2: b5:32:f7:33:78:53:f2:e3:7e:c0:78:27:bc:2b:46:5c:41:e7: a4:a9:b4:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURfOzuKIoP2CoM0bb0e6x8Lf08Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFRjJEM0VBNUJEMTg3QzQ1RUE2RDNBOEZBRjcxQ0Qx NUY3RDJBNzAeFw0yNTEyMjIxNDA1MzlaFw0yNTEyMjMxNDEzMzlaMDMxMTAvBgNV BAMTKENBRjEzNDAzRDcyNzA0RkY2NEQxNDY2MDRBOUU2NzJDNzFGNTJCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqId7JUbSDbAvuCVoC+kAGNIm zqXSPLt6+TuX8LoHx3WUCN0Eft7YAgQGWZfR8flCmhSoAtzGqJrq34kuuAvtDuTk 6cwBEY1JziACUUWI3jAddJEbthBS76YztHVTQXHBaYW9bsPi9F9ceu/Pioa6aBJi O+/jrfCzyIqHprw7vVTVi1jzleKC9XFJi2Y/JzTbrx1FfemoAUT3PHkej3fe/AUh n6PJXR1AfDGAR4lp9C5LbO5G0SMRHtqnswOi5xw6vWKzywR8HKFBR2cfutSEbjfO N58efL7ctViV05y3NgmWlm7KMNATN9DTgY8o+V5IV7dYMacnHGCKwNAlCZm/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyvE0A9cnBP9k0UZgSp5nLHH1K80wHwYDVR0j BBgwFoAUzO8tPqW9GHxF6m06j69xzRX30qcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1 WDYvMS9DQ0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRUYyRDNFQTVCRDE4N0M0 NUVBNkQzQThGQUY3MUNEMTVGN0QyQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1WDYvMS9D Q0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASqjibjl3qcUHZCmdbHYp3Sk7LWYlp2BFJjSBttRERAub5yqlrOov85ttK7iR XPCaGRUGNJp9vxGCxhUw0QImh8548wext5qjfH+N/yb1Q4jhkdrKriOjNW/2btAy OrcK6YKfCrKchKwUkfG185axb7L9PVD3wjXe63GB6YTcrk9Yu9wI5l9cz5qkKLfa UWokWrQG0soIgjL4+4fI4R+k17Dw/W8faNN1FcvEiiYud4ntyC5Ng+g3kUFuPTbD 0vavAJsrgtImOHLO9BYONjmCC2mlzTK2zeAJdhkZybrNsBqA3ME0cPN2Td/ytTL3 M3hT8uN+wHgnvCtGXEHnpKm0ig== -----END CERTIFICATE-----Generated at Tue Dec 23 07:06:33 2025 by rpki-client