This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft File: 68EC60223DF10BE63B7A84464ACF2A9697173D75.mft (raw, json) Hash identifier: NrD6QKYUthp8OJATVO5bllUYwXDUFSLm3IXA4DgvUi8= Subject key identifier: 97:7F:8C:A0:82:13:84:C7:37:2C:BA:B3:85:F9:F9:D6:0B:6E:63:A9 Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 Certificate issuer: /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Certificate serial: 5CD6E0EF1C91B6284E544B83DD57DCA3C1F5D8FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft Manifest number: 0334 Signing time: Sun 21 Dec 2025 12:42:57 +0000 Manifest this update: Sun 21 Dec 2025 12:37:57 +0000 Manifest next update: Mon 22 Dec 2025 15:52:57 +0000 Files and hashes: 1: 68EC60223DF10BE63B7A84464ACF2A9697173D75.crl (hash: IeKT39UPZboX0doNgUsvQ0I+si66VfnBWXxzPG68Ajc=) 2: 323830343a326233343a3a2f33322d3336203d3e20323635313430.roa (hash: e293ucudGtZaweGXAccg++hTWsDiYVPUspL2krLmXvw=) 3: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (hash: jKf9Vk2YfC8ukz9g1OK429wD3IUbFlCEsk6xy7G4mRU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 15:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d6:e0:ef:1c:91:b6:28:4e:54:4b:83:dd:57:dc:a3:c1:f5:d8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Validity Not Before: Dec 21 12:37:57 2025 GMT Not After : Dec 22 15:52:57 2025 GMT Subject: CN=977F8CA0821384C7372CBAB385F9F9D60B6E63A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:b0:ce:c4:c8:1b:9f:2e:48:08:e7:2a:91: 6a:fe:96:6e:ed:5f:80:cb:63:3f:eb:22:9c:ef:17: ed:12:5d:fb:86:88:43:e1:a6:72:4a:0b:72:23:cc: dc:65:2b:6c:a7:d9:87:c5:56:ef:12:4e:fb:02:73: 3e:8b:52:9f:d7:40:f4:cf:47:d3:b7:ac:31:d1:d8: c0:e5:e0:e1:f9:0c:46:cd:7e:24:56:65:cb:7a:57: 89:1b:dc:30:7f:11:6e:98:02:8e:cf:72:b3:5f:07: e1:ac:e4:50:fb:b2:be:9e:1c:6a:b3:13:4e:ba:e3: d7:41:c7:72:8b:60:e4:bd:43:01:5f:50:82:07:2e: 65:41:83:2e:71:82:71:e0:02:31:2f:a5:04:f7:c4: 6d:f0:5d:f0:38:6b:c8:38:6a:06:b0:93:7d:25:3f: 48:a3:ff:f3:fd:f9:c0:65:a2:7f:84:e9:62:f4:ea: 84:de:f2:f0:14:39:b0:aa:7c:ad:be:97:ba:82:ac: de:2f:7b:ef:34:fc:54:9f:9a:72:ad:9b:88:1c:4f: d6:5c:37:bd:58:6a:fb:8d:f1:53:af:da:b0:df:d3: 28:8a:76:1d:f2:00:cd:44:92:33:02:1f:e3:db:73: a3:9a:0c:10:8b:3d:70:1e:4d:6d:3a:68:6e:7d:90: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7F:8C:A0:82:13:84:C7:37:2C:BA:B3:85:F9:F9:D6:0B:6E:63:A9 X509v3 Authority Key Identifier: keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b4:57:4c:97:5f:9a:7b:bc:08:13:29:e5:00:85:7b:b7:78: a3:76:d5:c7:cd:7c:bc:8b:31:ae:65:be:9a:89:97:cc:67:68: 79:2d:13:15:a6:ea:c2:55:c0:43:29:5c:03:b0:6d:b9:b7:c6: 76:c2:86:4d:c9:4d:b0:42:11:50:b3:38:0d:d6:3e:4c:12:4e: 4c:3a:c4:3d:89:1c:68:00:b5:79:9c:75:8c:55:ba:55:48:d0: df:5d:ef:6d:33:28:93:15:c5:8e:f1:49:9c:80:f4:cd:06:6a: 17:50:b1:42:c4:69:28:fe:a2:e8:40:cd:35:f1:db:e0:e3:28: 04:d3:c1:ea:ec:61:7b:1e:f3:e7:6b:1e:27:ad:10:95:67:8c: 61:66:51:f5:41:9d:0e:7b:09:48:c9:db:51:dd:42:f5:0f:c3: 8b:69:dc:9e:e5:f8:d7:4f:c0:fc:77:69:81:66:68:83:6e:1f: 22:56:70:1e:42:4e:85:44:ec:3f:7b:74:bd:14:ad:a8:cc:7d: 4f:7e:81:2b:e8:c5:33:67:bc:f0:c2:bc:12:ea:f9:59:43:43: 35:fc:8a:aa:6b:8c:9f:82:75:79:00:29:40:ba:fa:c3:6d:2f: be:ee:8e:69:d4:37:dc:e8:86:50:67:56:5c:8e:04:e7:d3:9b: 66:45:34:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXNbg7xyRtihOVEuD3Vfco8H12PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQzYwMjIzREYxMEJFNjNCN0E4NDQ2NEFDRjJBOTY5 NzE3M0Q3NTAeFw0yNTEyMjExMjM3NTdaFw0yNTEyMjIxNTUyNTdaMDMxMTAvBgNV BAMTKDk3N0Y4Q0EwODIxMzg0QzczNzJDQkFCMzg1RjlGOUQ2MEI2RTYzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOLDOxMgbny5ICOcqkWr+lm7t X4DLYz/rIpzvF+0SXfuGiEPhpnJKC3IjzNxlK2yn2YfFVu8STvsCcz6LUp/XQPTP R9O3rDHR2MDl4OH5DEbNfiRWZct6V4kb3DB/EW6YAo7PcrNfB+Gs5FD7sr6eHGqz E06649dBx3KLYOS9QwFfUIIHLmVBgy5xgnHgAjEvpQT3xG3wXfA4a8g4agawk30l P0ij//P9+cBlon+E6WL06oTe8vAUObCqfK2+l7qCrN4ve+80/FSfmnKtm4gcT9Zc N71YavuN8VOv2rDf0yiKdh3yAM1EkjMCH+Pbc6OaDBCLPXAeTW06aG59kLXrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl3+MoIIThMc3LLqzhfn51gtuY6kwHwYDVR0j BBgwFoAUaOxgIj3xC+Y7eoRGSs8qlpcXPXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE Z24vMC82OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RUM2MDIyM0RGMTBCRTYz QjdBODQ0NjRBQ0YyQTk2OTcxNzNENzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktEZ24vMC82 OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX7RXTJdfmnu8CBMp5QCFe7d4o3bVx818vIsxrmW+momXzGdoeS0TFabqwlXA QylcA7BtubfGdsKGTclNsEIRULM4DdY+TBJOTDrEPYkcaAC1eZx1jFW6VUjQ313v bTMokxXFjvFJnID0zQZqF1CxQsRpKP6i6EDNNfHb4OMoBNPB6uxhex7z52seJ60Q lWeMYWZR9UGdDnsJSMnbUd1C9Q/Di2ncnuX410/A/HdpgWZog24fIlZwHkJOhUTs P3t0vRStqMx9T36BK+jFM2e88MK8Eur5WUNDNfyKqmuMn4J1eQApQLr6w20vvu6O adQ33OiGUGdWXI4E59ObZkU0fg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:59:09 2025 by rpki-client