This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json) Hash identifier: fMQXSK7OpwJWgEBbEmVLtQds0fkvFVD+XYldpJ77CRY= Subject key identifier: 50:1B:44:3D:68:C7:EF:8A:CA:07:47:74:D6:D6:82:8F:06:BB:9D:9E Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A Certificate issuer: /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Certificate serial: 0D2F0E956DD9A39A59C4C8369455F41251B1019A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft Manifest number: 67 Signing time: Sat 20 Dec 2025 08:31:48 +0000 Manifest this update: Sat 20 Dec 2025 08:26:48 +0000 Manifest next update: Sun 21 Dec 2025 11:18:48 +0000 Files and hashes: 1: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=) 2: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: E45wDM4iM2IY7mtHi2RblNTjJ/5OrqAHroFZwzZrbx4=) 3: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 11:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2f:0e:95:6d:d9:a3:9a:59:c4:c8:36:94:55:f4:12:51:b1:01:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Validity Not Before: Dec 20 08:26:48 2025 GMT Not After : Dec 21 11:18:48 2025 GMT Subject: CN=501B443D68C7EF8ACA074774D6D6828F06BB9D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:f6:5a:e5:92:e9:98:3a:db:c0:72:f3:35: 20:e9:78:64:4d:c6:c4:0d:ac:4e:0d:4a:f0:50:e7: d0:23:2d:f0:49:b2:6d:c0:9e:77:0c:28:b7:26:ee: 8a:c8:61:35:08:45:0d:60:b2:cb:c9:49:93:54:c7: b6:c8:57:bb:9c:a1:ae:0e:ba:dc:67:9e:a7:06:95: 1b:98:01:d1:6f:e0:db:e1:08:16:82:17:28:cc:73: 38:b3:a5:a4:32:67:b3:40:4c:4d:ec:c6:d9:2f:9f: a2:fc:d8:c2:7d:89:94:a2:a8:cb:4f:73:68:10:46: 9a:0e:d3:8e:8a:90:09:42:a0:1b:3b:3b:fd:6a:94: 29:d5:eb:b7:0a:a2:b3:69:20:21:2d:90:9e:b7:df: 93:f4:e9:f7:2a:e4:53:10:7a:76:14:c9:cd:2f:73: 30:00:85:62:a1:dd:3d:c6:dc:79:e6:7f:7d:51:06: 3a:66:34:5d:8c:b4:ad:9f:cc:2e:43:d3:fb:a6:81: 51:41:4c:ed:c9:92:cb:4f:23:00:dd:42:3a:a3:7f: de:db:36:37:1a:e9:0d:17:1e:1e:b7:bf:a4:b7:0e: fd:93:55:c7:a3:58:c4:f8:a6:a7:cb:c7:bc:80:d3: cb:90:9f:31:6e:b6:a1:f4:e2:51:2c:0a:9f:3a:a6: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1B:44:3D:68:C7:EF:8A:CA:07:47:74:D6:D6:82:8F:06:BB:9D:9E X509v3 Authority Key Identifier: keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:82:8f:d1:34:2f:4f:13:17:b6:ab:93:de:ed:4f:d1:d7:3e: 15:5f:26:1d:44:b1:cb:aa:2d:a6:8e:96:08:21:de:a6:38:f6: 5b:55:42:8f:56:66:75:8b:43:55:9d:e6:48:93:0f:d6:bb:48: ca:8c:35:6a:a8:c5:67:f7:93:cd:4f:01:d9:2d:5e:61:43:ff: ce:d8:fc:8a:d3:35:b5:30:d7:8f:f4:7e:7e:56:05:1d:b2:3d: 07:31:f9:57:2c:1b:2c:c7:54:32:b2:d8:c8:bc:df:88:cd:cf: 4a:33:ec:a4:88:c6:8f:94:d1:76:c9:42:1b:db:5d:76:62:03: d9:b3:0f:1d:0a:4c:46:6a:e3:7d:48:f2:53:1c:c2:98:bd:7e: a8:ba:e2:8b:ac:18:c8:35:cb:ad:57:a2:17:e4:41:c9:a1:81: 33:f2:55:e3:f0:ad:e3:8f:8f:04:e5:60:d1:b0:64:e8:73:61: d1:8f:1e:90:a4:86:49:4b:db:c2:a4:79:eb:0e:3e:62:79:72: 3a:0d:48:22:d3:92:65:28:aa:42:c1:41:26:9a:0a:ae:94:3d: 18:64:14:64:23:ac:ac:8e:f0:5a:6b:11:0e:f1:3d:20:11:cd: a6:c6:95:c9:ec:d1:54:af:10:e5:6f:83:71:1c:ac:d5:7c:2d: 76:42:2a:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDS8OlW3Zo5pZxMg2lFX0ElGxAZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhEMUIyMDdENUFBOTcyODE3MzIwNEE4RENFQjhBQTZF NDVCQkMwQTAeFw0yNTEyMjAwODI2NDhaFw0yNTEyMjExMTE4NDhaMDMxMTAvBgNV BAMTKDUwMUI0NDNENjhDN0VGOEFDQTA3NDc3NEQ2RDY4MjhGMDZCQjlEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9vZa5ZLpmDrbwHLzNSDpeGRN xsQNrE4NSvBQ59AjLfBJsm3AnncMKLcm7orIYTUIRQ1gssvJSZNUx7bIV7ucoa4O utxnnqcGlRuYAdFv4NvhCBaCFyjMczizpaQyZ7NATE3sxtkvn6L82MJ9iZSiqMtP c2gQRpoO046KkAlCoBs7O/1qlCnV67cKorNpICEtkJ6335P06fcq5FMQenYUyc0v czAAhWKh3T3G3Hnmf31RBjpmNF2MtK2fzC5D0/umgVFBTO3JkstPIwDdQjqjf97b Njca6Q0XHh63v6S3Dv2TVcejWMT4pqfLx7yA08uQnzFutqH04lEsCp86pu6tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUBtEPWjH74rKB0d01taCjwa7nZ4wHwYDVR0j BBgwFoAUiNGyB9WqlygXMgSo3OuKpuRbvAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktl eFEvMC84OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RDFCMjA3RDVBQTk3Mjgx NzMyMDRBOERDRUI4QUE2RTQ1QkJDMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktleFEvMC84 OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5oKP0TQvTxMXtquT3u1P0dc+FV8mHUSxy6otpo6WCCHepjj2W1VCj1ZmdYtD VZ3mSJMP1rtIyow1aqjFZ/eTzU8B2S1eYUP/ztj8itM1tTDXj/R+flYFHbI9BzH5 VywbLMdUMrLYyLzfiM3PSjPspIjGj5TRdslCG9tddmID2bMPHQpMRmrjfUjyUxzC mL1+qLrii6wYyDXLrVeiF+RByaGBM/JV4/Ct44+PBOVg0bBk6HNh0Y8ekKSGSUvb wqR56w4+YnlyOg1IItOSZSiqQsFBJpoKrpQ9GGQUZCOsrI7wWmsRDvE9IBHNpsaV yezRVK8Q5W+DcRys1XwtdkIqeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:25 2025 by rpki-client