This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft File: 8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft (raw, json) Hash identifier: o1xFu5M7MyGXIiBclDfQ7ubDyQPn3y4EGeUeEocXDeU= Subject key identifier: B6:D7:11:E3:3A:B1:1F:E5:E8:F8:D3:C9:E0:B1:B0:C7:96:15:46:1E Authority key identifier: 80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F Certificate issuer: /CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F Certificate serial: 2CF449FD660049BAFE703C5B87FFE6759D11CE9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft Manifest number: C2 Signing time: Wed 24 Dec 2025 10:45:50 +0000 Manifest this update: Wed 24 Dec 2025 10:40:50 +0000 Manifest next update: Thu 25 Dec 2025 12:19:50 +0000 Files and hashes: 1: 8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl (hash: KiIaZont9W4pN3W6wjlLUkqAG/zGbngHEE6ETOtaOvY=) 2: 34352e3138322e39362e302f32322d3234203d3e20323639333339.roa (hash: HQQdEDdofsnYw3yHXz+fZjeg+nu+Nry8tc0k0GOXHOk=) 3: 323830343a363331633a3a2f33322d3438203d3e20323639333339.roa (hash: HD0myhB8bn7kzpt0FynNIYGe5HWBiFi6r/TKWu/vwag=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 12:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f4:49:fd:66:00:49:ba:fe:70:3c:5b:87:ff:e6:75:9d:11:ce:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031D0E22F282EF7F099D4A03C6628FBA6DB248F Validity Not Before: Dec 24 10:40:50 2025 GMT Not After : Dec 25 12:19:50 2025 GMT Subject: CN=B6D711E33AB11FE5E8F8D3C9E0B1B0C79615461E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:8b:6a:65:2b:5d:2d:1e:09:37:3a:01:aa: 57:0b:de:ab:b7:19:5a:32:e2:e9:2f:07:57:ed:49: 5a:ef:e3:1a:ba:dc:e9:45:88:53:ef:94:0a:f2:75: a6:f6:36:11:64:37:96:ec:66:b7:59:40:19:ef:66: 31:30:b8:a6:ca:48:6d:18:9b:17:80:84:74:e5:30: 0b:04:d4:2c:6c:cf:79:31:d3:d9:86:84:b9:f1:2a: 4b:0f:01:93:ba:6c:57:e3:3d:c4:f6:b1:26:3b:55: 7a:3a:85:66:07:a2:44:9c:f1:f3:93:8f:46:d1:12: 6e:a2:61:ed:ca:14:59:39:bb:08:73:5b:97:42:33: 05:e7:5f:41:3a:1c:62:45:c9:cb:81:c7:ba:e7:70: 76:99:76:3f:17:0c:2c:74:27:ac:6c:3b:bc:db:07: 52:94:3d:64:5b:e1:5c:1d:eb:bf:d0:f2:a7:9a:d1: 6e:18:59:ad:d8:19:6b:72:93:e6:cc:24:26:85:92: 6c:e5:0b:ea:f6:53:33:3b:0f:d7:ba:9c:bb:a8:bb: 85:b4:74:2f:bd:19:d4:12:2c:a9:9f:5f:4a:96:f4: 51:9d:74:2f:27:ec:60:c9:af:f1:67:54:40:57:5d: cc:ac:8c:33:31:87:64:4c:a6:38:4f:1f:45:49:dc: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D7:11:E3:3A:B1:1F:E5:E8:F8:D3:C9:E0:B1:B0:C7:96:15:46:1E X509v3 Authority Key Identifier: keyid:80:31:D0:E2:2F:28:2E:F7:F0:99:D4:A0:3C:66:28:FB:A6:DB:24:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9CSH7hhQHsC5ciihaZjkgALtVPW9cs976GoT6XdBqxaL/0/8031D0E22F282EF7F099D4A03C6628FBA6DB248F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:33:73:1a:84:be:f8:ea:24:47:ce:00:d9:92:3f:88:37:e3: 20:6b:bd:b9:c8:08:80:9d:80:bb:de:55:45:aa:7c:73:34:22: 16:ec:29:39:8e:5d:93:82:26:c8:70:7a:41:65:eb:79:65:43: 1a:1a:83:eb:a2:7c:43:1a:65:29:81:cf:80:8f:f3:62:99:1e: c6:d5:67:9c:01:1a:dd:9d:4f:35:48:26:ec:ef:83:77:ce:39: d7:1c:54:c6:f1:20:d6:b3:f5:86:6b:86:91:70:e2:a2:b8:7c: 29:23:87:4e:87:66:1a:48:a7:1c:e1:64:21:d7:1f:08:5d:ca: e3:53:87:1b:c9:48:77:49:2e:fa:f4:79:a0:31:b0:d3:41:3d: 0d:55:00:71:6a:04:5c:ba:be:09:83:e0:8b:14:4b:c2:e5:a3: 15:62:91:63:9b:67:e4:ab:fc:86:e1:aa:ce:70:1e:16:42:a1: 98:72:ba:44:b1:5a:10:62:38:98:3b:07:e3:0a:95:e9:a4:ad: a5:2a:7b:9f:71:9d:4f:e1:5c:7f:c1:2f:93:ad:5d:9d:f6:de: a8:32:03:68:05:5b:56:32:fb:5b:2d:f6:47:13:e8:b2:38:bd: 54:56:b7:e3:50:83:91:2e:0b:e9:0c:d9:ad:bc:f2:7a:3d:c9: 80:1c:3d:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULPRJ/WYASbr+cDxbh//mdZ0RzpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMUQwRTIyRjI4MkVGN0YwOTlENEEwM0M2NjI4RkJB NkRCMjQ4RjAeFw0yNTEyMjQxMDQwNTBaFw0yNTEyMjUxMjE5NTBaMDMxMTAvBgNV BAMTKEI2RDcxMUUzM0FCMTFGRTVFOEY4RDNDOUUwQjFCMEM3OTYxNTQ2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5otqZStdLR4JNzoBqlcL3qu3 GVoy4ukvB1ftSVrv4xq63OlFiFPvlArydab2NhFkN5bsZrdZQBnvZjEwuKbKSG0Y mxeAhHTlMAsE1Cxsz3kx09mGhLnxKksPAZO6bFfjPcT2sSY7VXo6hWYHokSc8fOT j0bREm6iYe3KFFk5uwhzW5dCMwXnX0E6HGJFycuBx7rncHaZdj8XDCx0J6xsO7zb B1KUPWRb4Vwd67/Q8qea0W4YWa3YGWtyk+bMJCaFkmzlC+r2UzM7D9e6nLuou4W0 dC+9GdQSLKmfX0qW9FGddC8n7GDJr/FnVEBXXcysjDMxh2RMpjhPH0VJ3HnjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUttcR4zqxH+Xo+NPJ4LGwx5YVRh4wHwYDVR0j BBgwFoAUgDHQ4i8oLvfwmdSgPGYo+6bbJI8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUNTSDdoaFFIc0M1Y2lpaGFaamtnQUx0VlBXOWNzOTc2R29UNlhkQnF4 YUwvMC84MDMxRDBFMjJGMjgyRUY3RjA5OUQ0QTAzQzY2MjhGQkE2REIyNDhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMzFEMEUyMkYyODJFRjdG MDk5RDRBMDNDNjYyOEZCQTZEQjI0OEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUNTSDdoaFFIc0M1Y2lpaGFaamtnQUx0VlBXOWNzOTc2R29UNlhkQnF4YUwvMC84 MDMxRDBFMjJGMjgyRUY3RjA5OUQ0QTAzQzY2MjhGQkE2REIyNDhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMDNzGoS++OokR84A2ZI/iDfjIGu9ucgIgJ2Au95VRap8czQiFuwpOY5dk4Im yHB6QWXreWVDGhqD66J8QxplKYHPgI/zYpkextVnnAEa3Z1PNUgm7O+Dd8451xxU xvEg1rP1hmuGkXDiorh8KSOHTodmGkinHOFkIdcfCF3K41OHG8lId0ku+vR5oDGw 00E9DVUAcWoEXLq+CYPgixRLwuWjFWKRY5tn5Kv8huGqznAeFkKhmHK6RLFaEGI4 mDsH4wqV6aStpSp7n3GdT+Fcf8Evk61dnfbeqDIDaAVbVjL7Wy32RxPosji9VFa3 41CDkS4L6QzZrbzyej3JgBw9rQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:27:25 2025 by rpki-client