This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json)
Hash identifier: mNsHNhhrdOxQeUi28Avm7faViaCKJoiMpOzG9s7r4Lo=
Subject key identifier: B2:7F:19:E0:C4:11:E6:F4:34:41:11:0F:BA:95:03:76:F0:8B:3A:ED
Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B
Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
Certificate serial: 5E10A109A115CEF842CB696393F812E83CD7803F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
Manifest number: 02BB
Signing time: Mon 22 Dec 2025 18:15:40 +0000
Manifest this update: Mon 22 Dec 2025 18:10:40 +0000
Manifest next update: Tue 23 Dec 2025 19:21:40 +0000
Files and hashes: 1: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=)
2: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: bfqHTUM+G5oRyE0sb04272y7+XWlnEGBGFRAHzuoidY=)
3: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl
rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 19:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:10:a1:09:a1:15:ce:f8:42:cb:69:63:93:f8:12:e8:3c:d7:80:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
Validity
Not Before: Dec 22 18:10:40 2025 GMT
Not After : Dec 23 19:21:40 2025 GMT
Subject: CN=B27F19E0C411E6F43441110FBA950376F08B3AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:c3:47:e4:d2:97:62:9b:44:26:fa:47:ef:
a6:d4:bc:a3:17:d3:d2:01:eb:5a:08:9b:1b:a7:d3:
83:37:e3:9e:be:91:76:6e:3a:8d:34:1e:a3:8d:0b:
88:ab:96:f3:72:85:bc:df:66:9f:e7:c6:48:b5:81:
a5:d9:ca:af:d5:91:e5:d5:ee:4c:15:68:b3:eb:1b:
77:75:f3:fc:d9:dc:82:f0:e8:41:79:0f:dc:73:38:
30:61:3a:fe:f2:ec:43:e0:91:87:f0:61:cf:61:78:
03:ad:b3:56:c6:c3:42:cb:b7:21:f8:d3:20:4e:83:
24:b6:f5:f0:8f:8c:df:9d:42:72:1f:5b:4b:56:4c:
fe:cd:72:39:d7:2d:55:6b:a0:26:37:88:f2:cf:42:
24:58:8a:9d:bd:d8:96:de:1d:28:b9:11:73:e0:86:
03:19:0f:16:bd:1e:ae:e0:74:09:9d:14:2c:0b:7e:
2a:3e:d1:43:c6:fe:d7:89:8f:fc:d8:d9:1e:32:fe:
5f:7b:2f:b6:a1:dd:8c:88:65:cd:8b:ab:69:73:8f:
e9:01:4d:b0:66:16:d1:a5:b2:ce:18:9f:47:47:39:
8f:3e:4e:41:70:16:9a:2e:b8:c8:32:87:7a:04:15:
85:8d:d7:23:f7:4b:67:63:14:fc:cc:45:87:db:45:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:19:E0:C4:11:E6:F4:34:41:11:0F:BA:95:03:76:F0:8B:3A:ED
X509v3 Authority Key Identifier:
keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:43:db:ef:d8:6e:2e:e7:a7:94:8f:7b:d6:ba:61:3e:05:4a:
2b:05:0d:7a:14:70:a8:6b:4e:03:9a:c5:ab:c9:0a:4c:fe:45:
99:47:d9:ed:70:47:74:9f:39:68:96:49:c5:be:c7:00:bd:e3:
94:0b:a2:76:b6:02:2e:88:f0:cc:ad:93:6d:ac:26:41:4d:0a:
4f:e9:b2:18:87:68:dc:87:ac:ca:3a:fd:e3:3d:0c:7e:5c:bf:
7e:fc:58:f3:d6:de:56:b6:10:ce:4d:a9:85:c2:e8:7a:22:d3:
db:26:7e:c1:30:a4:af:0f:5b:98:12:b0:9b:dd:be:9d:6f:3a:
05:b2:ba:ab:00:ab:0c:cc:21:19:27:b8:ed:1a:75:08:33:dc:
fe:da:32:5c:6d:d4:ae:18:d4:1e:cf:38:3f:6f:5d:79:84:19:
b9:cd:ba:80:f0:11:18:b6:c8:52:0b:75:15:8c:23:09:af:1b:
04:b7:8f:4c:ae:21:a6:e5:58:ed:aa:d3:3a:e2:5f:78:2c:93:
06:7c:34:08:be:dc:7a:64:e1:70:bd:86:88:09:9e:3b:67:a7:
3b:0e:d8:f9:12:80:d9:75:d1:7d:6f:95:08:61:2e:49:e9:f9:
50:d2:58:5d:7c:b5:bf:4b:fd:9d:59:d7:90:e6:96:a9:de:34:
a4:0e:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:42:59 2025 by rpki-client