This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft File: A2481D14FAE137FC69C2002900E8E133F914C990.mft (raw, json) Hash identifier: UlWgzXsABhq2TIEGZ8sVqMKLZxNDiVcohmiyb+4xF50= Subject key identifier: 61:4C:46:BB:67:AC:5C:6F:01:6F:E1:26:B6:F8:35:56:11:DA:49:7C Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90 Certificate issuer: /CN=A2481D14FAE137FC69C2002900E8E133F914C990 Certificate serial: 3ACFF04C5B6D39D495E25F4F8C14F7083C8FAAA9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer Subject info access: rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft Manifest number: 02C1 Signing time: Tue 23 Dec 2025 02:05:56 +0000 Manifest this update: Tue 23 Dec 2025 02:00:56 +0000 Manifest next update: Wed 24 Dec 2025 05:39:56 +0000 Files and hashes: 1: 34352e3138312e37322e302f32322d3234203d3e20323639313838.roa (hash: hOUASxBvCCCD4PM5GZ92VXoi24A8Ddn9yEedsx5o/mE=) 2: A2481D14FAE137FC69C2002900E8E133F914C990.crl (hash: YKcjBiM0OFV75G1+ffQkjhXQDyaAarrGMiX/xJOhb3U=) 3: 323830343a363063303a3a2f33322d3438203d3e20323639313838.roa (hash: xqtweC+6tTU1bwlQ+MK3FiOqpRBRMvtdCS/JwrzlI5Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 05:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cf:f0:4c:5b:6d:39:d4:95:e2:5f:4f:8c:14:f7:08:3c:8f:aa:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990 Validity Not Before: Dec 23 02:00:56 2025 GMT Not After : Dec 24 05:39:56 2025 GMT Subject: CN=614C46BB67AC5C6F016FE126B6F8355611DA497C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:c8:94:34:a5:3e:b4:b0:2b:c6:7a:87:64: 92:92:e3:94:3a:a6:f7:35:e7:7e:39:eb:41:bc:21: 3e:d5:73:15:86:b7:87:86:c8:a0:4a:94:dd:3d:7b: f9:73:60:14:e8:2d:e3:ea:0e:1e:f6:ad:07:32:27: b4:8c:52:29:ef:0f:1a:be:a0:1a:db:28:21:35:c7: 64:89:64:90:39:31:d2:e2:07:3e:0a:37:41:97:98: 46:ca:8a:a3:26:17:21:36:63:8a:8f:29:85:5f:a7: e5:52:b8:80:64:23:73:c8:c2:1b:16:88:7f:f4:0d: e3:b4:cf:17:d7:4c:b9:34:66:bb:86:2d:1a:0f:70: 01:dd:67:57:e2:46:50:cf:a9:fe:ab:5a:0c:38:b9: d2:fc:07:f3:60:fe:00:ef:fd:71:e9:a3:17:f0:5d: fe:85:82:e3:3f:b9:1a:75:ab:e3:14:d1:e6:d2:1c: 4e:b7:04:c4:ea:f5:d8:2e:72:e4:33:2c:d3:b7:31: 79:51:5a:3e:bb:f8:e1:69:1f:5f:cd:15:53:23:dd: 91:36:72:d7:ec:bb:56:d4:7c:b2:06:5c:8b:8d:19: d8:81:19:14:3f:ce:78:9a:97:70:81:46:45:48:ff: 37:60:f8:9c:f2:e7:98:01:da:a0:4a:9d:b1:79:48: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:46:BB:67:AC:5C:6F:01:6F:E1:26:B6:F8:35:56:11:DA:49:7C X509v3 Authority Key Identifier: keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:27:85:fd:88:aa:13:2d:d9:c2:c5:c8:e2:e6:35:ec:5c: 38:3b:94:53:1c:94:3c:6d:df:47:84:ef:ae:97:6e:46:b1:9e: 41:32:fe:10:9c:cf:05:71:c0:03:c0:b2:ef:74:93:c7:83:e5: 20:73:82:69:32:1f:f2:96:cc:d5:94:70:6d:21:6b:77:1d:dd: e4:f2:5f:cf:13:a1:91:50:5f:df:b4:92:d8:ea:3b:e2:aa:3d: bc:e9:25:0f:68:41:1f:c8:c3:b2:02:83:aa:ad:45:2d:93:a3: 4b:8b:b2:60:82:0e:0a:70:0f:a9:46:21:0c:94:6b:24:ea:85: 35:ff:c2:e0:5e:de:60:a0:ae:a5:68:b4:34:2c:4b:b9:56:7b: a5:22:80:43:97:af:3d:56:77:88:ce:76:2d:60:88:cd:29:d3: 0e:eb:19:1a:64:52:11:66:4e:f5:10:92:3f:29:ae:83:a6:1c: 0c:19:4e:05:7a:fb:ab:00:97:af:50:ea:b9:fe:87:fc:72:ab: f7:83:a9:45:87:69:e7:74:6f:4b:78:72:e5:f5:be:58:f4:71: 05:fe:1f:d2:c7:48:59:40:67:d5:28:ab:cc:20:b5:8c:5e:aa: 62:6a:9a:ac:a0:1d:86:01:31:26:56:b7:a6:5b:73:6d:af:d4: a7:9a:90:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOs/wTFttOdSV4l9PjBT3CDyPqqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI0ODFEMTRGQUUxMzdGQzY5QzIwMDI5MDBFOEUxMzNG OTE0Qzk5MDAeFw0yNTEyMjMwMjAwNTZaFw0yNTEyMjQwNTM5NTZaMDMxMTAvBgNV BAMTKDYxNEM0NkJCNjdBQzVDNkYwMTZGRTEyNkI2RjgzNTU2MTFEQTQ5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/ciUNKU+tLArxnqHZJKS45Q6 pvc1534560G8IT7VcxWGt4eGyKBKlN09e/lzYBToLePqDh72rQcyJ7SMUinvDxq+ oBrbKCE1x2SJZJA5MdLiBz4KN0GXmEbKiqMmFyE2Y4qPKYVfp+VSuIBkI3PIwhsW iH/0DeO0zxfXTLk0ZruGLRoPcAHdZ1fiRlDPqf6rWgw4udL8B/Ng/gDv/XHpoxfw Xf6FguM/uRp1q+MU0ebSHE63BMTq9dgucuQzLNO3MXlRWj67+OFpH1/NFVMj3ZE2 ctfsu1bUfLIGXIuNGdiBGRQ/znial3CBRkVI/zdg+Jzy55gB2qBKnbF5SBMzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYUxGu2esXG8Bb+Emtvg1VhHaSXwwHwYDVR0j BBgwFoAUokgdFPrhN/xpwgApAOjhM/kUyZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXFqMkUxVzFGQXhrY2I1TkpYTkR0eEN1Z1NUYXZtVkx3dVI4TktTYXZh Zm8vMC9BMjQ4MUQxNEZBRTEzN0ZDNjlDMjAwMjkwMEU4RTEzM0Y5MTRDOTkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyNDgxRDE0RkFFMTM3RkM2 OUMyMDAyOTAwRThFMTMzRjkxNEM5OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXFqMkUxVzFGQXhrY2I1TkpYTkR0eEN1Z1NUYXZtVkx3dVI4TktTYXZhZm8vMC9B MjQ4MUQxNEZBRTEzN0ZDNjlDMjAwMjkwMEU4RTEzM0Y5MTRDOTkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFsonhf2IqhMt2cLFyOLmNexcODuUUxyUPG3fR4TvrpduRrGeQTL+EJzPBXHA A8Cy73STx4PlIHOCaTIf8pbM1ZRwbSFrdx3d5PJfzxOhkVBf37SS2Oo74qo9vOkl D2hBH8jDsgKDqq1FLZOjS4uyYIIOCnAPqUYhDJRrJOqFNf/C4F7eYKCupWi0NCxL uVZ7pSKAQ5evPVZ3iM52LWCIzSnTDusZGmRSEWZO9RCSPymug6YcDBlOBXr7qwCX r1Dquf6H/HKr94OpRYdp53RvS3hy5fW+WPRxBf4f0sdIWUBn1SirzCC1jF6qYmqa rKAdhgExJla3pltzba/Up5qQOA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:04:50 2025 by rpki-client