This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft File: 687D5F008B520395E4289191144220E2C472A669.mft (raw, json) Hash identifier: amoY8OMX8v4lqsjirUefRCxULrro/z9yblgoH76RaZw= Subject key identifier: 42:E1:8A:0C:E8:9D:C8:13:D7:23:18:5C:4C:8F:10:D6:A9:5A:A0:99 Authority key identifier: 68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69 Certificate issuer: /CN=687D5F008B520395E4289191144220E2C472A669 Certificate serial: 25912CAFE3BB5A785126C76521B5476CBBE75A32 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft Manifest number: 7E Signing time: Wed 24 Dec 2025 02:58:19 +0000 Manifest this update: Wed 24 Dec 2025 02:53:19 +0000 Manifest next update: Thu 25 Dec 2025 05:43:19 +0000 Files and hashes: 1: 323830343a326232343a3a2f33322d3438203d3e20323635313337.roa (hash: ijEr3f7j1DppUG1sCN5o0v9QuT/FdCpQy+KDTJiXd6E=) 2: 687D5F008B520395E4289191144220E2C472A669.crl (hash: L36PETeZntbRgzsSzSQWkZFJ33xwi3KJf7dEoLQJy94=) 3: 3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa (hash: kdjvMgt4WKFDG11VUvvzllBV2iitiEy2lt7hQDUlrNU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 05:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:91:2c:af:e3:bb:5a:78:51:26:c7:65:21:b5:47:6c:bb:e7:5a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687D5F008B520395E4289191144220E2C472A669 Validity Not Before: Dec 24 02:53:19 2025 GMT Not After : Dec 25 05:43:19 2025 GMT Subject: CN=42E18A0CE89DC813D723185C4C8F10D6A95AA099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:41:d3:f2:7f:6a:ff:0e:15:e7:88:88:b3: 18:b2:ac:e9:13:a3:d6:07:a5:89:ff:46:df:d0:89: 3b:ac:e2:98:c6:13:23:3c:d7:29:ba:6b:ce:d3:48: 3c:30:a8:2d:1a:75:2e:87:d6:b6:1b:6b:dd:57:2c: 7d:a9:a4:3e:f8:0e:e9:b4:3b:18:0e:5a:7f:94:c4: ab:bd:d3:ab:fe:41:bb:b2:b0:76:82:e0:4e:5b:5f: 77:73:1c:94:dc:b4:d2:28:58:96:79:aa:c9:26:ab: c8:3c:80:5c:eb:dc:a7:8b:e3:ce:37:4b:3d:7b:34: 5f:89:4c:3d:6f:bc:d9:96:ec:0b:51:3d:b4:bd:07: dd:08:d2:60:66:03:3d:ce:f7:15:bc:df:08:94:bf: 10:24:0c:d2:8c:20:81:85:c1:6a:6e:7c:d3:c9:cf: 0b:27:63:a5:1f:41:48:27:ee:2a:20:54:1c:09:18: e6:6b:d6:ed:3a:a7:95:4a:ce:8a:ab:51:71:33:80: e1:fd:15:ae:75:10:b2:20:ee:e1:e0:48:9f:b3:0a: 3c:3b:44:65:e1:4c:c5:ea:34:33:5d:9a:94:7e:c4: 18:6f:ea:79:f7:01:bc:b0:b4:28:36:00:94:e0:5c: e2:50:b4:0d:1a:75:72:0a:21:c5:09:8f:38:12:a4: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E1:8A:0C:E8:9D:C8:13:D7:23:18:5C:4C:8F:10:D6:A9:5A:A0:99 X509v3 Authority Key Identifier: keyid:68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e6:c7:b7:dd:03:e8:c7:5c:d1:33:93:89:76:db:6a:cf:79: 00:b1:a3:30:8c:a2:1d:fe:bb:fc:0d:c0:18:de:34:06:46:af: 95:c0:16:6c:af:ca:81:1b:70:c0:4e:de:1c:dd:b6:04:7c:69: 3f:44:5b:7c:2e:b5:55:74:af:3f:80:78:cd:36:dc:a3:38:eb: f9:5d:b5:5f:a7:91:39:a8:53:12:01:3b:4a:fd:4b:7a:25:bd: 45:5a:c4:7b:79:51:9c:84:64:a6:9c:9c:4f:cc:a1:c8:7e:f5: 8c:7f:a0:09:46:de:6c:26:f5:6d:d1:d6:0a:7b:01:5c:75:26: 05:92:07:f9:00:6e:37:e5:7b:2e:e1:55:79:05:5a:12:64:34: b5:81:2c:0f:67:37:66:d8:ef:71:37:bb:47:f8:d9:0c:53:13: ed:5c:c8:9f:67:c2:5d:0a:d0:09:49:3f:16:10:17:40:20:b1: 0f:45:45:65:96:7d:ae:86:a5:4e:a6:e9:7e:61:9d:2b:4e:aa: df:24:d0:06:ec:e1:4f:9c:83:dd:69:3e:53:be:6d:98:be:b7: c9:de:d9:20:e3:d7:79:76:b5:93:ca:2c:f7:f4:07:08:ef:19: ae:b1:41:15:9e:ba:ac:0e:54:93:ba:a2:00:8c:88:0c:5a:85: 58:9e:09:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJZEsr+O7WnhRJsdlIbVHbLvnWjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3RDVGMDA4QjUyMDM5NUU0Mjg5MTkxMTQ0MjIwRTJD NDcyQTY2OTAeFw0yNTEyMjQwMjUzMTlaFw0yNTEyMjUwNTQzMTlaMDMxMTAvBgNV BAMTKDQyRTE4QTBDRTg5REM4MTNENzIzMTg1QzRDOEYxMEQ2QTk1QUEwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXkHT8n9q/w4V54iIsxiyrOkT o9YHpYn/Rt/QiTus4pjGEyM81ym6a87TSDwwqC0adS6H1rYba91XLH2ppD74Dum0 OxgOWn+UxKu906v+QbuysHaC4E5bX3dzHJTctNIoWJZ5qskmq8g8gFzr3KeL4843 Sz17NF+JTD1vvNmW7AtRPbS9B90I0mBmAz3O9xW83wiUvxAkDNKMIIGFwWpufNPJ zwsnY6UfQUgn7iogVBwJGOZr1u06p5VKzoqrUXEzgOH9Fa51ELIg7uHgSJ+zCjw7 RGXhTMXqNDNdmpR+xBhv6nn3AbywtCg2AJTgXOJQtA0adXIKIcUJjzgSpHTjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQuGKDOidyBPXIxhcTI8Q1qlaoJkwHwYDVR0j BBgwFoAUaH1fAItSA5XkKJGRFEIg4sRypmkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdpQmZmZ3hEQnhZcWR1VkJxWFZKUFJ0aWdpRDFrbjVSd3k2RGVlRUt4 a0wvMC82ODdENUYwMDhCNTIwMzk1RTQyODkxOTExNDQyMjBFMkM0NzJBNjY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0Q1RjAwOEI1MjAzOTVF NDI4OTE5MTE0NDIyMEUyQzQ3MkE2NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdpQmZmZ3hEQnhZcWR1VkJxWFZKUFJ0aWdpRDFrbjVSd3k2RGVlRUt4a0wvMC82 ODdENUYwMDhCNTIwMzk1RTQyODkxOTExNDQyMjBFMkM0NzJBNjY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc+bHt90D6Mdc0TOTiXbbas95ALGjMIyiHf67/A3AGN40BkavlcAWbK/KgRtw wE7eHN22BHxpP0RbfC61VXSvP4B4zTbcozjr+V21X6eROahTEgE7Sv1LeiW9RVrE e3lRnIRkppycT8yhyH71jH+gCUbebCb1bdHWCnsBXHUmBZIH+QBuN+V7LuFVeQVa EmQ0tYEsD2c3ZtjvcTe7R/jZDFMT7VzIn2fCXQrQCUk/FhAXQCCxD0VFZZZ9roal TqbpfmGdK06q3yTQBuzhT5yD3Wk+U75tmL63yd7ZIOPXeXa1k8os9/QHCO8ZrrFB FZ66rA5Uk7qiAIyIDFqFWJ4JSw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:06:04 2025 by rpki-client