This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft File: 5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft (raw, json) Hash identifier: 7oNA0avbEqdxZ26he17QENV82hkhWVTu5ZSgrpcrbZg= Subject key identifier: 13:15:B9:F2:A3:1F:BB:5F:3E:EB:F2:5E:72:E5:25:10:B1:6E:2D:BB Authority key identifier: 5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17 Certificate issuer: /CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517 Certificate serial: 36CA01D6E332043F32754A9E0A7CD9A19DE24A1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer Subject info access: rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft Manifest number: 80 Signing time: Sat 20 Dec 2025 12:44:54 +0000 Manifest this update: Sat 20 Dec 2025 12:39:53 +0000 Manifest next update: Sun 21 Dec 2025 14:40:53 +0000 Files and hashes: 1: 5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl (hash: PkIevAjOzX/C5Ibx5PK1IIwYInynB7PR8FlG7Id5Lfs=) 2: 3136382e3139362e3233342e302f32332d3234203d3e20323635343637.roa (hash: BXHo89BoVxO/eBBnuU+52MEL4crZqXVANRb5caMCVnc=) 3: 323830343a333439383a3a2f33322d3332203d3e20323635343637.roa (hash: 4D/uPrjckjTtR2ilbkEgeu65wdvem/4E5VO6ZsCNI7M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 14:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ca:01:d6:e3:32:04:3f:32:75:4a:9e:0a:7c:d9:a1:9d:e2:4a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517 Validity Not Before: Dec 20 12:39:53 2025 GMT Not After : Dec 21 14:40:53 2025 GMT Subject: CN=1315B9F2A31FBB5F3EEBF25E72E52510B16E2DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:83:69:30:94:f6:9a:a7:75:12:b3:a8:a5: f0:78:d6:e6:25:1f:a2:02:6a:1a:11:cb:36:e7:57: 51:95:cb:35:62:5f:95:62:51:85:b1:e8:4f:c1:cb: ff:50:7f:35:d3:af:91:4d:15:e4:0a:b0:1e:3b:b7: 01:df:88:fa:8f:56:46:86:71:0d:5b:ce:ed:ba:23: ba:f1:ee:f5:a4:8b:89:25:4f:43:26:e1:1c:43:65: 90:b5:97:5d:c5:cb:d2:47:f5:37:8b:76:d4:e1:4d: 2f:36:3d:85:a3:cf:33:19:f9:1c:47:34:49:27:21: 80:c8:dc:94:9a:d1:b4:06:c5:84:ad:47:41:d5:88: 60:3d:3d:4c:1c:e5:c3:b7:19:1e:6b:44:fd:41:7e: a5:d8:bd:94:4d:e5:a3:d1:e7:30:28:71:66:49:76: a0:85:18:aa:aa:f4:ff:1a:9f:9d:6b:9e:1f:a1:60: 95:e0:3b:05:99:b2:0e:dc:8f:4f:58:19:ba:43:33: e3:02:43:6d:3d:b9:4e:d6:c5:18:4b:b2:75:44:9f: 58:77:49:45:db:90:4a:2c:e5:35:ca:39:0c:f1:ba: 13:cb:c9:9b:7c:45:8f:b7:0d:bd:a9:20:26:09:0a: 95:b5:c5:27:8e:8d:14:64:48:32:61:6b:5f:32:47: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:15:B9:F2:A3:1F:BB:5F:3E:EB:F2:5E:72:E5:25:10:B1:6E:2D:BB X509v3 Authority Key Identifier: keyid:5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:14:df:36:71:f2:74:32:01:92:85:5c:a2:d4:fb:73:02:3c: 19:46:04:56:b4:f4:b5:45:35:93:77:df:f5:32:60:74:86:30: d7:cb:78:93:0e:dc:d9:80:e4:c7:84:28:f6:28:9d:05:2b:71: 5b:aa:40:4e:ee:7a:71:1a:e8:df:c7:8b:74:19:e2:78:0e:31: b1:75:6a:67:33:a9:93:36:f5:83:1e:24:ca:8c:84:84:ab:13: 3b:82:1a:73:95:83:df:90:a8:41:ef:d9:70:e8:df:2e:80:22: 74:fc:70:3a:5d:f6:77:3a:a5:58:91:1e:e5:fa:e1:2c:c8:89: 0c:8b:de:0a:be:46:b1:ff:d9:96:8c:89:44:e6:62:34:32:4e: ff:c4:24:de:ec:f0:a3:4f:83:89:31:32:35:96:ce:f8:df:81: ac:80:76:87:19:58:2a:68:7a:9b:46:b5:78:00:46:f0:4d:85: c1:6f:35:e9:d9:7d:8a:96:4b:f0:d9:c2:11:60:38:3c:5b:25: 9c:f7:ec:3c:03:8d:d5:39:e1:20:ee:19:e8:d4:9e:77:05:e8: d4:5a:4a:82:3e:1c:0b:07:be:4e:ad:ca:88:25:4b:fc:85:2a: 0a:5f:6f:09:7f:b5:be:53:9f:19:35:a0:10:c8:be:b8:08:c5: 77:72:cc:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNsoB1uMyBD8ydUqeCnzZoZ3iSh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGM0E2Q0EwMkQxOTNEREFGNjVBQjYzMTk2N0IxMkFD Q0NEODUxNzAeFw0yNTEyMjAxMjM5NTNaFw0yNTEyMjExNDQwNTNaMDMxMTAvBgNV BAMTKDEzMTVCOUYyQTMxRkJCNUYzRUVCRjI1RTcyRTUyNTEwQjE2RTJEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLsYNpMJT2mqd1ErOopfB41uYl H6ICahoRyzbnV1GVyzViX5ViUYWx6E/By/9QfzXTr5FNFeQKsB47twHfiPqPVkaG cQ1bzu26I7rx7vWki4klT0Mm4RxDZZC1l13Fy9JH9TeLdtThTS82PYWjzzMZ+RxH NEknIYDI3JSa0bQGxYStR0HViGA9PUwc5cO3GR5rRP1BfqXYvZRN5aPR5zAocWZJ dqCFGKqq9P8an51rnh+hYJXgOwWZsg7cj09YGbpDM+MCQ209uU7WxRhLsnVEn1h3 SUXbkEos5TXKOQzxuhPLyZt8RY+3Db2pICYJCpW1xSeOjRRkSDJha18yR68/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUExW58qMfu18+6/JecuUlELFuLbswHwYDVR0j BBgwFoAUXfOmygLRk92vZatjGWexKszNhRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXpmZm9WdEM3aFVXVTQ2NjFuRmZhYTRBZGdQRWdtS1JORTk2eTFvWkhT TGUvMC81REYzQTZDQTAyRDE5M0REQUY2NUFCNjMxOTY3QjEyQUNDQ0Q4NTE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERjNBNkNBMDJEMTkzRERB RjY1QUI2MzE5NjdCMTJBQ0NDRDg1MTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXpmZm9WdEM3aFVXVTQ2NjFuRmZhYTRBZGdQRWdtS1JORTk2eTFvWkhTTGUvMC81 REYzQTZDQTAyRDE5M0REQUY2NUFCNjMxOTY3QjEyQUNDQ0Q4NTE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjhTfNnHydDIBkoVcotT7cwI8GUYEVrT0tUU1k3ff9TJgdIYw18t4kw7c2YDk x4Qo9iidBStxW6pATu56cRro38eLdBnieA4xsXVqZzOpkzb1gx4kyoyEhKsTO4Ia c5WD35CoQe/ZcOjfLoAidPxwOl32dzqlWJEe5frhLMiJDIveCr5Gsf/ZloyJROZi NDJO/8Qk3uzwo0+DiTEyNZbO+N+BrIB2hxlYKmh6m0a1eABG8E2FwW816dl9ipZL 8NnCEWA4PFslnPfsPAON1TnhIO4Z6NSedwXo1FpKgj4cCwe+Tq3KiCVL/IUqCl9v CX+1vlOfGTWgEMi+uAjFd3LMgw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:08:48 2025 by rpki-client