This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft File: CD466D427F1FD3AB41CF878A569898A79B337545.mft (raw, json) Hash identifier: EnF3pYJ88AXmB4Ks8CXhgpKotvHwjJQ08HyN/88aNqQ= Subject key identifier: 01:E9:7C:F7:36:3B:25:FD:C3:93:02:80:88:59:18:DF:47:3F:8B:DE Authority key identifier: CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45 Certificate issuer: /CN=CD466D427F1FD3AB41CF878A569898A79B337545 Certificate serial: 3AA537A0BC935CF75F603273BF4D12DB79E1CBAB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer Subject info access: rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft Manifest number: 47 Signing time: Wed 24 Dec 2025 00:13:08 +0000 Manifest this update: Wed 24 Dec 2025 00:08:08 +0000 Manifest next update: Thu 25 Dec 2025 01:08:08 +0000 Files and hashes: 1: 323830343a393539633a3a2f33322d313238203d3e20323734353333.roa (hash: aEO4ZPibLWZ8DPxY/2v4NVH5yBsjIZnlJPaG6/91zgQ=) 2: CD466D427F1FD3AB41CF878A569898A79B337545.crl (hash: FhB38GLuutK+Ztv2sA9WkHdKGpIUs12BaDY5OzgArKY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 01:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a5:37:a0:bc:93:5c:f7:5f:60:32:73:bf:4d:12:db:79:e1:cb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD466D427F1FD3AB41CF878A569898A79B337545 Validity Not Before: Dec 24 00:08:08 2025 GMT Not After : Dec 25 01:08:08 2025 GMT Subject: CN=01E97CF7363B25FDC3930280885918DF473F8BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:4d:48:e0:3f:ff:f9:0e:76:bd:d4:2a:43: 59:30:07:14:9f:2f:49:b1:25:d5:c3:0c:30:a8:3f: 17:36:4e:f3:4f:ad:48:7f:38:b5:11:3d:db:0e:24: b1:5f:b0:5b:0b:5c:16:d3:1f:c6:f2:ef:93:f5:f1: e5:9f:e5:45:68:25:55:6e:b7:6d:68:8e:71:82:7a: 77:a0:48:30:25:d6:99:d3:ac:31:c5:dd:bd:48:31: 8a:70:43:36:1e:3a:0b:2b:92:e5:7c:bf:fc:a7:11: 28:ff:71:c9:20:5f:20:ce:0f:f3:58:6d:64:cf:d5: dc:46:7c:72:15:23:e7:3f:50:bb:07:69:a1:da:91: 21:38:8b:d3:aa:a1:6f:d8:7d:88:b5:61:23:37:ab: 98:2e:3b:f4:ec:fd:b5:52:fa:f1:76:c3:30:fd:6f: bb:3c:de:ef:f7:3c:1d:90:0d:b1:d7:0d:88:83:c3: d1:78:c7:ba:4d:81:c7:27:87:6f:7b:25:e7:2e:fb: 5a:12:b2:c8:6e:1c:3b:3d:e9:ac:0a:90:30:5f:09: ca:28:4b:3c:87:8c:1c:de:80:f3:69:41:f0:dc:a5: 40:5f:41:97:78:30:d6:0d:84:e0:c0:80:c8:0e:36: ae:47:f1:ed:eb:09:00:44:28:ef:6d:6b:b5:34:de: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E9:7C:F7:36:3B:25:FD:C3:93:02:80:88:59:18:DF:47:3F:8B:DE X509v3 Authority Key Identifier: keyid:CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:10:75:7b:5e:5d:83:ce:b3:2b:e7:d1:8a:79:dc:74:6d:14: 42:db:1e:f1:51:b2:4f:81:63:02:53:50:db:11:b4:c8:0d:02: 34:62:24:c7:ce:fb:7c:a6:a0:a7:c3:e1:b8:1e:57:39:15:84: 22:4a:a3:be:e7:24:b5:5b:fd:88:18:a7:73:87:e1:a5:61:4f: a8:9f:4a:24:a3:39:79:4f:20:19:f3:d6:f3:88:93:28:98:d6: af:29:3a:4c:23:ea:6b:64:b5:8d:5d:90:6a:58:28:97:dc:47: 78:d0:34:f4:7e:8a:d1:8b:3b:ef:a4:2a:a5:af:7c:fd:04:8e: 79:08:cd:15:49:d1:10:ec:73:be:25:c8:85:ae:6c:1f:7e:a9: 1d:43:de:6e:cd:61:ae:35:89:f9:e8:4f:5d:3f:b9:96:42:20: 1a:5d:3b:77:54:0f:2c:7c:69:8e:e0:b0:76:b2:f0:5f:0a:43: a7:0e:0c:11:6f:39:68:47:f5:f9:cb:22:6e:70:18:41:c3:86: 9d:86:5f:d9:ca:51:77:6e:05:fc:cb:32:81:22:79:a1:02:d5: c8:25:80:7e:1b:d6:e9:34:8b:d5:06:70:6d:12:8c:4b:33:2e: 1f:0a:59:36:fa:93:ab:15:2a:d3:0b:18:9b:3c:3d:42:e5:ac: 2a:cd:22:16 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUOqU3oLyTXPdfYDJzv00S23nhy6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5 QjMzNzU0NTAeFw0yNTEyMjQwMDA4MDhaFw0yNTEyMjUwMTA4MDhaMDMxMTAvBgNV BAMTKDAxRTk3Q0Y3MzYzQjI1RkRDMzkzMDI4MDg4NTkxOERGNDczRjhCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GU1I4D//+Q52vdQqQ1kwBxSf L0mxJdXDDDCoPxc2TvNPrUh/OLURPdsOJLFfsFsLXBbTH8by75P18eWf5UVoJVVu t21ojnGCenegSDAl1pnTrDHF3b1IMYpwQzYeOgsrkuV8v/ynESj/cckgXyDOD/NY bWTP1dxGfHIVI+c/ULsHaaHakSE4i9OqoW/YfYi1YSM3q5guO/Ts/bVS+vF2wzD9 b7s83u/3PB2QDbHXDYiDw9F4x7pNgccnh297Jecu+1oSsshuHDs96awKkDBfCcoo SzyHjBzegPNpQfDcpUBfQZd4MNYNhODAgMgONq5H8e3rCQBEKO9ta7U03jrdAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAel89zY7Jf3DkwKAiFkY30c/i94wHwYDVR0j BBgwFoAUzUZtQn8f06tBz4eKVpiYp5szdUUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Cbm1MWEpNUXNlWVhpTXZoOVoyZnFId2l6S2V0aFRjZkNLSnVaOFdvZkY2 LzAvQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5QjMzNzU0NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DRDQ2NkQ0MjdGMUZEM0FCNDFD Rjg3OEE1Njk4OThBNzlCMzM3NTQ1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ju bUxYSk1Rc2VZWGlNdmg5WjJmcUh3aXpLZXRoVGNmQ0tKdVo4V29mRjYvMC9DRDQ2 NkQ0MjdGMUZEM0FCNDFDRjg3OEE1Njk4OThBNzlCMzM3NTQ1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA OBB1e15dg86zK+fRinncdG0UQtse8VGyT4FjAlNQ2xG0yA0CNGIkx877fKagp8Ph uB5XORWEIkqjvucktVv9iBinc4fhpWFPqJ9KJKM5eU8gGfPW84iTKJjWryk6TCPq a2S1jV2Qalgol9xHeNA09H6K0Ys776Qqpa98/QSOeQjNFUnREOxzviXIha5sH36p HUPebs1hrjWJ+ehPXT+5lkIgGl07d1QPLHxpjuCwdrLwXwpDpw4MEW85aEf1+csi bnAYQcOGnYZf2cpRd24F/MsygSJ5oQLVyCWAfhvW6TSL1QZwbRKMSzMuHwpZNvqT qxUq0wsYmzw9QuWsKs0iFg== -----END CERTIFICATE-----Generated at Wed Dec 24 14:30:22 2025 by rpki-client