This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft File: 20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft (raw, json) Hash identifier: WSPT/0p/2F3xBSWGQEpqi/mMhPGjUZXHAOpvb5e6lD0= Subject key identifier: 0F:65:57:0E:5D:65:41:ED:D9:17:8A:E4:97:E5:22:B9:4D:75:68:F2 Authority key identifier: 20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C Certificate issuer: /CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C Certificate serial: 75E27C254143F41DB2C47AEBFD5C0BB2D5A853B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft Manifest number: F2 Signing time: Mon 22 Dec 2025 17:20:22 +0000 Manifest this update: Mon 22 Dec 2025 17:15:22 +0000 Manifest next update: Tue 23 Dec 2025 20:39:22 +0000 Files and hashes: 1: 20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl (hash: 4oBN0XXRpeE5RZFu0Rqj71p2gCNavMawhWPNMVI23bY=) 2: 323830343a313538383a3a2f33322d3336203d3e20323633333933.roa (hash: RkMXKecvmW5kgrux+ScsWloo6oerwyF9YYoG25+10TE=) 3: 3137372e3232322e3230302e302f32312d3234203d3e20323633333933.roa (hash: pZZmxcSR9EAlttKYSeDpPeTr6SVaV3Klh3SCSp08wZk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 20:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e2:7c:25:41:43:f4:1d:b2:c4:7a:eb:fd:5c:0b:b2:d5:a8:53:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C Validity Not Before: Dec 22 17:15:22 2025 GMT Not After : Dec 23 20:39:22 2025 GMT Subject: CN=0F65570E5D6541EDD9178AE497E522B94D7568F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:3d:72:fd:e9:dc:da:fe:ad:13:34:24:28: b9:8f:34:49:54:4b:0f:c4:b5:4c:02:78:2e:fb:3d: 0e:aa:1e:91:94:43:1a:84:4d:55:0c:d2:0b:dd:42: a8:88:23:89:92:f6:ce:8d:f7:45:a5:f0:d3:ab:38: b9:1c:a0:b0:11:d8:69:73:0e:eb:27:33:c7:34:66: c1:fb:ef:23:08:67:65:69:e3:f2:79:f0:49:e9:59: c9:f9:5a:38:a6:07:93:0a:c1:ff:a9:53:de:2c:07: a0:c7:20:69:65:95:59:f3:eb:35:f2:b3:9c:15:30: cc:c1:1c:03:cf:0f:8c:14:01:63:3d:32:b5:fe:e7: 60:7c:66:4c:87:d6:ae:77:7f:7f:73:04:3c:88:cf: cf:9c:b7:70:a3:b4:5c:60:55:93:d1:4e:a5:e5:2e: 6e:e9:a2:ea:50:ad:60:ef:7a:c5:53:60:df:2a:69: 86:ba:6e:f2:6d:bb:f1:b2:93:f3:84:b4:2f:cb:3d: a6:16:ba:7d:fa:00:37:76:8a:68:9d:95:62:e9:d0: 81:40:ae:44:bd:81:78:79:f2:32:32:a2:24:79:04: 71:b3:4c:d1:8b:cf:c1:6a:8e:f3:46:25:f9:0c:2c: 92:17:ac:06:87:da:b2:c9:ee:8d:e1:b9:9e:c7:f4: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:57:0E:5D:65:41:ED:D9:17:8A:E4:97:E5:22:B9:4D:75:68:F2 X509v3 Authority Key Identifier: keyid:20:E5:AB:E1:C1:0D:0B:4C:AF:5B:8A:8B:FD:0E:B5:59:D1:59:8D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BppQecXz9U4o5RaDfLzuHttNBboGd3xrP3gRj8NTwX55/0/20E5ABE1C10D0B4CAF5B8A8BFD0EB559D1598D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9a:a9:cf:55:9d:e0:d2:d8:41:9d:58:c2:e9:ab:05:96:40: 87:3b:aa:ff:50:83:73:4a:80:1c:aa:ba:61:04:19:e0:68:c6: 16:43:09:fb:9c:57:34:c5:e7:8a:63:54:8a:80:8f:11:a5:65: b0:ab:a0:9f:70:36:21:e2:6a:6e:12:8d:71:33:92:92:3d:85: a7:bc:52:af:b7:01:a8:90:a4:2c:b7:29:12:ef:aa:68:ae:07: eb:e0:34:dc:2c:f4:1b:7f:ef:19:97:01:ec:4c:70:86:03:71: aa:4c:ac:76:5e:6b:b4:a8:fe:72:d5:29:f1:19:26:64:b8:a2: be:6f:f3:b2:41:67:63:ec:37:fd:77:09:c2:2d:9d:21:f1:00: 57:30:62:0c:de:6d:cc:56:a4:36:99:84:1b:c5:60:1f:2c:3e: 40:94:40:6f:4c:80:99:5c:2c:94:79:d1:86:d1:55:8a:ce:c8: 00:b9:b3:75:40:53:30:59:3b:70:d4:d4:c3:c9:17:ea:01:de: 8d:a9:64:e7:58:f3:6b:e7:4c:7c:8e:09:7f:13:af:f4:bc:63: 5c:6e:59:42:84:f5:12:61:ca:5c:6c:77:72:3d:bb:c6:a3:a7: 26:aa:c2:59:57:9a:71:a0:f1:90:3a:1f:55:be:39:47:c1:4b: c2:02:70:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdeJ8JUFD9B2yxHrr/VwLstWoU7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUFCRTFDMTBEMEI0Q0FGNUI4QThCRkQwRUI1NTlE MTU5OEQ1QzAeFw0yNTEyMjIxNzE1MjJaFw0yNTEyMjMyMDM5MjJaMDMxMTAvBgNV BAMTKDBGNjU1NzBFNUQ2NTQxRUREOTE3OEFFNDk3RTUyMkI5NEQ3NTY4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2T1y/enc2v6tEzQkKLmPNElU Sw/EtUwCeC77PQ6qHpGUQxqETVUM0gvdQqiII4mS9s6N90Wl8NOrOLkcoLAR2Glz DusnM8c0ZsH77yMIZ2Vp4/J58EnpWcn5WjimB5MKwf+pU94sB6DHIGlllVnz6zXy s5wVMMzBHAPPD4wUAWM9MrX+52B8ZkyH1q53f39zBDyIz8+ct3CjtFxgVZPRTqXl Lm7poupQrWDvesVTYN8qaYa6bvJtu/Gyk/OEtC/LPaYWun36ADd2imidlWLp0IFA rkS9gXh58jIyoiR5BHGzTNGLz8FqjvNGJfkMLJIXrAaH2rLJ7o3huZ7H9O71AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD2VXDl1lQe3ZF4rkl+UiuU11aPIwHwYDVR0j BBgwFoAUIOWr4cENC0yvW4qL/Q61WdFZjVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnBwUWVjWHo5VTRvNVJhRGZMenVIdHROQmJvR2QzeHJQM2dSajhOVHdY NTUvMC8yMEU1QUJFMUMxMEQwQjRDQUY1QjhBOEJGRDBFQjU1OUQxNTk4RDVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwRTVBQkUxQzEwRDBCNENB RjVCOEE4QkZEMEVCNTU5RDE1OThENUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnBwUWVjWHo5VTRvNVJhRGZMenVIdHROQmJvR2QzeHJQM2dSajhOVHdYNTUvMC8y MEU1QUJFMUMxMEQwQjRDQUY1QjhBOEJGRDBFQjU1OUQxNTk4RDVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc5qpz1Wd4NLYQZ1YwumrBZZAhzuq/1CDc0qAHKq6YQQZ4GjGFkMJ+5xXNMXn imNUioCPEaVlsKugn3A2IeJqbhKNcTOSkj2Fp7xSr7cBqJCkLLcpEu+qaK4H6+A0 3Cz0G3/vGZcB7ExwhgNxqkysdl5rtKj+ctUp8RkmZLiivm/zskFnY+w3/XcJwi2d IfEAVzBiDN5tzFakNpmEG8VgHyw+QJRAb0yAmVwslHnRhtFVis7IALmzdUBTMFk7 cNTUw8kX6gHejalk51jza+dMfI4JfxOv9LxjXG5ZQoT1EmHKXGx3cj27xqOnJqrC WVeacaDxkDofVb45R8FLwgJwyg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:43:18 2025 by rpki-client