This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft File: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json) Hash identifier: PInTUDGUDxHeqPB7E4PkCPkF6iRpoEvmAzmv4JYqzTY= Subject key identifier: 2B:1C:AA:36:1C:86:01:DB:2A:68:B0:CA:79:D7:D3:84:5D:4F:D7:D7 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 6B0B47B0B1BE7084F6555DD836993F008B7973C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft Manifest number: 01B0 Signing time: Sun 21 Dec 2025 01:16:19 +0000 Manifest this update: Sun 21 Dec 2025 01:11:19 +0000 Manifest next update: Mon 22 Dec 2025 04:17:19 +0000 Files and hashes: 1: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=) 2: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: p0GW0BF/gT17HHZk7SyMH9h5o0WcCAIGz+l9YLG1m5I=) 3: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 04:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0b:47:b0:b1:be:70:84:f6:55:5d:d8:36:99:3f:00:8b:79:73:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Dec 21 01:11:19 2025 GMT Not After : Dec 22 04:17:19 2025 GMT Subject: CN=2B1CAA361C8601DB2A68B0CA79D7D3845D4FD7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:f4:86:7f:02:94:f2:65:e0:4e:d6:aa:7f: c2:48:17:bc:78:d8:5a:8f:67:62:db:63:4b:d0:03: c5:18:be:4e:86:5f:0b:0f:2e:9d:86:8b:e3:b3:12: f0:f6:19:05:1f:e7:94:52:dd:68:f0:95:a7:e5:d3: fb:e0:e4:1b:44:43:4e:53:ce:90:7b:ef:2e:0a:b7: 9c:91:bc:d6:6e:d4:52:e7:7f:26:03:ab:b6:fa:a7: 6b:86:cb:a2:45:46:f3:ed:21:8e:2c:6d:a5:ec:a6: a3:37:23:06:4e:74:58:eb:1a:90:b5:1b:09:98:2f: 2d:b4:65:94:74:49:b3:ee:e8:83:ba:a0:c4:c8:ec: e6:48:43:39:eb:ec:d6:60:65:22:97:a1:c1:3a:55: a7:2f:7e:b8:eb:a4:a6:45:eb:0f:9a:20:bc:57:bd: 91:1c:34:8c:29:7d:ed:5a:29:c8:32:6c:4d:88:66: 71:b3:28:54:3a:43:bb:e7:18:11:f0:f8:04:9c:5c: b7:10:64:4d:3d:1a:ea:17:1a:43:c7:82:c4:99:a9: 04:9b:c9:8b:55:6e:ca:41:36:d6:53:bb:24:4d:f6: f3:1a:1f:bd:b0:0b:9f:b5:eb:4b:d7:2c:66:21:bf: ca:c5:43:b5:d4:20:5d:c6:9b:c9:ed:48:db:04:74: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1C:AA:36:1C:86:01:DB:2A:68:B0:CA:79:D7:D3:84:5D:4F:D7:D7 X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c9:bb:84:56:33:8e:3a:e7:0f:c8:94:96:15:0a:6d:25:c2: 41:fe:e1:45:6c:c5:e2:b4:52:f2:2c:cb:f2:d5:ef:e7:da:df: ba:cd:ec:39:dd:45:8e:4a:54:0b:46:e7:7f:95:a9:8a:b8:4b: b5:9c:9b:a3:34:76:8e:b8:d6:62:b9:fc:c3:73:06:1b:ab:7b: 38:e5:8b:1e:b2:9d:a4:46:0a:88:db:7c:cc:bb:28:6f:91:b6: 22:1e:df:69:e7:91:9b:22:a1:d5:e7:8f:45:31:49:52:d6:65: 9e:f9:05:2f:92:ae:ef:58:20:fa:44:fb:61:64:6b:9b:f0:de: 91:dd:b1:3e:d1:1f:bd:43:ed:cb:9e:aa:a9:7b:3e:9f:8c:94: 83:3b:12:d1:0f:80:56:0a:f1:16:1e:89:69:40:29:52:d3:d0: 77:ae:dc:9b:11:d3:58:da:9b:95:e4:6e:ae:71:b3:23:dc:3c: 91:37:25:4c:39:96:40:f1:e0:15:ce:22:55:3b:9e:58:aa:96: 0e:13:8f:2b:0c:cb:51:85:b7:48:f0:da:58:bd:15:69:22:fb: 0c:19:21:fc:9d:5f:09:9b:90:26:f5:5b:98:83:81:9c:b6:e6: 5a:84:af:3a:03:fd:c0:2d:b7:c5:13:50:c3:e6:96:88:eb:d5: c7:f7:8f:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUawtHsLG+cIT2VV3YNpk/AIt5c8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTEyMjEwMTExMTlaFw0yNTEyMjIwNDE3MTlaMDMxMTAvBgNV BAMTKDJCMUNBQTM2MUM4NjAxREIyQTY4QjBDQTc5RDdEMzg0NUQ0RkQ3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4/SGfwKU8mXgTtaqf8JIF7x4 2FqPZ2LbY0vQA8UYvk6GXwsPLp2Gi+OzEvD2GQUf55RS3Wjwlafl0/vg5BtEQ05T zpB77y4Kt5yRvNZu1FLnfyYDq7b6p2uGy6JFRvPtIY4sbaXspqM3IwZOdFjrGpC1 GwmYLy20ZZR0SbPu6IO6oMTI7OZIQznr7NZgZSKXocE6VacvfrjrpKZF6w+aILxX vZEcNIwpfe1aKcgybE2IZnGzKFQ6Q7vnGBHw+AScXLcQZE09GuoXGkPHgsSZqQSb yYtVbspBNtZTuyRN9vMaH72wC5+160vXLGYhv8rFQ7XUIF3Gm8ntSNsEdMXJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKxyqNhyGAdsqaLDKedfThF1P19cwHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRtMmcvMC85 QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg8m7hFYzjjrnD8iUlhUKbSXCQf7hRWzF4rRS8izL8tXv59rfus3sOd1FjkpU C0bnf5WpirhLtZybozR2jrjWYrn8w3MGG6t7OOWLHrKdpEYKiNt8zLsob5G2Ih7f aeeRmyKh1eePRTFJUtZlnvkFL5Ku71gg+kT7YWRrm/Dekd2xPtEfvUPty56qqXs+ n4yUgzsS0Q+AVgrxFh6JaUApUtPQd67cmxHTWNqbleRurnGzI9w8kTclTDmWQPHg Fc4iVTueWKqWDhOPKwzLUYW3SPDaWL0VaSL7DBkh/J1fCZuQJvVbmIOBnLbmWoSv OgP9wC23xRNQw+aWiOvVx/ePvA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:58:29 2025 by rpki-client