This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft File: 964DA9AAC4C916D348B028DBC19BD5C08E437560.mft (raw, json) Hash identifier: OZUw2rNM++T1/1F/LDjdmDS4Cjzjw273QY4ssME4JOY= Subject key identifier: D7:87:84:8A:D8:7A:B8:D1:7E:BE:64:46:C4:87:9B:1B:0D:BC:26:63 Authority key identifier: 96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60 Certificate issuer: /CN=964DA9AAC4C916D348B028DBC19BD5C08E437560 Certificate serial: 647146AB3437B219C6D1DB8BF4F14A36A9156946 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft Manifest number: 67 Signing time: Wed 24 Dec 2025 02:29:04 +0000 Manifest this update: Wed 24 Dec 2025 02:24:04 +0000 Manifest next update: Thu 25 Dec 2025 05:42:04 +0000 Files and hashes: 1: 34352e3138342e3230342e302f32322d3234203d3e20323732343539.roa (hash: mA2x0qV3KIplcTlRhrF70yJUuAie/XmNs1/bE1FVb5M=) 2: 323830343a383138343a3a2f33322d3438203d3e20323732343539.roa (hash: nV+YnLkMXJ7NLvIA4eiIiwEhwUO0vMdc2CE6F8m39Pw=) 3: 964DA9AAC4C916D348B028DBC19BD5C08E437560.crl (hash: KeUSro+k+AFsePO+6a9UOl20js0xAXvUizjPFEX9Aoc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 05:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:71:46:ab:34:37:b2:19:c6:d1:db:8b:f4:f1:4a:36:a9:15:69:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964DA9AAC4C916D348B028DBC19BD5C08E437560 Validity Not Before: Dec 24 02:24:04 2025 GMT Not After : Dec 25 05:42:04 2025 GMT Subject: CN=D787848AD87AB8D17EBE6446C4879B1B0DBC2663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:69:a9:5c:fb:f9:b0:75:2f:ca:aa:cf:3d: f3:1d:a3:49:62:03:44:7d:08:c3:6c:cc:1d:67:19: c5:28:2c:45:b3:6c:33:6f:64:ac:7e:8f:34:a6:ae: 3e:97:c6:76:0c:97:5c:5b:e1:08:34:b3:e9:45:cd: a7:5b:0a:3f:d7:c6:9c:ea:97:c1:40:fb:54:ad:fd: 35:5a:31:06:02:ca:0b:8e:cf:9e:b9:b1:10:af:4e: 08:51:f2:36:48:c4:d1:08:49:65:0f:4a:62:c4:ef: 59:7c:55:b7:e0:6d:93:d1:d6:17:54:57:35:85:bb: 7e:5e:30:27:95:12:59:6d:9c:a9:d0:9c:02:1d:b5: 2a:c0:d4:00:d8:88:f9:92:12:02:d6:bf:dc:24:09: 13:32:6a:18:b3:35:78:7e:dd:c6:52:68:6f:78:e1: 63:7e:67:a2:56:1e:e8:90:5e:3a:94:44:ae:b5:38: a3:e8:9c:f0:19:60:c6:65:b0:83:11:da:dc:87:e9: 08:ab:2e:01:a2:93:f7:0d:fb:58:96:55:01:a9:9a: f7:80:ba:ad:58:d4:76:b3:a4:17:34:81:34:ed:ca: c2:4f:42:b8:2c:da:81:c6:30:13:13:53:35:50:2f: 31:ce:77:af:8f:43:6c:60:65:f2:27:13:bf:dc:82: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:87:84:8A:D8:7A:B8:D1:7E:BE:64:46:C4:87:9B:1B:0D:BC:26:63 X509v3 Authority Key Identifier: keyid:96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:62:99:8c:9d:10:f7:ad:72:ba:7f:a4:08:0c:d5:7f:5f:03: e3:ee:af:95:5f:66:97:b4:42:ef:31:f7:c5:5a:d6:15:fb:3f: 56:c4:08:2d:40:b2:8c:83:75:90:6b:72:50:67:92:e7:01:5c: cc:81:c8:59:af:b3:6d:7f:bf:a7:b4:27:f0:a1:4a:ea:96:0e: 3e:8b:16:31:9f:fc:6b:90:3b:4d:8e:d1:16:0f:b6:ad:38:4e: 23:30:31:f3:45:d0:d5:1f:bc:2b:b2:b2:66:8a:29:bd:bf:9d: de:65:9f:21:2f:02:50:ea:3c:e8:86:c3:8a:79:78:57:9a:d1: 9f:a5:a7:0c:f7:71:d9:59:70:93:5e:7f:90:e4:0d:31:80:06: 82:e3:cd:86:06:fc:4a:20:d3:b3:a1:60:d9:94:3d:d8:6c:d2: 6d:fe:a4:a2:92:bc:e1:1f:c1:c3:13:1f:b9:a4:c2:a6:81:29: e6:49:ea:eb:3c:36:17:7c:76:66:03:15:d0:cf:91:24:72:8b: 8e:b1:89:09:13:0d:c0:37:29:13:93:cb:68:46:0f:7d:be:bf: e0:ac:1a:58:b4:6f:40:0a:62:af:c0:9f:f0:2c:f4:f9:30:51: 15:c8:f9:47:90:26:8a:30:5e:6c:c4:43:f3:61:c9:c3:76:af: 1a:72:c6:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZHFGqzQ3shnG0duL9PFKNqkVaUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0REE5QUFDNEM5MTZEMzQ4QjAyOERCQzE5QkQ1QzA4 RTQzNzU2MDAeFw0yNTEyMjQwMjI0MDRaFw0yNTEyMjUwNTQyMDRaMDMxMTAvBgNV BAMTKEQ3ODc4NDhBRDg3QUI4RDE3RUJFNjQ0NkM0ODc5QjFCMERCQzI2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcXGmpXPv5sHUvyqrPPfMdo0li A0R9CMNszB1nGcUoLEWzbDNvZKx+jzSmrj6XxnYMl1xb4Qg0s+lFzadbCj/Xxpzq l8FA+1St/TVaMQYCyguOz565sRCvTghR8jZIxNEISWUPSmLE71l8VbfgbZPR1hdU VzWFu35eMCeVElltnKnQnAIdtSrA1ADYiPmSEgLWv9wkCRMyahizNXh+3cZSaG94 4WN+Z6JWHuiQXjqURK61OKPonPAZYMZlsIMR2tyH6QirLgGik/cN+1iWVQGpmveA uq1Y1HazpBc0gTTtysJPQrgs2oHGMBMTUzVQLzHOd6+PQ2xgZfInE7/cgoAxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU14eEith6uNF+vmRGxIebGw28JmMwHwYDVR0j BBgwFoAUlk2pqsTJFtNIsCjbwZvVwI5DdWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NYaXZnSGhyYm5UM0xaRXltTGhKR2tLY0ZnS2J3TkhEaVgydWp5TnhB TEQvMC85NjREQTlBQUM0QzkxNkQzNDhCMDI4REJDMTlCRDVDMDhFNDM3NTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NERBOUFBQzRDOTE2RDM0 OEIwMjhEQkMxOUJENUMwOEU0Mzc1NjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NYaXZnSGhyYm5UM0xaRXltTGhKR2tLY0ZnS2J3TkhEaVgydWp5TnhBTEQvMC85 NjREQTlBQUM0QzkxNkQzNDhCMDI4REJDMTlCRDVDMDhFNDM3NTYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEmKZjJ0Q961yun+kCAzVf18D4+6vlV9ml7RC7zH3xVrWFfs/VsQILUCyjIN1 kGtyUGeS5wFczIHIWa+zbX+/p7Qn8KFK6pYOPosWMZ/8a5A7TY7RFg+2rThOIzAx 80XQ1R+8K7KyZoopvb+d3mWfIS8CUOo86IbDinl4V5rRn6WnDPdx2Vlwk15/kOQN MYAGguPNhgb8SiDTs6Fg2ZQ92GzSbf6kopK84R/BwxMfuaTCpoEp5knq6zw2F3x2 ZgMV0M+RJHKLjrGJCRMNwDcpE5PLaEYPfb6/4KwaWLRvQApir8Cf8Cz0+TBRFcj5 R5AmijBebMRD82HJw3avGnLG7g== -----END CERTIFICATE-----Generated at Wed Dec 24 16:05:10 2025 by rpki-client