This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft File: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json) Hash identifier: qCthl/lGAPWCPpZ9RheQHJEsa6dIITO2YF4zG9WZcho= Subject key identifier: 0A:48:95:5E:27:E0:01:8B:50:0B:E5:4A:3B:9F:F9:27:82:B1:37:62 Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB Certificate issuer: /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Certificate serial: 40552D34436B969045BCCB37943AFF068BA4FDB0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft Manifest number: 0255 Signing time: Mon 22 Dec 2025 09:40:56 +0000 Manifest this update: Mon 22 Dec 2025 09:35:56 +0000 Manifest next update: Tue 23 Dec 2025 12:38:56 +0000 Files and hashes: 1: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: 67sP77oehV8OsJ5C0Di39/vL9cRCepWrYKC3lCcA8nA=) 2: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: pT4KJyhmdNoNX/hPsPcowGraggKvxVfJY7BXYr01IF4=) 3: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: sXEB3N632CJdoLkCeni+7IpZM2jJ3mGY/w149wdeu3w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 12:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:55:2d:34:43:6b:96:90:45:bc:cb:37:94:3a:ff:06:8b:a4:fd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Validity Not Before: Dec 22 09:35:56 2025 GMT Not After : Dec 23 12:38:56 2025 GMT Subject: CN=0A48955E27E0018B500BE54A3B9FF92782B13762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:dc:a8:95:bd:aa:04:4a:a7:ec:ce:32:08: 6a:d9:91:18:b0:93:b4:21:31:a4:e4:6b:71:ec:36: 04:fa:5f:dd:b9:4a:68:30:37:63:a8:aa:26:e5:2d: 16:5e:65:8b:f1:0e:02:96:2c:9f:43:a6:e5:9b:b1: e4:89:d5:6e:ca:ff:32:4c:20:f9:33:01:cc:4a:59: b6:98:e9:ed:00:5b:76:e3:1a:74:93:8c:12:9b:72: 88:f8:a3:a6:b8:57:a4:d9:bc:1a:69:fb:39:fb:3c: 4e:eb:8e:0f:b3:78:0a:2d:36:c9:3f:d0:92:93:6e: bb:7e:b9:7a:64:cf:b1:63:a5:c8:7c:4d:1c:59:d6: d5:f9:bb:65:27:60:24:5c:a4:34:d7:8c:05:fe:a5: c2:f1:ac:58:38:63:35:5c:2b:20:b3:ac:8d:87:65: 4d:94:5b:7b:be:2b:ea:33:f5:32:fb:bb:85:7b:82: 13:e8:a2:6f:50:87:85:b2:28:06:78:7e:fc:48:e9: 10:f7:cc:64:ab:5e:26:c9:a3:e2:71:4f:2a:50:06: 0b:ab:97:2f:80:49:1e:b6:5f:d4:a8:72:44:33:90: 61:3e:3e:59:c9:36:da:7d:52:7c:91:4b:b4:2a:9f: 7c:f7:9d:9d:e8:86:8b:38:59:97:c9:8f:bb:1e:13: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:48:95:5E:27:E0:01:8B:50:0B:E5:4A:3B:9F:F9:27:82:B1:37:62 X509v3 Authority Key Identifier: keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e5:96:0b:10:a0:37:18:22:2b:4b:89:2b:f0:e5:5e:ae:81: d8:82:a0:b7:0d:38:8f:d7:f8:90:ab:f9:18:0f:6e:37:3d:d5: 87:d8:7e:16:29:eb:70:2e:17:b1:e1:b1:cd:88:3d:2c:df:46: d1:03:ab:fd:0e:64:be:68:4e:80:ec:8e:1d:4c:75:ed:eb:5c: 52:af:f6:86:55:11:7f:e1:c1:10:ef:84:a6:f9:1c:f2:7f:5b: 5d:70:48:4a:66:57:30:73:31:93:9e:cb:2c:84:62:f3:b7:b1: 35:ae:96:ad:11:3a:f7:98:47:de:99:8c:23:23:66:ae:65:e4: 9d:e1:8d:3a:20:f2:f6:cb:3a:8d:2b:4b:b5:0f:60:60:6e:bb: 4e:5c:5e:19:5b:36:5c:b3:48:f1:48:43:78:0a:01:e4:a4:b3: 86:11:7a:be:74:5f:c0:91:e2:09:7f:c8:63:cf:32:98:a2:5a: d2:b1:77:26:fc:05:8c:bb:41:c2:b9:b9:7d:a8:0b:7d:03:2a: 37:fe:56:4b:66:a7:20:ae:8f:49:81:6d:3c:46:a5:35:15:f0: 54:76:60:92:73:5b:79:a5:b4:32:03:1e:02:9e:0b:74:df:8b: b0:4f:e4:0e:2a:fe:fa:a5:1a:a8:26:f8:e6:ed:10:3c:1b:fb: 52:41:f8:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQFUtNENrlpBFvMs3lDr/Bouk/bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5Qzg3N0NFNDk2QjRGM0ZBQkJBMUQ0OTk2QzM0RkM4 QkJGOTlCQjAeFw0yNTEyMjIwOTM1NTZaFw0yNTEyMjMxMjM4NTZaMDMxMTAvBgNV BAMTKDBBNDg5NTVFMjdFMDAxOEI1MDBCRTU0QTNCOUZGOTI3ODJCMTM3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMNyolb2qBEqn7M4yCGrZkRiw k7QhMaTka3HsNgT6X925SmgwN2OoqiblLRZeZYvxDgKWLJ9DpuWbseSJ1W7K/zJM IPkzAcxKWbaY6e0AW3bjGnSTjBKbcoj4o6a4V6TZvBpp+zn7PE7rjg+zeAotNsk/ 0JKTbrt+uXpkz7Fjpch8TRxZ1tX5u2UnYCRcpDTXjAX+pcLxrFg4YzVcKyCzrI2H ZU2UW3u+K+oz9TL7u4V7ghPoom9Qh4WyKAZ4fvxI6RD3zGSrXibJo+JxTypQBgur ly+ASR62X9SockQzkGE+PlnJNtp9UnyRS7Qqn3z3nZ3ohos4WZfJj7seE0HfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCkiVXifgAYtQC+VKO5/5J4KxN2IwHwYDVR0j BBgwFoAUipyHfOSWtPP6u6HUmWw0/Iu/mbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVT NkovMC84QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBOUM4NzdDRTQ5NkI0RjNG QUJCQTFENDk5NkMzNEZDOEJCRjk5QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVTNkovMC84 QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAuWWCxCgNxgiK0uJK/DlXq6B2IKgtw04j9f4kKv5GA9uNz3Vh9h+FinrcC4X seGxzYg9LN9G0QOr/Q5kvmhOgOyOHUx17etcUq/2hlURf+HBEO+Epvkc8n9bXXBI SmZXMHMxk57LLIRi87exNa6WrRE695hH3pmMIyNmrmXkneGNOiDy9ss6jStLtQ9g YG67TlxeGVs2XLNI8UhDeAoB5KSzhhF6vnRfwJHiCX/IY88ymKJa0rF3JvwFjLtB wrm5fagLfQMqN/5WS2anIK6PSYFtPEalNRXwVHZgknNbeaW0MgMeAp4LdN+LsE/k Dir++qUaqCb45u0QPBv7UkH4Yg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:23:15 2025 by rpki-client