This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft File: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json) Hash identifier: Kr6g4VwYg+3diX6qwgpZABqJmmYuGt3oXkqVLzFQ2sM= Subject key identifier: 46:05:8A:8B:58:94:E4:31:B9:86:37:9B:58:72:1A:7D:37:2D:D2:28 Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB Certificate issuer: /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Certificate serial: 460D5F3C59D77BB6B74CEC9C1085D74495E91E9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft Manifest number: 0252 Signing time: Sat 20 Dec 2025 02:35:56 +0000 Manifest this update: Sat 20 Dec 2025 02:30:56 +0000 Manifest next update: Sun 21 Dec 2025 05:11:56 +0000 Files and hashes: 1: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: sXEB3N632CJdoLkCeni+7IpZM2jJ3mGY/w149wdeu3w=) 2: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: 67sP77oehV8OsJ5C0Di39/vL9cRCepWrYKC3lCcA8nA=) 3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: rG+bG5DedVlc2ccdCI8J5Cg9hP1Y6SZFMvwVCTjxx+s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0d:5f:3c:59:d7:7b:b6:b7:4c:ec:9c:10:85:d7:44:95:e9:1e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Validity Not Before: Dec 20 02:30:56 2025 GMT Not After : Dec 21 05:11:56 2025 GMT Subject: CN=46058A8B5894E431B986379B58721A7D372DD228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:df:97:c6:e5:b8:ab:b6:81:6f:fa:45:2f: c8:c6:35:74:b6:d4:b7:17:7f:ea:1c:b3:c2:18:fa: ff:24:7e:86:e5:8c:72:54:2e:1c:3b:22:2c:d9:bd: 68:10:ff:de:75:09:de:e4:14:f5:73:ec:ec:4b:8c: 1e:c3:a1:de:2f:d6:da:74:3c:bc:70:da:b9:3a:b8: 1b:81:27:af:e5:29:a6:0a:84:1c:39:0d:d1:13:fa: 85:f9:82:9f:21:d7:28:28:7c:c8:43:b2:83:30:95: 80:44:42:4e:45:b6:af:e5:c4:87:a4:c5:27:e5:92: 17:75:9f:54:ba:2d:4d:7a:19:ec:ec:75:22:2b:01: 3a:2c:35:7c:16:9f:90:a6:f6:40:87:95:4c:cc:da: eb:44:56:dd:e5:fb:60:b2:5d:a3:da:04:98:e4:9d: a2:8f:12:a6:b0:54:2c:48:bc:3f:14:92:8a:6e:80: d7:48:66:45:03:f4:2d:95:90:2e:14:be:0d:21:27: 9e:41:c9:3b:12:71:34:c8:0d:6f:34:57:10:39:1a: bb:5a:b8:22:e5:91:60:bf:2b:fd:af:22:90:ec:bd: 66:fa:34:6b:fc:16:90:47:7e:aa:21:96:33:ae:ab: 42:55:e0:6c:85:3b:3e:34:16:8a:66:05:aa:51:4b: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:8A:8B:58:94:E4:31:B9:86:37:9B:58:72:1A:7D:37:2D:D2:28 X509v3 Authority Key Identifier: keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:dc:5e:f8:c9:fd:c7:bc:7a:c9:bd:f4:79:28:e0:10:c9:ad: 6e:44:06:e7:d9:bd:7f:80:ad:42:98:58:f0:1e:0a:61:ce:dc: 2b:00:85:92:5c:ec:95:c0:5e:b6:13:2d:67:da:d8:70:21:a2: 91:ed:59:de:0d:bd:ab:9a:04:e3:54:c8:43:9a:ec:ef:34:e3: a2:a0:e9:08:8c:7c:d9:89:57:39:1a:00:76:90:e0:25:d6:f4: 20:fe:8b:85:50:54:94:e1:25:50:c3:25:90:a4:96:2c:3a:c7: c5:2f:7a:44:bd:66:9b:92:0b:b0:09:20:38:28:50:e1:ff:0f: f6:9a:bb:cf:aa:8d:42:1b:1a:f8:c1:68:5a:69:69:98:6f:86: 03:c0:ad:3f:9e:a2:c6:14:d2:3a:29:fb:d1:2d:6e:cd:4c:28: f9:01:bf:d3:51:96:53:f2:2c:15:83:24:f3:64:91:15:f1:da: b8:d0:22:5e:1a:69:ab:bc:ef:6c:4d:5b:4a:f0:f5:28:b7:f6: a9:50:d1:c1:29:0d:a7:a9:d3:39:2d:2a:bd:d0:da:99:d9:c2: 7c:72:d1:36:f2:c0:d6:4e:d0:8f:cd:26:cf:b2:86:fa:23:be: 52:c5:54:5f:b7:9d:e2:ef:6a:bd:53:77:b8:f1:15:35:5d:6f: 62:b3:37:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURg1fPFnXe7a3TOycEIXXRJXpHpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5Qzg3N0NFNDk2QjRGM0ZBQkJBMUQ0OTk2QzM0RkM4 QkJGOTlCQjAeFw0yNTEyMjAwMjMwNTZaFw0yNTEyMjEwNTExNTZaMDMxMTAvBgNV BAMTKDQ2MDU4QThCNTg5NEU0MzFCOTg2Mzc5QjU4NzIxQTdEMzcyREQyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZN9+XxuW4q7aBb/pFL8jGNXS2 1LcXf+ocs8IY+v8kfobljHJULhw7IizZvWgQ/951Cd7kFPVz7OxLjB7Dod4v1tp0 PLxw2rk6uBuBJ6/lKaYKhBw5DdET+oX5gp8h1ygofMhDsoMwlYBEQk5Ftq/lxIek xSflkhd1n1S6LU16GezsdSIrATosNXwWn5Cm9kCHlUzM2utEVt3l+2CyXaPaBJjk naKPEqawVCxIvD8UkopugNdIZkUD9C2VkC4Uvg0hJ55ByTsScTTIDW80VxA5Grta uCLlkWC/K/2vIpDsvWb6NGv8FpBHfqohljOuq0JV4GyFOz40FopmBapRS2hTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURgWKi1iU5DG5hjebWHIafTct0igwHwYDVR0j BBgwFoAUipyHfOSWtPP6u6HUmWw0/Iu/mbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVT NkovMC84QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBOUM4NzdDRTQ5NkI0RjNG QUJCQTFENDk5NkMzNEZDOEJCRjk5QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVTNkovMC84 QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATtxe+Mn9x7x6yb30eSjgEMmtbkQG59m9f4CtQphY8B4KYc7cKwCFklzslcBe thMtZ9rYcCGike1Z3g29q5oE41TIQ5rs7zTjoqDpCIx82YlXORoAdpDgJdb0IP6L hVBUlOElUMMlkKSWLDrHxS96RL1mm5ILsAkgOChQ4f8P9pq7z6qNQhsa+MFoWmlp mG+GA8CtP56ixhTSOin70S1uzUwo+QG/01GWU/IsFYMk82SRFfHauNAiXhppq7zv bE1bSvD1KLf2qVDRwSkNp6nTOS0qvdDamdnCfHLRNvLA1k7Qj80mz7KG+iO+UsVU X7ed4u9qvVN3uPEVNV1vYrM3IA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:12:45 2025 by rpki-client