This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft File: C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft (raw, json) Hash identifier: Totd9cfdHo/NFtFVzAqowHKLEGE3wrr4mJ4QCBNqTLw= Subject key identifier: 0F:12:DC:0F:34:28:FD:D3:D4:74:B9:23:FB:8C:0F:0E:82:86:10:75 Authority key identifier: C7:AA:22:49:FA:58:EA:13:30:AA:36:9A:2E:7E:A2:02:B0:54:E6:65 Certificate issuer: /CN=C7AA2249FA58EA1330AA369A2E7EA202B054E665 Certificate serial: 292CDD3E5A43F4B9A82F2A3632F266279971AB75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7AA2249FA58EA1330AA369A2E7EA202B054E665.cer Subject info access: rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft Manifest number: 01ED Signing time: Mon 22 Dec 2025 22:40:12 +0000 Manifest this update: Mon 22 Dec 2025 22:35:12 +0000 Manifest next update: Tue 23 Dec 2025 23:38:12 +0000 Files and hashes: 1: 323830343a346436383a3a2f33322d3438203d3e20323638313934.roa (hash: ny3mmpCYx/i7rtb8nwvG8x+yTF3ccyd7VTl98Ybvphw=) 2: 34352e3233352e38342e302f32322d3234203d3e20323638313934.roa (hash: vG8xuQ9x0wYzXOy9Kmi5RiLmbg7K9G/hvr9xLoJpvyo=) 3: C7AA2249FA58EA1330AA369A2E7EA202B054E665.crl (hash: Q//eZR7wzWKKDu0pIGoB43QezfUK8E/bgN9yEUUDCFs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.crl rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7AA2249FA58EA1330AA369A2E7EA202B054E665.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 23:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2c:dd:3e:5a:43:f4:b9:a8:2f:2a:36:32:f2:66:27:99:71:ab:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7AA2249FA58EA1330AA369A2E7EA202B054E665 Validity Not Before: Dec 22 22:35:12 2025 GMT Not After : Dec 23 23:38:12 2025 GMT Subject: CN=0F12DC0F3428FDD3D474B923FB8C0F0E82861075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:35:46:43:26:43:a3:d1:cc:01:6f:4d:40: 30:f9:ab:e0:5a:72:bb:a6:0e:67:35:ff:b5:41:1d: 07:a7:1f:81:5f:c8:f5:e7:bd:cd:40:15:43:d5:93: 6b:b6:4b:f5:06:82:dd:e3:09:e6:8f:33:2b:83:a5: 7c:59:e2:5c:e2:ca:5b:79:25:ac:5a:14:23:95:86: 81:b5:0d:e8:2e:56:b9:8d:89:ec:ca:57:14:e7:ae: a1:b4:1a:78:dc:f1:64:e4:ad:65:11:85:83:d7:ef: fc:ff:e9:0d:49:2f:f2:b4:18:85:f6:17:c4:92:bc: ce:d0:2a:d2:46:85:ec:04:28:7b:59:71:7b:b0:44: 2f:2c:89:ca:33:d6:b4:03:1b:d5:88:3a:5e:34:cc: ad:ae:2e:1b:d1:13:16:1b:9d:01:df:f3:de:b2:b7: c4:96:03:57:9c:ed:21:bd:ce:ae:62:8f:96:7d:5f: 55:9c:5c:2b:8d:4c:d8:d0:32:2b:80:7c:c7:24:03: 33:98:eb:88:28:27:7b:fd:32:f5:c8:38:5f:85:a2: e8:4e:b2:19:4d:e0:3e:30:fa:61:43:17:e1:77:7f: 73:39:47:c3:d3:89:75:d6:14:5a:55:da:f9:bd:48: 01:16:81:bc:5a:42:42:99:e7:12:66:79:ff:29:1f: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:12:DC:0F:34:28:FD:D3:D4:74:B9:23:FB:8C:0F:0E:82:86:10:75 X509v3 Authority Key Identifier: keyid:C7:AA:22:49:FA:58:EA:13:30:AA:36:9A:2E:7E:A2:02:B0:54:E6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7AA2249FA58EA1330AA369A2E7EA202B054E665.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFBgmCEgSXhgB5tsJEVP56oKCwXhYZHTNLtnFgVa3pDW/0/C7AA2249FA58EA1330AA369A2E7EA202B054E665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ab:fe:9c:f9:12:c4:84:19:71:ed:26:6a:ae:ea:1e:0b:72: df:8a:e2:e1:3a:bf:d1:fa:3f:e0:f5:55:b4:98:4a:cb:19:cd: 3c:91:2f:a9:57:d6:8e:b6:02:90:8a:48:7e:99:a0:3f:cd:93: 33:aa:e0:24:d5:a1:37:1e:69:96:6a:a3:53:81:52:f2:16:2d: 03:6a:d7:8d:4d:de:45:6e:7e:9a:c7:60:ae:b8:43:d0:b1:bd: a2:55:bf:a2:cd:e1:76:5d:d5:f1:ac:01:03:e4:f3:fc:95:c8: a3:1f:ac:fe:8c:d2:b9:1a:64:ba:19:9f:e2:a3:1e:b1:e1:de: b1:69:13:56:12:bf:26:7a:71:1e:13:83:ab:fa:30:00:60:5e: 63:64:fc:ff:cd:15:9e:a1:6c:50:49:49:2d:5e:e1:e0:0c:e2: 10:0a:26:72:bc:57:54:88:fb:b2:38:29:73:56:0d:0e:1d:5e: fb:2a:83:b4:00:ac:ec:e2:f6:92:2b:e6:c7:0a:98:3c:06:c1: b3:dd:3b:6d:c6:f9:84:88:06:51:86:04:b9:a5:93:5f:4e:72: 36:b2:67:d1:cb:43:a5:c5:18:af:c4:74:1b:32:15:7f:2e:4c: 8c:45:e9:fc:eb:e4:29:82:c4:d5:12:85:d0:4d:55:ab:e5:5e: ad:17:e0:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKSzdPlpD9LmoLyo2MvJmJ5lxq3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdBQTIyNDlGQTU4RUExMzMwQUEzNjlBMkU3RUEyMDJC MDU0RTY2NTAeFw0yNTEyMjIyMjM1MTJaFw0yNTEyMjMyMzM4MTJaMDMxMTAvBgNV BAMTKDBGMTJEQzBGMzQyOEZERDNENDc0QjkyM0ZCOEMwRjBFODI4NjEwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/jVGQyZDo9HMAW9NQDD5q+Ba crumDmc1/7VBHQenH4FfyPXnvc1AFUPVk2u2S/UGgt3jCeaPMyuDpXxZ4lziylt5 JaxaFCOVhoG1DeguVrmNiezKVxTnrqG0Gnjc8WTkrWURhYPX7/z/6Q1JL/K0GIX2 F8SSvM7QKtJGhewEKHtZcXuwRC8sicoz1rQDG9WIOl40zK2uLhvRExYbnQHf896y t8SWA1ec7SG9zq5ij5Z9X1WcXCuNTNjQMiuAfMckAzOY64goJ3v9MvXIOF+FouhO shlN4D4w+mFDF+F3f3M5R8PTiXXWFFpV2vm9SAEWgbxaQkKZ5xJmef8pH1XPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDxLcDzQo/dPUdLkj+4wPDoKGEHUwHwYDVR0j BBgwFoAUx6oiSfpY6hMwqjaaLn6iArBU5mUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0ZCZ21DRWdTWGhnQjV0c0pFVlA1Nm9LQ3dYaFlaSFROTHRuRmdWYTNw RFcvMC9DN0FBMjI0OUZBNThFQTEzMzBBQTM2OUEyRTdFQTIwMkIwNTRFNjY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3QUEyMjQ5RkE1OEVBMTMz MEFBMzY5QTJFN0VBMjAyQjA1NEU2NjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0ZCZ21DRWdTWGhnQjV0c0pFVlA1Nm9LQ3dYaFlaSFROTHRuRmdWYTNwRFcvMC9D N0FBMjI0OUZBNThFQTEzMzBBQTM2OUEyRTdFQTIwMkIwNTRFNjY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFqv+nPkSxIQZce0maq7qHgty34ri4Tq/0fo/4PVVtJhKyxnNPJEvqVfWjrYC kIpIfpmgP82TM6rgJNWhNx5plmqjU4FS8hYtA2rXjU3eRW5+msdgrrhD0LG9olW/ os3hdl3V8awBA+Tz/JXIox+s/ozSuRpkuhmf4qMeseHesWkTVhK/JnpxHhODq/ow AGBeY2T8/80VnqFsUElJLV7h4AziEAomcrxXVIj7sjgpc1YNDh1e+yqDtACs7OL2 kivmxwqYPAbBs907bcb5hIgGUYYEuaWTX05yNrJn0ctDpcUYr8R0GzIVfy5MjEXp /OvkKYLE1RKF0E1Vq+VerRfgjg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:53:30 2025 by rpki-client