This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft File: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json) Hash identifier: szMzh7a8QV3SlxEClE2qi3tivI+QCMWzTtNmaFbh8Ro= Subject key identifier: C4:CF:A6:A7:E8:E0:E1:47:B6:B8:D5:23:79:B1:85:18:68:AB:0B:FB Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Certificate serial: 2F91BD1B23B52B1FA829DA9F6C462042CC1356FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft Manifest number: 0340 Signing time: Sat 20 Dec 2025 02:50:27 +0000 Manifest this update: Sat 20 Dec 2025 02:45:27 +0000 Manifest next update: Sun 21 Dec 2025 04:41:27 +0000 Files and hashes: 1: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=) 2: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=) 3: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: GKh/Pxa7iSQCV8uFT2xAiHZN+CbSj/wyn/A4q6l8JDg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 04:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:91:bd:1b:23:b5:2b:1f:a8:29:da:9f:6c:46:20:42:cc:13:56:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Validity Not Before: Dec 20 02:45:27 2025 GMT Not After : Dec 21 04:41:27 2025 GMT Subject: CN=C4CFA6A7E8E0E147B6B8D52379B1851868AB0BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:47:df:d5:25:21:25:e6:f7:63:e3:5b:bb:c5: 99:11:a1:9e:1d:f7:5f:6c:10:8e:8d:6f:20:d0:31: 62:3f:4a:d8:d1:3a:1e:34:a8:3e:67:5e:79:f1:46: 27:46:98:25:7e:72:55:af:88:79:35:11:f2:fb:ca: af:cf:25:7a:0f:a4:6d:1b:33:36:08:74:9e:61:d5: 58:1d:1f:71:d9:12:57:a5:7c:89:36:f8:63:00:29: c7:e0:9a:05:bf:1f:f7:ff:5e:c1:6d:0b:e5:3b:90: 91:2c:4f:68:07:6e:69:5d:ce:04:82:35:51:6d:ac: 22:79:83:74:f2:7c:1e:34:a6:66:8f:c2:fe:d0:66: ba:de:a7:fb:59:76:d2:e0:d1:32:47:0b:ff:82:9c: ff:43:54:a4:29:b1:c6:5d:0b:b7:db:e8:45:18:65: bc:02:3f:11:85:72:52:23:36:ef:9e:69:b5:72:74: 4c:b7:22:fb:17:80:c6:ad:4f:3a:b8:98:e6:f7:83: 14:c2:0d:12:04:63:c9:40:a5:ed:d4:35:bb:85:42: 31:f6:35:d4:95:d7:e0:bd:ab:58:5e:a0:de:00:dd: fc:84:a4:34:ce:7d:16:33:0a:62:2e:41:59:80:61: 8e:cf:66:b5:59:55:bf:21:5a:33:8b:49:14:ae:a1: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:A6:A7:E8:E0:E1:47:B6:B8:D5:23:79:B1:85:18:68:AB:0B:FB X509v3 Authority Key Identifier: keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:e0:7b:ca:7a:ba:29:26:1f:3b:ec:d0:5b:f0:66:05:1b:c6: b8:44:ee:ed:48:c6:55:13:20:f3:75:83:92:5a:c6:6c:3d:02: 0c:fc:d0:9c:63:49:f8:7c:c5:16:b4:0d:85:a1:2a:5a:dd:38: d7:f6:09:86:c3:5d:77:00:e8:fd:13:12:a5:c1:98:99:86:10: cf:5d:ec:48:05:2c:49:b2:f0:1e:73:59:e8:1f:72:e8:b4:3a: e5:63:6e:4f:a5:42:91:dc:4e:a2:52:32:65:69:75:ce:cc:55: a2:24:ed:08:e9:13:8f:7a:b8:05:fb:ca:65:0e:a2:e4:3b:cd: 9e:a8:d8:a1:3b:15:77:97:f8:8c:5f:8d:97:59:cc:b4:f7:40: d2:11:66:ce:12:ab:ec:b5:8d:94:d2:5a:51:a4:bc:7a:ab:98: 37:ce:22:0e:f7:7e:03:e2:27:83:e8:d3:54:2b:bc:09:71:d3: e3:24:e2:32:3d:85:18:09:b6:08:03:19:07:1f:e0:ba:e4:fe: 1f:74:84:dd:f9:6f:e6:6e:72:67:32:5b:9d:da:9f:4f:1a:d9: fb:11:99:d6:01:b3:68:f9:1b:48:f6:a1:4d:93:15:8c:d3:fd: 9d:c5:74:95:c9:90:d9:cc:a7:9d:a7:fe:12:b5:d2:be:86:87: 7a:57:80:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL5G9GyO1Kx+oKdqfbEYgQswTVv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC QkFGRDZCNDAeFw0yNTEyMjAwMjQ1MjdaFw0yNTEyMjEwNDQxMjdaMDMxMTAvBgNV BAMTKEM0Q0ZBNkE3RThFMEUxNDdCNkI4RDUyMzc5QjE4NTE4NjhBQjBCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcR9/VJSEl5vdj41u7xZkRoZ4d 919sEI6NbyDQMWI/StjROh40qD5nXnnxRidGmCV+clWviHk1EfL7yq/PJXoPpG0b MzYIdJ5h1VgdH3HZElelfIk2+GMAKcfgmgW/H/f/XsFtC+U7kJEsT2gHbmldzgSC NVFtrCJ5g3TyfB40pmaPwv7QZrrep/tZdtLg0TJHC/+CnP9DVKQpscZdC7fb6EUY ZbwCPxGFclIjNu+eabVydEy3IvsXgMatTzq4mOb3gxTCDRIEY8lApe3UNbuFQjH2 NdSV1+C9q1heoN4A3fyEpDTOfRYzCmIuQVmAYY7PZrVZVb8hWjOLSRSuoXt/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxM+mp+jg4Ue2uNUjebGFGGirC/swHwYDVR0j BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvuB7ynq6KSYfO+zQW/BmBRvGuETu7UjGVRMg83WDklrGbD0CDPzQnGNJ+HzF FrQNhaEqWt041/YJhsNddwDo/RMSpcGYmYYQz13sSAUsSbLwHnNZ6B9y6LQ65WNu T6VCkdxOolIyZWl1zsxVoiTtCOkTj3q4BfvKZQ6i5DvNnqjYoTsVd5f4jF+Nl1nM tPdA0hFmzhKr7LWNlNJaUaS8equYN84iDvd+A+Ing+jTVCu8CXHT4yTiMj2FGAm2 CAMZBx/guuT+H3SE3flv5m5yZzJbndqfTxrZ+xGZ1gGzaPkbSPahTZMVjNP9ncV0 lcmQ2cynnaf+ErXSvoaHeleAeg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:22:16 2025 by rpki-client