This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft File: C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft (raw, json) Hash identifier: zYnV51t9NnyCYkJ+gbDf8J+LQ8Dh7sXRIHUv2wwYtr4= Subject key identifier: F1:70:DF:34:02:F4:6A:51:6C:FE:23:86:F4:87:27:8D:B9:BE:B2:F5 Authority key identifier: C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8 Certificate issuer: /CN=C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8 Certificate serial: 131A13A9E06530849341461D59A66C83698339E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft Manifest number: 12 Signing time: Wed 03 Dec 2025 13:27:25 +0000 Manifest this update: Wed 03 Dec 2025 13:22:25 +0000 Manifest next update: Thu 04 Dec 2025 15:30:25 +0000 Files and hashes: 1: C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl (hash: nAAzvlhulAFgzI4uG7UzeY0CTuBc/Aoi7rdnPqDDe2s=) 2: 323830343a386532633a3a2f33322d3438203d3e20323733343038.roa (hash: G/XiXJWvUHjXdetYZOinPftE6hcIH1QMqPHq2b2n+qI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 04 Dec 2025 15:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1a:13:a9:e0:65:30:84:93:41:46:1d:59:a6:6c:83:69:83:39:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8 Validity Not Before: Dec 3 13:22:25 2025 GMT Not After : Dec 4 15:30:25 2025 GMT Subject: CN=F170DF3402F46A516CFE2386F487278DB9BEB2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:e4:91:91:42:e0:08:b5:3f:5f:05:cd:25: b7:b0:c7:a5:45:43:34:9d:7c:ae:5f:e4:42:5c:69: 43:e4:e2:f2:a1:ee:9e:79:02:c3:25:0d:42:b5:70: 47:62:e1:66:ab:59:b7:ea:a0:3a:89:a2:06:8c:7a: 26:01:eb:92:62:cc:b3:40:51:13:c1:61:0b:88:30: 9f:19:ee:b7:5d:17:86:fd:84:0c:5b:5f:f4:2c:fb: 8f:3e:c9:dc:6b:1b:f2:c2:16:b0:4a:a0:ba:d4:48: ba:9b:ac:07:79:56:c2:46:30:09:c7:f8:36:0f:15: f0:dc:e4:d6:cd:85:f2:ec:16:7f:f6:c7:ec:cc:39: 29:0b:9c:4c:fd:0d:12:f6:2c:9a:a3:f5:a0:2b:5c: 88:37:af:20:fa:fe:86:eb:39:64:d0:8b:c3:1e:2d: b3:36:62:34:6c:79:34:ea:d4:32:80:cc:e1:d7:96: ce:3d:b0:82:75:43:9e:43:cd:86:24:7e:0e:4d:6f: 3c:68:7c:0c:97:4c:23:88:8e:95:ba:67:bd:fd:fb: 3c:e1:bf:f1:dc:4a:70:10:84:e8:18:6d:40:2c:ef: 20:83:0b:a6:5f:ff:30:70:dc:87:e8:26:dc:5a:9a: 11:15:4c:a0:c5:25:6c:f9:09:c0:35:05:65:4c:c0: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:DF:34:02:F4:6A:51:6C:FE:23:86:F4:87:27:8D:B9:BE:B2:F5 X509v3 Authority Key Identifier: keyid:C1:1D:72:CF:8F:95:68:AA:A9:39:50:E9:97:EC:DD:40:D6:CB:F1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/C11D72CF8F9568AAA93950E997ECDD40D6CBF1E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b6:e9:6f:4b:d3:8b:30:76:96:12:59:58:d7:9a:86:e9:e4: 54:b6:a4:86:a4:61:60:9d:e1:09:73:25:50:1f:19:d2:dc:8e: 64:91:64:e6:92:f0:95:7a:1f:e8:06:55:ad:c9:47:38:ec:63: de:71:f1:02:94:db:20:f6:42:70:54:4b:50:50:27:00:f0:7d: 93:92:9a:39:c6:09:09:24:20:56:0b:1d:08:d8:4d:43:69:74: 4e:39:5d:f3:b1:8f:03:9e:db:48:6b:7f:e3:44:db:19:08:3d: b7:c1:90:3e:3d:c6:fd:43:25:ea:01:58:50:21:d1:3c:d6:ba: 29:9a:39:21:a0:79:ea:53:05:ed:06:57:4e:ad:77:91:a4:55: e7:46:a5:70:e0:dd:d7:1a:61:f2:64:b7:fb:51:5f:3d:0f:8f: 10:92:4b:bc:8f:11:8c:0e:8f:d2:0c:3b:f9:0c:fd:7d:24:4b: e1:c3:4c:5d:53:6f:f7:e9:51:c7:46:c0:0b:79:83:b4:16:ed: 37:08:5e:f6:d9:3a:a7:da:98:36:61:2a:ac:e9:8d:9d:cc:aa: 58:06:53:bb:47:5d:64:fa:6d:21:4e:7e:3d:2f:c8:98:4b:ae: 49:fa:e3:78:a4:b8:c1:12:c4:69:77:b3:f0:6a:f7:e7:e1:c6: b8:18:e7:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUExoTqeBlMISTQUYdWaZsg2mDOeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRDcyQ0Y4Rjk1NjhBQUE5Mzk1MEU5OTdFQ0RENDBE NkNCRjFFODAeFw0yNTEyMDMxMzIyMjVaFw0yNTEyMDQxNTMwMjVaMDMxMTAvBgNV BAMTKEYxNzBERjM0MDJGNDZBNTE2Q0ZFMjM4NkY0ODcyNzhEQjlCRUIyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GOSRkULgCLU/XwXNJbewx6VF QzSdfK5f5EJcaUPk4vKh7p55AsMlDUK1cEdi4WarWbfqoDqJogaMeiYB65JizLNA URPBYQuIMJ8Z7rddF4b9hAxbX/Qs+48+ydxrG/LCFrBKoLrUSLqbrAd5VsJGMAnH +DYPFfDc5NbNhfLsFn/2x+zMOSkLnEz9DRL2LJqj9aArXIg3ryD6/obrOWTQi8Me LbM2YjRseTTq1DKAzOHXls49sIJ1Q55DzYYkfg5NbzxofAyXTCOIjpW6Z739+zzh v/HcSnAQhOgYbUAs7yCDC6Zf/zBw3IfoJtxamhEVTKDFJWz5CcA1BWVMwMvtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8XDfNAL0alFs/iOG9Icnjbm+svUwHwYDVR0j BBgwFoAUwR1yz4+VaKqpOVDpl+zdQNbL8egwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1RSdlNaUFRweTNmaGVXcG1jUG15VUZhYkNuZldvZ1JNZnBWTGhZY2h0 SlovMC9DMTFENzJDRjhGOTU2OEFBQTkzOTUwRTk5N0VDREQ0MEQ2Q0JGMUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUQ3MkNGOEY5NTY4QUFB OTM5NTBFOTk3RUNERDQwRDZDQkYxRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1RSdlNaUFRweTNmaGVXcG1jUG15VUZhYkNuZldvZ1JNZnBWTGhZY2h0SlovMC9D MTFENzJDRjhGOTU2OEFBQTkzOTUwRTk5N0VDREQ0MEQ2Q0JGMUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt7bpb0vTizB2lhJZWNeahunkVLakhqRhYJ3hCXMlUB8Z0tyOZJFk5pLwlXof 6AZVrclHOOxj3nHxApTbIPZCcFRLUFAnAPB9k5KaOcYJCSQgVgsdCNhNQ2l0Tjld 87GPA57bSGt/40TbGQg9t8GQPj3G/UMl6gFYUCHRPNa6KZo5IaB56lMF7QZXTq13 kaRV50alcODd1xph8mS3+1FfPQ+PEJJLvI8RjA6P0gw7+Qz9fSRL4cNMXVNv9+lR x0bAC3mDtBbtNwhe9tk6p9qYNmEqrOmNncyqWAZTu0ddZPptIU5+PS/ImEuuSfrj eKS4wRLEaXez8Gr35+HGuBjnnA== -----END CERTIFICATE-----Generated at Thu Dec 4 08:15:09 2025 by rpki-client