This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.mft File: 9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.mft (raw, json) Hash identifier: 5O1jtZil1VYa1dT8nGLpkrIwxcoXVDZCDtecLd/qVlI= Subject key identifier: CA:95:CF:A5:DC:BC:75:81:C3:27:17:6F:12:DB:C7:F2:BB:44:D6:EE Authority key identifier: 95:18:DB:67:40:1F:3F:6D:73:40:D8:F2:FF:17:FB:E9:26:44:F4:BC Certificate issuer: /CN=9518DB67401F3F6D7340D8F2FF17FBE92644F4BC Certificate serial: 4657F40029C51589B5601AF1AD813D759F7727E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer Subject info access: rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.mft Manifest number: 01AF Signing time: Mon 22 Dec 2025 13:11:21 +0000 Manifest this update: Mon 22 Dec 2025 13:06:21 +0000 Manifest next update: Tue 23 Dec 2025 14:25:21 +0000 Files and hashes: 1: 323830343a356362633a3a2f33322d3438203d3e20323638393237.roa (hash: 5/yqfD+0LXTlbsnVJdTtAOgMkM5GeaL6r76lLo8DE2I=) 2: 34352e3137362e32382e302f32322d3234203d3e20323638393237.roa (hash: kAMKWjUUZc/njU1ugl7B0mZJijn39bP0XSjlDrygDCg=) 3: 9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.crl (hash: fxWcR7tAUhpwuoZQjtd/uziEMdvzuwsrdUp0mkQFT9Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.crl rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 14:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:57:f4:00:29:c5:15:89:b5:60:1a:f1:ad:81:3d:75:9f:77:27:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9518DB67401F3F6D7340D8F2FF17FBE92644F4BC Validity Not Before: Dec 22 13:06:21 2025 GMT Not After : Dec 23 14:25:21 2025 GMT Subject: CN=CA95CFA5DCBC7581C327176F12DBC7F2BB44D6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:4f:c4:1d:90:97:74:e7:47:8f:64:45:40: a9:f0:94:1e:fd:64:2d:e3:59:e7:1c:4b:02:c6:6e: 3e:c6:2e:61:11:2f:c6:4a:97:68:ee:e0:c0:47:39: a7:01:5d:40:02:c3:78:d2:56:b7:0e:05:dc:b2:82: 9a:a2:af:c7:84:86:5c:9c:03:d7:02:79:b5:e1:b1: c9:75:20:9a:5f:5a:eb:e6:88:b8:e2:a7:24:d7:97: 15:23:a0:7b:5f:56:2a:98:89:7f:f7:d8:ff:c8:a3: bf:f7:51:a7:06:94:76:79:bb:09:10:f6:79:25:5a: 43:3c:6b:c6:85:23:20:07:cd:83:e8:06:7a:76:54: fd:50:fb:db:3c:e8:0e:02:bd:9f:68:78:a4:bc:9a: a9:23:22:f9:fd:55:89:17:5f:bc:80:4e:60:d5:f7: 57:f2:f5:42:10:db:09:69:be:c9:f8:cc:af:8f:ad: aa:f1:44:df:17:59:27:38:c1:b5:97:23:a4:1f:44: 96:9d:48:72:cc:7a:ff:f7:4f:b1:07:80:d4:d9:56: c6:c4:5c:22:c8:7e:0e:89:3f:1c:f2:dd:32:f7:f3: 86:cc:23:ea:9e:db:cd:35:48:c9:95:ba:d6:71:e3: f9:21:56:d8:2d:64:ea:d5:90:f7:9d:67:e7:e7:4f: b4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:95:CF:A5:DC:BC:75:81:C3:27:17:6F:12:DB:C7:F2:BB:44:D6:EE X509v3 Authority Key Identifier: keyid:95:18:DB:67:40:1F:3F:6D:73:40:D8:F2:FF:17:FB:E9:26:44:F4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/9518DB67401F3F6D7340D8F2FF17FBE92644F4BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:60:df:a9:16:b6:a7:40:11:ac:75:0a:b3:7a:f6:9c:e7:07: ac:f9:e2:28:81:d3:77:97:5a:d7:65:65:bf:6f:f0:71:76:46: 2f:23:5d:71:26:21:cd:9d:86:f7:de:08:8b:48:70:9c:55:e4: 79:d5:23:b0:1f:4a:1d:bf:61:25:c7:1c:15:6e:e7:5a:1f:a6: 67:26:39:48:d3:25:87:c6:9c:8c:31:1f:c7:5f:bd:14:ac:83: 7d:23:c8:0d:0f:ba:25:c0:76:64:0c:e7:48:62:ed:31:15:49: fc:a3:3a:a0:48:d5:0a:65:5e:2b:b7:dd:01:87:0a:32:7d:d9: da:97:fd:5b:0f:a6:ff:b7:63:a4:71:93:fc:ca:68:3d:38:e2: 00:03:ab:d1:1a:17:3e:29:ab:67:71:0a:d1:ea:f9:da:81:f9: 26:4d:d0:f9:e5:9c:b4:ed:c5:49:f2:76:35:bd:34:46:d2:83: 4c:9a:95:bf:50:c2:e4:cd:82:d4:67:a1:f0:de:7d:30:b3:8b: 4d:46:73:97:c0:60:32:d9:e0:79:cd:02:66:0b:43:5a:2b:41: 43:ef:e1:f5:bd:7f:48:ec:04:0e:fc:4a:8f:86:55:d3:c6:97: cc:50:81:9b:79:51:e0:b5:72:fb:b5:fa:7f:ac:94:50:2b:f0: c8:5d:2c:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURlf0ACnFFYm1YBrxrYE9dZ93J+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxOERCNjc0MDFGM0Y2RDczNDBEOEYyRkYxN0ZCRTky NjQ0RjRCQzAeFw0yNTEyMjIxMzA2MjFaFw0yNTEyMjMxNDI1MjFaMDMxMTAvBgNV BAMTKENBOTVDRkE1RENCQzc1ODFDMzI3MTc2RjEyREJDN0YyQkI0NEQ2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hU/EHZCXdOdHj2RFQKnwlB79 ZC3jWeccSwLGbj7GLmERL8ZKl2ju4MBHOacBXUACw3jSVrcOBdyygpqir8eEhlyc A9cCebXhscl1IJpfWuvmiLjipyTXlxUjoHtfViqYiX/32P/Io7/3UacGlHZ5uwkQ 9nklWkM8a8aFIyAHzYPoBnp2VP1Q+9s86A4CvZ9oeKS8mqkjIvn9VYkXX7yATmDV 91fy9UIQ2wlpvsn4zK+PrarxRN8XWSc4wbWXI6QfRJadSHLMev/3T7EHgNTZVsbE XCLIfg6JPxzy3TL384bMI+qe2801SMmVutZx4/khVtgtZOrVkPedZ+fnT7RVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUypXPpdy8dYHDJxdvEtvH8rtE1u4wHwYDVR0j BBgwFoAUlRjbZ0AfP21zQNjy/xf76SZE9LwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDEyelBUQ2N5eGliekNTdkxteWM3a1F5N2c0YlNyR1lxZnNIVGlBYkRM VW8vMC85NTE4REI2NzQwMUYzRjZENzM0MEQ4RjJGRjE3RkJFOTI2NDRGNEJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MThEQjY3NDAxRjNGNkQ3 MzQwRDhGMkZGMTdGQkU5MjY0NEY0QkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDEyelBUQ2N5eGliekNTdkxteWM3a1F5N2c0YlNyR1lxZnNIVGlBYkRMVW8vMC85 NTE4REI2NzQwMUYzRjZENzM0MEQ4RjJGRjE3RkJFOTI2NDRGNEJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIGDfqRa2p0ARrHUKs3r2nOcHrPniKIHTd5da12Vlv2/wcXZGLyNdcSYhzZ2G 994Ii0hwnFXkedUjsB9KHb9hJcccFW7nWh+mZyY5SNMlh8acjDEfx1+9FKyDfSPI DQ+6JcB2ZAznSGLtMRVJ/KM6oEjVCmVeK7fdAYcKMn3Z2pf9Ww+m/7djpHGT/Mpo PTjiAAOr0RoXPimrZ3EK0er52oH5Jk3Q+eWctO3FSfJ2Nb00RtKDTJqVv1DC5M2C 1Geh8N59MLOLTUZzl8BgMtngec0CZgtDWitBQ+/h9b1/SOwEDvxKj4ZV08aXzFCB m3lR4LVy+7X6f6yUUCvwyF0s6g== -----END CERTIFICATE-----Generated at Mon Dec 22 20:33:48 2025 by rpki-client