This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft File: C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft (raw, json) Hash identifier: Q3eoLvuki1BLzMebPxQWS1C3o4FxCXvYw1QEdcHjpFI= Subject key identifier: C9:54:AF:30:24:08:0F:01:B8:BA:20:1E:6B:39:E9:EA:BF:4F:45:8E Authority key identifier: C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A Certificate issuer: /CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A Certificate serial: 04215C3A4232074EFFA6F0B6444E9893586BB77B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft Manifest number: 02C2 Signing time: Sat 20 Dec 2025 06:19:28 +0000 Manifest this update: Sat 20 Dec 2025 06:14:28 +0000 Manifest next update: Sun 21 Dec 2025 09:16:28 +0000 Files and hashes: 1: 323830343a343139383a3a2f33322d3336203d3e20323637343433.roa (hash: NfllLyEJp8UoEh4DXohmtE2d8eRTUTW38d9Wu1YXuFI=) 2: C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl (hash: LltelMDURHBo6vkWU+OjOoe+kQC0prs6tf1jOK3ek7g=) 3: 3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa (hash: DAUG0xQ+vuKJ/I2lyRAeXcT4Z1cY6tf1uwUMOmKKJFg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 09:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:21:5c:3a:42:32:07:4e:ff:a6:f0:b6:44:4e:98:93:58:6b:b7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A Validity Not Before: Dec 20 06:14:28 2025 GMT Not After : Dec 21 09:16:28 2025 GMT Subject: CN=C954AF3024080F01B8BA201E6B39E9EABF4F458E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:d8:cd:7e:94:0a:17:e4:21:3d:a3:34:35: 96:a9:df:96:15:51:d4:74:37:7c:74:ac:da:9b:66: 1f:c1:74:b8:96:44:f4:4b:6d:73:12:ec:97:2b:cb: c5:c6:58:38:1f:e2:0f:21:1c:cc:d8:fe:80:bb:a8: 83:29:db:85:a1:ff:8f:5d:9c:f7:1b:5b:79:c5:aa: 00:7e:5a:8c:eb:7b:4f:52:d7:98:7e:96:46:a7:c8: db:2c:87:7b:ee:f1:8a:71:5e:74:82:70:fd:d4:11: 72:85:01:ec:9a:38:f0:0c:5c:b3:c3:5f:c3:1e:61: 23:47:8f:c9:51:4a:59:a8:d2:18:af:ea:2d:9b:db: 41:ad:2f:26:dc:5a:fd:00:72:a4:4e:1a:7f:85:7c: aa:36:85:fd:bd:25:da:2e:4c:bb:19:cb:ff:05:60: 50:a9:27:3c:24:7a:e2:a0:24:d5:21:bc:d9:12:7a: 15:5a:32:57:b6:f0:d4:5e:a0:e1:fc:ee:eb:20:9a: b3:94:99:b0:53:b4:99:a4:4f:1b:f8:c6:9d:4b:4e: a2:96:61:d2:fc:66:b5:6a:67:0e:e2:78:d8:7f:8d: da:f5:ff:79:a7:4c:cb:7f:e0:28:1b:19:72:28:30: 60:27:56:e9:fb:d8:88:55:38:82:1c:41:da:51:5a: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:54:AF:30:24:08:0F:01:B8:BA:20:1E:6B:39:E9:EA:BF:4F:45:8E X509v3 Authority Key Identifier: keyid:C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:69:4b:3d:1c:e6:14:91:70:91:a6:7a:56:02:9d:13:c5:67: b6:39:5e:ea:71:4b:a6:94:e3:86:8a:11:74:6f:f1:de:b3:51: 96:b8:8e:af:11:ff:d4:c5:66:a5:95:ba:95:ec:73:9f:81:d6: b3:1f:d8:e3:33:9c:0c:28:9c:f5:82:b6:78:29:9d:85:20:5f: 0c:8f:fd:00:53:86:42:34:69:40:e2:17:61:a2:7b:53:1d:33: 41:50:11:73:c9:96:87:26:1d:9e:98:24:a1:b2:db:10:d2:51: 1f:ca:63:37:ad:4e:1e:ca:04:8b:ab:a1:f7:a5:6f:0f:07:60: 24:c1:ed:a9:48:64:6d:88:69:e2:04:e3:a8:79:bc:9a:c4:70: 87:b2:98:77:99:a0:b0:db:10:45:a1:01:d9:82:ed:9a:cb:a2: 47:6d:cc:b3:d3:1d:c2:ec:ba:59:79:95:87:25:d1:b5:f2:4d: 55:28:97:22:07:dd:94:ff:d3:27:51:79:81:c5:69:a1:4f:e9: 3f:45:2e:65:10:1f:39:8f:bc:4d:d6:85:c5:a9:fb:83:0e:c7: 90:c4:9a:13:6e:d3:7b:9d:0c:1f:a2:09:69:12:a1:ad:5a:d0: 51:fd:08:58:63:e4:da:67:98:dc:0c:4f:bd:e5:e0:9b:33:48: 9d:3a:a2:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBCFcOkIyB07/pvC2RE6Yk1hrt3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYzQTlGRjM2MDQ1NjJBODBDQjU1RTlCRUEzREYwMjAw MkY1Q0E0QTAeFw0yNTEyMjAwNjE0MjhaFw0yNTEyMjEwOTE2MjhaMDMxMTAvBgNV BAMTKEM5NTRBRjMwMjQwODBGMDFCOEJBMjAxRTZCMzlFOUVBQkY0RjQ1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXtjNfpQKF+QhPaM0NZap35YV UdR0N3x0rNqbZh/BdLiWRPRLbXMS7Jcry8XGWDgf4g8hHMzY/oC7qIMp24Wh/49d nPcbW3nFqgB+Wozre09S15h+lkanyNssh3vu8YpxXnSCcP3UEXKFAeyaOPAMXLPD X8MeYSNHj8lRSlmo0hiv6i2b20GtLybcWv0AcqROGn+FfKo2hf29JdouTLsZy/8F YFCpJzwkeuKgJNUhvNkSehVaMle28NReoOH87usgmrOUmbBTtJmkTxv4xp1LTqKW YdL8ZrVqZw7ieNh/jdr1/3mnTMt/4CgbGXIoMGAnVun72IhVOIIcQdpRWpBvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyVSvMCQIDwG4uiAeaznp6r9PRY4wHwYDVR0j BBgwFoAUxjqf82BFYqgMtV6b6j3wIAL1ykowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDMyQ21VMnAxeXBhaFlWaUFDZVoxOFZwZlQyRWVNd2NnbVR2SmF6eGNq RlkvMC9DNjNBOUZGMzYwNDU2MkE4MENCNTVFOUJFQTNERjAyMDAyRjVDQTRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2M0E5RkYzNjA0NTYyQTgw Q0I1NUU5QkVBM0RGMDIwMDJGNUNBNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDMyQ21VMnAxeXBhaFlWaUFDZVoxOFZwZlQyRWVNd2NnbVR2SmF6eGNqRlkvMC9D NjNBOUZGMzYwNDU2MkE4MENCNTVFOUJFQTNERjAyMDAyRjVDQTRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmlLPRzmFJFwkaZ6VgKdE8Vntjle6nFLppTjhooRdG/x3rNRlriOrxH/1MVm pZW6lexzn4HWsx/Y4zOcDCic9YK2eCmdhSBfDI/9AFOGQjRpQOIXYaJ7Ux0zQVAR c8mWhyYdnpgkobLbENJRH8pjN61OHsoEi6uh96VvDwdgJMHtqUhkbYhp4gTjqHm8 msRwh7KYd5mgsNsQRaEB2YLtmsuiR23Ms9Mdwuy6WXmVhyXRtfJNVSiXIgfdlP/T J1F5gcVpoU/pP0UuZRAfOY+8TdaFxan7gw7HkMSaE27Te50MH6IJaRKhrVrQUf0I WGPk2meY3AxPveXgmzNInTqiOw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:26 2025 by rpki-client