This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft File: 14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft (raw, json) Hash identifier: aCKFu9pCfQR8nnTOJo8/lzw5DL/PLkW0HN82L0XV3Tg= Subject key identifier: 30:6F:C2:C6:7A:60:BA:98:7F:7A:7D:22:A3:1F:9E:B3:E9:3A:9D:CE Authority key identifier: 14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB Certificate issuer: /CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB Certificate serial: 31B51FA8EA6526373A04BA282E33250153B4FAFA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft Manifest number: 033F Signing time: Thu 18 Dec 2025 17:53:43 +0000 Manifest this update: Thu 18 Dec 2025 17:48:43 +0000 Manifest next update: Fri 19 Dec 2025 21:09:43 +0000 Files and hashes: 1: 34352e3233382e3130302e302f32322d3234203d3e20323638333335.roa (hash: GBbOVwX1X9HoCDmAl5k/BmMMH+MpiKC7XsxfdtphnrI=) 2: 323830343a346639303a3a2f33322d3438203d3e20323638333335.roa (hash: cjF52cn36Stmgc37Ua7Qxatp+9J3nhBvEcDv7D0975s=) 3: 14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl (hash: Z90CJ1Z/wUVW+B05ptjfGHiqgnLN4r8X6hon4mH8ZZI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 21:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b5:1f:a8:ea:65:26:37:3a:04:ba:28:2e:33:25:01:53:b4:fa:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB Validity Not Before: Dec 18 17:48:43 2025 GMT Not After : Dec 19 21:09:43 2025 GMT Subject: CN=306FC2C67A60BA987F7A7D22A31F9EB3E93A9DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:33:fe:c6:44:33:ce:b0:59:12:46:4f:9e: bd:a6:c9:cc:2e:66:1e:fd:01:6a:21:a4:24:63:ab: a7:6b:df:19:8a:d7:83:14:d1:03:5d:55:8e:c3:7d: 8a:22:32:9b:1f:c3:a5:32:bf:50:13:af:f5:5c:4c: 52:92:76:fb:0c:59:dc:36:27:78:0f:41:eb:c5:d6: cd:22:d9:77:38:6e:34:fe:f4:f9:3c:07:0d:00:38: 41:8e:dc:57:5e:44:e3:4a:80:5c:64:fa:b8:db:ac: 07:56:15:27:36:8a:50:ad:32:ef:93:a1:7e:ed:d6: 11:05:98:bd:bc:1f:68:39:0a:7c:36:d8:2e:37:d6: 95:41:46:8d:8e:85:bb:91:c1:b1:0f:2e:4c:71:08: 68:fa:2c:f6:2a:fa:e1:ef:c3:9c:c9:42:d8:31:fd: f4:35:16:de:8d:1b:0e:dd:60:78:f0:3d:61:73:9e: 4c:36:d6:61:fe:e9:f2:2b:cf:80:98:9c:15:e9:57: 3d:c0:f9:f4:50:84:c2:68:8a:24:43:a2:00:35:76: 6f:50:7e:8a:86:50:28:1b:bc:50:e2:31:d2:c7:96: a4:39:af:fc:40:c4:87:fc:6d:bf:da:85:bc:e1:a6: ce:6e:5f:f8:21:2b:d2:19:33:1a:56:e8:a3:a9:4e: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6F:C2:C6:7A:60:BA:98:7F:7A:7D:22:A3:1F:9E:B3:E9:3A:9D:CE X509v3 Authority Key Identifier: keyid:14:FA:C5:8F:DA:D4:E0:FC:86:D9:47:B4:C8:EF:14:D5:C0:A9:EF:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECkVgbvqWjePwWyEg5e3rN93yhRbAjYkyJaN6mhGfZV6/1/14FAC58FDAD4E0FC86D947B4C8EF14D5C0A9EFEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f2:89:b2:49:6d:f6:d5:eb:ee:72:dd:83:2b:62:4e:20:fe: 6f:a0:73:08:2e:3e:5d:dd:5c:6c:43:63:09:cb:ec:53:25:78: 30:b5:66:3d:b5:a4:44:73:b3:de:4b:6a:b8:04:9a:29:e2:22: ea:85:f2:42:0c:7c:88:44:15:13:9b:3f:59:b6:f5:ea:3d:a3: 32:06:75:12:6c:f6:94:07:3d:2a:fe:e7:5e:ea:2c:a4:48:30: fb:e1:af:63:92:0f:7f:6c:eb:40:71:ac:d7:48:27:51:3a:9b: e7:48:6d:73:d8:d1:5c:75:bb:90:d7:76:b6:44:84:ac:54:c1: 5b:54:3c:67:69:3c:b6:7d:28:1b:e1:2b:4c:15:9a:f8:9f:d0: ca:f5:8c:6b:b2:6f:20:fb:d8:22:79:41:94:9d:51:f6:8c:32: 09:22:01:5e:e5:2f:01:16:62:0d:96:8e:74:74:74:f6:bd:5e: 8e:c0:c2:32:44:4a:70:b6:28:21:84:ca:a8:fa:18:44:f6:41: 46:ba:60:b9:51:a5:49:90:b9:77:6a:18:a8:81:02:f4:94:eb: 0a:0d:c0:df:94:38:b0:49:37:14:2d:2d:aa:98:ac:2d:a7:6e: e4:75:8e:d1:27:9b:34:67:ab:50:0c:2a:76:81:a9:28:9d:5b: 1f:e4:8d:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMbUfqOplJjc6BLooLjMlAVO0+vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGQUM1OEZEQUQ0RTBGQzg2RDk0N0I0QzhFRjE0RDVD MEE5RUZFQjAeFw0yNTEyMTgxNzQ4NDNaFw0yNTEyMTkyMTA5NDNaMDMxMTAvBgNV BAMTKDMwNkZDMkM2N0E2MEJBOTg3RjdBN0QyMkEzMUY5RUIzRTkzQTlEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aTP+xkQzzrBZEkZPnr2mycwu Zh79AWohpCRjq6dr3xmK14MU0QNdVY7DfYoiMpsfw6Uyv1ATr/VcTFKSdvsMWdw2 J3gPQevF1s0i2Xc4bjT+9Pk8Bw0AOEGO3FdeRONKgFxk+rjbrAdWFSc2ilCtMu+T oX7t1hEFmL28H2g5Cnw22C431pVBRo2OhbuRwbEPLkxxCGj6LPYq+uHvw5zJQtgx /fQ1Ft6NGw7dYHjwPWFznkw21mH+6fIrz4CYnBXpVz3A+fRQhMJoiiRDogA1dm9Q foqGUCgbvFDiMdLHlqQ5r/xAxIf8bb/ahbzhps5uX/ghK9IZMxpW6KOpTm7DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMG/Cxnpguph/en0iox+es+k6nc4wHwYDVR0j BBgwFoAUFPrFj9rU4PyG2Ue0yO8U1cCp7+swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNrVmdidnFXamVQd1d5RWc1ZTNyTjkzeWhSYkFqWWt5SmFONm1oR2Za VjYvMS8xNEZBQzU4RkRBRDRFMEZDODZEOTQ3QjRDOEVGMTRENUMwQTlFRkVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RkFDNThGREFENEUwRkM4 NkQ5NDdCNEM4RUYxNEQ1QzBBOUVGRUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNrVmdidnFXamVQd1d5RWc1ZTNyTjkzeWhSYkFqWWt5SmFONm1oR2ZaVjYvMS8x NEZBQzU4RkRBRDRFMEZDODZEOTQ3QjRDOEVGMTRENUMwQTlFRkVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbfKJsklt9tXr7nLdgytiTiD+b6BzCC4+Xd1cbENjCcvsUyV4MLVmPbWkRHOz 3ktquASaKeIi6oXyQgx8iEQVE5s/Wbb16j2jMgZ1Emz2lAc9Kv7nXuospEgw++Gv Y5IPf2zrQHGs10gnUTqb50htc9jRXHW7kNd2tkSErFTBW1Q8Z2k8tn0oG+ErTBWa +J/QyvWMa7JvIPvYInlBlJ1R9owyCSIBXuUvARZiDZaOdHR09r1ejsDCMkRKcLYo IYTKqPoYRPZBRrpguVGlSZC5d2oYqIEC9JTrCg3A35Q4sEk3FC0tqpisLadu5HWO 0SebNGerUAwqdoGpKJ1bH+SNcQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:46 2025 by rpki-client