This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.mft File: 9B631A7BE6FE9041D41421E649466C47C99A3F14.mft (raw, json) Hash identifier: nhaJRREDbxr8oVQBQvjzYxp30Y8DYxGcavK2G7i1o4w= Subject key identifier: 48:20:EF:C9:FE:1A:2B:1C:DD:3A:EB:02:61:C9:1B:24:59:E5:F6:EC Authority key identifier: 9B:63:1A:7B:E6:FE:90:41:D4:14:21:E6:49:46:6C:47:C9:9A:3F:14 Certificate issuer: /CN=9B631A7BE6FE9041D41421E649466C47C99A3F14 Certificate serial: 4F3F893E0D9DE3C57DD4157C306EF69EF86278C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer Subject info access: rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.mft Manifest number: 01C6 Signing time: Mon 22 Dec 2025 22:23:06 +0000 Manifest this update: Mon 22 Dec 2025 22:18:06 +0000 Manifest next update: Wed 24 Dec 2025 00:53:06 +0000 Files and hashes: 1: 34352e3138322e34382e302f32322d3234203d3e20323639323235.roa (hash: +o4WpRrz5c0aFXZU/qqlwrDFeLVe8Ds4J/ca2MMtd5M=) 2: 9B631A7BE6FE9041D41421E649466C47C99A3F14.crl (hash: JeF+EVHhcUg9NY/f+oxoLgsoe2zqwVU3hUI3/YD7Uk0=) 3: 323830343a363134343a3a2f33322d3438203d3e20323639323235.roa (hash: 0fsqfWs/r01pgD36fpR5CNuymk9+vk4jQSr4BtF78I4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.crl rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 00:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3f:89:3e:0d:9d:e3:c5:7d:d4:15:7c:30:6e:f6:9e:f8:62:78:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B631A7BE6FE9041D41421E649466C47C99A3F14 Validity Not Before: Dec 22 22:18:06 2025 GMT Not After : Dec 24 00:53:06 2025 GMT Subject: CN=4820EFC9FE1A2B1CDD3AEB0261C91B2459E5F6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:1f:c0:33:14:70:98:09:ff:ae:49:5a:5c: 5d:ac:a5:d7:c9:52:46:54:f2:ea:5f:de:99:c7:6e: e8:f3:17:57:aa:89:16:ba:83:11:75:29:ac:54:e8: ad:b4:4e:8b:23:b3:33:6d:b4:e0:64:08:86:5c:db: e4:a3:61:a8:50:e7:60:95:64:f2:49:95:48:fb:b0: d2:c2:6e:e2:d1:26:0e:c9:60:b2:85:5c:86:21:2b: 0b:6d:44:f3:1f:e6:2d:c9:43:01:b9:18:e6:59:60: c3:c3:f7:59:5d:67:cd:b9:6f:da:75:61:c9:fa:ff: ec:6b:9d:15:bb:68:31:01:81:4b:63:8f:6b:15:3d: b3:66:27:48:79:17:69:95:84:4f:ea:92:bd:3a:9f: 16:d7:1d:4f:6d:3e:48:4b:1f:c5:51:98:1b:e6:cf: 79:19:84:06:14:94:01:32:4e:df:14:3d:34:9c:7f: 74:72:7d:2b:92:d2:1c:3b:75:54:11:21:1d:40:51: da:b9:da:44:3e:b9:c9:bf:e0:17:9e:a9:db:77:c0: 3d:20:d9:e1:f6:0b:25:b5:fa:6f:91:fb:f9:d7:a4: e9:2a:c7:f8:8c:fa:58:50:6f:10:b3:c5:f1:31:5f: d9:45:7a:82:79:1c:d7:f8:23:28:78:31:49:11:27: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:EF:C9:FE:1A:2B:1C:DD:3A:EB:02:61:C9:1B:24:59:E5:F6:EC X509v3 Authority Key Identifier: keyid:9B:63:1A:7B:E6:FE:90:41:D4:14:21:E6:49:46:6C:47:C9:9A:3F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c0:04:38:40:ae:9c:52:29:3a:b9:da:9a:6c:5f:a9:e0:b5: f1:25:0c:bc:5f:0f:b2:b9:c4:f0:44:4d:2e:30:64:58:e3:94: 8e:a6:c7:a4:d5:45:24:37:16:3b:33:d5:7a:c6:38:4b:99:1b: 6d:a8:33:75:3d:87:c4:8d:9b:f3:e5:8e:5b:07:5a:e1:27:f9: 4e:62:dc:88:14:60:dc:d8:88:38:c5:ee:8e:aa:e4:b0:fe:2e: 59:41:1f:5a:bd:69:cc:85:cd:d7:ad:1e:d9:2e:b8:4c:6f:da: ce:c1:af:d9:8b:bd:2d:c0:3e:61:0f:c4:60:40:b3:e4:7f:43: e7:81:31:3d:ea:92:5b:3b:41:fd:d2:64:cc:67:42:9d:a2:ee: 0d:4d:42:46:13:00:40:c5:9b:ec:e6:11:68:d4:f2:c6:9e:f9: 5e:15:82:1b:32:79:2e:41:5b:4c:fc:03:a4:fb:4b:16:78:25: 47:93:13:cb:e0:ae:6c:a7:73:15:25:aa:d1:8e:50:2b:80:b2: 26:de:65:41:57:d9:3d:94:08:50:bf:3f:dc:b2:43:af:1a:d3: 7d:7f:93:a0:84:bb:cb:99:21:e0:9b:91:5c:ea:83:23:97:cd: c3:0e:2a:a4:4c:45:10:3a:c6:36:76:e6:a9:e0:cd:ad:71:d7: 28:8d:6d:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTz+JPg2d48V91BV8MG72nvhieMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI2MzFBN0JFNkZFOTA0MUQ0MTQyMUU2NDk0NjZDNDdD OTlBM0YxNDAeFw0yNTEyMjIyMjE4MDZaFw0yNTEyMjQwMDUzMDZaMDMxMTAvBgNV BAMTKDQ4MjBFRkM5RkUxQTJCMUNERDNBRUIwMjYxQzkxQjI0NTlFNUY2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8R/AMxRwmAn/rklaXF2spdfJ UkZU8upf3pnHbujzF1eqiRa6gxF1KaxU6K20TosjszNttOBkCIZc2+SjYahQ52CV ZPJJlUj7sNLCbuLRJg7JYLKFXIYhKwttRPMf5i3JQwG5GOZZYMPD91ldZ825b9p1 Ycn6/+xrnRW7aDEBgUtjj2sVPbNmJ0h5F2mVhE/qkr06nxbXHU9tPkhLH8VRmBvm z3kZhAYUlAEyTt8UPTScf3RyfSuS0hw7dVQRIR1AUdq52kQ+ucm/4Beeqdt3wD0g 2eH2CyW1+m+R+/nXpOkqx/iM+lhQbxCzxfExX9lFeoJ5HNf4Iyh4MUkRJ8ObAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSCDvyf4aKxzdOusCYckbJFnl9uwwHwYDVR0j BBgwFoAUm2Mae+b+kEHUFCHmSUZsR8maPxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVFRSEN4OXI5MU4xS3RYUHpKdjc1enVQUGtFRzdROGlxVThISzlEMnIx NFQvMC85QjYzMUE3QkU2RkU5MDQxRDQxNDIxRTY0OTQ2NkM0N0M5OUEzRjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNjMxQTdCRTZGRTkwNDFE NDE0MjFFNjQ5NDY2QzQ3Qzk5QTNGMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVFRSEN4OXI5MU4xS3RYUHpKdjc1enVQUGtFRzdROGlxVThISzlEMnIxNFQvMC85 QjYzMUE3QkU2RkU5MDQxRDQxNDIxRTY0OTQ2NkM0N0M5OUEzRjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARMAEOECunFIpOrnammxfqeC18SUMvF8PsrnE8ERNLjBkWOOUjqbHpNVFJDcW OzPVesY4S5kbbagzdT2HxI2b8+WOWwda4Sf5TmLciBRg3NiIOMXujqrksP4uWUEf Wr1pzIXN160e2S64TG/azsGv2Yu9LcA+YQ/EYECz5H9D54ExPeqSWztB/dJkzGdC naLuDU1CRhMAQMWb7OYRaNTyxp75XhWCGzJ5LkFbTPwDpPtLFnglR5MTy+CubKdz FSWq0Y5QK4CyJt5lQVfZPZQIUL8/3LJDrxrTfX+ToIS7y5kh4JuRXOqDI5fNww4q pExFEDrGNnbmqeDNrXHXKI1tdw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:42:57 2025 by rpki-client