This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft File: 35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft (raw, json) Hash identifier: SZPFJ9hetkv4sfIdArTv1+9wvZMbmKFyqytwr24PQ7Q= Subject key identifier: 9D:45:A9:F5:E8:37:E3:7A:22:6B:E6:F1:F8:0E:7A:E2:4B:4A:0C:AB Authority key identifier: 35:B8:F6:D7:DA:45:A0:F5:35:60:A7:E3:72:2A:FF:E1:1D:0C:F6:D7 Certificate issuer: /CN=35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7 Certificate serial: 368A4FD8210B61CCF268ED2B024B52194CFEB9EE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer Subject info access: rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft Manifest number: C6 Signing time: Wed 24 Dec 2025 11:29:08 +0000 Manifest this update: Wed 24 Dec 2025 11:24:08 +0000 Manifest next update: Thu 25 Dec 2025 11:46:08 +0000 Files and hashes: 1: 323830343a343166343a3a2f33322d3438203d3e20323637343638.roa (hash: 8rIhjcL9s8Vkdc0tJyUXuIW5ef3TJadev4mDjW+t3Dk=) 2: 3139322e3134312e3134302e302f32322d3234203d3e20323637343638.roa (hash: Smzo1i9R6g7N9a2Byujsv5lcAtfRjtk6lljtbJVzlAk=) 3: 35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl (hash: AxHiK+DRQ+AgYQGqZdEP3rF3pNysUdRSKqfzmA8BZ8w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 11:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8a:4f:d8:21:0b:61:cc:f2:68:ed:2b:02:4b:52:19:4c:fe:b9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7 Validity Not Before: Dec 24 11:24:08 2025 GMT Not After : Dec 25 11:46:08 2025 GMT Subject: CN=9D45A9F5E837E37A226BE6F1F80E7AE24B4A0CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5e:5f:37:c3:27:ba:b5:36:31:44:d4:f6:43: 93:db:6c:f5:59:65:e5:3b:d5:81:69:19:fe:11:69: 1c:de:4e:7c:e0:0d:21:f6:64:20:53:66:0f:29:63: bc:b3:a6:67:ba:b1:bb:3b:58:cd:03:69:04:3a:3c: c1:76:f5:1b:b6:6e:00:71:e9:e1:9c:e8:f5:43:9e: 54:d0:09:c9:ea:0b:73:c4:a6:23:4d:f1:c7:f7:ee: c1:19:83:43:2d:0b:a5:6a:74:d3:1f:35:b3:27:b7: 9f:68:ef:04:2e:3b:28:f0:4f:c7:a9:52:ec:ac:8c: 59:42:97:c8:a4:ea:62:39:14:c1:ee:46:c8:d1:5c: 4c:72:a3:a8:71:2c:f3:8a:4d:81:4c:17:5e:c4:cf: b0:45:7d:70:c5:36:b3:d3:9a:7f:dc:57:63:82:fb: c4:9f:ee:f6:6b:cd:a7:58:7e:11:8a:bc:5b:3b:c9: 1d:c3:f3:a3:e6:4e:b7:ec:6c:28:03:77:ae:28:15: be:7c:b2:6b:7c:f6:21:f7:d6:43:19:32:8a:88:45: 8b:b5:34:a5:18:f2:ce:97:06:c4:3b:0a:70:2e:b2: ed:a6:96:53:0d:75:d4:59:19:46:73:fe:e0:f9:0c: 6d:ae:89:8c:0e:85:19:b3:b3:20:3e:cf:f2:a9:bf: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:A9:F5:E8:37:E3:7A:22:6B:E6:F1:F8:0E:7A:E2:4B:4A:0C:AB X509v3 Authority Key Identifier: keyid:35:B8:F6:D7:DA:45:A0:F5:35:60:A7:E3:72:2A:FF:E1:1D:0C:F6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:dd:96:1f:45:71:98:68:59:32:a5:c7:bb:03:88:e2:9e:b7: d3:fd:65:d7:e6:04:ae:94:5b:82:4f:27:70:49:3f:f3:ff:48: 0e:32:f0:de:d6:da:57:1c:09:b1:48:e9:36:98:4f:6d:f3:ad: 89:1d:13:14:2f:bc:ec:41:37:cd:ca:34:1b:16:64:11:1d:43: d8:a3:b3:32:0e:54:5b:aa:f8:01:71:b8:7e:c3:a1:57:15:e1: 09:d8:e6:92:5c:a0:2a:0f:46:7c:dd:c6:52:9b:f7:5c:4b:64: e4:a3:8d:d7:0f:6f:c8:94:1a:b4:40:e8:3c:d3:b5:8b:a1:1b: 3c:b4:66:a8:c7:63:df:66:3e:0c:ff:f8:95:85:fa:90:55:47: bb:2e:52:2f:40:81:8a:3e:c9:78:b5:84:0e:b1:b6:91:37:54: 8d:5e:b6:ac:44:fb:14:e8:74:aa:0e:1b:59:16:75:9d:c9:9e: ab:f4:d7:5f:6a:7d:67:c5:48:00:15:68:72:29:9b:76:16:99: 90:dc:d7:0f:6f:15:77:6a:9d:9b:a7:71:db:36:b8:d9:52:9b: 4b:04:c2:e2:02:77:f8:0e:8a:c1:cd:dc:40:d3:f6:87:69:a2: 0e:ab:28:41:85:68:33:f1:54:7f:7c:e5:6e:68:87:42:b5:89: f9:f7:d0:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNopP2CELYczyaO0rAktSGUz+ue4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCOEY2RDdEQTQ1QTBGNTM1NjBBN0UzNzIyQUZGRTEx RDBDRjZENzAeFw0yNTEyMjQxMTI0MDhaFw0yNTEyMjUxMTQ2MDhaMDMxMTAvBgNV BAMTKDlENDVBOUY1RTgzN0UzN0EyMjZCRTZGMUY4MEU3QUUyNEI0QTBDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyXl83wye6tTYxRNT2Q5PbbPVZ ZeU71YFpGf4RaRzeTnzgDSH2ZCBTZg8pY7yzpme6sbs7WM0DaQQ6PMF29Ru2bgBx 6eGc6PVDnlTQCcnqC3PEpiNN8cf37sEZg0MtC6VqdNMfNbMnt59o7wQuOyjwT8ep UuysjFlCl8ik6mI5FMHuRsjRXExyo6hxLPOKTYFMF17Ez7BFfXDFNrPTmn/cV2OC +8Sf7vZrzadYfhGKvFs7yR3D86PmTrfsbCgDd64oFb58smt89iH31kMZMoqIRYu1 NKUY8s6XBsQ7CnAusu2mllMNddRZGUZz/uD5DG2uiYwOhRmzsyA+z/Kpv6utAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnUWp9eg343oia+bx+A564ktKDKswHwYDVR0j BBgwFoAUNbj219pFoPU1YKfjcir/4R0M9tcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWhUTE1UWHJLTEx5aXMxOVVjVVJxTDVCYUViN24yQVhqS25URkZFWGdi VlovMC8zNUI4RjZEN0RBNDVBMEY1MzU2MEE3RTM3MjJBRkZFMTFEMENGNkQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjhGNkQ3REE0NUEwRjUz NTYwQTdFMzcyMkFGRkUxMUQwQ0Y2RDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWhUTE1UWHJLTEx5aXMxOVVjVVJxTDVCYUViN24yQVhqS25URkZFWGdiVlovMC8z NUI4RjZEN0RBNDVBMEY1MzU2MEE3RTM3MjJBRkZFMTFEMENGNkQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXN2WH0VxmGhZMqXHuwOI4p630/1l1+YErpRbgk8ncEk/8/9IDjLw3tbaVxwJ sUjpNphPbfOtiR0TFC+87EE3zco0GxZkER1D2KOzMg5UW6r4AXG4fsOhVxXhCdjm klygKg9GfN3GUpv3XEtk5KON1w9vyJQatEDoPNO1i6EbPLRmqMdj32Y+DP/4lYX6 kFVHuy5SL0CBij7JeLWEDrG2kTdUjV62rET7FOh0qg4bWRZ1ncmeq/TXX2p9Z8VI ABVocimbdhaZkNzXD28Vd2qdm6dx2za42VKbSwTC4gJ3+A6Kwc3cQNP2h2miDqso QYVoM/FUf3zlbmiHQrWJ+ffQzA== -----END CERTIFICATE-----Generated at Wed Dec 24 14:25:53 2025 by rpki-client