This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft File: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft (raw, json) Hash identifier: gPM/Cqp5SsTaa7AuPoBGcVD+g0ccO95jJ1UCIIxxT1c= Subject key identifier: 8C:66:67:2D:E3:5F:F4:E8:B9:FD:F6:A4:13:98:E4:B5:39:35:8D:A4 Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C Certificate issuer: /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Certificate serial: 21E08371F0041C293B4A35155EADF380E90D0779 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject info access: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft Manifest number: 02B5 Signing time: Sun 21 Dec 2025 17:53:11 +0000 Manifest this update: Sun 21 Dec 2025 17:48:11 +0000 Manifest next update: Mon 22 Dec 2025 18:54:11 +0000 Files and hashes: 1: 323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (hash: VmhohPCz9KS+aX0cz1omXVFO2DRFWZR9rKAG0HIoc2o=) 2: 3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (hash: wKAb1UDvZiPDekR65fEEYenq6zheNgIFDzzMrJdoquA=) 3: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl (hash: jWrIKm7CVRp9uYKlqyE6Q+tmp1sUVkrom1xPo9rI368=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 18:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e0:83:71:f0:04:1c:29:3b:4a:35:15:5e:ad:f3:80:e9:0d:07:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Validity Not Before: Dec 21 17:48:11 2025 GMT Not After : Dec 22 18:54:11 2025 GMT Subject: CN=8C66672DE35FF4E8B9FDF6A41398E4B539358DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:e2:59:be:ae:c7:c4:89:4c:cc:3f:25:04: d5:81:3c:5f:44:ac:c1:63:db:03:3a:8f:67:a2:59: a6:ba:34:5e:b0:c1:a5:78:5d:d7:65:80:e7:2b:ae: 39:64:e6:1d:d0:cf:d9:dc:dc:3e:00:c4:34:0a:f0: 31:88:0c:0d:c1:83:6d:02:93:00:de:ca:a9:92:7c: e5:15:6a:e7:85:6e:d5:df:5a:ed:57:f9:04:82:0b: 07:be:66:dc:d4:6f:0a:46:0a:15:da:f4:92:07:5d: cc:09:72:aa:7e:b0:ae:18:8a:96:a9:c0:b8:52:75: c3:d6:43:ec:4e:42:79:d2:25:b9:81:fd:7d:e4:44: 36:73:b9:2d:77:45:f3:7c:64:58:61:3b:42:38:67: 92:d1:bf:ba:6c:b1:36:7c:c7:95:bc:23:0d:e1:e1: 82:ed:a3:11:58:2e:02:4e:46:7a:11:df:30:06:a9: 49:6f:02:ef:0c:c9:ca:22:2b:63:e4:9d:e6:cd:82: 22:11:7a:d1:92:b5:88:24:bd:42:01:38:02:bd:e4: 25:ad:40:6a:86:a6:80:92:6b:71:03:85:bc:de:07: 7e:52:c1:e7:d3:b4:ba:b5:35:7b:78:bc:9b:82:25: 99:46:e9:09:a7:0a:d2:88:dd:16:c9:fd:6d:0a:eb: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:66:67:2D:E3:5F:F4:E8:B9:FD:F6:A4:13:98:E4:B5:39:35:8D:A4 X509v3 Authority Key Identifier: keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:77:25:03:78:a9:c7:44:39:d2:43:e7:23:5f:e2:4c:2c:f2: c6:f4:c0:08:dc:d1:5b:a7:2c:99:65:4d:6e:10:34:7f:f0:82: 2c:50:fa:b7:eb:5a:cb:26:88:1b:44:69:c5:f4:dc:dc:18:b8: 0c:b7:6c:40:ee:14:ef:8b:e7:ce:45:2a:35:cf:32:22:f0:ce: 36:0e:04:b2:0c:90:6f:e0:dc:ae:05:eb:e8:d6:0f:1a:b5:ca: e5:bb:5e:f4:ab:c5:99:9a:3e:fd:87:3a:92:0e:f6:6d:0e:d0: 46:ed:00:d1:19:87:9a:96:fc:d7:e3:50:37:2b:c4:fc:84:04: d1:82:f1:e3:74:44:79:fe:23:b3:4a:df:76:53:99:e5:3b:bb: f3:12:ab:47:04:86:ab:87:e8:36:c6:25:9f:84:a9:f6:f3:d4: 13:90:a7:5a:4d:63:25:73:bd:e8:43:b9:49:41:b3:9c:00:93: 9e:9c:88:dd:5b:e6:bd:c3:e5:df:80:8a:fc:95:ed:c4:b8:81: 2d:6d:fc:9d:3f:ab:29:62:91:04:2f:35:8f:d5:ef:d8:2a:91: 1b:57:45:17:92:ce:ca:b4:5f:bb:20:ff:7c:9a:e4:4d:eb:cb: dd:0c:a6:b6:55:d1:8b:5f:93:ce:8d:4a:0c:d3:6d:a8:95:4b: 9f:e3:b5:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIeCDcfAEHCk7SjUVXq3zgOkNB3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRjdDMjBCMjQ1NkJBMzZFQkNDODkyNzBBQ0U5NzZE QUNGQzM1QzAeFw0yNTEyMjExNzQ4MTFaFw0yNTEyMjIxODU0MTFaMDMxMTAvBgNV BAMTKDhDNjY2NzJERTM1RkY0RThCOUZERjZBNDEzOThFNEI1MzkzNThEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMu+JZvq7HxIlMzD8lBNWBPF9E rMFj2wM6j2eiWaa6NF6wwaV4XddlgOcrrjlk5h3Qz9nc3D4AxDQK8DGIDA3Bg20C kwDeyqmSfOUVaueFbtXfWu1X+QSCCwe+ZtzUbwpGChXa9JIHXcwJcqp+sK4Yipap wLhSdcPWQ+xOQnnSJbmB/X3kRDZzuS13RfN8ZFhhO0I4Z5LRv7pssTZ8x5W8Iw3h 4YLtoxFYLgJORnoR3zAGqUlvAu8MycoiK2PknebNgiIRetGStYgkvUIBOAK95CWt QGqGpoCSa3EDhbzeB35SwefTtLq1NXt4vJuCJZlG6QmnCtKI3RbJ/W0K63trAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjGZnLeNf9Oi5/fakE5jktTk1jaQwHwYDVR0j BBgwFoAUwR98ILJFa6NuvMiScKzpdtrPw1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldV MksvMC9DMTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUY3QzIwQjI0NTZCQTM2 RUJDQzg5MjcwQUNFOTc2REFDRkMzNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldVMksvMC9D MTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY3clA3ipx0Q50kPnI1/iTCzyxvTACNzRW6csmWVNbhA0f/CCLFD6t+tayyaI G0RpxfTc3Bi4DLdsQO4U74vnzkUqNc8yIvDONg4EsgyQb+DcrgXr6NYPGrXK5bte 9KvFmZo+/Yc6kg72bQ7QRu0A0RmHmpb81+NQNyvE/IQE0YLx43REef4js0rfdlOZ 5Tu78xKrRwSGq4foNsYln4Sp9vPUE5CnWk1jJXO96EO5SUGznACTnpyI3VvmvcPl 34CK/JXtxLiBLW38nT+rKWKRBC81j9Xv2CqRG1dFF5LOyrRfuyD/fJrkTevL3Qym tlXRi1+Tzo1KDNNtqJVLn+O1RQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:19:19 2025 by rpki-client