This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft File: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft (raw, json) Hash identifier: X24zOEIJKEugDfIj12VB6sO/vQ2KESJisHP6xMO9lR0= Subject key identifier: A9:A8:30:F4:0C:49:84:D5:5D:85:B9:85:38:6C:66:5E:2E:38:A0:C4 Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 Certificate issuer: /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Certificate serial: 6B6C431C2725F2D0A4F988D8AB9CFFD51564835D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject info access: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft Manifest number: 84 Signing time: Sun 21 Dec 2025 17:01:35 +0000 Manifest this update: Sun 21 Dec 2025 16:56:35 +0000 Manifest next update: Mon 22 Dec 2025 18:59:35 +0000 Files and hashes: 1: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl (hash: XDMTCFloDPvG7+xsS6Tkvw1fsXy3gfQ3DKiOgkMXOE0=) 2: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: BxvAZqsINc17TFdRXILJwTm+FG+N9YG1areIiru28HI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 18:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6c:43:1c:27:25:f2:d0:a4:f9:88:d8:ab:9c:ff:d5:15:64:83:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Validity Not Before: Dec 21 16:56:35 2025 GMT Not After : Dec 22 18:59:35 2025 GMT Subject: CN=A9A830F40C4984D55D85B985386C665E2E38A0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:d9:0c:ea:e4:8e:e0:af:3c:4a:5f:44:67: 6d:8f:a8:63:20:61:b9:dd:92:bc:ee:c0:95:3b:1f: 8f:c6:f6:78:47:80:4e:29:b9:ed:df:69:75:0b:5a: d4:ab:01:0e:1a:6b:5b:d0:01:ac:b1:52:9a:b2:35: 43:39:b3:d5:36:a0:85:74:e6:5b:a7:3e:9f:cd:7a: d6:4b:c5:15:f4:3a:3f:35:cf:1f:1e:f1:f5:62:7a: 69:76:e0:2b:37:83:18:d3:75:a2:18:bb:92:3e:04: ed:84:4a:2d:29:5d:fc:47:52:aa:ac:e5:16:c3:75: 5a:d4:14:60:cd:0f:8e:8e:2b:5e:01:47:66:09:8b: 5d:e3:b7:3b:16:d4:82:c8:88:40:a4:05:19:da:c7: 84:15:84:f8:e4:b3:f9:64:50:4e:6f:f7:4f:fc:a3: 0b:9e:ac:62:1a:4e:fb:e9:e2:75:15:3f:77:3d:83: eb:0f:47:03:5f:9d:11:49:8a:ab:ad:66:78:a0:25: 8d:b3:07:9e:43:8a:9d:e1:fd:e4:ed:b5:44:af:18: 7b:8b:f5:7d:e6:12:f0:70:31:69:11:bf:7a:72:af: e9:81:ee:40:c3:69:2e:eb:17:b2:99:d1:3e:b6:76: 3c:22:fd:9e:ef:ae:53:c7:d3:2e:dd:ea:63:5b:49: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:30:F4:0C:49:84:D5:5D:85:B9:85:38:6C:66:5E:2E:38:A0:C4 X509v3 Authority Key Identifier: keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4b:cb:85:57:8c:4f:12:68:4c:25:56:39:86:82:bd:79:b8: 35:82:99:4b:58:69:2b:b4:56:a7:a0:5d:02:2f:8a:e9:69:26: 23:0c:63:96:35:fe:71:6d:99:7a:99:85:97:42:e7:f3:52:2f: 3b:40:74:7e:a3:e7:52:3b:f4:17:1d:93:c1:cf:80:3c:f3:8b: 68:b5:6c:2e:fd:a9:81:cb:86:ee:be:0b:4a:7e:8b:dc:80:ca: b9:87:68:5a:a2:71:7b:97:a4:fc:80:92:e0:bc:ca:7f:86:ff: 22:15:21:ff:72:25:7f:df:c7:2d:a5:0d:0e:ce:e7:e3:63:85: c3:1c:63:f5:d6:98:bf:fe:89:f7:86:d3:fd:85:17:bf:d6:58: 45:96:7e:df:e0:bc:fb:e6:10:d3:8f:fd:74:36:27:8f:07:c6: 55:4a:c7:25:0b:00:db:21:65:c6:57:02:50:5a:7f:6d:14:6e: b6:12:a5:00:54:d1:09:08:93:52:90:31:ad:d0:5b:f3:97:dc: 83:2f:92:a5:7d:44:7a:ea:d0:97:18:cd:b0:c4:0d:5d:39:4c: e8:2f:b2:50:ed:ab:03:fd:6f:ef:6d:36:2b:bc:bf:57:1b:75: 4b:f5:10:4a:4d:01:b8:b6:d7:78:49:b2:46:a2:83:fc:0b:7b: b9:ee:cf:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa2xDHCcl8tCk+YjYq5z/1RVkg10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDMDhCQzJFN0NBQkMxMUI4Mzk1RTU1QkQxQkU5Q0RE QTU3NDkzOTAeFw0yNTEyMjExNjU2MzVaFw0yNTEyMjIxODU5MzVaMDMxMTAvBgNV BAMTKEE5QTgzMEY0MEM0OTg0RDU1RDg1Qjk4NTM4NkM2NjVFMkUzOEEwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HNkM6uSO4K88Sl9EZ22PqGMg YbndkrzuwJU7H4/G9nhHgE4pue3faXULWtSrAQ4aa1vQAayxUpqyNUM5s9U2oIV0 5lunPp/NetZLxRX0Oj81zx8e8fVieml24Cs3gxjTdaIYu5I+BO2ESi0pXfxHUqqs 5RbDdVrUFGDND46OK14BR2YJi13jtzsW1ILIiECkBRnax4QVhPjks/lkUE5v90/8 owuerGIaTvvp4nUVP3c9g+sPRwNfnRFJiqutZnigJY2zB55Dip3h/eTttUSvGHuL 9X3mEvBwMWkRv3pyr+mB7kDDaS7rF7KZ0T62djwi/Z7vrlPH0y7d6mNbSep3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqagw9AxJhNVdhbmFOGxmXi44oMQwHwYDVR0j BBgwFoAUXcCLwufKvBG4OV5VvRvpzdpXSTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2Ja cXAvMC81REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQzA4QkMyRTdDQUJDMTFC ODM5NUU1NUJEMUJFOUNEREE1NzQ5MzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2JacXAvMC81 REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANkvLhVeMTxJoTCVWOYaCvXm4NYKZS1hpK7RWp6BdAi+K6WkmIwxjljX+cW2Z epmFl0Ln81IvO0B0fqPnUjv0Fx2Twc+APPOLaLVsLv2pgcuG7r4LSn6L3IDKuYdo WqJxe5ek/ICS4LzKf4b/IhUh/3Ilf9/HLaUNDs7n42OFwxxj9daYv/6J94bT/YUX v9ZYRZZ+3+C8++YQ04/9dDYnjwfGVUrHJQsA2yFlxlcCUFp/bRRuthKlAFTRCQiT UpAxrdBb85fcgy+SpX1EeurQlxjNsMQNXTlM6C+yUO2rA/1v7202K7y/Vxt1S/UQ Sk0BuLbXeEmyRqKD/At7ue7Pog== -----END CERTIFICATE-----Generated at Sun Dec 21 19:00:13 2025 by rpki-client