This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.mft File: 2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.mft (raw, json) Hash identifier: AT+L4DaYKM65tFx1BWbrLFdZK6ePw2tIt95IH4xQ0+4= Subject key identifier: 01:31:E8:CD:64:AB:57:50:46:D0:1D:60:2F:B2:FE:DD:38:F5:66:FF Authority key identifier: 2F:C0:2A:75:46:CC:2F:E0:8E:3C:D4:5F:02:F0:E8:FF:3C:00:A8:CA Certificate issuer: /CN=2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA Certificate serial: 026EC4266B3864B3A5A8728B158D0F95D8A331EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.mft Manifest number: 2A Signing time: Wed 24 Dec 2025 06:09:47 +0000 Manifest this update: Wed 24 Dec 2025 06:04:47 +0000 Manifest next update: Thu 25 Dec 2025 09:57:47 +0000 Files and hashes: 1: 323830343a343064343a3a2f33322d313238203d3e20323635393834.roa (hash: iViQllJOfBrdCFSdtSeBPm+gdpWSyGmuimxrjtIMkhU=) 2: 3138312e3139312e342e302f32322d3332203d3e20323635393834.roa (hash: Fy7VcGFsx9ENCfQb7BNkc10fr4STC12duKfwEif2XIA=) 3: 2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.crl (hash: 0jai8gpr5yFljvfmpU1Q0dWZeqKf8s85kDA66Br+1LI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.crl rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 09:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6e:c4:26:6b:38:64:b3:a5:a8:72:8b:15:8d:0f:95:d8:a3:31:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA Validity Not Before: Dec 24 06:04:47 2025 GMT Not After : Dec 25 09:57:47 2025 GMT Subject: CN=0131E8CD64AB575046D01D602FB2FEDD38F566FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:b7:de:02:d9:08:ed:4d:5f:28:a8:e6:fc: d1:42:13:fe:f0:1c:ed:67:67:cd:61:d7:a5:60:4c: a1:99:22:06:99:7f:ff:ff:97:c0:98:30:d9:b2:5d: ad:8f:42:d9:b0:2a:90:ac:0c:6a:59:b7:61:b2:72: 32:b8:7a:eb:a1:ec:3b:8e:a3:5d:8f:95:a0:65:5d: aa:e4:84:04:c7:93:0f:80:b4:d3:3f:95:f7:8e:15: 60:0b:31:68:5f:bb:7d:f6:85:2a:8a:e1:c0:29:9c: 44:5a:19:d2:fa:98:22:28:ef:a5:aa:67:ed:0b:be: 65:c6:d0:75:8a:2f:e7:24:6f:a4:fd:a8:8c:b0:0e: fd:39:91:2a:c1:1d:cb:a6:da:9b:94:c6:15:15:3e: 45:7e:06:69:62:6e:b6:5e:5b:40:49:fd:2a:80:06: ff:05:16:d0:68:d2:ee:79:ec:1b:ea:bb:54:7a:2a: cb:78:e9:8c:bc:34:88:c8:21:c1:55:65:42:e7:df: ce:61:b2:d1:73:65:86:6a:7e:93:a5:a8:d0:5e:94: 3c:b1:d0:d2:0b:07:5f:28:68:61:81:fb:0a:c3:8f: 31:fe:28:cf:0f:84:5d:60:3b:c9:d4:5f:92:6c:fd: 7b:15:c8:a3:30:56:69:6b:07:cf:dc:ad:a1:df:24: 07:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:31:E8:CD:64:AB:57:50:46:D0:1D:60:2F:B2:FE:DD:38:F5:66:FF X509v3 Authority Key Identifier: keyid:2F:C0:2A:75:46:CC:2F:E0:8E:3C:D4:5F:02:F0:E8:FF:3C:00:A8:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2FC02A7546CC2FE08E3CD45F02F0E8FF3C00A8CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:7c:80:12:e3:a9:b2:cd:4c:d4:79:de:bb:9f:18:d5:1d:78: f0:60:52:d8:8d:36:c9:f0:9f:ef:fb:29:31:01:3b:2b:dc:d6: a8:c2:b5:a4:fc:a4:f2:15:6f:71:3b:c6:42:3d:92:34:2f:75: 6f:fb:6a:d7:36:b4:a2:13:9c:79:74:03:89:75:96:7f:ec:00: 10:69:26:bb:3b:f2:eb:4a:93:32:71:63:ad:bd:5f:75:98:f6: 43:ad:ee:42:d3:44:d9:81:d7:f5:e9:bb:79:ac:eb:39:49:f9: 65:0b:12:3f:f6:2f:62:9d:bf:fd:ca:e9:7d:de:4f:4d:15:c8: 51:b8:41:9f:5b:19:bf:c6:a6:6a:9d:f5:d4:18:65:13:bd:93: dc:44:7e:dd:b8:98:96:ea:71:ca:65:10:a4:dd:ce:31:86:be: 04:cf:4d:41:99:71:6a:f9:5a:6d:af:85:f9:f4:a4:88:4b:88: 50:b7:79:b7:d7:df:38:e3:c1:d2:e8:c4:0d:7f:f9:8d:74:db: e7:76:dc:c3:6c:e4:fd:d4:c8:f1:60:df:bb:68:97:2b:96:3e: ad:0e:6a:2d:d9:04:44:64:95:14:f7:e4:58:e8:bb:f4:fe:84: b4:ad:0e:82:7f:fa:da:60:d4:d8:f5:65:5b:7a:a2:0e:ed:c6: ea:12:1f:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAm7EJms4ZLOlqHKLFY0PldijMe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZDMDJBNzU0NkNDMkZFMDhFM0NENDVGMDJGMEU4RkYz QzAwQThDQTAeFw0yNTEyMjQwNjA0NDdaFw0yNTEyMjUwOTU3NDdaMDMxMTAvBgNV BAMTKDAxMzFFOENENjRBQjU3NTA0NkQwMUQ2MDJGQjJGRUREMzhGNTY2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOELfeAtkI7U1fKKjm/NFCE/7w HO1nZ81h16VgTKGZIgaZf///l8CYMNmyXa2PQtmwKpCsDGpZt2GycjK4euuh7DuO o12PlaBlXarkhATHkw+AtNM/lfeOFWALMWhfu332hSqK4cApnERaGdL6mCIo76Wq Z+0LvmXG0HWKL+ckb6T9qIywDv05kSrBHcum2puUxhUVPkV+BmlibrZeW0BJ/SqA Bv8FFtBo0u557Bvqu1R6Kst46Yy8NIjIIcFVZULn385hstFzZYZqfpOlqNBelDyx 0NILB18oaGGB+wrDjzH+KM8PhF1gO8nUX5Js/XsVyKMwVmlrB8/craHfJAe7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUATHozWSrV1BG0B1gL7L+3Tj1Zv8wHwYDVR0j BBgwFoAUL8AqdUbML+COPNRfAvDo/zwAqMowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmVKeGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5NdU1VaFNBd3Z2 cXgvMC8yRkMwMkE3NTQ2Q0MyRkUwOEUzQ0Q0NUYwMkYwRThGRjNDMDBBOENBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGQzAyQTc1NDZDQzJGRTA4 RTNDRDQ1RjAyRjBFOEZGM0MwMEE4Q0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmVKeGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5NdU1VaFNBd3Z2cXgvMC8y RkMwMkE3NTQ2Q0MyRkUwOEUzQ0Q0NUYwMkYwRThGRjNDMDBBOENBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo3yAEuOpss1M1Hneu58Y1R148GBS2I02yfCf7/spMQE7K9zWqMK1pPyk8hVv cTvGQj2SNC91b/tq1za0ohOceXQDiXWWf+wAEGkmuzvy60qTMnFjrb1fdZj2Q63u QtNE2YHX9em7eazrOUn5ZQsSP/YvYp2//crpfd5PTRXIUbhBn1sZv8amap311Bhl E72T3ER+3biYlupxymUQpN3OMYa+BM9NQZlxavlaba+F+fSkiEuIULd5t9ffOOPB 0ujEDX/5jXTb53bcw2zk/dTI8WDfu2iXK5Y+rQ5qLdkERGSVFPfkWOi79P6EtK0O gn/62mDU2PVlW3qiDu3G6hIfmA== -----END CERTIFICATE-----Generated at Wed Dec 24 17:32:31 2025 by rpki-client