This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft File: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft (raw, json) Hash identifier: EgSozeDka/9y1EhGle+N8t3SQRJb0Jccd0hiYXpIUrM= Subject key identifier: F6:A5:26:75:E1:65:AB:DC:9D:1C:00:D9:34:99:88:DB:E2:84:BD:EE Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB Certificate issuer: /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB Certificate serial: 5D667D771852B8D4825FBA0132852DC0D26685D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer Subject info access: rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft Manifest number: 0222 Signing time: Sat 20 Dec 2025 15:02:04 +0000 Manifest this update: Sat 20 Dec 2025 14:57:04 +0000 Manifest next update: Sun 21 Dec 2025 15:23:04 +0000 Files and hashes: 1: 1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl (hash: UcB9lyZTrpIB/Ywu1VEczzs8YBbxsaumCHZSlAMFXdE=) 2: 323830343a346530383a3a2f33322d3634203d3e20323638323335.roa (hash: XH1N2cfxCmBT8VcK9qJsDfraONQoZ81C4Yo8ki7quN0=) 3: 34352e3233362e3131362e302f32322d3234203d3e20323638323335.roa (hash: aevkZNp1r0p7IWRIUz8od2ybg+zKEryAACHQcwg1UxI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 15:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:66:7d:77:18:52:b8:d4:82:5f:ba:01:32:85:2d:c0:d2:66:85:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB Validity Not Before: Dec 20 14:57:04 2025 GMT Not After : Dec 21 15:23:04 2025 GMT Subject: CN=F6A52675E165ABDC9D1C00D9349988DBE284BDEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:eb:aa:c8:5c:2f:88:b7:ba:d1:ee:e5:cf:4c: c8:76:b9:f6:b3:32:3a:b7:7b:45:2d:15:f0:bf:59: f4:3e:f7:8a:5a:eb:c6:c8:46:8e:b2:d7:b7:95:b2: b5:e4:b3:85:79:9b:fb:bc:c1:70:9f:98:46:6e:cc: b9:b7:3c:cb:78:f2:17:e7:cc:fa:71:5d:7e:47:cb: 97:c2:b4:82:a2:a3:ca:12:ad:47:a5:2a:e1:85:38: 6f:33:fc:43:ba:48:f2:db:b0:5b:a5:ce:0a:e8:26: 38:a2:57:c0:ab:41:ca:c1:86:6c:2f:04:49:87:a3: bb:b3:70:29:3b:05:65:de:c9:28:34:c8:87:7c:48: e9:36:e2:c7:c7:a0:7e:40:fc:4f:cc:e1:ed:f3:5b: fd:53:01:48:96:bc:b5:c4:83:ac:94:2b:be:3b:10: c2:df:f3:04:c2:1b:32:dc:6e:0a:43:bf:93:75:5b: 8e:ae:df:57:52:c4:7b:35:00:5e:cd:f4:43:d9:54: 39:bd:33:58:1c:9e:00:57:be:21:fa:9a:45:25:da: 27:e2:da:63:a9:b0:60:09:b6:c1:20:d9:5e:e8:56: a1:db:0f:57:8c:d8:a2:cd:48:81:22:12:8c:2e:ce: 97:6f:59:64:83:6e:99:cc:ce:3e:f0:cf:b4:22:04: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A5:26:75:E1:65:AB:DC:9D:1C:00:D9:34:99:88:DB:E2:84:BD:EE X509v3 Authority Key Identifier: keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5b:d1:e8:55:cd:e2:81:22:e7:09:47:f1:6a:13:bc:76:e6: d8:93:ab:3c:3d:ad:39:7d:53:a3:1e:6e:18:25:af:e7:39:4d: 84:75:3f:76:2f:a7:c3:36:e8:39:56:f6:08:18:75:b9:58:4e: bf:bf:4e:68:c4:6f:07:03:01:33:8b:ba:d7:f8:05:46:9e:ee: bb:8d:83:08:98:a1:c4:9f:83:3c:0e:13:3a:f0:7a:a9:8b:35: 3e:af:60:bc:74:cd:dc:15:2d:44:1b:92:8c:f5:9c:27:e0:de: 05:44:4a:8f:50:2b:96:08:bf:0f:21:71:c8:ea:7e:cb:f1:26: 88:90:4e:20:84:f3:7a:ba:67:16:5a:e8:98:28:44:54:b1:cb: 3f:43:ae:6e:41:2d:13:8f:e4:8c:16:4c:26:b2:8c:38:d7:d3: 41:b7:dd:7b:49:4b:81:2a:1b:0b:bb:de:e4:9e:74:d0:c8:22: 61:5a:d7:d2:cf:90:60:6d:a2:f4:a4:72:ef:f0:78:bd:89:c9: 7b:b3:86:a7:ca:98:c9:68:18:ac:ed:07:9b:22:a1:b0:a1:d9: 26:31:7c:47:93:c3:33:60:80:39:d3:ad:df:89:40:5c:39:fd: 5c:8e:f7:d5:ae:96:df:20:bb:30:27:12:af:c7:84:52:22:b3: f6:55:a2:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXWZ9dxhSuNSCX7oBMoUtwNJmhdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJFODk5NUZDOUMzOTUxNDVBOTc0NTZCNjQ0NDJBQzY4 QzBERjRFQjAeFw0yNTEyMjAxNDU3MDRaFw0yNTEyMjExNTIzMDRaMDMxMTAvBgNV BAMTKEY2QTUyNjc1RTE2NUFCREM5RDFDMDBEOTM0OTk4OERCRTI4NEJERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv66rIXC+It7rR7uXPTMh2ufaz Mjq3e0UtFfC/WfQ+94pa68bIRo6y17eVsrXks4V5m/u8wXCfmEZuzLm3PMt48hfn zPpxXX5Hy5fCtIKio8oSrUelKuGFOG8z/EO6SPLbsFulzgroJjiiV8CrQcrBhmwv BEmHo7uzcCk7BWXeySg0yId8SOk24sfHoH5A/E/M4e3zW/1TAUiWvLXEg6yUK747 EMLf8wTCGzLcbgpDv5N1W46u31dSxHs1AF7N9EPZVDm9M1gcngBXviH6mkUl2ifi 2mOpsGAJtsEg2V7oVqHbD1eM2KLNSIEiEowuzpdvWWSDbpnMzj7wz7QiBEBfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9qUmdeFlq9ydHADZNJmI2+KEve4wHwYDVR0j BBgwFoAUG+iZX8nDlRRal0VrZEQqxowN9OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002 S3IvMC8xQkU4OTk1RkM5QzM5NTE0NUE5NzQ1NkI2NDQ0MkFDNjhDMERGNEVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRTg5OTVGQzlDMzk1MTQ1 QTk3NDU2QjY0NDQyQUM2OEMwREY0RUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzNua0pMZzZzQ29rcVlxRlZLNjNhMTl4c0VpaHJHMUxNb05YOEc1S002S3IvMC8x QkU4OTk1RkM5QzM5NTE0NUE5NzQ1NkI2NDQ0MkFDNjhDMERGNEVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWlvR6FXN4oEi5wlH8WoTvHbm2JOrPD2tOX1Tox5uGCWv5zlNhHU/di+nwzbo OVb2CBh1uVhOv79OaMRvBwMBM4u61/gFRp7uu42DCJihxJ+DPA4TOvB6qYs1Pq9g vHTN3BUtRBuSjPWcJ+DeBURKj1Arlgi/DyFxyOp+y/EmiJBOIITzerpnFlromChE VLHLP0OubkEtE4/kjBZMJrKMONfTQbfde0lLgSobC7ve5J500MgiYVrX0s+QYG2i 9KRy7/B4vYnJe7OGp8qYyWgYrO0HmyKhsKHZJjF8R5PDM2CAOdOt34lAXDn9XI73 1a6W3yC7MCcSr8eEUiKz9lWixQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:26 2025 by rpki-client