This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft File: C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft (raw, json) Hash identifier: 2QHiunKqwVQATFDbOY/8dRzCuaZPzJpoR1V+2evcOGc= Subject key identifier: 49:7F:25:C9:14:43:E2:9D:65:0D:93:E1:15:7E:E3:9D:B4:64:DD:BC Authority key identifier: C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48 Certificate issuer: /CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648 Certificate serial: 5C8E3EBF80DBAF67E9A8E4D679764E3101A57C17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer Subject info access: rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft Manifest number: 0314 Signing time: Sun 14 Dec 2025 16:31:08 +0000 Manifest this update: Sun 14 Dec 2025 16:26:08 +0000 Manifest next update: Mon 15 Dec 2025 19:50:08 +0000 Files and hashes: 1: 323830343a353132383a3a2f33322d3438203d3e20323638343334.roa (hash: eHMzUrusULOYVKB60JDhi97xMjONFDrfKgYdxrlcM6o=) 2: 34352e3136302e3233362e302f32322d3234203d3e20323638343334.roa (hash: MRDJZnxwxFrCGgYjkRGEcHpzQ74ilO1b7trT9O4CHPU=) 3: C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl (hash: P4L7qjbcnqSDGHh0VY6FTuXxWcUvmbZ3x1P35sSjlPM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Dec 2025 19:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8e:3e:bf:80:db:af:67:e9:a8:e4:d6:79:76:4e:31:01:a5:7c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648 Validity Not Before: Dec 14 16:26:08 2025 GMT Not After : Dec 15 19:50:08 2025 GMT Subject: CN=497F25C91443E29D650D93E1157EE39DB464DDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:33:58:ba:50:58:44:8e:5a:c6:02:9f:cb: d8:f1:a1:a9:b0:c8:71:fe:db:36:18:33:d0:94:5f: e5:c3:44:51:ba:88:40:b0:d6:da:2b:e2:43:8c:d7: 6e:00:0a:88:66:f4:c1:9b:dc:ac:82:a8:48:d4:15: 7d:68:d6:9e:d8:fc:62:d6:ea:4c:4e:28:83:74:a3: 27:64:f4:33:d8:00:38:1d:44:46:24:34:05:a5:75: 1d:5d:a3:f7:a5:8c:6b:15:86:f0:8c:bf:b4:e2:c5: 28:99:d5:32:43:38:a5:59:fd:f8:ab:4b:fa:b5:29: 31:18:79:b9:fb:35:67:cd:d8:1f:19:e3:7e:ca:77: ee:4b:ac:52:c4:77:6d:a8:ca:d2:04:b0:56:34:92: a5:a2:ed:2e:8b:26:28:16:90:82:6d:6e:e6:4a:db: 1b:cf:08:e0:ce:2c:f1:1a:ab:51:9c:8a:b6:bb:3f: 74:90:53:7c:28:4d:e5:d1:32:c9:24:a3:28:20:86: fe:86:f3:51:4d:99:da:e2:6c:85:ea:7f:2f:46:6a: bc:ea:c0:ab:42:cd:c4:98:75:5d:66:7a:63:4d:10: 50:a8:24:32:9d:f9:53:a4:8d:da:da:5a:72:78:13: 26:9d:2e:77:20:25:d9:f9:ae:2d:e5:3c:0f:59:09: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7F:25:C9:14:43:E2:9D:65:0D:93:E1:15:7E:E3:9D:B4:64:DD:BC X509v3 Authority Key Identifier: keyid:C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:92:6d:46:4e:d1:f4:81:90:ab:d9:09:f5:67:73:31:ce:7f: 52:08:d2:93:0a:47:3a:85:c8:11:99:80:11:7f:d8:9b:b4:5d: a4:cb:78:36:28:92:42:0f:22:1b:77:a4:c5:a4:42:4c:84:39: f7:82:02:f9:1b:19:cd:eb:f1:6b:80:07:d0:5e:16:20:e2:b2: 4e:7d:6a:46:ea:40:ec:ce:4a:e6:75:3c:d4:33:ff:fb:82:9f: 0a:90:5a:a4:b8:d3:1c:b4:0e:f5:bc:69:ca:ca:dc:0e:95:54: 58:42:59:6a:82:85:af:0e:2b:03:3b:73:ed:11:c1:ac:7b:b8: dc:b0:d2:61:3f:95:ba:18:32:95:48:11:5f:90:62:c5:fb:c6: cd:58:b6:6e:42:74:1a:29:ee:67:b5:15:40:fe:58:5b:02:50: 1b:68:1f:34:08:bd:cd:72:c0:e1:22:00:85:ab:03:bd:4a:93: f9:84:71:d9:47:40:e3:f6:b6:1d:aa:3c:47:13:43:9b:37:55: c5:55:c3:68:59:17:76:85:8d:49:06:84:7a:82:73:37:f4:b4: c1:58:6d:96:4b:92:5a:32:e6:fa:e7:a9:1e:28:ea:55:6c:94: 3e:2c:13:84:1b:99:7d:18:13:d9:5e:f7:7c:99:b1:94:bd:03: ca:d3:1f:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXI4+v4Dbr2fpqOTWeXZOMQGlfBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlBRkRBRkIzQUY3NEE4Q0EwODMyQjA3NjkxNEQ3QTRB NDQyNTY0ODAeFw0yNTEyMTQxNjI2MDhaFw0yNTEyMTUxOTUwMDhaMDMxMTAvBgNV BAMTKDQ5N0YyNUM5MTQ0M0UyOUQ2NTBEOTNFMTE1N0VFMzlEQjQ2NEREQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+DNYulBYRI5axgKfy9jxoamw yHH+2zYYM9CUX+XDRFG6iECw1tor4kOM124ACohm9MGb3KyCqEjUFX1o1p7Y/GLW 6kxOKIN0oydk9DPYADgdREYkNAWldR1do/eljGsVhvCMv7TixSiZ1TJDOKVZ/fir S/q1KTEYebn7NWfN2B8Z437Kd+5LrFLEd22oytIEsFY0kqWi7S6LJigWkIJtbuZK 2xvPCODOLPEaq1Gcira7P3SQU3woTeXRMskkoygghv6G81FNmdribIXqfy9Garzq wKtCzcSYdV1memNNEFCoJDKd+VOkjdraWnJ4EyadLncgJdn5ri3lPA9ZCdrvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSX8lyRRD4p1lDZPhFX7jnbRk3bwwHwYDVR0j BBgwFoAUya/a+zr3SoyggysHaRTXpKRCVkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3FhUFhDR3RORldqOG1DcThCS1djd0VDWWZWMWZVUmJ1YjRqRnkxUEFI RHIvMC9DOUFGREFGQjNBRjc0QThDQTA4MzJCMDc2OTE0RDdBNEE0NDI1NjQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QUZEQUZCM0FGNzRBOENB MDgzMkIwNzY5MTREN0E0QTQ0MjU2NDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3FhUFhDR3RORldqOG1DcThCS1djd0VDWWZWMWZVUmJ1YjRqRnkxUEFIRHIvMC9D OUFGREFGQjNBRjc0QThDQTA4MzJCMDc2OTE0RDdBNEE0NDI1NjQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAZJtRk7R9IGQq9kJ9WdzMc5/UgjSkwpHOoXIEZmAEX/Ym7RdpMt4NiiSQg8i G3ekxaRCTIQ594IC+RsZzevxa4AH0F4WIOKyTn1qRupA7M5K5nU81DP/+4KfCpBa pLjTHLQO9bxpysrcDpVUWEJZaoKFrw4rAztz7RHBrHu43LDSYT+VuhgylUgRX5Bi xfvGzVi2bkJ0GinuZ7UVQP5YWwJQG2gfNAi9zXLA4SIAhasDvUqT+YRx2UdA4/a2 Hao8RxNDmzdVxVXDaFkXdoWNSQaEeoJzN/S0wVhtlkuSWjLm+uepHijqVWyUPiwT hBuZfRgT2V73fJmxlL0DytMf9Q== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:30 2025 by rpki-client