This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft File: E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft (raw, json) Hash identifier: 8Z/MnDMoAdKAdVx3Wj0cxANoHrSH7T5UDjxPVbQMrwU= Subject key identifier: FB:85:69:30:0A:46:21:F9:84:B6:5B:AB:F7:C1:95:83:40:9B:A0:49 Authority key identifier: E8:C6:4F:57:C6:0E:03:5C:C9:1F:AF:09:6A:8C:BE:39:B4:C3:CF:23 Certificate issuer: /CN=E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23 Certificate serial: 50192B5346130D20B17DC7F86C255C4D2317A7EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft Manifest number: 3A Signing time: Tue 23 Dec 2025 19:25:52 +0000 Manifest this update: Tue 23 Dec 2025 19:20:52 +0000 Manifest next update: Wed 24 Dec 2025 21:28:52 +0000 Files and hashes: 1: 3230302e32362e3234342e302f32322d3332203d3e20323730343539.roa (hash: cvVUWqtnCG014x7kb1xxqbCBUsgKucxHFLo6pBhSHOM=) 2: 323830343a366335303a3a2f33322d313238203d3e20323730343539.roa (hash: BMrwK3uK9jFDFs3s2U/zUp4p1KLWPLgsw/J736TLK2Q=) 3: E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.crl (hash: FNu+ZC0Lb+zcsVRjLmyexAsUgzQB+QBKEzRAoRqFQ28=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.crl rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 21:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:19:2b:53:46:13:0d:20:b1:7d:c7:f8:6c:25:5c:4d:23:17:a7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23 Validity Not Before: Dec 23 19:20:52 2025 GMT Not After : Dec 24 21:28:52 2025 GMT Subject: CN=FB8569300A4621F984B65BABF7C19583409BA049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:99:fa:63:d8:5b:61:cf:fa:d9:22:da:b4: 74:19:52:70:3e:6d:2f:d4:b0:73:55:0c:ed:d0:0f: ce:61:ad:72:85:25:3c:a9:cb:83:d5:a5:84:a7:7e: ff:3f:42:ad:5b:36:54:e2:d1:37:4a:7f:d6:37:f0: 8b:ba:15:00:49:3c:89:b7:6e:08:dc:21:1f:8b:6a: cd:36:00:a3:2e:3e:26:94:06:7b:35:55:ee:c2:91: 39:e8:0e:25:c0:53:69:79:f0:76:4a:32:52:05:7e: c0:1c:2b:ad:1e:73:4f:08:3a:2e:66:3a:9a:17:87: 0e:76:7a:45:5a:0a:67:72:6c:c9:a2:f7:2f:76:c5: 96:7e:d6:64:ff:c4:6d:ab:d7:4c:8e:36:e8:46:c6: 24:27:dc:36:46:69:42:39:21:86:3d:d2:dd:45:da: 47:57:6a:8d:c0:82:ed:4c:c1:95:17:c5:9e:ca:f9: 0c:c7:cc:1c:e1:7f:98:d2:76:ef:d6:85:13:f2:13: 81:c0:8b:ec:dc:44:c8:61:f4:2b:c7:54:34:e8:48: c0:79:72:c0:45:20:fb:42:24:fd:bd:62:f4:93:67: d9:03:84:5d:1f:0e:33:a9:b0:14:91:a6:24:59:c4: 3e:60:d3:4f:1e:60:4f:71:b5:e9:68:df:b3:e8:74: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:69:30:0A:46:21:F9:84:B6:5B:AB:F7:C1:95:83:40:9B:A0:49 X509v3 Authority Key Identifier: keyid:E8:C6:4F:57:C6:0E:03:5C:C9:1F:AF:09:6A:8C:BE:39:B4:C3:CF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:77:61:08:0a:37:a7:a0:87:47:3f:5c:d3:c0:fd:fe:c4: e8:63:21:ce:0e:0c:37:42:82:69:39:98:b5:7d:a4:36:d3:c7: b8:6f:bb:9d:3e:aa:f3:08:95:f8:96:b1:48:48:68:09:bf:af: 91:02:ed:fa:bc:8b:db:b7:28:92:bb:c9:05:00:59:ca:d7:06: 69:55:72:af:09:94:ac:79:73:4d:37:ff:2d:e5:ae:69:37:24: 9d:06:35:b6:13:03:cd:8f:f3:7e:d0:14:e2:ed:4d:cb:58:90: ae:c7:99:aa:a4:86:d9:60:98:57:fa:d7:2c:e8:9e:6e:b6:61: 23:6b:2e:89:2b:44:b1:81:05:ae:b9:fc:ed:92:43:cb:26:4c: 7b:a3:31:51:29:62:67:c6:95:11:be:0a:2d:e5:24:c3:3c:92: c3:15:e1:2d:eb:b0:1b:db:77:47:41:7e:50:98:18:4b:52:58: 0a:15:76:a1:0d:a6:79:f7:ed:a9:ec:c1:ba:68:5b:1d:5e:33: 7c:a6:12:52:e2:ba:3d:cc:bb:99:dd:b3:cf:b9:c1:87:32:db: 5d:1c:02:34:44:dc:ae:d1:18:c6:a0:81:12:bc:a2:2f:7e:ca: d3:da:6f:b6:54:b6:0c:5f:ed:bb:fd:cd:c5:9c:18:4e:71:65: c0:38:b3:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUBkrU0YTDSCxfcf4bCVcTSMXp+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThDNjRGNTdDNjBFMDM1Q0M5MUZBRjA5NkE4Q0JFMzlC NEMzQ0YyMzAeFw0yNTEyMjMxOTIwNTJaFw0yNTEyMjQyMTI4NTJaMDMxMTAvBgNV BAMTKEZCODU2OTMwMEE0NjIxRjk4NEI2NUJBQkY3QzE5NTgzNDA5QkEwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1Zn6Y9hbYc/62SLatHQZUnA+ bS/UsHNVDO3QD85hrXKFJTypy4PVpYSnfv8/Qq1bNlTi0TdKf9Y38Iu6FQBJPIm3 bgjcIR+Las02AKMuPiaUBns1Ve7CkTnoDiXAU2l58HZKMlIFfsAcK60ec08IOi5m OpoXhw52ekVaCmdybMmi9y92xZZ+1mT/xG2r10yONuhGxiQn3DZGaUI5IYY90t1F 2kdXao3Agu1MwZUXxZ7K+QzHzBzhf5jSdu/WhRPyE4HAi+zcRMhh9CvHVDToSMB5 csBFIPtCJP29YvSTZ9kDhF0fDjOpsBSRpiRZxD5g008eYE9xtelo37PodL6NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+4VpMApGIfmEtlur98GVg0CboEkwHwYDVR0j BBgwFoAU6MZPV8YOA1zJH68Jaoy+ObTDzyMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExHRXdYTVo1U3hESzViWldFMlY3YlFSNmR6UWF4dFdZNjF5dTI2Z3N5 TVUvMC9FOEM2NEY1N0M2MEUwMzVDQzkxRkFGMDk2QThDQkUzOUI0QzNDRjIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QzY0RjU3QzYwRTAzNUND OTFGQUYwOTZBOENCRTM5QjRDM0NGMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExHRXdYTVo1U3hESzViWldFMlY3YlFSNmR6UWF4dFdZNjF5dTI2Z3N5TVUvMC9F OEM2NEY1N0M2MEUwMzVDQzkxRkFGMDk2QThDQkUzOUI0QzNDRjIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJt3YQgKN6egh0c/XNPA/f7E6GMhzg4MN0KCaTmYtX2kNtPHuG+7nT6q8wiV +JaxSEhoCb+vkQLt+ryL27cokrvJBQBZytcGaVVyrwmUrHlzTTf/LeWuaTcknQY1 thMDzY/zftAU4u1Ny1iQrseZqqSG2WCYV/rXLOiebrZhI2suiStEsYEFrrn87ZJD yyZMe6MxUSliZ8aVEb4KLeUkwzySwxXhLeuwG9t3R0F+UJgYS1JYChV2oQ2mefft qezBumhbHV4zfKYSUuK6Pcy7md2zz7nBhzLbXRwCNETcrtEYxqCBEryiL37K09pv tlS2DF/tu/3NxZwYTnFlwDizBQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:15:04 2025 by rpki-client