This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft File: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft (raw, json) Hash identifier: /+lQY0qvlUCckPYk3HBQrJ/91x4bC+6tkM8b6/ybdrY= Subject key identifier: 23:EA:86:E7:82:9F:9D:AB:5A:33:0C:5B:81:F0:6A:24:B3:A2:FD:63 Authority key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 Certificate issuer: /CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Certificate serial: 76693364C1AE0FA2C116DFB29B2608B2909E6FC3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft Manifest number: 24 Signing time: Wed 24 Dec 2025 13:21:24 +0000 Manifest this update: Wed 24 Dec 2025 13:16:24 +0000 Manifest next update: Thu 25 Dec 2025 16:14:24 +0000 Files and hashes: 1: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl (hash: D/nhKENvc5LW2PwY6SMHiP31tPW9Cu7YJi3dob4x0as=) 2: 3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa (hash: F4YhNoG7E6IcIRGjcBNDY1sB2guTnHkDoaPo1f5RKJk=) 3: 3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa (hash: RtiMjhc0R/xV0KBiKmXsvSv0eYHtVfNyftSRhy117C8=) 4: 3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa (hash: qSXhpi5jkfldkXQrU+AHOgUe+NMXk4NMgOqJ4pWavt0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 16:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:69:33:64:c1:ae:0f:a2:c1:16:df:b2:9b:26:08:b2:90:9e:6f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Validity Not Before: Dec 24 13:16:24 2025 GMT Not After : Dec 25 16:14:24 2025 GMT Subject: CN=23EA86E7829F9DAB5A330C5B81F06A24B3A2FD63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:8b:a6:f7:e5:0f:9e:1d:fa:3c:b3:c3:4f: af:43:72:14:2b:86:e2:c6:da:08:1b:04:2f:d4:c6: c3:4a:46:7d:a9:c5:03:e6:03:5b:5f:18:65:b8:71: fe:b6:dc:ed:ad:fb:d0:38:90:1a:56:f3:9b:8e:b2: cd:7e:18:36:b2:9d:a0:cf:ca:b9:70:b3:b9:b6:15: 6c:f4:30:0f:95:5a:2b:c3:dc:d3:47:64:65:21:7c: 96:b6:84:b3:3d:8f:6e:8e:1e:92:99:5c:cd:cb:83: 6d:17:bd:26:d8:04:5e:de:35:e9:4c:50:c7:5e:04: 4f:2d:c0:54:7e:6d:65:e3:1c:8d:1f:2a:11:ab:59: 71:e3:5f:56:e4:f5:0c:a6:50:4a:cd:d3:81:62:25: 3f:70:ee:4b:a9:1e:cc:59:7b:78:ae:ff:dc:7c:b1: c1:d7:db:a1:f9:ec:11:f8:8d:c3:3a:f1:0f:aa:2c: ff:0a:17:d7:57:1a:56:14:23:7d:15:0a:73:6a:47: 0e:74:68:dd:48:f6:a0:84:aa:c6:0b:7d:8f:0e:28: f7:54:d6:1b:eb:fb:57:00:ad:61:a1:22:81:c1:d0: f9:08:89:b2:ff:20:f1:92:bf:8c:34:d0:6f:52:f7: a3:fb:c8:0a:37:8e:1c:8a:f0:08:61:38:80:52:1c: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EA:86:E7:82:9F:9D:AB:5A:33:0C:5B:81:F0:6A:24:B3:A2:FD:63 X509v3 Authority Key Identifier: keyid:CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:b2:ab:5a:ef:d2:ff:9f:df:74:74:d6:7e:c4:87:8d:83: 0b:df:5e:bd:f4:4d:63:9b:66:9d:75:0c:35:0c:e4:27:ff:fc: 43:9c:3f:d2:87:60:66:04:11:0f:64:73:92:88:58:74:02:0c: 93:9c:54:19:fd:d3:22:ef:8f:87:38:b6:c3:59:2b:fd:2f:8d: a3:43:3c:89:ad:6b:b5:1b:8d:5e:8b:87:8f:f3:ce:1e:b6:00: 03:69:d1:f5:9c:09:19:a6:a7:0f:8a:de:ab:c3:9b:e8:46:a9: f8:1a:8b:2c:fe:cf:59:cf:6d:f1:cd:a3:31:6b:0f:f1:d6:80: a4:d5:d5:3f:58:a0:c6:0d:70:42:a5:91:bd:36:30:85:df:ad: 32:a9:b8:ef:a7:70:7d:46:fa:1e:ce:12:b5:c1:8f:38:29:67: 93:29:b5:65:cc:8b:c6:05:fa:74:aa:ec:da:ee:55:fa:c9:af: 2a:03:6a:84:8d:f9:a4:eb:2d:fc:14:c5:7e:a1:ba:7e:33:82: 2f:7e:38:aa:f2:ea:53:bd:7e:9a:9d:ac:b5:18:3e:47:78:c1: f3:17:da:75:c9:55:0e:77:06:7f:b0:da:02:be:3b:a5:79:5c: be:4a:1a:4d:04:c7:b0:f3:31:83:19:0a:5e:45:d4:02:37:f8: ee:77:1b:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdmkzZMGuD6LBFt+ymyYIspCeb8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDc2NjY5OUJCQjZCNTFDQjkzNEZENEY4RTg2RUI4 MURBNkE5OTAeFw0yNTEyMjQxMzE2MjRaFw0yNTEyMjUxNjE0MjRaMDMxMTAvBgNV BAMTKDIzRUE4NkU3ODI5RjlEQUI1QTMzMEM1QjgxRjA2QTI0QjNBMkZENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChbIum9+UPnh36PLPDT69DchQr huLG2ggbBC/UxsNKRn2pxQPmA1tfGGW4cf623O2t+9A4kBpW85uOss1+GDaynaDP yrlws7m2FWz0MA+VWivD3NNHZGUhfJa2hLM9j26OHpKZXM3Lg20XvSbYBF7eNelM UMdeBE8twFR+bWXjHI0fKhGrWXHjX1bk9QymUErN04FiJT9w7kupHsxZe3iu/9x8 scHX26H57BH4jcM68Q+qLP8KF9dXGlYUI30VCnNqRw50aN1I9qCEqsYLfY8OKPdU 1hvr+1cArWGhIoHB0PkIibL/IPGSv4w00G9S96P7yAo3jhyK8AhhOIBSHFUHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI+qG54KfnataMwxbgfBqJLOi/WMwHwYDVR0j BBgwFoAUzaB2Zpm7trUcuTT9T46G64HaapkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3 azcvMC9DREEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQTA3NjY2OTlCQkI2QjUx Q0I5MzRGRDRGOEU4NkVCODFEQTZBOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3azcvMC9D REEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMq2yq1rv0v+f33R01n7Eh42DC99evfRNY5tmnXUMNQzkJ//8Q5w/0odgZgQR D2RzkohYdAIMk5xUGf3TIu+Phzi2w1kr/S+No0M8ia1rtRuNXouHj/POHrYAA2nR 9ZwJGaanD4req8Ob6Eap+BqLLP7PWc9t8c2jMWsP8daApNXVP1igxg1wQqWRvTYw hd+tMqm476dwfUb6Hs4StcGPOClnkym1ZcyLxgX6dKrs2u5V+smvKgNqhI35pOst /BTFfqG6fjOCL344qvLqU71+mp2stRg+R3jB8xfadclVDncGf7DaAr47pXlcvkoa TQTHsPMxgxkKXkXUAjf47ncbJQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:39:41 2025 by rpki-client