This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft File: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft (raw, json) Hash identifier: Gbd3iCjbGEt8Et5+C2iNzynX33ZDOhqoBwJKqqWREN8= Subject key identifier: 71:D5:E8:60:17:7C:50:4D:F9:86:93:1A:36:E5:00:10:0E:8A:57:95 Authority key identifier: 71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8 Certificate issuer: /CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8 Certificate serial: 4EA97C43BF38E7EDEA80E59F06A197B8C6754173 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft Manifest number: 32 Signing time: Wed 24 Dec 2025 03:31:41 +0000 Manifest this update: Wed 24 Dec 2025 03:26:41 +0000 Manifest next update: Thu 25 Dec 2025 05:54:41 +0000 Files and hashes: 1: 71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl (hash: re2qU9bEj3jUSLHD2wxmO/3rG+b+RrQizmsur4KeFlc=) 2: 3137392e34322e3131362e302f32322d3332203d3e20323731313531.roa (hash: c2uoTP3FqrUjeXOcSI2m+CDup+9yO7bW1GYM5OpldqI=) 3: 323830343a373730633a3a2f33322d313238203d3e20323731313531.roa (hash: 48UGaUhw5lOAFlcmdxaBBOibUkrTKasIL2u+nKYFpVk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 05:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a9:7c:43:bf:38:e7:ed:ea:80:e5:9f:06:a1:97:b8:c6:75:41:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8 Validity Not Before: Dec 24 03:26:41 2025 GMT Not After : Dec 25 05:54:41 2025 GMT Subject: CN=71D5E860177C504DF986931A36E500100E8A5795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:73:6b:3c:45:dc:5b:a7:2b:2a:48:86:d3: f6:ac:e9:83:76:a0:00:66:c1:f1:74:b0:81:5f:62: 51:86:3d:49:62:c3:f6:a0:9c:43:03:9d:04:fd:ec: cc:88:aa:bf:87:f0:21:92:97:6e:09:56:07:a2:cb: c3:45:09:1b:54:f9:f8:b4:bb:8e:99:22:43:54:56: b0:f6:c3:83:4a:11:33:ce:8d:6f:b7:fc:19:ec:fb: b7:0c:4c:fb:15:10:f9:70:ee:17:69:d6:a7:e2:bb: c6:ea:6f:37:ec:21:1d:0d:5e:82:81:72:73:23:56: af:01:9d:a6:9e:3d:c9:c1:07:b5:ad:46:b5:b5:85: 5a:2a:9d:02:e8:5b:47:d2:29:b8:56:99:cb:04:ba: ed:3e:a4:2e:49:22:ed:da:df:c9:a7:b3:94:df:2f: 1f:2b:4e:78:3a:82:16:f5:27:19:da:52:26:4a:a8: b6:96:60:d2:3f:70:1e:79:c6:32:c1:20:df:e4:76: ba:ee:01:53:92:98:5e:68:f0:fb:65:e5:c5:4b:cb: f0:3d:5d:8b:56:ff:db:fa:7d:be:02:38:90:2e:57: 76:c8:3e:43:12:df:67:bc:3e:12:73:a9:ea:bf:f7: 71:aa:fa:0d:e1:43:f5:09:07:41:0e:9d:e5:f3:3c: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:E8:60:17:7C:50:4D:F9:86:93:1A:36:E5:00:10:0E:8A:57:95 X509v3 Authority Key Identifier: keyid:71:D6:E8:15:8F:9E:FE:91:E9:AC:06:7F:99:AA:E5:B3:4F:B7:C7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hp8kAxQBVsLgegNQ4Ev3exXxxswEKzB2WUTNizmEexL2/0/71D6E8158F9EFE91E9AC067F99AAE5B34FB7C7A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b4:8a:be:a0:85:fa:37:8f:10:8d:29:28:20:4d:04:8f:7e: bc:d6:ea:38:95:86:d5:9f:7e:2d:24:bb:b9:9d:ed:28:5e:a8: 91:e9:a5:ed:3e:42:41:67:f2:be:a4:42:15:b8:89:1f:56:09: 7f:64:b3:87:2a:8c:11:70:bf:7f:75:02:3d:22:67:56:c2:b6: 49:1a:87:d9:1a:af:a8:96:01:e3:df:f8:1c:a7:d5:17:26:44: 96:38:4e:f5:a2:66:84:a9:1a:20:80:5d:8b:9c:2b:8e:46:c1: 5c:52:77:b3:31:31:e5:68:5f:68:4c:4d:e9:92:9d:93:4c:54: 00:89:d3:18:c4:a8:bd:30:1e:22:b3:ad:2d:a7:df:37:60:1d: a1:40:15:d5:dd:4a:ae:05:d3:a3:a7:ff:bc:38:e1:ca:14:ea: a6:26:7e:36:74:5c:24:8a:9c:0d:f8:48:5d:b5:75:a0:b3:bf: 88:9d:f4:93:d1:03:ff:51:cc:87:81:43:18:11:44:ba:89:85: 56:51:37:82:75:72:6f:ac:58:76:ad:dd:0a:d1:d3:95:31:63: 07:f6:1a:42:85:08:3d:c2:d3:49:07:a0:97:5b:79:94:d9:63: 09:48:2d:34:a2:a7:34:fb:02:2e:b6:46:a5:81:e2:ce:11:0a: a1:0c:96:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTql8Q7845+3qgOWfBqGXuMZ1QXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFENkU4MTU4RjlFRkU5MUU5QUMwNjdGOTlBQUU1QjM0 RkI3QzdBODAeFw0yNTEyMjQwMzI2NDFaFw0yNTEyMjUwNTU0NDFaMDMxMTAvBgNV BAMTKDcxRDVFODYwMTc3QzUwNERGOTg2OTMxQTM2RTUwMDEwMEU4QTU3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIDXNrPEXcW6crKkiG0/as6YN2 oABmwfF0sIFfYlGGPUliw/agnEMDnQT97MyIqr+H8CGSl24JVgeiy8NFCRtU+fi0 u46ZIkNUVrD2w4NKETPOjW+3/Bns+7cMTPsVEPlw7hdp1qfiu8bqbzfsIR0NXoKB cnMjVq8BnaaePcnBB7WtRrW1hVoqnQLoW0fSKbhWmcsEuu0+pC5JIu3a38mns5Tf Lx8rTng6ghb1JxnaUiZKqLaWYNI/cB55xjLBIN/kdrruAVOSmF5o8Ptl5cVLy/A9 XYtW/9v6fb4COJAuV3bIPkMS32e8PhJzqeq/93Gq+g3hQ/UJB0EOneXzPJUVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcdXoYBd8UE35hpMaNuUAEA6KV5UwHwYDVR0j BBgwFoAUcdboFY+e/pHprAZ/marls0+3x6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHA4a0F4UUJWc0xnZWdOUTRFdjNleFh4eHN3RUt6QjJXVVROaXptRWV4 TDIvMC83MUQ2RTgxNThGOUVGRTkxRTlBQzA2N0Y5OUFBRTVCMzRGQjdDN0E4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDZFODE1OEY5RUZFOTFF OUFDMDY3Rjk5QUFFNUIzNEZCN0M3QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHA4a0F4UUJWc0xnZWdOUTRFdjNleFh4eHN3RUt6QjJXVVROaXptRWV4TDIvMC83 MUQ2RTgxNThGOUVGRTkxRTlBQzA2N0Y5OUFBRTVCMzRGQjdDN0E4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANrSKvqCF+jePEI0pKCBNBI9+vNbqOJWG1Z9+LSS7uZ3tKF6okeml7T5CQWfy vqRCFbiJH1YJf2SzhyqMEXC/f3UCPSJnVsK2SRqH2RqvqJYB49/4HKfVFyZEljhO 9aJmhKkaIIBdi5wrjkbBXFJ3szEx5WhfaExN6ZKdk0xUAInTGMSovTAeIrOtLaff N2AdoUAV1d1KrgXTo6f/vDjhyhTqpiZ+NnRcJIqcDfhIXbV1oLO/iJ30k9ED/1HM h4FDGBFEuomFVlE3gnVyb6xYdq3dCtHTlTFjB/YaQoUIPcLTSQegl1t5lNljCUgt NKKnNPsCLrZGpYHizhEKoQyWfQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:15:04 2025 by rpki-client