This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft File: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json) Hash identifier: euur7jsQaSP3bKnz3wUxVRQ4XxTltqJIoVvwmmCT2/o= Subject key identifier: 97:0E:EC:3A:19:B7:4B:AA:57:F7:AC:8C:2F:1F:36:FA:A5:27:EC:DA Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC Certificate issuer: /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Certificate serial: 4A6C4D52560BEA496953C259D98D660A3718DA0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject info access: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft Manifest number: A1 Signing time: Tue 23 Dec 2025 18:04:13 +0000 Manifest this update: Tue 23 Dec 2025 17:59:13 +0000 Manifest next update: Wed 24 Dec 2025 21:59:13 +0000 Files and hashes: 1: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=) 2: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: dl5jcLku6aQaylmoEWUKemcSgeqF1wVognreOKmsrkQ=) 3: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=) 4: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 21:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6c:4d:52:56:0b:ea:49:69:53:c2:59:d9:8d:66:0a:37:18:da:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Validity Not Before: Dec 23 17:59:13 2025 GMT Not After : Dec 24 21:59:13 2025 GMT Subject: CN=970EEC3A19B74BAA57F7AC8C2F1F36FAA527ECDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:f1:c2:c8:86:06:3e:ed:42:1e:91:95:37: ee:78:cd:e1:2a:b3:29:ba:eb:96:db:4d:19:7e:13: 95:da:a9:48:03:5e:05:d4:de:6f:5f:c9:fc:56:40: a5:9a:df:8d:94:c1:ca:6c:de:dd:ea:1d:aa:af:51: 45:3a:a8:56:69:a6:23:ef:fa:db:51:be:79:b8:02: a4:71:30:a7:6e:15:b6:e4:2e:b2:3c:e0:b9:0c:1e: 00:31:fe:f7:39:7a:14:9a:88:f5:ab:07:c6:59:af: c2:d2:fd:0c:d9:4c:e0:9b:fd:9a:95:53:2c:2c:6d: 37:d8:b9:ee:a4:7c:a3:67:20:7b:a2:1b:21:39:a7: fb:9b:12:96:c9:0e:6f:4b:da:d8:d0:b7:9f:b7:f6: 56:d2:dd:42:9e:2d:9c:e1:4d:79:97:de:79:53:40: 91:87:bd:35:4e:cc:c1:26:c8:86:80:b1:eb:50:c3: 6c:11:81:a0:aa:0b:b6:51:be:9f:73:7a:39:91:d7: 75:de:80:d6:1c:fe:3b:7f:82:cf:4d:7f:68:0a:43: 0c:34:50:f1:92:e8:4f:c1:00:c6:50:cf:f7:42:f1: da:7b:a4:e1:5d:b1:6f:a8:45:68:67:9a:bd:4e:bf: 36:7a:99:19:af:24:20:32:05:8c:d5:8a:1d:54:d9: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0E:EC:3A:19:B7:4B:AA:57:F7:AC:8C:2F:1F:36:FA:A5:27:EC:DA X509v3 Authority Key Identifier: keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:25:27:a9:81:11:df:38:0e:98:2b:19:97:dd:40:6d:45:14: e7:32:85:a7:71:e9:6c:7b:7e:cf:0b:9d:30:43:5a:18:9b:e7: 18:77:7f:09:2a:02:43:7c:12:24:aa:be:fe:03:10:b7:f1:8c: 6d:72:ee:12:b7:d6:e1:18:3d:e6:28:7a:b1:c0:5e:3b:19:fb: c3:4f:aa:7a:8c:a3:44:c3:f1:4a:84:4f:48:2f:29:55:d2:cb: 32:48:da:8e:e0:05:cf:a7:63:61:fa:57:d2:d4:92:b0:09:70: 6a:e4:9f:4e:45:67:68:fe:86:dd:d0:d8:85:19:ae:c9:9f:f6: a7:15:3e:5b:38:70:af:a3:ff:ed:f5:36:d1:ff:09:23:a7:a1: 57:ad:3a:d6:41:09:4b:1a:46:03:91:ae:01:c8:6e:c6:54:3e: ac:e1:e4:0f:7f:35:70:2e:ea:70:3b:5f:3e:7f:ba:df:36:b5: a6:7c:5d:39:eb:f2:6e:31:1e:fb:cd:24:e8:46:97:fd:58:d0: cf:e1:96:88:5a:35:98:8e:fa:e1:b0:c0:88:28:32:a2:cc:ca: f3:22:36:90:69:7f:4c:30:6c:86:8a:b3:26:52:f9:0d:3f:17: 81:5c:85:6e:7e:d8:f8:b6:7e:c6:db:1c:7b:63:e2:90:41:80: 80:cf:d4:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSmxNUlYL6klpU8JZ2Y1mCjcY2g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCNDRDNDJDRTIxOTRDRjJBRUQ1RjNGMUM1RjlFN0Qy OEQyMkVBQzAeFw0yNTEyMjMxNzU5MTNaFw0yNTEyMjQyMTU5MTNaMDMxMTAvBgNV BAMTKDk3MEVFQzNBMTlCNzRCQUE1N0Y3QUM4QzJGMUYzNkZBQTUyN0VDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGvHCyIYGPu1CHpGVN+54zeEq sym665bbTRl+E5XaqUgDXgXU3m9fyfxWQKWa342Uwcps3t3qHaqvUUU6qFZppiPv +ttRvnm4AqRxMKduFbbkLrI84LkMHgAx/vc5ehSaiPWrB8ZZr8LS/QzZTOCb/ZqV UywsbTfYue6kfKNnIHuiGyE5p/ubEpbJDm9L2tjQt5+39lbS3UKeLZzhTXmX3nlT QJGHvTVOzMEmyIaAsetQw2wRgaCqC7ZRvp9zejmR13XegNYc/jt/gs9Nf2gKQww0 UPGS6E/BAMZQz/dC8dp7pOFdsW+oRWhnmr1OvzZ6mRmvJCAyBYzVih1U2QkPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlw7sOhm3S6pX96yMLx82+qUn7NowHwYDVR0j BBgwFoAUybRMQs4hlM8q7V8/HF+efSjSLqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4 VHEvMC9DOUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjQ0QzQyQ0UyMTk0Q0Yy QUVENUYzRjFDNUY5RTdEMjhEMjJFQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4VHEvMC9D OUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApyUnqYER3zgOmCsZl91AbUUU5zKFp3HpbHt+zwudMENaGJvnGHd/CSoCQ3wS JKq+/gMQt/GMbXLuErfW4Rg95ih6scBeOxn7w0+qeoyjRMPxSoRPSC8pVdLLMkja juAFz6djYfpX0tSSsAlwauSfTkVnaP6G3dDYhRmuyZ/2pxU+Wzhwr6P/7fU20f8J I6ehV6061kEJSxpGA5GuAchuxlQ+rOHkD381cC7qcDtfPn+63za1pnxdOevybjEe +80k6EaX/VjQz+GWiFo1mI764bDAiCgyoszK8yI2kGl/TDBshoqzJlL5DT8XgVyF bn7Y+LZ+xtsce2PikEGAgM/UOQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:30:21 2025 by rpki-client