This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json) Hash identifier: 0yWRCiXWjoC8nlEF2+IVp11JfgTx3b8Ht2TJVFP4ZnU= Subject key identifier: 99:87:EF:99:E9:93:D9:D1:42:B9:20:C1:75:3C:45:BF:37:90:5D:62 Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Certificate serial: 5D6D500A3CDD72530BA57F6E817D50D08B49DE5B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft Manifest number: 0348 Signing time: Wed 24 Dec 2025 06:09:05 +0000 Manifest this update: Wed 24 Dec 2025 06:04:05 +0000 Manifest next update: Thu 25 Dec 2025 08:08:05 +0000 Files and hashes: 1: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: 25SAOXwAX4L8AMZJng8zABZRivbLO/GLBh3G1AeqA58=) 2: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: NlSaUswt2I+fplgp3MJZhTAT0IlTvWfCWqzaZDWpacg=) 3: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: mF0u/vAyNOeoPPNVDLbnxzMdhqwwSdgGBBg/m8ai89U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 08:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6d:50:0a:3c:dd:72:53:0b:a5:7f:6e:81:7d:50:d0:8b:49:de:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Validity Not Before: Dec 24 06:04:05 2025 GMT Not After : Dec 25 08:08:05 2025 GMT Subject: CN=9987EF99E993D9D142B920C1753C45BF37905D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:57:87:31:4c:aa:c4:ef:c0:a7:39:eb:0d: 44:a0:15:0d:50:91:eb:df:b3:e0:50:17:07:df:fe: 2d:91:b4:b2:4b:77:31:c2:00:31:bc:09:25:ff:85: 25:91:79:a1:ba:cc:0f:27:4a:00:db:ab:60:b8:97: a8:15:ae:32:76:5d:5c:25:3c:f6:08:9d:6b:7e:6a: 11:01:6d:9d:70:a4:b5:8f:29:41:bd:a5:4f:ec:ef: b1:b8:89:06:96:61:86:bb:fa:be:cf:12:86:00:d6: b4:ff:91:ac:01:39:65:1e:56:bd:42:5f:65:a6:67: 36:a5:67:3f:cd:c0:29:99:2e:22:5f:28:9a:ba:a3: 61:70:34:75:23:a3:3b:46:4e:4b:d1:d1:78:0d:09: 57:4d:01:4a:43:5f:32:a5:7d:7f:c6:e0:fa:cd:e0: bd:66:f1:41:57:d7:e5:f5:41:89:75:e7:38:61:8f: 11:28:82:8b:c5:61:12:b2:4e:7d:66:45:b1:d7:78: 72:82:a2:a9:2c:69:e3:38:86:52:7d:67:32:bd:6d: f5:5e:c3:d1:b7:81:ed:b7:a4:d9:b6:bb:db:b1:cf: c2:2c:4d:04:38:4d:fb:44:41:ef:e2:90:96:0e:79: da:ec:d1:37:d5:a3:6c:d6:c7:eb:7a:1a:a2:4b:95: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:87:EF:99:E9:93:D9:D1:42:B9:20:C1:75:3C:45:BF:37:90:5D:62 X509v3 Authority Key Identifier: keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:9f:08:54:dc:ca:76:02:95:dd:c3:01:89:71:9f:d2:4f: b6:14:83:87:bb:4b:50:ae:ee:73:d0:a6:4f:38:9b:21:e6:40: 59:1e:26:76:6a:f0:8a:d7:01:72:5d:be:e9:17:aa:89:ee:a5: 20:8d:03:c4:20:0b:58:c3:e1:b9:4c:80:c6:9a:bf:cc:a1:f4: 56:98:56:7b:22:e1:3d:73:81:e2:d2:0e:59:6d:59:00:51:57: 1f:d0:17:86:ee:21:dd:51:b2:ff:af:ba:6a:d8:d6:47:0c:20: 2f:0e:3e:c7:bf:f6:f2:5a:12:ed:6b:0d:12:ee:0d:35:f1:77: 1d:db:2d:52:b6:70:40:07:e4:be:8e:6a:a7:c4:03:62:29:45: db:7c:fb:98:4e:aa:0d:a5:c6:21:98:3c:1b:10:da:eb:85:d7: 6d:5e:e8:7c:83:37:c6:f0:b2:e3:94:26:88:a5:e9:9a:d5:7c: c1:eb:8b:58:86:14:b0:3b:a0:2f:43:2c:87:7e:e0:4f:a8:92: d4:12:57:e1:37:c2:b6:ce:43:31:44:83:52:f6:12:b1:7a:70: c8:05:5f:f7:40:16:0f:18:0f:d2:04:63:57:2e:34:b1:b0:1f: f7:78:59:94:1e:91:26:da:bb:36:af:99:53:94:ca:32:87:46: d5:a7:44:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXW1QCjzdclMLpX9ugX1Q0ItJ3lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUEyQkM1N0IzM0RGQkU1NUIzRUI0RUE1OEE3RTlB MTcxNTVERDAeFw0yNTEyMjQwNjA0MDVaFw0yNTEyMjUwODA4MDVaMDMxMTAvBgNV BAMTKDk5ODdFRjk5RTk5M0Q5RDE0MkI5MjBDMTc1M0M0NUJGMzc5MDVENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QleHMUyqxO/ApznrDUSgFQ1Q kevfs+BQFwff/i2RtLJLdzHCADG8CSX/hSWReaG6zA8nSgDbq2C4l6gVrjJ2XVwl PPYInWt+ahEBbZ1wpLWPKUG9pU/s77G4iQaWYYa7+r7PEoYA1rT/kawBOWUeVr1C X2WmZzalZz/NwCmZLiJfKJq6o2FwNHUjoztGTkvR0XgNCVdNAUpDXzKlfX/G4PrN 4L1m8UFX1+X1QYl15zhhjxEogovFYRKyTn1mRbHXeHKCoqksaeM4hlJ9ZzK9bfVe w9G3ge23pNm2u9uxz8IsTQQ4TftEQe/ikJYOedrs0TfVo2zWx+t6GqJLlShDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmYfvmemT2dFCuSDBdTxFvzeQXWIwHwYDVR0j BBgwFoAUQMqivFezPfvlWz606lin6aFxVd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBV SmcvMS80MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQ0FBMkJDNTdCMzNERkJF NTVCM0VCNEVBNThBN0U5QTE3MTU1REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBVSmcvMS80 MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYWSfCFTcynYCld3DAYlxn9JPthSDh7tLUK7uc9CmTzibIeZAWR4mdmrwitcB cl2+6Reqie6lII0DxCALWMPhuUyAxpq/zKH0VphWeyLhPXOB4tIOWW1ZAFFXH9AX hu4h3VGy/6+6atjWRwwgLw4+x7/28loS7WsNEu4NNfF3HdstUrZwQAfkvo5qp8QD YilF23z7mE6qDaXGIZg8GxDa64XXbV7ofIM3xvCy45QmiKXpmtV8weuLWIYUsDug L0Msh37gT6iS1BJX4TfCts5DMUSDUvYSsXpwyAVf90AWDxgP0gRjVy40sbAf93hZ lB6RJtq7Nq+ZU5TKModG1adEzQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:22:09 2025 by rpki-client