This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: 823rn4YPVkC8hf1JPymiqR4pQbLc/Cj0kBoOqs22cdI= Subject key identifier: D3:84:58:B7:25:83:F7:62:FF:6A:59:F7:4F:9C:D5:4E:CD:59:EE:B3 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 1D8E6746F4EF081001704029929C2D423D18228F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 03BD Signing time: Sat 20 Dec 2025 00:40:34 +0000 Manifest this update: Sat 20 Dec 2025 00:35:34 +0000 Manifest next update: Sun 21 Dec 2025 04:27:34 +0000 Files and hashes: 1: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: h6A5MnML173CHW1wK+XoCQx2IQRiWmT8Gpn3vz70ypM=) 2: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: XRhfslxEoTNm+hxIZ2x4tmw31Lm059fbAltLDLKYMTE=) 3: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: lsPfySBrQRokkFGPXoHfXtf83HsA13dTki6xitZ2OTw=) 4: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: G/FFJ7H4y3UmSNdQvjTb1QYjVB9bKR8OycW7xU2KFuI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 04:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8e:67:46:f4:ef:08:10:01:70:40:29:92:9c:2d:42:3d:18:22:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Dec 20 00:35:34 2025 GMT Not After : Dec 21 04:27:34 2025 GMT Subject: CN=D38458B72583F762FF6A59F74F9CD54ECD59EEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f5:60:b4:c3:39:f8:68:59:5c:8f:5f:07:12: ab:ef:0a:56:f9:e5:36:07:4a:78:55:85:9d:fb:f6: d4:22:af:d8:5a:ce:1f:ce:78:b9:13:a4:39:9d:46: 9b:fc:e8:c8:8b:af:6a:fe:6d:32:d9:38:e7:af:cf: 10:2b:b0:60:9a:0c:ef:5c:9d:3b:6f:a6:15:17:9e: 8a:bb:51:ff:b3:4f:9b:92:05:9a:87:96:e6:2f:95: 37:78:95:41:04:b5:5f:17:03:d8:45:5c:91:9e:e3: f1:2d:6f:44:3b:a5:19:2a:79:da:cf:42:64:5a:47: a2:3b:6a:a7:ed:22:55:c0:eb:b4:80:9d:c9:97:55: ed:24:ab:a8:d4:a7:f6:2b:69:91:ef:2d:e6:78:c4: 73:52:61:5e:12:54:92:b9:67:95:ba:f1:64:14:b5: f4:77:c4:90:32:72:b1:25:ee:48:17:b4:7d:98:4b: 96:1b:c0:51:f2:49:d0:c9:fd:d6:a0:61:f3:2c:f0: ed:08:eb:a5:33:f3:9b:08:3c:2c:d5:9b:33:94:90: 8a:c9:f5:72:38:a1:04:76:b0:47:21:c9:aa:35:70: 7f:14:04:c5:02:0a:15:6f:56:11:39:00:6f:fa:b3: 11:e6:85:3e:98:27:6f:82:b2:70:1b:ea:64:41:6c: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:58:B7:25:83:F7:62:FF:6A:59:F7:4F:9C:D5:4E:CD:59:EE:B3 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a3:9b:7e:35:39:04:59:e0:cd:64:bb:4c:f9:a7:16:8b:92: 7e:bd:b8:75:94:85:54:55:80:c4:04:c5:e6:4f:b3:a5:8e:8b: 48:77:4e:1c:f4:62:81:dc:af:a3:31:a1:b6:10:0a:f2:8e:76: c5:85:63:43:b2:19:8a:1b:9f:89:ed:b4:d9:92:09:2d:be:8b: 92:d0:d7:b7:8b:60:f2:d9:d8:5b:ca:6d:59:26:08:b0:95:59: 12:e2:eb:69:f7:ae:26:c3:34:6c:7d:a8:01:4e:b5:f5:f0:3f: fb:21:f5:cd:67:7d:e4:98:cf:31:ce:89:f4:7b:6a:56:1e:ff: ac:2b:a1:9a:06:e9:aa:eb:77:19:c4:78:65:5e:61:63:63:cb: 74:0b:63:c7:e7:8c:97:39:f6:cd:ee:2b:d0:a8:c3:3a:88:3a: 6a:6b:3e:60:5c:fd:c7:3f:22:6c:b0:21:b9:52:85:aa:9c:d1: c5:7d:3c:4d:8f:76:5f:32:01:33:c5:c5:0a:46:b5:8c:5b:68: 6d:ad:08:67:fb:27:cf:37:1f:e3:62:bc:91:d7:02:94:6c:ed: ba:e0:5d:18:4a:39:d3:30:5e:51:d6:37:7b:05:72:bc:74:92: 61:d2:97:9b:35:03:7c:dd:65:b6:2d:bd:c5:b1:18:44:88:0e: 34:ab:4a:d0 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHY5nRvTvCBABcEApkpwtQj0YIo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTEyMjAwMDM1MzRaFw0yNTEyMjEwNDI3MzRaMDMxMTAvBgNV BAMTKEQzODQ1OEI3MjU4M0Y3NjJGRjZBNTlGNzRGOUNENTRFQ0Q1OUVFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD19WC0wzn4aFlcj18HEqvvClb5 5TYHSnhVhZ379tQir9hazh/OeLkTpDmdRpv86MiLr2r+bTLZOOevzxArsGCaDO9c nTtvphUXnoq7Uf+zT5uSBZqHluYvlTd4lUEEtV8XA9hFXJGe4/Etb0Q7pRkqedrP QmRaR6I7aqftIlXA67SAncmXVe0kq6jUp/YraZHvLeZ4xHNSYV4SVJK5Z5W68WQU tfR3xJAycrEl7kgXtH2YS5YbwFHySdDJ/dagYfMs8O0I66Uz85sIPCzVmzOUkIrJ 9XI4oQR2sEchyao1cH8UBMUCChVvVhE5AG/6sxHmhT6YJ2+CsnAb6mRBbGW3AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU04RYtyWD92L/aln3T5zVTs1Z7rMwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA TqObfjU5BFngzWS7TPmnFouSfr24dZSFVFWAxATF5k+zpY6LSHdOHPRigdyvozGh thAK8o52xYVjQ7IZihufie202ZIJLb6LktDXt4tg8tnYW8ptWSYIsJVZEuLrafeu JsM0bH2oAU619fA/+yH1zWd95JjPMc6J9HtqVh7/rCuhmgbpqut3GcR4ZV5hY2PL dAtjx+eMlzn2ze4r0KjDOog6ams+YFz9xz8ibLAhuVKFqpzRxX08TY92XzIBM8XF Cka1jFtoba0IZ/snzzcf42K8kdcClGztuuBdGEo50zBeUdY3ewVyvHSSYdKXmzUD fN1lti29xbEYRIgONKtK0A== -----END CERTIFICATE-----Generated at Sat Dec 20 08:51:54 2025 by rpki-client