This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft File: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft (raw, json) Hash identifier: kAs5p1dTGY8rlVbHadeu2GEZKR7F6lx9OP4eGe7/Qyo= Subject key identifier: 5E:75:B8:AD:4F:43:12:F6:52:4A:65:EA:22:F5:FB:EE:6F:CF:5A:B2 Authority key identifier: 17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE Certificate issuer: /CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE Certificate serial: 0D9A434B61FBC6E48AA4006FFC14D66DA379A9CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft Manifest number: 01F3 Signing time: Tue 23 Dec 2025 22:40:00 +0000 Manifest this update: Tue 23 Dec 2025 22:35:00 +0000 Manifest next update: Thu 25 Dec 2025 00:10:00 +0000 Files and hashes: 1: 17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl (hash: O9EP5OvJtgt1TPQtpKHm/Veb6Bzg1hdIVEoC8q+0IE0=) 2: 323830343a393165343a3a2f33322d3438203d3e20323734363733.roa (hash: mwYQa+I5Vdoi0oZVYD6n6DiKxyLbmDpdu/lURJLV0aA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 00:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9a:43:4b:61:fb:c6:e4:8a:a4:00:6f:fc:14:d6:6d:a3:79:a9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17AE8ABC703FA8586809D4D87EB5C6452788A9EE Validity Not Before: Dec 23 22:35:00 2025 GMT Not After : Dec 25 00:10:00 2025 GMT Subject: CN=5E75B8AD4F4312F6524A65EA22F5FBEE6FCF5AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:8f:dc:af:b1:a5:63:2e:8f:56:94:4c:9a: d7:c4:71:09:4d:83:9f:ce:77:d8:65:cf:85:d5:59: c3:27:25:2f:7f:50:af:f6:d5:a1:27:98:da:35:8a: 53:cf:48:12:af:cc:b5:d6:af:55:e8:2e:00:b5:04: bd:72:9e:1e:dd:b0:63:94:60:b0:f7:4d:b9:48:93: ab:67:62:7a:79:36:42:36:b0:11:0f:91:a4:c5:b1: dc:3c:19:d3:08:aa:de:8e:bb:9a:ea:b3:e1:e6:bb: f3:c6:be:18:d1:02:0a:e9:1c:43:3c:db:2c:fb:2c: 3b:ff:1c:aa:b1:aa:9d:b1:85:1a:d5:42:16:0a:6d: 3b:7f:01:77:77:1a:e1:b1:62:51:23:25:52:fc:bb: a2:ca:0f:77:75:a4:5e:aa:c7:be:75:96:ae:d9:ec: 28:f6:3b:78:3b:71:64:a2:86:fb:87:34:37:89:21: 03:82:50:7d:6f:db:74:6e:6b:5c:c7:7a:3a:d2:64: 24:04:f2:c2:30:68:ee:13:9f:86:dc:7d:ed:c8:2c: e2:25:df:37:3b:ea:f2:fb:cf:b0:d8:15:e3:e4:9c: 78:d4:76:58:eb:b4:e6:8d:a9:a9:77:dd:c0:a3:42: 7c:a8:f3:d6:7f:04:a5:a6:a9:5e:d8:66:bf:6f:02: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:75:B8:AD:4F:43:12:F6:52:4A:65:EA:22:F5:FB:EE:6F:CF:5A:B2 X509v3 Authority Key Identifier: keyid:17:AE:8A:BC:70:3F:A8:58:68:09:D4:D8:7E:B5:C6:45:27:88:A9:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ciEEzU6mYmNqiCaT4vnt4UF4ncyZ9VhzT2bfVyUUe3i/0/17AE8ABC703FA8586809D4D87EB5C6452788A9EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9e:4d:a7:ef:79:60:29:71:d6:41:3e:70:57:82:0d:f3:9b: c8:35:78:bf:f4:68:38:19:26:4a:e3:05:67:7f:50:cf:0b:36: 62:53:73:f5:7d:26:8d:c5:f8:67:44:1e:ff:fd:87:f9:2b:95: a2:d5:9c:60:33:94:72:a4:06:51:97:aa:af:ea:c9:4b:2b:65: d2:66:63:f7:64:2e:d6:32:4a:77:ff:ef:95:3d:5c:c2:43:ed: db:b0:85:7c:03:9d:54:2c:fe:86:2f:fa:4b:0b:ad:ec:5d:2a: d4:81:80:11:12:66:29:b2:91:e8:52:28:04:4a:4d:a5:a1:5c: 51:cd:ea:7d:67:68:cf:1a:80:50:3c:51:da:92:9c:67:d9:3e: 0f:19:a4:f6:2c:4a:5a:31:b7:5d:d1:e9:fa:a6:f3:5b:42:6f: b0:01:03:bb:b0:ba:0f:f8:08:ca:a0:b1:a2:a4:2f:c8:fc:b0: f1:41:44:7e:9a:0d:da:48:2d:c5:35:d5:7a:d4:89:b3:4a:0d: 66:98:39:c6:f1:df:a9:ab:b0:e4:6c:34:9a:e1:0f:bd:5e:a0: af:e9:8f:1d:63:54:9a:f0:d7:77:fb:de:db:d0:be:b5:d5:3d: 15:40:c4:48:3b:fd:6c:15:04:2a:34:47:f6:70:dd:19:59:96: 79:c4:4b:b3 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUDZpDS2H7xuSKpABv/BTWbaN5qcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBRThBQkM3MDNGQTg1ODY4MDlENEQ4N0VCNUM2NDUy Nzg4QTlFRTAeFw0yNTEyMjMyMjM1MDBaFw0yNTEyMjUwMDEwMDBaMDMxMTAvBgNV BAMTKDVFNzVCOEFENEY0MzEyRjY1MjRBNjVFQTIyRjVGQkVFNkZDRjVBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZo/cr7GlYy6PVpRMmtfEcQlN g5/Od9hlz4XVWcMnJS9/UK/21aEnmNo1ilPPSBKvzLXWr1XoLgC1BL1ynh7dsGOU YLD3TblIk6tnYnp5NkI2sBEPkaTFsdw8GdMIqt6Ou5rqs+Hmu/PGvhjRAgrpHEM8 2yz7LDv/HKqxqp2xhRrVQhYKbTt/AXd3GuGxYlEjJVL8u6LKD3d1pF6qx751lq7Z 7Cj2O3g7cWSihvuHNDeJIQOCUH1v23Rua1zHejrSZCQE8sIwaO4Tn4bcfe3ILOIl 3zc76vL7z7DYFePknHjUdljrtOaNqal33cCjQnyo89Z/BKWmqV7YZr9vAtrxAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUXnW4rU9DEvZSSmXqIvX77m/PWrIwHwYDVR0j BBgwFoAUF66KvHA/qFhoCdTYfrXGRSeIqe4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9jaUVFelU2bVltTnFpQ2FUNHZudDRVRjRuY3laOVZoelQyYmZWeVVVZTNp LzAvMTdBRThBQkM3MDNGQTg1ODY4MDlENEQ4N0VCNUM2NDUyNzg4QTlFRS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xN0FFOEFCQzcwM0ZBODU4Njgw OUQ0RDg3RUI1QzY0NTI3ODhBOUVFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Np RUV6VTZtWW1OcWlDYVQ0dm50NFVGNG5jeVo5Vmh6VDJiZlZ5VVVlM2kvMC8xN0FF OEFCQzcwM0ZBODU4NjgwOUQ0RDg3RUI1QzY0NTI3ODhBOUVFLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA bJ5Np+95YClx1kE+cFeCDfObyDV4v/RoOBkmSuMFZ39Qzws2YlNz9X0mjcX4Z0Qe //2H+SuVotWcYDOUcqQGUZeqr+rJSytl0mZj92Qu1jJKd//vlT1cwkPt27CFfAOd VCz+hi/6Swut7F0q1IGAERJmKbKR6FIoBEpNpaFcUc3qfWdozxqAUDxR2pKcZ9k+ Dxmk9ixKWjG3XdHp+qbzW0JvsAEDu7C6D/gIyqCxoqQvyPyw8UFEfpoN2kgtxTXV etSJs0oNZpg5xvHfqauw5Gw0muEPvV6gr+mPHWNUmvDXd/ve29C+tdU9FUDESDv9 bBUEKjRH9nDdGVmWecRLsw== -----END CERTIFICATE-----Generated at Wed Dec 24 14:27:39 2025 by rpki-client