This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft File: 2601DE669734AEE0385101964D2ED4C0B8A927D4.mft (raw, json) Hash identifier: x84TotBr2VDkrSj2JYfxeIlys/47ttB0sQwDQvW9ojc= Subject key identifier: 1C:85:A2:10:3B:44:6F:AE:CC:EB:5E:11:DF:11:F2:67:A0:87:E4:76 Authority key identifier: 26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4 Certificate issuer: /CN=2601DE669734AEE0385101964D2ED4C0B8A927D4 Certificate serial: 7DCDC3A3B1857644090494060AC9102F94F5F488 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft Manifest number: 018F Signing time: Sat 06 Dec 2025 00:09:29 +0000 Manifest this update: Sat 06 Dec 2025 00:04:29 +0000 Manifest next update: Sun 07 Dec 2025 01:19:29 +0000 Files and hashes: 1: 323830343a383631343a3a2f33322d3434203d3e20323732363139.roa (hash: pQviQjOONbuzn6pqxVPP7SoctO2grbtBArJUd8XQvF4=) 2: 2601DE669734AEE0385101964D2ED4C0B8A927D4.crl (hash: Lf8MjdLl29j5uX8rW1A6hWuJ3GHOlYKvepeAFgJupEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 01:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cd:c3:a3:b1:85:76:44:09:04:94:06:0a:c9:10:2f:94:f5:f4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4 Validity Not Before: Dec 6 00:04:29 2025 GMT Not After : Dec 7 01:19:29 2025 GMT Subject: CN=1C85A2103B446FAECCEB5E11DF11F267A087E476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:fc:47:a6:0d:ed:89:75:a0:f7:48:31:80: 7e:de:b1:de:a9:01:37:65:aa:f1:36:a7:e2:a2:46: 43:50:e5:1f:3f:83:44:d5:96:fa:ca:81:a3:c2:c4: 2d:b3:7e:57:47:79:b4:94:f6:99:df:69:eb:c9:ad: 27:e5:ad:3a:6f:c3:ee:a6:8e:4d:a5:a5:a3:0e:b3: 7e:7f:a8:48:e1:a1:d1:fb:20:08:1b:70:e2:97:57: a9:ba:df:87:3b:4f:8c:40:a1:dc:1b:40:25:8c:b9: 20:27:08:01:66:e7:75:de:4b:24:61:72:21:90:30: df:8f:1f:5c:1c:c5:95:e7:9d:bd:9e:37:3e:95:6a: d7:2b:3a:46:9d:3e:b9:5d:41:96:ff:b9:be:d8:55: 56:2b:76:cf:2b:fc:4f:14:29:18:d9:6f:f7:96:b9: 05:74:44:33:26:a0:e8:e3:84:b3:c4:69:7a:40:1b: 80:ca:8d:7c:c0:cd:8b:65:b2:e3:3d:80:01:bb:0f: af:50:c8:e5:b8:73:29:04:92:09:16:a3:25:81:83: f1:e2:0d:69:bf:6b:46:bd:0c:ca:af:2a:a0:c3:c6: 70:83:c3:29:6b:03:ca:36:1b:d2:88:ea:12:f0:9b: 1e:6e:3f:ac:2c:07:48:5d:25:bb:c1:8b:0e:a7:d2: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:A2:10:3B:44:6F:AE:CC:EB:5E:11:DF:11:F2:67:A0:87:E4:76 X509v3 Authority Key Identifier: keyid:26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4b:15:04:9c:3f:cc:31:78:be:ae:68:64:cf:90:d4:d3:9d: 80:57:b3:48:fd:4f:8d:fc:14:16:e4:ca:a7:d4:b7:ac:ec:42: ae:1f:10:1f:9f:6e:ea:13:43:92:b9:97:58:1b:6e:90:ed:48: cb:73:b4:91:8a:9b:0e:91:da:84:d6:4b:f0:a8:3b:41:64:d3: e9:71:77:bd:08:32:a4:52:2a:76:3e:5b:9e:d8:86:d4:b6:d9: 93:36:28:46:08:fc:62:c0:6b:37:4a:dd:88:bf:c9:84:ab:2a: 21:ec:fa:dd:96:e1:69:c4:96:e3:10:ee:05:b7:f3:64:c1:5c: 7f:48:6d:21:a8:df:03:ea:56:92:3b:a6:ff:6b:c6:35:9b:57: 69:b3:0e:4a:6f:70:ba:50:a4:99:bb:50:a9:c8:e5:04:0b:de: 47:be:ba:88:aa:c3:c5:8e:bf:d9:d3:d4:c3:a3:10:6e:7c:df: d7:36:3a:9e:74:80:b6:6d:b3:91:b3:0a:b7:df:62:d0:f6:b4: 84:29:36:35:6b:8b:cd:b8:60:07:91:0d:28:b6:71:ec:c3:2b: 52:37:14:79:f2:c0:35:96:f4:5c:fc:99:73:35:d5:71:00:e3: 4a:47:a4:b1:99:44:57:dc:1a:41:ec:42:52:d0:d8:be:c3:16: ef:6a:19:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfc3Do7GFdkQJBJQGCskQL5T19IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYwMURFNjY5NzM0QUVFMDM4NTEwMTk2NEQyRUQ0QzBC OEE5MjdENDAeFw0yNTEyMDYwMDA0MjlaFw0yNTEyMDcwMTE5MjlaMDMxMTAvBgNV BAMTKDFDODVBMjEwM0I0NDZGQUVDQ0VCNUUxMURGMTFGMjY3QTA4N0U0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJS/xHpg3tiXWg90gxgH7esd6p ATdlqvE2p+KiRkNQ5R8/g0TVlvrKgaPCxC2zfldHebSU9pnfaevJrSflrTpvw+6m jk2lpaMOs35/qEjhodH7IAgbcOKXV6m634c7T4xAodwbQCWMuSAnCAFm53XeSyRh ciGQMN+PH1wcxZXnnb2eNz6VatcrOkadPrldQZb/ub7YVVYrds8r/E8UKRjZb/eW uQV0RDMmoOjjhLPEaXpAG4DKjXzAzYtlsuM9gAG7D69QyOW4cykEkgkWoyWBg/Hi DWm/a0a9DMqvKqDDxnCDwylrA8o2G9KI6hLwmx5uP6wsB0hdJbvBiw6n0p93AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHIWiEDtEb67M614R3xHyZ6CH5HYwHwYDVR0j BBgwFoAUJgHeZpc0ruA4UQGWTS7UwLipJ9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlU MXIvMC8yNjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2MDFERTY2OTczNEFFRTAz ODUxMDE5NjREMkVENEMwQjhBOTI3RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlUMXIvMC8y NjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGEsVBJw/zDF4vq5oZM+Q1NOdgFezSP1PjfwUFuTKp9S3rOxCrh8QH59u6hND krmXWBtukO1Iy3O0kYqbDpHahNZL8Kg7QWTT6XF3vQgypFIqdj5bntiG1LbZkzYo Rgj8YsBrN0rdiL/JhKsqIez63ZbhacSW4xDuBbfzZMFcf0htIajfA+pWkjum/2vG NZtXabMOSm9wulCkmbtQqcjlBAveR766iKrDxY6/2dPUw6MQbnzf1zY6nnSAtm2z kbMKt99i0Pa0hCk2NWuLzbhgB5ENKLZx7MMrUjcUefLANZb0XPyZczXVcQDjSkek sZlEV9waQexCUtDYvsMW72oZ1w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:44:33 2025 by rpki-client