This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.mft File: 099E710B733B757902741DC8991B7E28038B167A.mft (raw, json) Hash identifier: P624AXQ+3cFY8SezYWyFmJHm/t0vDrOh+SiStCP6TR0= Subject key identifier: 65:50:64:B0:4B:E7:76:5E:8E:BC:B4:6D:14:9F:39:B0:2E:C3:65:7C Authority key identifier: 09:9E:71:0B:73:3B:75:79:02:74:1D:C8:99:1B:7E:28:03:8B:16:7A Certificate issuer: /CN=099E710B733B757902741DC8991B7E28038B167A Certificate serial: 12FF2A48E37E1319B06E86C29AB114425C1EFEC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099E710B733B757902741DC8991B7E28038B167A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.mft Manifest number: 0100 Signing time: Sat 06 Dec 2025 03:17:56 +0000 Manifest this update: Sat 06 Dec 2025 03:12:56 +0000 Manifest next update: Sun 07 Dec 2025 06:50:56 +0000 Files and hashes: 1: 34352e362e3137322e302f32322d3234203d3e20323636313339.roa (hash: qy4MmQJBUyaj5JtvjUzpFkMIJYDRYwFbfe7mjwi2zw4=) 2: 099E710B733B757902741DC8991B7E28038B167A.crl (hash: GsNNOLSTs5P7ubTrScSoYmpwmYKyojhizQZq6p2XsPQ=) 3: 323830343a336234343a3a2f33322d3434203d3e20323636313339.roa (hash: v0elosXPC4tSz5uXBSL26etY2jhT8Sgas0+hKIdv1ho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.crl rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099E710B733B757902741DC8991B7E28038B167A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ff:2a:48:e3:7e:13:19:b0:6e:86:c2:9a:b1:14:42:5c:1e:fe:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099E710B733B757902741DC8991B7E28038B167A Validity Not Before: Dec 6 03:12:56 2025 GMT Not After : Dec 7 06:50:56 2025 GMT Subject: CN=655064B04BE7765E8EBCB46D149F39B02EC3657C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:a2:b1:1f:9f:e7:95:ed:00:96:fe:fa:4c: 82:8f:45:e7:10:f3:34:0c:9c:ab:7d:27:3d:89:69: 6a:59:38:71:f1:52:e6:37:d9:65:92:1c:d8:79:ff: 48:9b:c2:54:55:c4:d5:ad:aa:c9:22:66:c2:cc:5e: 27:3e:81:af:f1:1b:1a:6e:f0:96:83:95:cf:d5:78: bb:44:c9:38:18:50:e8:ac:97:fe:c3:5d:35:60:7f: f0:c1:dc:63:e8:cf:a4:94:7e:70:a1:c6:fb:38:bb: 86:bc:5d:8e:63:ae:43:aa:b9:eb:fa:a5:04:04:aa: 1a:e6:fa:9a:46:e7:a9:50:97:c8:c6:e1:0d:72:69: 18:7b:05:83:ce:21:1d:9e:b3:2d:b2:72:1b:53:49: 24:ca:4f:70:64:04:70:bd:bd:85:57:df:d7:28:c2: f6:36:fd:e8:ba:50:60:eb:d9:40:60:52:83:92:94: 06:a8:91:26:5b:2d:77:ba:8c:9c:fd:77:76:a6:c0: 15:de:54:56:66:6d:b7:c8:61:4e:9b:d4:a3:56:c0: fd:e7:6a:63:0e:42:42:a3:bb:3d:bf:db:09:4b:c3: a4:c8:2c:03:3d:4c:5c:2c:0f:e5:90:0d:79:26:66: f6:ef:e3:02:88:e2:25:e5:8d:d5:1b:bf:ba:8c:e0: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:50:64:B0:4B:E7:76:5E:8E:BC:B4:6D:14:9F:39:B0:2E:C3:65:7C X509v3 Authority Key Identifier: keyid:09:9E:71:0B:73:3B:75:79:02:74:1D:C8:99:1B:7E:28:03:8B:16:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099E710B733B757902741DC8991B7E28038B167A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/099E710B733B757902741DC8991B7E28038B167A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1a:06:af:f4:61:d0:9e:ac:ab:ad:e2:2c:5f:aa:c5:43:db: 9b:26:38:24:44:86:23:3a:1d:73:28:2d:93:63:38:d8:ed:60: 61:ed:0b:63:00:eb:50:52:d9:19:13:2c:4c:94:e0:21:6c:07: aa:36:39:4a:69:b6:d0:9a:61:f3:6a:56:79:7d:19:a8:80:69: a8:75:6c:9f:ed:d5:0f:b0:73:93:ba:6a:b2:33:41:40:cb:28: c6:de:9e:f6:da:c6:92:14:ec:79:d3:45:e6:61:40:de:89:6b: ec:9c:ed:ed:c9:4c:50:a3:c6:95:77:a6:57:2b:50:b7:4e:8c: f6:06:9f:ea:9d:f5:01:1b:37:ad:10:62:54:30:96:ba:d0:c9: f9:3e:52:87:26:7d:ac:59:05:b9:03:bd:63:87:7c:9a:b7:6f: 40:c0:ce:e5:0e:6c:80:2f:0c:dc:3e:c8:80:1b:d7:05:8d:ad: 51:73:10:55:0b:06:21:08:42:c3:e8:45:b3:22:5d:35:66:f4: 5d:9c:3e:04:4e:0b:26:90:17:5d:8b:33:23:d9:fa:a4:32:7a: 5e:d3:41:22:c9:9d:64:6c:b0:59:a3:da:9a:f7:f9:20:e9:ef: 54:da:80:cb:d5:8a:5c:8a:2b:0c:86:65:c2:92:2e:72:e6:d2: d5:bc:62:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEv8qSON+ExmwbobCmrEUQlwe/skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk5RTcxMEI3MzNCNzU3OTAyNzQxREM4OTkxQjdFMjgw MzhCMTY3QTAeFw0yNTEyMDYwMzEyNTZaFw0yNTEyMDcwNjUwNTZaMDMxMTAvBgNV BAMTKDY1NTA2NEIwNEJFNzc2NUU4RUJDQjQ2RDE0OUYzOUIwMkVDMzY1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgKKxH5/nle0Alv76TIKPRecQ 8zQMnKt9Jz2JaWpZOHHxUuY32WWSHNh5/0ibwlRVxNWtqskiZsLMXic+ga/xGxpu 8JaDlc/VeLtEyTgYUOisl/7DXTVgf/DB3GPoz6SUfnChxvs4u4a8XY5jrkOquev6 pQQEqhrm+ppG56lQl8jG4Q1yaRh7BYPOIR2esy2ychtTSSTKT3BkBHC9vYVX39co wvY2/ei6UGDr2UBgUoOSlAaokSZbLXe6jJz9d3amwBXeVFZmbbfIYU6b1KNWwP3n amMOQkKjuz2/2wlLw6TILAM9TFwsD+WQDXkmZvbv4wKI4iXljdUbv7qM4EZVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZVBksEvndl6OvLRtFJ85sC7DZXwwHwYDVR0j BBgwFoAUCZ5xC3M7dXkCdB3ImRt+KAOLFnowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0xhTnRjSjlwYzN2RGY3cjQ0a3YyWURHajVVVWtMZ0ZXM3BFcEd0elly ZWovMC8wOTlFNzEwQjczM0I3NTc5MDI3NDFEQzg5OTFCN0UyODAzOEIxNjdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5OUU3MTBCNzMzQjc1Nzkw Mjc0MURDODk5MUI3RTI4MDM4QjE2N0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0xhTnRjSjlwYzN2RGY3cjQ0a3YyWURHajVVVWtMZ0ZXM3BFcEd0ellyZWovMC8w OTlFNzEwQjczM0I3NTc5MDI3NDFEQzg5OTFCN0UyODAzOEIxNjdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjxoGr/Rh0J6sq63iLF+qxUPbmyY4JESGIzodcygtk2M42O1gYe0LYwDrUFLZ GRMsTJTgIWwHqjY5Smm20Jph82pWeX0ZqIBpqHVsn+3VD7Bzk7pqsjNBQMsoxt6e 9trGkhTsedNF5mFA3olr7Jzt7clMUKPGlXemVytQt06M9gaf6p31ARs3rRBiVDCW utDJ+T5ShyZ9rFkFuQO9Y4d8mrdvQMDO5Q5sgC8M3D7IgBvXBY2tUXMQVQsGIQhC w+hFsyJdNWb0XZw+BE4LJpAXXYszI9n6pDJ6XtNBIsmdZGywWaPamvf5IOnvVNqA y9WKXIorDIZlwpIucubS1bxiPg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:42 2025 by rpki-client