This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft File: CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft (raw, json) Hash identifier: PrT4knxQCEKQYG9hfqqQsXHD7ThHs/d2wvGe2xXzMI4= Subject key identifier: BB:CF:24:D1:1A:73:33:2A:29:8E:4B:FF:76:DD:70:82:9D:78:36:0A Authority key identifier: CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94 Certificate issuer: /CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994 Certificate serial: 273E0D1F523FEE363D4B02A9FDCB6FAA9063ED5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer Subject info access: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft Manifest number: 02A5 Signing time: Fri 05 Dec 2025 18:24:14 +0000 Manifest this update: Fri 05 Dec 2025 18:19:14 +0000 Manifest next update: Sat 06 Dec 2025 22:09:14 +0000 Files and hashes: 1: 323830343a366261383a3a2f33322d3438203d3e20323730343135.roa (hash: Gemcb4V5qPaojkbRamJOllDbJN0znPPuJTFFrmwzhmY=) 2: CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl (hash: kWm0UtjM/WeEZYIx5FiF+c4u40rW2SgHH5AYP0iRuhg=) 3: 3139302e3130372e3136302e302f32322d3234203d3e20323730343135.roa (hash: A8kWvaltxYyvbnah0osFRp6KjhjI7+SK/5dGPfcjeoE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3e:0d:1f:52:3f:ee:36:3d:4b:02:a9:fd:cb:6f:aa:90:63:ed:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE69E090A3A3C45C3EE3F4A2A4068B58948DC994 Validity Not Before: Dec 5 18:19:14 2025 GMT Not After : Dec 6 22:09:14 2025 GMT Subject: CN=BBCF24D11A73332A298E4BFF76DD70829D78360A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:63:ab:1a:bd:e7:d6:61:05:65:b2:9e:af: df:55:36:4a:cf:a9:c5:cf:34:b6:2f:bb:02:ed:4b: ad:9e:ef:22:23:06:0e:dd:0e:4b:11:61:71:16:2b: 7d:f5:7f:c7:05:fb:0e:82:d4:e3:10:f6:fe:64:83: 6f:d0:93:7c:44:e1:c0:51:3c:47:8c:87:cd:80:37: a3:57:a7:2d:f2:e4:82:3c:e5:a0:94:6c:5c:ab:11: ba:d9:16:7a:20:31:80:3c:55:94:50:17:25:f2:37: 72:7a:36:14:92:38:4c:6c:46:fe:38:b8:98:cd:97: 12:2c:cc:92:2b:63:f8:32:f4:92:1b:0e:67:f4:c0: 10:46:f9:ed:0f:78:ae:8e:ef:fa:9a:a1:19:eb:d0: 0e:69:69:50:42:86:85:ee:f9:21:7d:2e:f9:65:00: 57:67:e1:69:43:65:a8:f6:45:b9:cd:f0:9c:35:52: 04:d8:fd:66:0a:63:6f:dc:ad:35:03:28:db:c3:20: 9e:27:2e:72:09:53:15:7e:76:95:4a:b7:df:aa:e5: 08:fd:5e:ca:8d:1a:b4:60:74:c1:bf:78:3f:ee:db: 4e:25:71:78:76:24:82:01:be:f0:2f:94:a2:89:88: 14:89:bb:6e:11:3d:ee:5f:26:dc:e3:5b:80:3a:ac: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CF:24:D1:1A:73:33:2A:29:8E:4B:FF:76:DD:70:82:9D:78:36:0A X509v3 Authority Key Identifier: keyid:CE:69:E0:90:A3:A3:C4:5C:3E:E3:F4:A2:A4:06:8B:58:94:8D:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XhyaCuqGV2GdvX8fYyB6u1CHTvRmMa9gVfnKBUepiKj/0/CE69E090A3A3C45C3EE3F4A2A4068B58948DC994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:46:1b:6c:f8:fa:9f:d3:4d:42:31:62:7f:9a:ca:a5:16:a5: 35:0e:c7:f7:4c:80:1c:ee:35:7d:c6:65:61:a8:d3:50:b2:f1: bd:04:9d:62:6f:f2:f9:54:b1:ee:84:39:e1:52:22:e8:38:68: a0:9b:26:32:25:ce:0e:e4:2a:14:7a:dc:5a:51:32:8b:aa:9c: 53:f4:18:c8:79:6b:c2:ec:6a:0f:5c:7b:bf:06:e5:fd:f0:58: de:ff:d2:58:16:d4:a1:66:d4:c1:e3:69:1d:12:ff:d3:14:f3: 16:2e:e8:71:7a:a5:63:85:42:cb:e8:76:fd:8f:bb:b1:d3:70: 1b:3a:1f:84:56:7d:6e:b1:f0:6d:9b:68:53:a6:62:b0:d4:54: d8:e2:38:f1:7e:de:71:8a:40:24:e7:7e:88:de:be:45:96:04: db:33:cd:bc:7b:6f:1b:28:0c:34:82:3a:54:f5:b9:48:c6:a9: b6:b1:b5:25:35:d3:55:13:a3:8a:ad:f5:a8:5a:50:e2:69:4d: 5e:da:b5:36:e8:e7:4f:95:7b:73:bf:42:e0:f1:24:24:5e:50: 8e:84:61:60:f6:36:ec:27:b8:39:f4:6e:85:9c:a7:0f:b9:86: 49:30:f6:8f:bb:88:d5:4a:00:36:c6:7e:7e:2d:13:3a:08:52: cc:7f:aa:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJz4NH1I/7jY9SwKp/ctvqpBj7V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2OUUwOTBBM0EzQzQ1QzNFRTNGNEEyQTQwNjhCNTg5 NDhEQzk5NDAeFw0yNTEyMDUxODE5MTRaFw0yNTEyMDYyMjA5MTRaMDMxMTAvBgNV BAMTKEJCQ0YyNEQxMUE3MzMzMkEyOThFNEJGRjc2REQ3MDgyOUQ3ODM2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvWOrGr3n1mEFZbKer99VNkrP qcXPNLYvuwLtS62e7yIjBg7dDksRYXEWK331f8cF+w6C1OMQ9v5kg2/Qk3xE4cBR PEeMh82AN6NXpy3y5II85aCUbFyrEbrZFnogMYA8VZRQFyXyN3J6NhSSOExsRv44 uJjNlxIszJIrY/gy9JIbDmf0wBBG+e0PeK6O7/qaoRnr0A5paVBChoXu+SF9Lvll AFdn4WlDZaj2RbnN8Jw1UgTY/WYKY2/crTUDKNvDIJ4nLnIJUxV+dpVKt9+q5Qj9 XsqNGrRgdMG/eD/u204lcXh2JIIBvvAvlKKJiBSJu24RPe5fJtzjW4A6rEnTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu88k0RpzMyopjkv/dt1wgp14NgowHwYDVR0j BBgwFoAUzmngkKOjxFw+4/SipAaLWJSNyZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBp S2ovMC9DRTY5RTA5MEEzQTNDNDVDM0VFM0Y0QTJBNDA2OEI1ODk0OERDOTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjlFMDkwQTNBM0M0NUMz RUUzRjRBMkE0MDY4QjU4OTQ4REM5OTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1hoeWFDdXFHVjJHZHZYOGZZeUI2dTFDSFR2Um1NYTlnVmZuS0JVZXBpS2ovMC9D RTY5RTA5MEEzQTNDNDVDM0VFM0Y0QTJBNDA2OEI1ODk0OERDOTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqUYbbPj6n9NNQjFif5rKpRalNQ7H90yAHO41fcZlYajTULLxvQSdYm/y+VSx 7oQ54VIi6DhooJsmMiXODuQqFHrcWlEyi6qcU/QYyHlrwuxqD1x7vwbl/fBY3v/S WBbUoWbUweNpHRL/0xTzFi7ocXqlY4VCy+h2/Y+7sdNwGzofhFZ9brHwbZtoU6Zi sNRU2OI48X7ecYpAJOd+iN6+RZYE2zPNvHtvGygMNII6VPW5SMaptrG1JTXTVROj iq31qFpQ4mlNXtq1NujnT5V7c79C4PEkJF5QjoRhYPY27Ce4OfRuhZynD7mGSTD2 j7uI1UoANsZ+fi0TOghSzH+qig== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:31 2025 by rpki-client