This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft File: 154E883FCB52E91706C17788E2199491DC6E45F7.mft (raw, json) Hash identifier: JSGFXoFrc8ywm24pGGjtvKNm8XFqHaqbLzYl30f2Wds= Subject key identifier: 3C:80:C9:5A:8A:04:55:3C:16:55:CC:22:70:3A:29:0E:65:36:95:B7 Authority key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 Certificate issuer: /CN=154E883FCB52E91706C17788E2199491DC6E45F7 Certificate serial: 2E3B08C385E0796E1C8692AE8877424B9ABEEDE5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer Subject info access: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft Manifest number: 01D7 Signing time: Sat 06 Dec 2025 01:38:16 +0000 Manifest this update: Sat 06 Dec 2025 01:33:16 +0000 Manifest next update: Sun 07 Dec 2025 04:35:16 +0000 Files and hashes: 1: 3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa (hash: i+uywVGIPRQCDVi+ciOxowF1cKfIM0mnralZfI9BqLI=) 2: 154E883FCB52E91706C17788E2199491DC6E45F7.crl (hash: 8tsBfsy28M+DdP+qc3IrDoeUGAVmt5s2IEgrRhQWeOY=) 3: 323830343a323264633a3a2f33322d3438203d3e20323634313237.roa (hash: orUpteGth+JTOjLIpkDk5D2ZHYpZbmhzL1wAvYz4Wnc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3b:08:c3:85:e0:79:6e:1c:86:92:ae:88:77:42:4b:9a:be:ed:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154E883FCB52E91706C17788E2199491DC6E45F7 Validity Not Before: Dec 6 01:33:16 2025 GMT Not After : Dec 7 04:35:16 2025 GMT Subject: CN=3C80C95A8A04553C1655CC22703A290E653695B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:c4:28:5e:e9:1d:8a:5d:0e:ca:96:6f:6e: 05:f7:69:f8:d4:5c:9d:13:d1:04:33:bb:0e:a3:08: 34:97:0d:13:ca:6c:aa:78:5a:82:3f:92:3a:db:14: dd:e1:ad:1e:f9:57:a5:c4:21:a4:b3:f6:ea:a1:ea: d6:d0:56:b9:09:25:9b:aa:62:58:e3:6b:23:2b:0b: 9d:c9:6d:25:c5:dc:ab:99:68:b4:03:a1:b3:51:43: 29:36:3c:08:0b:68:be:70:f0:c2:e9:06:11:1e:27: 41:88:76:4c:15:f7:b2:d6:9e:ce:23:6e:51:71:c2: a4:09:f6:36:1f:da:ef:39:53:a7:6f:92:c7:3b:57: 8a:13:bd:eb:ce:b5:7a:71:6f:c9:2f:cb:2e:83:31: 56:d9:3a:f5:83:92:a4:71:b9:9d:d9:7e:14:7e:8e: 8b:80:64:f0:b5:f3:72:51:ba:02:7d:27:38:a4:2f: d5:4c:e3:92:34:b6:63:d7:2c:57:31:28:a4:d3:44: 77:97:60:22:b1:d4:0d:f6:20:f7:08:1f:9d:ab:23: 79:22:6f:fa:7f:f8:fd:36:5b:d5:74:d5:61:bf:93: 7a:63:89:96:93:2a:9e:6e:6a:8b:81:77:6b:f4:d9: 57:0d:78:5e:ed:ac:94:2d:ff:52:9c:b5:25:40:7b: cf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:80:C9:5A:8A:04:55:3C:16:55:CC:22:70:3A:29:0E:65:36:95:B7 X509v3 Authority Key Identifier: keyid:15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fe:0b:c3:36:b3:cb:5b:8b:13:db:50:8a:71:9b:54:cb:d0: 2c:d5:5f:ae:86:db:bc:55:f1:f4:b3:10:c6:f9:f4:09:44:66: 48:a8:74:f8:f2:4f:f9:43:75:e0:95:3e:35:87:55:98:81:53: 01:c7:97:0b:c9:b9:bc:3b:19:3e:b3:b9:9e:e4:2d:24:82:62: 84:be:7d:b8:80:cc:a8:ab:4f:79:9c:01:fe:e9:3f:3c:ba:62: 6a:fd:af:81:96:83:54:20:90:b2:00:35:08:ee:6e:0c:ab:7e: 52:f8:92:b3:77:fc:c2:86:3a:12:f5:e9:6c:f3:66:aa:d0:03: f1:0c:c4:1b:ce:45:80:4f:53:84:cc:f4:91:cb:a5:bc:4b:82: 2e:67:09:d7:ca:fe:19:99:25:93:d6:3c:77:c9:d1:28:b6:dd: 29:95:d7:b8:68:5f:41:da:44:48:d8:bf:a5:20:58:0d:f9:22: 0b:15:e0:57:ee:5e:09:da:d3:1b:f0:85:84:a7:09:30:42:76: 6e:26:f5:bd:90:51:77:be:f0:af:1f:eb:8b:d4:bb:ab:83:8e: d7:f5:3d:7e:a4:17:40:1a:c4:13:b6:7e:c8:26:12:62:ed:58: 8d:13:9a:a3:8d:24:a4:de:c3:eb:31:93:b8:77:ea:0e:60:2c: da:a3:98:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULjsIw4XgeW4chpKuiHdCS5q+7eUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RTg4M0ZDQjUyRTkxNzA2QzE3Nzg4RTIxOTk0OTFE QzZFNDVGNzAeFw0yNTEyMDYwMTMzMTZaFw0yNTEyMDcwNDM1MTZaMDMxMTAvBgNV BAMTKDNDODBDOTVBOEEwNDU1M0MxNjU1Q0MyMjcwM0EyOTBFNjUzNjk1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkcQoXukdil0OypZvbgX3afjU XJ0T0QQzuw6jCDSXDRPKbKp4WoI/kjrbFN3hrR75V6XEIaSz9uqh6tbQVrkJJZuq YljjayMrC53JbSXF3KuZaLQDobNRQyk2PAgLaL5w8MLpBhEeJ0GIdkwV97LWns4j blFxwqQJ9jYf2u85U6dvksc7V4oTvevOtXpxb8kvyy6DMVbZOvWDkqRxuZ3ZfhR+ jouAZPC183JRugJ9JzikL9VM45I0tmPXLFcxKKTTRHeXYCKx1A32IPcIH52rI3ki b/p/+P02W9V01WG/k3pjiZaTKp5uaouBd2v02VcNeF7trJQt/1KctSVAe8+NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPIDJWooEVTwWVcwicDopDmU2lbcwHwYDVR0j BBgwFoAUFU6IP8tS6RcGwXeI4hmUkdxuRfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3dLSkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcx VTYvMC8xNTRFODgzRkNCNTJFOTE3MDZDMTc3ODhFMjE5OTQ5MURDNkU0NUY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1NEU4ODNGQ0I1MkU5MTcw NkMxNzc4OEUyMTk5NDkxREM2RTQ1RjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3dLSkJqNVUza05XNGhaQktNWTRwam5oSjhIRWpvNkRhdThKUU1GYWcxVTYvMC8x NTRFODgzRkNCNTJFOTE3MDZDMTc3ODhFMjE5OTQ5MURDNkU0NUY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANf4Lwzazy1uLE9tQinGbVMvQLNVfrobbvFXx9LMQxvn0CURmSKh0+PJP+UN1 4JU+NYdVmIFTAceXC8m5vDsZPrO5nuQtJIJihL59uIDMqKtPeZwB/uk/PLpiav2v gZaDVCCQsgA1CO5uDKt+UviSs3f8woY6EvXpbPNmqtAD8QzEG85FgE9ThMz0kcul vEuCLmcJ18r+GZklk9Y8d8nRKLbdKZXXuGhfQdpESNi/pSBYDfkiCxXgV+5eCdrT G/CFhKcJMEJ2bib1vZBRd77wrx/ri9S7q4OO1/U9fqQXQBrEE7Z+yCYSYu1YjROa o40kpN7D6zGTuHfqDmAs2qOYxw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:43 2025 by rpki-client