This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft File: D01D2EC076BDA62D438B972886851503EED04B2F.mft (raw, json) Hash identifier: P3W/C8S0epsgMuBCCAgdUMaX5GTcAKyAuahL9pYfEXU= Subject key identifier: 89:25:FB:5C:6B:42:D0:6D:0E:15:E2:13:AB:55:92:7B:FD:C5:FF:21 Authority key identifier: D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F Certificate issuer: /CN=D01D2EC076BDA62D438B972886851503EED04B2F Certificate serial: 2203D17574D54FDFD366B7D09E0345A3A6F89551 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft Manifest number: 64 Signing time: Fri 05 Dec 2025 23:25:49 +0000 Manifest this update: Fri 05 Dec 2025 23:20:49 +0000 Manifest next update: Sun 07 Dec 2025 01:06:49 +0000 Files and hashes: 1: D01D2EC076BDA62D438B972886851503EED04B2F.crl (hash: cTIL/8JgWtMZdAGnSYBpwXF7W4YmXJZJIDagQ4Hh0I0=) 2: 323830343a346565383a3a2f33322d3438203d3e2030.roa (hash: 2sP6uFKh/qzEQUnmI2XBkO1+/mEh+lqAHdRmfXyf1Vc=) 3: 34352e3233372e3230342e302f32322d3234203d3e2030.roa (hash: kUcj68eyBC5ukf19L72YnNZ7Sd6sAZ16sWy9SBGoI10=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 01:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:03:d1:75:74:d5:4f:df:d3:66:b7:d0:9e:03:45:a3:a6:f8:95:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D01D2EC076BDA62D438B972886851503EED04B2F Validity Not Before: Dec 5 23:20:49 2025 GMT Not After : Dec 7 01:06:49 2025 GMT Subject: CN=8925FB5C6B42D06D0E15E213AB55927BFDC5FF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:15:f6:0b:29:7a:80:5f:21:a6:f7:b8:36:60: 77:c1:1d:d0:1f:ce:29:c2:3a:c8:20:78:e9:c3:bc: 7e:bd:a4:ed:99:ca:cc:6a:6d:bc:22:f4:af:77:ea: 0f:f3:61:90:bd:c6:14:eb:46:e7:d8:04:61:b4:db: b3:fc:8f:43:2a:54:9c:fc:04:0f:3b:f0:9c:f3:b1: 45:20:34:66:a9:9a:9a:1d:46:8b:59:e9:6c:ee:65: 43:63:f7:1e:25:93:c0:1e:65:df:6c:10:d7:df:04: 3e:28:6a:5b:f0:ec:55:1a:ac:82:bf:8c:b3:e4:b6: 7a:2b:95:e7:3d:da:85:6e:cb:0c:1a:ab:fa:5d:7b: 3a:dc:55:db:bf:a2:1b:86:53:6c:4d:c3:d8:ee:6e: e1:4d:e1:47:bd:b1:5a:2f:cd:07:db:ea:9a:24:6a: 94:97:72:c8:4f:55:0b:fa:a3:b3:99:b3:5f:6b:57: b2:ef:84:9d:91:df:01:aa:31:c5:10:68:7c:4c:27: 32:f8:f7:c6:4e:24:e9:39:15:a0:0c:67:12:7b:6f: 45:9c:dd:d0:9c:9c:dc:b0:6f:16:0d:e0:9e:cf:5b: 8f:6d:13:d4:bc:7a:2e:9e:8f:2a:42:40:cc:b4:ac: e2:e1:fa:52:80:30:a8:fe:fe:36:f2:16:de:12:f4: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:25:FB:5C:6B:42:D0:6D:0E:15:E2:13:AB:55:92:7B:FD:C5:FF:21 X509v3 Authority Key Identifier: keyid:D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:06:a8:82:20:fc:ee:a9:b0:a5:0d:4a:eb:12:0b:7c:50:a2: 2f:23:e6:47:f1:01:a9:b6:67:9c:46:fe:f8:eb:dd:a8:53:be: d2:bf:c7:0b:7f:61:5f:18:e5:76:4a:27:1e:84:d1:5d:ee:d3: 1e:ee:c4:b3:1d:79:1d:f4:0c:7e:d0:c9:1a:a4:74:6e:d9:cb: df:c7:cd:3c:b1:5b:d6:d3:8c:08:60:62:99:3d:24:f5:bf:49: 53:7a:a6:94:96:b9:65:71:b8:8d:94:ca:54:e0:34:b1:3c:7c: 90:ce:81:eb:dd:17:90:80:60:f1:de:66:ff:c6:af:be:da:20: 92:3f:fc:dc:c3:e1:22:d3:d7:d0:98:14:a5:2b:cf:f7:b3:4c: dd:4d:65:91:d3:13:51:ba:57:fa:29:b1:8b:b0:be:c8:e5:4e: 16:32:25:94:d3:41:ab:ef:d7:05:2e:37:de:2c:ab:58:72:87: 18:04:62:6d:1b:6e:73:1e:b3:8b:7e:c7:1c:c2:e6:44:5d:e5: 80:c1:9f:5b:e7:a9:5b:ce:60:6f:1d:9f:0d:48:54:93:64:8e: 61:b9:93:25:f9:78:38:b8:37:80:a4:a4:23:c7:5c:f9:60:6d: 73:9d:a0:68:5e:2c:e5:1b:f8:49:83:c1:f3:be:6e:65:a0:2d: 55:8f:b0:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIgPRdXTVT9/TZrfQngNFo6b4lVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxRDJFQzA3NkJEQTYyRDQzOEI5NzI4ODY4NTE1MDNF RUQwNEIyRjAeFw0yNTEyMDUyMzIwNDlaFw0yNTEyMDcwMTA2NDlaMDMxMTAvBgNV BAMTKDg5MjVGQjVDNkI0MkQwNkQwRTE1RTIxM0FCNTU5MjdCRkRDNUZGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiFfYLKXqAXyGm97g2YHfBHdAf zinCOsggeOnDvH69pO2Zysxqbbwi9K936g/zYZC9xhTrRufYBGG027P8j0MqVJz8 BA878JzzsUUgNGapmpodRotZ6WzuZUNj9x4lk8AeZd9sENffBD4oalvw7FUarIK/ jLPktnorlec92oVuywwaq/pdezrcVdu/ohuGU2xNw9jubuFN4Ue9sVovzQfb6pok apSXcshPVQv6o7OZs19rV7LvhJ2R3wGqMcUQaHxMJzL498ZOJOk5FaAMZxJ7b0Wc 3dCcnNywbxYN4J7PW49tE9S8ei6ejypCQMy0rOLh+lKAMKj+/jbyFt4S9NDjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiSX7XGtC0G0OFeITq1WSe/3F/yEwHwYDVR0j BBgwFoAU0B0uwHa9pi1Di5cohoUVA+7QSy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEFQTFdoaWhrblBVdktpY3JGbzJ5UUxiZ1o0Y3hMSFhZd2tQVUI2ZW5i M2IvMC9EMDFEMkVDMDc2QkRBNjJENDM4Qjk3Mjg4Njg1MTUwM0VFRDA0QjJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMUQyRUMwNzZCREE2MkQ0 MzhCOTcyODg2ODUxNTAzRUVEMDRCMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEFQTFdoaWhrblBVdktpY3JGbzJ5UUxiZ1o0Y3hMSFhZd2tQVUI2ZW5iM2IvMC9E MDFEMkVDMDc2QkRBNjJENDM4Qjk3Mjg4Njg1MTUwM0VFRDA0QjJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcQaogiD87qmwpQ1K6xILfFCiLyPmR/EBqbZnnEb++OvdqFO+0r/HC39hXxjl dkonHoTRXe7THu7Esx15HfQMftDJGqR0btnL38fNPLFb1tOMCGBimT0k9b9JU3qm lJa5ZXG4jZTKVOA0sTx8kM6B690XkIBg8d5m/8avvtogkj/83MPhItPX0JgUpSvP 97NM3U1lkdMTUbpX+imxi7C+yOVOFjIllNNBq+/XBS433iyrWHKHGARibRtucx6z i37HHMLmRF3lgMGfW+epW85gbx2fDUhUk2SOYbmTJfl4OLg3gKSkI8dc+WBtc52g aF4s5Rv4SYPB875uZaAtVY+w0g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:34 2025 by rpki-client