This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft File: 8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft (raw, json) Hash identifier: aSDm0MRhbfi/nDqGFYjZfaC+dED/qDat2s36AjC+Pno= Subject key identifier: 45:CA:4C:FE:CF:A4:38:D1:71:57:64:04:9A:70:8C:A8:E2:10:65:B7 Authority key identifier: 8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 Certificate issuer: /CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0 Certificate serial: 7127DBB8138917F5EA3520FF04F2403E1C04FCA8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft Manifest number: 51 Signing time: Fri 05 Dec 2025 16:32:00 +0000 Manifest this update: Fri 05 Dec 2025 16:27:00 +0000 Manifest next update: Sat 06 Dec 2025 19:28:00 +0000 Files and hashes: 1: 8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl (hash: lbtyGg5H7lbc9T7AA1mmDj0SlEDeOC6/mrn7xEWP820=) 2: 34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (hash: xJ1/xwhDeT/nk0Rr/KZSIn5XGX1IHarJIhB6lmq9MGQ=) 3: 323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (hash: kwEv7gErYcASIrf6NWAJrxKoKHj5dipmcUm6QyhK6V8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 19:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:27:db:b8:13:89:17:f5:ea:35:20:ff:04:f2:40:3e:1c:04:fc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0 Validity Not Before: Dec 5 16:27:00 2025 GMT Not After : Dec 6 19:28:00 2025 GMT Subject: CN=45CA4CFECFA438D1715764049A708CA8E21065B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:12:b7:70:49:73:70:ec:7a:7d:0f:c1:e3: 5a:5f:18:97:26:5e:5c:2e:7b:78:f8:52:77:83:7e: fe:5c:62:6e:68:cf:15:37:47:8f:38:96:87:d1:a5: bd:8d:fb:85:bb:9b:b4:87:65:81:41:ad:1f:cd:76: 5f:ee:d0:c1:e6:3e:7f:fa:6d:91:e9:83:54:a8:4c: 21:27:ad:fc:f2:75:a0:2f:83:b2:5a:12:ca:fd:5c: 45:aa:ad:f7:8e:95:1f:bb:4f:fa:96:f2:9c:35:cd: fc:65:62:a9:79:07:bc:8d:e2:bd:8f:90:28:d3:bd: 2b:03:86:2c:07:14:09:33:72:06:63:50:ec:b1:dc: d4:e8:10:48:7e:24:65:a2:0d:dd:dd:b4:e0:17:eb: 60:27:7d:77:ab:29:32:e1:15:6b:48:ca:5f:36:cd: 04:36:e4:5d:b6:51:b1:66:d9:55:33:9f:91:ce:99: d8:7c:37:8d:25:a3:f4:e8:08:08:ae:66:f8:65:d0: 4b:38:35:4a:ee:89:6f:31:62:c1:c0:a0:63:84:76: d4:d1:79:86:23:63:40:8d:08:58:5b:af:8b:2a:e6: 58:88:65:b3:9c:97:0d:bf:b9:08:d0:62:72:eb:d0: 56:24:7e:06:5f:f0:11:0c:54:83:cd:bd:84:26:d8: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CA:4C:FE:CF:A4:38:D1:71:57:64:04:9A:70:8C:A8:E2:10:65:B7 X509v3 Authority Key Identifier: keyid:8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:34:bc:da:06:c5:8f:15:0b:54:5d:8c:60:74:fc:70:9f:d8: 7c:60:5f:04:52:d2:aa:06:cf:1c:fa:06:cc:ab:60:b1:38:0b: 05:0c:04:00:dd:33:b5:3b:cb:90:86:20:3b:56:72:cc:51:f3: f2:98:11:ae:e5:ed:85:be:66:8d:fd:74:e6:46:98:56:4b:99: 09:01:c7:0f:6f:9e:b1:37:91:39:b5:fa:56:a8:cb:03:db:8e: b4:d7:59:52:ee:56:c5:cf:d6:c7:ed:b6:aa:2d:df:71:4a:2f: 34:90:a0:b1:69:d7:47:5b:7b:e5:9d:4e:df:49:18:c6:52:9f: 6d:6a:be:58:b8:c3:cd:c2:9b:a6:ac:a5:50:5c:a3:51:42:9f: 85:18:28:cb:7f:52:dc:a4:0c:dc:a3:03:d8:27:14:e4:b6:c0: db:93:1a:68:23:a5:79:f7:84:27:ce:df:09:f5:70:34:31:f4: 45:86:00:b5:38:a8:2f:ad:db:03:a0:8f:68:6c:3d:3a:59:ab: 47:cb:17:d7:b2:d3:04:ce:64:07:54:49:f1:1f:6d:1c:d9:f0: 16:a8:c2:7b:2b:f6:96:c1:3e:cc:20:b6:cd:aa:5c:8d:5e:c4: 65:f4:15:70:f8:9c:8b:b0:49:9c:be:6a:5c:37:94:69:5d:2b: 2e:55:4b:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcSfbuBOJF/XqNSD/BPJAPhwE/KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI5RjZCMkM5ODdDRURGMkMwQTU4MTM3RTg1Q0RCQjc2 NzlFNkJCMDAeFw0yNTEyMDUxNjI3MDBaFw0yNTEyMDYxOTI4MDBaMDMxMTAvBgNV BAMTKDQ1Q0E0Q0ZFQ0ZBNDM4RDE3MTU3NjQwNDlBNzA4Q0E4RTIxMDY1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRxK3cElzcOx6fQ/B41pfGJcm Xlwue3j4UneDfv5cYm5ozxU3R484lofRpb2N+4W7m7SHZYFBrR/Ndl/u0MHmPn/6 bZHpg1SoTCEnrfzydaAvg7JaEsr9XEWqrfeOlR+7T/qW8pw1zfxlYql5B7yN4r2P kCjTvSsDhiwHFAkzcgZjUOyx3NToEEh+JGWiDd3dtOAX62AnfXerKTLhFWtIyl82 zQQ25F22UbFm2VUzn5HOmdh8N40lo/ToCAiuZvhl0Es4NUruiW8xYsHAoGOEdtTR eYYjY0CNCFhbr4sq5liIZbOclw2/uQjQYnLr0FYkfgZf8BEMVIPNvYQm2FcjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURcpM/s+kONFxV2QEmnCMqOIQZbcwHwYDVR0j BBgwFoAUi59rLJh87fLApYE36Fzbt2eea7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJI VEMvMC84QjlGNkIyQzk4N0NFREYyQzBBNTgxMzdFODVDREJCNzY3OUU2QkIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCOUY2QjJDOTg3Q0VERjJD MEE1ODEzN0U4NUNEQkI3Njc5RTZCQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJIVEMvMC84 QjlGNkIyQzk4N0NFREYyQzBBNTgxMzdFODVDREJCNzY3OUU2QkIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKjS82gbFjxULVF2MYHT8cJ/YfGBfBFLSqgbPHPoGzKtgsTgLBQwEAN0ztTvL kIYgO1ZyzFHz8pgRruXthb5mjf105kaYVkuZCQHHD2+esTeRObX6VqjLA9uOtNdZ Uu5Wxc/Wx+22qi3fcUovNJCgsWnXR1t75Z1O30kYxlKfbWq+WLjDzcKbpqylUFyj UUKfhRgoy39S3KQM3KMD2CcU5LbA25MaaCOlefeEJ87fCfVwNDH0RYYAtTioL63b A6CPaGw9OlmrR8sX17LTBM5kB1RJ8R9tHNnwFqjCeyv2lsE+zCC2zapcjV7EZfQV cPici7BJnL5qXDeUaV0rLlVLqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:19 2025 by rpki-client