This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft File: CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft (raw, json) Hash identifier: tp9plSuxG7OiFmnWyHBk8JUvD0ISdt0G/mW+5S728P0= Subject key identifier: BE:88:A5:B0:EB:28:05:72:6B:F7:4F:D0:F0:E6:22:A3:C5:55:05:51 Authority key identifier: CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F Certificate issuer: /CN=CA1CADDF6DC2750F6D5D18A7F1425AE13486385F Certificate serial: 32CA295B94FB9899D1A56420A7113E4E39577123 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer Subject info access: rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 11:52:09 +0000 Manifest this update: Fri 05 Dec 2025 11:47:09 +0000 Manifest next update: Sat 06 Dec 2025 15:37:09 +0000 Files and hashes: 1: CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl (hash: Mh/uK/GgdPw4Y6WL/5XFMFNndJk8AHZcSTYRLT5cX1s=) 2: 3138392e35312e3136342e302f32322d3234203d3e20323730373934.roa (hash: 1gpLziXMEm5Gaj6XBFqM4YKMYoLov6pbubzfCgNkF88=) 3: 323830343a373138343a3a2f33322d3438203d3e20323730373934.roa (hash: cUSb3xGZji/PVYflxGYzoQBBJzeEF3qTS0JH9zJ4eWo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 15:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ca:29:5b:94:fb:98:99:d1:a5:64:20:a7:11:3e:4e:39:57:71:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1CADDF6DC2750F6D5D18A7F1425AE13486385F Validity Not Before: Dec 5 11:47:09 2025 GMT Not After : Dec 6 15:37:09 2025 GMT Subject: CN=BE88A5B0EB2805726BF74FD0F0E622A3C5550551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:92:2c:b5:fc:f4:77:b3:a4:9e:56:63:c2:52: f8:c1:cc:4e:5e:a4:7d:13:77:2b:84:56:66:6b:a5: 92:f1:57:56:71:f0:d9:a4:99:d5:07:93:24:4d:d3: bf:77:27:7f:fb:65:aa:99:12:e2:04:d8:bd:48:42: dd:d5:c3:85:50:b5:92:4c:27:92:95:a9:7b:f2:84: 83:b4:f8:b2:b1:eb:5f:b7:5a:65:03:ec:f9:bf:74: 85:fb:5b:01:0b:c5:81:62:05:8f:b8:11:c9:b0:06: ec:04:71:9a:f0:7b:06:f9:d2:9a:18:91:69:1b:2f: de:16:27:ed:b9:f5:5d:6b:5f:d7:9c:ac:11:b9:bd: 8e:7c:eb:38:43:55:fb:50:17:63:20:2a:0d:1e:c3: 18:ec:2c:8e:c2:0c:99:c1:1e:0d:86:94:28:3e:7e: aa:96:a1:5c:f7:05:81:4d:a0:4b:33:e0:95:6d:54: 01:bd:61:b0:34:37:74:12:7c:60:58:ef:4e:3e:6c: b2:c2:ff:b6:d7:c4:e3:94:1c:0f:24:17:b1:1a:a3: 98:25:64:67:da:f6:cc:84:a4:65:e5:c4:1f:b1:94: 9a:b1:af:2e:a0:38:12:2f:8d:29:0f:31:d4:51:7f: e3:e4:db:8a:91:65:03:d6:6d:bc:b9:bc:aa:c2:0e: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:A5:B0:EB:28:05:72:6B:F7:4F:D0:F0:E6:22:A3:C5:55:05:51 X509v3 Authority Key Identifier: keyid:CA:1C:AD:DF:6D:C2:75:0F:6D:5D:18:A7:F1:42:5A:E1:34:86:38:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/CA1CADDF6DC2750F6D5D18A7F1425AE13486385F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cf:a9:55:a7:b4:79:cf:a3:50:ac:cc:12:64:0c:8b:d2:ca: d3:4c:09:d7:ed:36:ec:b7:4f:d5:d7:b5:4e:11:49:9b:08:97: 8a:5f:6d:a9:a6:f5:62:d8:3d:dd:4f:92:5b:8a:76:1a:be:d2: d0:9d:dc:cb:a7:42:27:76:8a:37:2f:bf:3d:6c:af:04:c1:50: e2:4c:f8:8e:28:19:3f:09:fe:1c:2b:42:d0:b4:52:53:23:04: 4b:e3:2f:6b:45:e0:4c:ff:55:11:95:18:57:ff:45:71:30:9c: dc:61:e0:76:7b:ed:f9:1f:5c:5f:9a:1f:23:40:13:4c:bd:3e: 94:c4:15:d8:3c:44:97:90:77:eb:0f:87:63:4a:bf:b6:b7:48: 94:e0:e0:b0:a2:f2:8b:ba:17:42:bc:54:fb:52:35:58:07:02: 34:6e:b8:d4:53:b0:c2:de:33:72:ca:c9:a2:c2:88:e6:ae:d8: 6e:6c:7b:59:b7:01:c1:d5:7e:1e:9f:29:22:19:26:ab:10:f6: b3:bb:c3:75:c8:ac:4a:ff:43:61:d3:37:3a:1a:09:3c:9d:ea: 76:1b:27:94:36:8f:5f:93:a3:0c:68:35:2c:16:1f:89:fa:32: ca:be:e7:d4:f5:18:53:97:e9:b4:d9:93:b4:e4:2c:4b:d5:e2: 49:7a:f4:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMsopW5T7mJnRpWQgpxE+TjlXcSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQ0FEREY2REMyNzUwRjZENUQxOEE3RjE0MjVBRTEz NDg2Mzg1RjAeFw0yNTEyMDUxMTQ3MDlaFw0yNTEyMDYxNTM3MDlaMDMxMTAvBgNV BAMTKEJFODhBNUIwRUIyODA1NzI2QkY3NEZEMEYwRTYyMkEzQzU1NTA1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmkiy1/PR3s6SeVmPCUvjBzE5e pH0TdyuEVmZrpZLxV1Zx8NmkmdUHkyRN0793J3/7ZaqZEuIE2L1IQt3Vw4VQtZJM J5KVqXvyhIO0+LKx61+3WmUD7Pm/dIX7WwELxYFiBY+4EcmwBuwEcZrwewb50poY kWkbL94WJ+259V1rX9ecrBG5vY586zhDVftQF2MgKg0ewxjsLI7CDJnBHg2GlCg+ fqqWoVz3BYFNoEsz4JVtVAG9YbA0N3QSfGBY704+bLLC/7bXxOOUHA8kF7Eao5gl ZGfa9syEpGXlxB+xlJqxry6gOBIvjSkPMdRRf+Pk24qRZQPWbby5vKrCDhFnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvoilsOsoBXJr90/Q8OYio8VVBVEwHwYDVR0j BBgwFoAUyhyt323CdQ9tXRin8UJa4TSGOF8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFn aW8vMC9DQTFDQURERjZEQzI3NTBGNkQ1RDE4QTdGMTQyNUFFMTM0ODYzODVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUNBRERGNkRDMjc1MEY2 RDVEMThBN0YxNDI1QUUxMzQ4NjM4NUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTl2c1BraGc4elB0VmJaVEtZM1NpckJTd0VGZ3F1czlNdmFNWFpGNFFnaW8vMC9D QTFDQURERjZEQzI3NTBGNkQ1RDE4QTdGMTQyNUFFMTM0ODYzODVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlM+pVae0ec+jUKzMEmQMi9LK00wJ1+027LdP1de1ThFJmwiXil9tqab1Ytg9 3U+SW4p2Gr7S0J3cy6dCJ3aKNy+/PWyvBMFQ4kz4jigZPwn+HCtC0LRSUyMES+Mv a0XgTP9VEZUYV/9FcTCc3GHgdnvt+R9cX5ofI0ATTL0+lMQV2DxEl5B36w+HY0q/ trdIlODgsKLyi7oXQrxU+1I1WAcCNG641FOwwt4zcsrJosKI5q7Ybmx7WbcBwdV+ Hp8pIhkmqxD2s7vDdcisSv9DYdM3OhoJPJ3qdhsnlDaPX5OjDGg1LBYfifoyyr7n 1PUYU5fptNmTtOQsS9XiSXr0Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:08:53 2025 by rpki-client