This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft File: 85338CFAF888C0350AE9CB844AEBC476C4367656.mft (raw, json) Hash identifier: gV6YD1W5sXGvmYC9C51REqr/hogZ7sKeoaB+XG1ZYBI= Subject key identifier: 20:CA:9A:DF:05:35:F5:D2:FD:EA:DA:FE:10:06:AB:04:BC:DB:CE:AD Authority key identifier: 85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 Certificate issuer: /CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Certificate serial: 763EEF8A4FE73F2F25D84CC404B52BDDD8679A90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject info access: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft Manifest number: 029D Signing time: Fri 05 Dec 2025 19:21:04 +0000 Manifest this update: Fri 05 Dec 2025 19:16:04 +0000 Manifest next update: Sat 06 Dec 2025 23:14:04 +0000 Files and hashes: 1: 34352e3137382e3230342e302f32322d3234203d3e20323639303536.roa (hash: 4MTe5q9v1+RODyYpXAl+hTOa6qdVAoueHQymY2Pvcuo=) 2: 85338CFAF888C0350AE9CB844AEBC476C4367656.crl (hash: DchYrS4lTngKVOjahnm5HGwAKxKNfz0XTkEeyR3ChS4=) 3: 323830343a356563383a3a2f33322d3438203d3e20323639303536.roa (hash: iVzGwIcktrLJfi4MMxN4YYOLT8qF41PrYjqdCiMjJL8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3e:ef:8a:4f:e7:3f:2f:25:d8:4c:c4:04:b5:2b:dd:d8:67:9a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85338CFAF888C0350AE9CB844AEBC476C4367656 Validity Not Before: Dec 5 19:16:04 2025 GMT Not After : Dec 6 23:14:04 2025 GMT Subject: CN=20CA9ADF0535F5D2FDEADAFE1006AB04BCDBCEAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:b3:80:43:a1:4d:ad:d0:06:52:c9:6d:72: f4:3c:60:ad:a8:3c:70:20:80:c4:d9:d4:ea:ca:22: 8a:f2:52:5b:d5:75:5e:72:b9:6e:1d:f3:2b:0a:95: f4:59:06:49:47:cf:dc:52:8a:ca:c0:04:7c:a0:23: a8:ca:62:1f:52:55:fe:40:67:6a:cb:df:17:41:7b: 5c:ef:48:3f:ae:00:cf:e8:77:77:0f:cb:74:44:63: 22:f6:13:72:af:71:56:23:ef:b3:b1:95:d5:04:9b: d5:d9:62:a7:c8:83:0d:ee:26:99:46:28:f7:bf:f3: cf:57:b1:d5:f5:a7:ef:d3:54:c1:33:1e:d7:bb:e8: f4:02:06:b5:31:8a:f3:8e:63:9d:5e:cf:3c:b4:1f: 75:a8:c1:17:b2:73:be:f9:a1:cf:6d:4e:3f:ed:cd: ea:69:f7:2e:03:42:16:33:17:f2:9f:60:d4:10:b6: ab:23:c1:d5:f4:8b:d0:e5:36:f8:6e:72:ba:66:58: 1b:01:84:b5:ea:d8:e8:22:59:cf:60:8a:7c:18:ed: 67:c2:a4:de:35:63:0b:51:79:fd:56:75:a1:68:38: d1:b6:f6:1a:56:37:08:18:06:3a:4d:85:a3:6d:70: 9d:db:45:20:67:9a:5d:f9:83:ab:20:62:93:9c:30: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CA:9A:DF:05:35:F5:D2:FD:EA:DA:FE:10:06:AB:04:BC:DB:CE:AD X509v3 Authority Key Identifier: keyid:85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:71:b3:c4:66:04:df:7d:b4:f8:fa:c0:aa:5d:25:b9:54:11: 86:a3:a3:bc:54:b8:3d:79:6b:ac:c1:0e:24:3f:cd:f6:96:3b: 69:a8:4e:ec:13:33:1e:9b:01:e6:ca:16:1e:19:a6:ee:82:95: a1:2f:90:0c:11:67:0e:30:28:a3:99:10:99:24:dc:0f:1c:eb: c2:67:51:10:6c:80:43:a2:0b:19:54:6d:e3:19:c6:f6:0b:21: f3:76:dd:69:19:03:49:23:46:79:3b:6c:5c:eb:0f:1d:0b:20: ff:d4:69:97:1d:a6:2e:fe:ae:f0:44:ea:20:28:7a:9d:f0:69: 76:88:d6:6a:c7:c9:8d:ae:00:8c:6e:e9:e6:9b:83:af:50:1a: 1f:65:75:ad:34:e5:66:44:e8:e0:e8:87:63:af:0a:33:b0:d4: 08:fc:07:cb:2e:1d:b3:53:9f:e6:40:b9:72:c3:1b:2d:82:cf: 35:36:14:f3:72:4b:8b:22:72:7d:81:a1:50:af:0e:dd:9b:81: bc:a9:1b:12:5a:6e:d7:d3:3e:67:c9:fd:b0:1f:2d:a4:b2:2e: c5:6f:5c:57:77:1b:37:f9:9c:5f:96:4a:e9:0e:3d:8f:cc:0f: 8a:32:af:a3:eb:08:6c:e1:54:a3:68:40:bd:c6:b3:d1:d5:7c: d7:7f:cb:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdj7vik/nPy8l2EzEBLUr3dhnmpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzMzhDRkFGODg4QzAzNTBBRTlDQjg0NEFFQkM0NzZD NDM2NzY1NjAeFw0yNTEyMDUxOTE2MDRaFw0yNTEyMDYyMzE0MDRaMDMxMTAvBgNV BAMTKDIwQ0E5QURGMDUzNUY1RDJGREVBREFGRTEwMDZBQjA0QkNEQkNFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvbOAQ6FNrdAGUsltcvQ8YK2o PHAggMTZ1OrKIoryUlvVdV5yuW4d8ysKlfRZBklHz9xSisrABHygI6jKYh9SVf5A Z2rL3xdBe1zvSD+uAM/od3cPy3REYyL2E3KvcVYj77OxldUEm9XZYqfIgw3uJplG KPe/889XsdX1p+/TVMEzHte76PQCBrUxivOOY51ezzy0H3WowReyc775oc9tTj/t zepp9y4DQhYzF/KfYNQQtqsjwdX0i9DlNvhucrpmWBsBhLXq2OgiWc9ginwY7WfC pN41YwtRef1WdaFoONG29hpWNwgYBjpNhaNtcJ3bRSBnml35g6sgYpOcMOGfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIMqa3wU19dL96tr+EAarBLzbzq0wHwYDVR0j BBgwFoAUhTOM+viIwDUK6cuESuvEdsQ2dlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZCWjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThM Q2EvMC84NTMzOENGQUY4ODhDMDM1MEFFOUNCODQ0QUVCQzQ3NkM0MzY3NjU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MzM4Q0ZBRjg4OEMwMzUw QUU5Q0I4NDRBRUJDNDc2QzQzNjc2NTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZCWjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThMQ2EvMC84 NTMzOENGQUY4ODhDMDM1MEFFOUNCODQ0QUVCQzQ3NkM0MzY3NjU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3GzxGYE3320+PrAql0luVQRhqOjvFS4PXlrrMEOJD/N9pY7aahO7BMzHpsB 5soWHhmm7oKVoS+QDBFnDjAoo5kQmSTcDxzrwmdREGyAQ6ILGVRt4xnG9gsh83bd aRkDSSNGeTtsXOsPHQsg/9Rplx2mLv6u8ETqICh6nfBpdojWasfJja4AjG7p5puD r1AaH2V1rTTlZkTo4OiHY68KM7DUCPwHyy4ds1Of5kC5csMbLYLPNTYU83JLiyJy fYGhUK8O3ZuBvKkbElpu19M+Z8n9sB8tpLIuxW9cV3cbN/mcX5ZK6Q49j8wPijKv o+sIbOFUo2hAvcaz0dV813/Lmg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:55 2025 by rpki-client