This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft File: A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft (raw, json) Hash identifier: 5iPuQfGl9B3eIdoNx/L4Q3NT0vplwQPJ0EPM2PHrUvU= Subject key identifier: 02:3F:C8:53:07:B3:96:4E:35:D9:E9:6C:FA:7E:AC:01:60:64:9D:24 Authority key identifier: A7:22:11:91:CB:E9:36:AC:12:AB:9D:E8:AB:74:9D:96:6A:1E:D9:9E Certificate issuer: /CN=A7221191CBE936AC12AB9DE8AB749D966A1ED99E Certificate serial: 25115D8B859956F7C392EC0B73F5B3710DA5D58D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft Manifest number: 02AB Signing time: Sat 06 Dec 2025 14:21:04 +0000 Manifest this update: Sat 06 Dec 2025 14:16:04 +0000 Manifest next update: Sun 07 Dec 2025 16:28:04 +0000 Files and hashes: 1: A7221191CBE936AC12AB9DE8AB749D966A1ED99E.crl (hash: YyXJUD5QlynOVZLs1oKRQES1Jn9MdGxeDfFpmzyGQNo=) 2: 323830343a383363383a3a2f33322d3438203d3e20323732323139.roa (hash: cZxipir7eNkLYgspdlsqzrjhDoIRpJNDeOFsbaEV6nQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.crl rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:11:5d:8b:85:99:56:f7:c3:92:ec:0b:73:f5:b3:71:0d:a5:d5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7221191CBE936AC12AB9DE8AB749D966A1ED99E Validity Not Before: Dec 6 14:16:04 2025 GMT Not After : Dec 7 16:28:04 2025 GMT Subject: CN=023FC85307B3964E35D9E96CFA7EAC0160649D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:d1:a6:03:ef:4b:1e:6f:8f:c7:af:e2:9e: b4:1b:d4:f8:8b:f8:0d:b2:30:cb:ed:41:5f:cc:33: 5f:07:6a:f4:09:1d:e0:d5:af:87:c6:13:15:4e:16: 63:78:de:57:21:8c:5d:69:bb:c8:9b:74:0e:3c:f3: 9d:5d:ed:9e:48:8e:d4:bc:ae:3b:01:af:e0:eb:d7: fa:6a:a6:06:d8:a5:47:f2:71:47:d6:d3:3f:2a:8d: 36:d0:d4:51:39:94:53:07:d0:ee:d2:cb:7a:f1:f9: a0:4c:3d:29:74:98:b0:ee:0f:96:82:2b:01:75:9e: e4:a4:ca:2b:57:7b:aa:e8:0b:32:e2:8f:7f:d5:02: 67:51:bc:ab:14:23:ec:96:11:1d:47:f3:73:3d:f4: 18:b7:81:5e:06:6a:03:5f:9a:e7:e3:95:15:dc:1e: 4f:1e:b9:1e:21:1d:0b:37:75:0f:c9:df:ca:6d:ee: 73:3a:74:7d:de:46:c3:a5:51:e5:64:49:fc:47:c6: a9:a7:70:cb:33:54:55:2c:01:7c:f2:8c:78:a4:9c: 5d:19:45:2b:84:0c:9a:01:3c:77:58:60:b0:44:e8: 99:8d:b7:c5:a8:a1:2c:9c:56:88:8e:12:40:d5:61: 2e:50:93:5a:df:74:61:6d:92:3b:1f:9e:c5:33:5d: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3F:C8:53:07:B3:96:4E:35:D9:E9:6C:FA:7E:AC:01:60:64:9D:24 X509v3 Authority Key Identifier: keyid:A7:22:11:91:CB:E9:36:AC:12:AB:9D:E8:AB:74:9D:96:6A:1E:D9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5f:de:d0:be:fc:70:d9:1f:b5:09:e4:80:e7:19:f0:d6:f8: 4d:d2:a7:61:f8:e8:fb:ba:76:48:11:fc:ad:be:ee:7e:86:b3: 49:5f:26:e5:9c:64:a2:4d:d4:b3:cb:e8:0c:2b:ea:f9:31:52: ef:33:e2:0f:02:63:6d:5e:24:71:6b:7f:95:98:9b:06:3b:af: 70:83:7e:66:6a:dd:59:6b:65:dd:c4:c2:4f:a2:ae:13:c8:f4: 69:01:0e:b2:7a:7b:1a:2b:76:09:56:eb:21:5e:89:79:75:61: fb:09:5e:9e:f9:98:12:92:8a:c8:0d:91:17:2d:d4:15:4b:67: f9:b0:2c:02:0f:cd:6a:2b:f8:a8:32:ba:ba:78:74:9a:c4:31: 8c:1e:c5:13:a6:eb:d0:79:d0:e7:0f:7f:ff:82:ec:c7:bb:cb: 3d:78:e8:df:9b:ca:51:7c:b2:a5:21:f1:24:ff:08:cf:f7:65: 7e:b2:e5:4b:6e:e2:26:cb:61:56:6e:bf:26:7f:15:2e:28:53: 64:65:83:a1:c0:7a:ae:e3:33:08:05:b5:58:b0:fa:4f:29:45: 9d:8d:91:b7:48:a0:48:e8:96:58:e3:89:00:13:b9:5a:05:92: 5d:c2:ae:c6:69:36:5b:57:2e:46:31:e1:6e:0e:23:dc:7c:4f: 0e:21:3a:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJRFdi4WZVvfDkuwLc/WzcQ2l1Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcyMjExOTFDQkU5MzZBQzEyQUI5REU4QUI3NDlEOTY2 QTFFRDk5RTAeFw0yNTEyMDYxNDE2MDRaFw0yNTEyMDcxNjI4MDRaMDMxMTAvBgNV BAMTKDAyM0ZDODUzMDdCMzk2NEUzNUQ5RTk2Q0ZBN0VBQzAxNjA2NDlEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42tGmA+9LHm+Px6/inrQb1PiL +A2yMMvtQV/MM18HavQJHeDVr4fGExVOFmN43lchjF1pu8ibdA48851d7Z5IjtS8 rjsBr+Dr1/pqpgbYpUfycUfW0z8qjTbQ1FE5lFMH0O7Sy3rx+aBMPSl0mLDuD5aC KwF1nuSkyitXe6roCzLij3/VAmdRvKsUI+yWER1H83M99Bi3gV4GagNfmufjlRXc Hk8euR4hHQs3dQ/J38pt7nM6dH3eRsOlUeVkSfxHxqmncMszVFUsAXzyjHiknF0Z RSuEDJoBPHdYYLBE6JmNt8WooSycVoiOEkDVYS5Qk1rfdGFtkjsfnsUzXa3NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAj/IUwezlk412els+n6sAWBknSQwHwYDVR0j BBgwFoAUpyIRkcvpNqwSq53oq3Sdlmoe2Z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWM3UUpicXFwMWJNNWU2N3FYZ3d5RHhhekNHOHE1eDl3S3kyYVEzODN4 c2kvMC9BNzIyMTE5MUNCRTkzNkFDMTJBQjlERThBQjc0OUQ5NjZBMUVEOTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3MjIxMTkxQ0JFOTM2QUMx MkFCOURFOEFCNzQ5RDk2NkExRUQ5OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWM3UUpicXFwMWJNNWU2N3FYZ3d5RHhhekNHOHE1eDl3S3kyYVEzODN4c2kvMC9B NzIyMTE5MUNCRTkzNkFDMTJBQjlERThBQjc0OUQ5NjZBMUVEOTlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQF/e0L78cNkftQnkgOcZ8Nb4TdKnYfjo+7p2SBH8rb7ufoazSV8m5Zxkok3U s8voDCvq+TFS7zPiDwJjbV4kcWt/lZibBjuvcIN+ZmrdWWtl3cTCT6KuE8j0aQEO snp7Git2CVbrIV6JeXVh+wlenvmYEpKKyA2RFy3UFUtn+bAsAg/Naiv4qDK6unh0 msQxjB7FE6br0HnQ5w9//4Lsx7vLPXjo35vKUXyypSHxJP8Iz/dlfrLlS27iJsth Vm6/Jn8VLihTZGWDocB6ruMzCAW1WLD6TylFnY2Rt0igSOiWWOOJABO5WgWSXcKu xmk2W1cuRjHhbg4j3HxPDiE6KQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:20 2025 by rpki-client