This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft File: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft (raw, json) Hash identifier: tlp6XzKEBI0/QrjRPaYlRRQ9GHEDeO1BWkZ63tzxuUo= Subject key identifier: CA:45:EB:73:53:C9:BF:2F:4F:7E:6B:4B:9E:C5:9A:48:86:96:FC:D8 Authority key identifier: 23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE Certificate issuer: /CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Certificate serial: 6E2300779DBB963C743AB88CB56A334D2DAA0F8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft Manifest number: 0234 Signing time: Fri 05 Dec 2025 18:42:31 +0000 Manifest this update: Fri 05 Dec 2025 18:37:31 +0000 Manifest next update: Sat 06 Dec 2025 19:52:31 +0000 Files and hashes: 1: 34352e3136312e36382e302f32322d3332203d3e20323638343535.roa (hash: YoRm/nqF+KNC/n4V5g6jY+UwAJaamAkico+WD/f/zN4=) 2: 23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl (hash: cpGzOzMOTILxo97m3yRbNRLxlB+BzeT5REQdZfnwMfo=) 3: 323830343a353137633a3a2f33322d313238203d3e20323638343535.roa (hash: vBU2F9kKN1eXg5kBSHXhOTuAjDtWXxjuNBA8ByfvWro=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 19:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:23:00:77:9d:bb:96:3c:74:3a:b8:8c:b5:6a:33:4d:2d:aa:0f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23E1660AB480C1C9D30F7928A7AD5C7039C132FE Validity Not Before: Dec 5 18:37:31 2025 GMT Not After : Dec 6 19:52:31 2025 GMT Subject: CN=CA45EB7353C9BF2F4F7E6B4B9EC59A488696FCD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:98:39:56:7c:55:79:9a:88:99:19:7d:52: 04:b8:e3:d8:e8:2e:a0:5b:74:cf:21:d9:5a:c5:d0: 71:7d:c5:e7:77:d8:37:51:ab:89:68:55:14:e3:bc: fc:6e:71:ba:e6:24:df:71:3b:82:bd:04:e7:52:aa: 13:2c:0b:56:b2:89:08:69:70:e7:ff:88:b7:7f:80: f0:8d:f1:31:bd:40:5d:df:33:fd:ec:d2:0a:8e:f7: 0b:8e:ca:42:fe:b1:48:db:3b:0d:33:2b:48:fa:dd: 2e:b6:45:67:67:47:1a:51:bd:bd:32:a6:be:01:30: 0f:f3:7a:ea:d3:05:3e:ee:0d:05:1c:57:d1:c8:5a: 3a:5e:56:a7:d6:19:b4:49:c7:b5:f7:34:55:29:b4: 82:65:f6:f3:dc:8f:b8:aa:ad:4f:9b:79:a5:81:ed: 27:97:5a:21:02:fb:1d:de:4d:97:c8:4c:ca:53:41: 1a:56:2e:38:f0:5f:0b:8b:5e:15:b5:cf:d6:46:6e: 1b:f8:ba:8b:3c:73:18:d2:5f:0f:ef:02:41:c2:53: 3f:07:15:90:69:99:36:0c:14:09:25:6a:b2:36:89: 20:50:50:35:1d:b3:05:c5:02:e8:a0:bc:de:a1:4c: 68:07:68:8f:0d:59:1f:cf:87:ef:9f:37:c5:4d:db: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:45:EB:73:53:C9:BF:2F:4F:7E:6B:4B:9E:C5:9A:48:86:96:FC:D8 X509v3 Authority Key Identifier: keyid:23:E1:66:0A:B4:80:C1:C9:D3:0F:79:28:A7:AD:5C:70:39:C1:32:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QJZniUTJk2PdNjPod8UatppZhK37DjCKvtpcjJDGpwL/0/23E1660AB480C1C9D30F7928A7AD5C7039C132FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:40:f9:b8:89:67:d7:0c:04:9f:fb:99:b5:2c:b6:ee:27:31: c3:fa:23:3e:7e:f8:d7:aa:8e:41:5f:51:96:3f:32:4a:f4:47: 9b:30:f8:50:c4:86:7d:87:e3:7b:d0:6a:1d:7d:5b:f0:43:88: c9:43:6d:32:6f:6e:ee:4a:00:a2:61:b9:35:ef:d7:b9:ab:d0: a5:dc:fe:5d:04:a8:d6:7f:2b:10:dd:00:0a:93:de:26:4e:e7: b0:a3:05:fa:54:08:bb:48:cc:19:d3:88:fd:06:24:d4:f5:df: 2b:4f:4b:ae:c0:e3:fc:cf:a3:a0:7b:9d:7a:3b:6e:28:58:71: 47:82:fb:80:54:97:8e:73:cd:75:eb:ef:71:32:db:b1:2f:49: 18:c1:93:d0:fe:b5:93:da:76:2d:a1:b4:54:a4:eb:88:30:a9: c9:45:8c:0d:e9:90:80:83:16:fc:58:59:8d:da:eb:49:82:df: c1:04:91:79:c0:bc:58:04:6b:38:a9:74:56:ba:5d:c5:ba:f6: 0e:31:8c:4c:fc:cf:81:7c:64:98:0a:ea:98:61:c0:0f:b3:88: 36:48:f6:7f:3d:e7:c0:42:1a:0c:de:9e:99:e2:dd:c4:c8:c1: 16:73:86:95:61:b7:d1:c5:87:f0:95:5d:96:4b:24:22:46:d4: 06:43:85:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbiMAd527ljx0OriMtWozTS2qD48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFMTY2MEFCNDgwQzFDOUQzMEY3OTI4QTdBRDVDNzAz OUMxMzJGRTAeFw0yNTEyMDUxODM3MzFaFw0yNTEyMDYxOTUyMzFaMDMxMTAvBgNV BAMTKENBNDVFQjczNTNDOUJGMkY0RjdFNkI0QjlFQzU5QTQ4ODY5NkZDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9Zg5VnxVeZqImRl9UgS449jo LqBbdM8h2VrF0HF9xed32DdRq4loVRTjvPxucbrmJN9xO4K9BOdSqhMsC1ayiQhp cOf/iLd/gPCN8TG9QF3fM/3s0gqO9wuOykL+sUjbOw0zK0j63S62RWdnRxpRvb0y pr4BMA/zeurTBT7uDQUcV9HIWjpeVqfWGbRJx7X3NFUptIJl9vPcj7iqrU+beaWB 7SeXWiEC+x3eTZfITMpTQRpWLjjwXwuLXhW1z9ZGbhv4uos8cxjSXw/vAkHCUz8H FZBpmTYMFAklarI2iSBQUDUdswXFAuigvN6hTGgHaI8NWR/Ph++fN8VN25D7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUykXrc1PJvy9PfmtLnsWaSIaW/NgwHwYDVR0j BBgwFoAUI+FmCrSAwcnTD3kop61ccDnBMv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdw d0wvMC8yM0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzRTE2NjBBQjQ4MEMxQzlE MzBGNzkyOEE3QUQ1QzcwMzlDMTMyRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlFKWm5pVVRKazJQZE5qUG9kOFVhdHBwWmhLMzdEakNLdnRwY2pKREdwd0wvMC8y M0UxNjYwQUI0ODBDMUM5RDMwRjc5MjhBN0FENUM3MDM5QzEzMkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALkD5uIln1wwEn/uZtSy27icxw/ojPn7416qOQV9Rlj8ySvRHmzD4UMSGfYfj e9BqHX1b8EOIyUNtMm9u7koAomG5Ne/XuavQpdz+XQSo1n8rEN0ACpPeJk7nsKMF +lQIu0jMGdOI/QYk1PXfK09LrsDj/M+joHudejtuKFhxR4L7gFSXjnPNdevvcTLb sS9JGMGT0P61k9p2LaG0VKTriDCpyUWMDemQgIMW/FhZjdrrSYLfwQSRecC8WARr OKl0Vrpdxbr2DjGMTPzPgXxkmArqmGHAD7OINkj2fz3nwEIaDN6emeLdxMjBFnOG lWG30cWH8JVdlkskIkbUBkOFdg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:52 2025 by rpki-client