This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft File: 5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft (raw, json) Hash identifier: m/xj/fHoSOyGxSrdsNckvZHlYzJVpAnOtxazo8u14bk= Subject key identifier: 5D:E4:8A:4F:C4:17:42:87:6E:68:51:62:C0:71:25:60:BB:0E:68:C4 Authority key identifier: 5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E Certificate issuer: /CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E Certificate serial: 280B73279AD7C700FA32E3C7B3ED221735428059 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer Subject info access: rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft Manifest number: 27 Signing time: Fri 05 Dec 2025 21:17:43 +0000 Manifest this update: Fri 05 Dec 2025 21:12:43 +0000 Manifest next update: Sat 06 Dec 2025 21:48:43 +0000 Files and hashes: 1: 5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl (hash: wPnrn+LIUfX4kIcsGGaUcWpwW3bGfc+ltN5IzdjG1HU=) 2: 323830343a353863383a3a2f33322d313238203d3e20323638313439.roa (hash: FfX++mMThMyA5Phf+j3yBrq+Yb9+v6+7rFQbrQ23iVY=) 3: 34352e3137302e39322e302f32322d3332203d3e20323638313439.roa (hash: ABcV00bsmj4p/EAXwK9p2+WcufB6flOhojnHHzFZ/Ic=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0b:73:27:9a:d7:c7:00:fa:32:e3:c7:b3:ed:22:17:35:42:80:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E Validity Not Before: Dec 5 21:12:43 2025 GMT Not After : Dec 6 21:48:43 2025 GMT Subject: CN=5DE48A4FC41742876E685162C0712560BB0E68C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:67:b4:41:a2:d4:f5:75:27:f7:55:e6:97: bd:19:4a:30:a4:9d:37:9c:22:ad:0f:82:0b:22:36: 32:ab:bb:be:6c:b5:13:fe:7d:1d:7a:59:57:44:b2: fe:fa:bd:9a:a8:78:6f:f0:d1:75:79:7e:3f:5b:b4: 90:d8:31:8e:6e:35:16:0d:de:fc:1b:16:67:5b:c8: 57:4c:78:2b:e2:b8:cb:47:0f:9e:5a:6e:f8:74:f5: cc:6b:ab:9a:6b:32:f3:22:ec:38:a9:e6:04:46:b2: 0a:3c:3a:b9:70:2a:1e:cc:4b:60:c3:3b:55:3d:7e: bb:d1:3f:df:51:35:41:20:81:e1:a5:79:a6:b6:30: 10:d1:e6:10:f3:28:db:6f:0d:b1:38:5f:36:d7:ba: f5:2d:b8:1a:57:75:ab:c3:30:5e:a6:0a:1d:80:84: bb:60:5b:25:27:57:30:27:6d:36:fe:bd:ae:6d:72: 93:c0:15:1b:1e:97:ae:99:2c:8b:19:4f:57:9e:8c: 72:48:16:05:6b:3c:7e:ca:61:f9:c2:bb:b7:07:fe: 2f:85:39:87:2e:7d:ae:7d:27:f8:7a:6e:07:e2:a5: 04:f5:ba:ed:75:94:5e:39:8e:0f:9d:df:38:36:6b: 17:e9:64:8a:05:a4:5b:52:2a:f3:ba:51:08:ff:64: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:8A:4F:C4:17:42:87:6E:68:51:62:C0:71:25:60:BB:0E:68:C4 X509v3 Authority Key Identifier: keyid:5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e3:bc:45:b3:bc:60:4f:60:de:c1:8b:f9:ee:a5:6c:33:9c: 04:8a:c1:80:54:ae:c8:2b:b4:2b:12:0a:fb:30:f3:7a:e6:19: db:82:f4:dd:00:ee:26:07:98:85:84:f6:62:38:f6:a0:25:05: c2:1e:a1:52:80:e9:73:d2:d9:27:8f:06:db:8e:24:6b:e0:f5: fc:d1:ec:e4:c0:aa:0e:fb:e2:1b:97:73:d7:ee:0c:e4:87:69: 1f:c5:bc:12:91:bb:70:81:ae:b1:29:6d:fa:dd:79:71:59:24: c3:62:43:f0:a6:52:75:20:8c:61:3d:a7:f9:ab:8b:8a:64:d9: 8c:4c:64:c9:a6:b6:30:15:de:f3:7a:0e:22:23:7a:eb:cd:61: cf:3f:10:1d:85:6d:5d:55:38:6b:6f:80:42:b7:f8:26:81:3b: 58:06:a1:71:c4:fc:ad:cf:2d:0f:d7:93:1d:9e:7c:d1:f7:e1: 3f:54:f2:d0:12:bc:13:32:5c:df:4e:7f:1a:92:d2:1a:cb:cc: 7a:ff:f4:22:f9:0a:16:9f:a5:4a:88:c7:d3:6d:c5:e5:c0:75: 63:cb:5b:82:e3:11:50:d7:2f:f7:14:fc:90:b3:ae:c8:76:60: 64:4f:7a:f3:c6:56:25:31:6f:80:1b:67:9c:51:ca:0d:c6:56: 7f:3e:9a:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKAtzJ5rXxwD6MuPHs+0iFzVCgFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBOUMwMUY1MzQxQzdEQkVDNEExQTA5QkEwQjJDMTc2 ODYxMzk4RTAeFw0yNTEyMDUyMTEyNDNaFw0yNTEyMDYyMTQ4NDNaMDMxMTAvBgNV BAMTKDVERTQ4QTRGQzQxNzQyODc2RTY4NTE2MkMwNzEyNTYwQkIwRTY4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Sme0QaLU9XUn91Xml70ZSjCk nTecIq0PggsiNjKru75stRP+fR16WVdEsv76vZqoeG/w0XV5fj9btJDYMY5uNRYN 3vwbFmdbyFdMeCviuMtHD55abvh09cxrq5prMvMi7Dip5gRGsgo8OrlwKh7MS2DD O1U9frvRP99RNUEggeGleaa2MBDR5hDzKNtvDbE4XzbXuvUtuBpXdavDMF6mCh2A hLtgWyUnVzAnbTb+va5tcpPAFRsel66ZLIsZT1eejHJIFgVrPH7KYfnCu7cH/i+F OYcufa59J/h6bgfipQT1uu11lF45jg+d3zg2axfpZIoFpFtSKvO6UQj/ZJKrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXeSKT8QXQoduaFFiwHElYLsOaMQwHwYDVR0j BBgwFoAUX6nAH1NBx9vsShoJugssF2hhOY4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNllYTDN3eWp1d3J0ZnNGM3I4cmVMRlE1S25iZUF5R2hrdUs1Z2hLSmlD UWQvMC81RkE5QzAxRjUzNDFDN0RCRUM0QTFBMDlCQTBCMkMxNzY4NjEzOThFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGQTlDMDFGNTM0MUM3REJF QzRBMUEwOUJBMEIyQzE3Njg2MTM5OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NllYTDN3eWp1d3J0ZnNGM3I4cmVMRlE1S25iZUF5R2hrdUs1Z2hLSmlDUWQvMC81 RkE5QzAxRjUzNDFDN0RCRUM0QTFBMDlCQTBCMkMxNzY4NjEzOThFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmOO8RbO8YE9g3sGL+e6lbDOcBIrBgFSuyCu0KxIK+zDzeuYZ24L03QDuJgeY hYT2Yjj2oCUFwh6hUoDpc9LZJ48G244ka+D1/NHs5MCqDvviG5dz1+4M5IdpH8W8 EpG7cIGusSlt+t15cVkkw2JD8KZSdSCMYT2n+auLimTZjExkyaa2MBXe83oOIiN6 681hzz8QHYVtXVU4a2+AQrf4JoE7WAahccT8rc8tD9eTHZ580ffhP1Ty0BK8EzJc 305/GpLSGsvMev/0IvkKFp+lSojH023F5cB1Y8tbguMRUNcv9xT8kLOuyHZgZE96 88ZWJTFvgBtnnFHKDcZWfz6a2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:14 2025 by rpki-client