This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft File: C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft (raw, json) Hash identifier: E8jlV8qXfrIFE/8wKb51dPwmAZKzr6rbr0oZxH2W5l4= Subject key identifier: E3:E4:EB:C0:19:0C:B5:1D:D0:41:22:C9:B2:A0:A5:95:99:E7:B2:54 Authority key identifier: C0:9F:2D:D1:47:DF:1D:28:EA:F5:BF:6B:3D:2C:49:0F:19:AC:6C:42 Certificate issuer: /CN=C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42 Certificate serial: 59BD77E2518B44CDB05C2C73C63711EB9FFF0945 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer Subject info access: rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft Manifest number: 4B Signing time: Sat 06 Dec 2025 14:28:53 +0000 Manifest this update: Sat 06 Dec 2025 14:23:53 +0000 Manifest next update: Sun 07 Dec 2025 15:57:53 +0000 Files and hashes: 1: C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.crl (hash: pK3SRsdoONqiDj5w/78knGXGbJJ6OFmA3/o0Zf0bqHE=) 2: 34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa (hash: AEGM1btJ9oq1wJOsi8BZ246qlaThIyli1mD7QA2qWBw=) 3: 323830343a353563383a3a2f33322d3438203d3e20323637393536.roa (hash: gaZhmmhZNsbUCPBR6PnB1XQmG3lBGl8vM/9e3MVZ3mY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.crl rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bd:77:e2:51:8b:44:cd:b0:5c:2c:73:c6:37:11:eb:9f:ff:09:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42 Validity Not Before: Dec 6 14:23:53 2025 GMT Not After : Dec 7 15:57:53 2025 GMT Subject: CN=E3E4EBC0190CB51DD04122C9B2A0A59599E7B254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:f9:4c:64:76:8a:93:07:a7:8b:2f:a4:e9: f9:68:0a:3e:c7:19:1c:25:53:02:3d:88:0b:5f:1a: af:15:db:56:44:e4:f4:5e:75:8b:86:39:4e:6f:68: 94:d2:d5:aa:19:2b:99:fe:7d:dc:c3:b3:df:53:80: b4:43:71:d6:ac:95:aa:4f:b9:ed:17:50:4b:d8:a9: 04:54:08:a2:50:dd:bc:63:9d:ec:a5:26:fe:eb:eb: 9f:a8:92:c5:a7:a7:e8:df:aa:2a:f5:bf:a0:44:97: 1b:3e:e4:4d:84:52:8b:24:cd:74:dc:07:ab:ff:de: e0:f4:de:e4:0b:27:18:bb:2e:5a:00:13:15:0f:59: 07:dd:10:41:5e:36:02:50:21:0d:4d:d2:b7:d6:9b: cc:90:be:4b:5f:51:cd:99:42:fe:25:23:a4:3b:8c: de:67:46:b2:5f:16:98:a6:14:2e:23:8d:6d:86:ec: eb:50:40:7c:96:32:f9:ad:9c:14:18:2a:2e:a0:01: a6:b7:f2:03:dd:f8:7c:c2:0d:c6:c2:97:bc:61:7a: 5d:46:dc:4f:33:fb:cb:fc:fd:23:ed:f6:2c:22:90: a2:33:25:6c:43:1f:56:39:df:e9:a0:ef:1d:f2:d6: e6:13:d0:d8:4c:cc:bc:df:2c:3b:be:09:80:97:26: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:EB:C0:19:0C:B5:1D:D0:41:22:C9:B2:A0:A5:95:99:E7:B2:54 X509v3 Authority Key Identifier: keyid:C0:9F:2D:D1:47:DF:1D:28:EA:F5:BF:6B:3D:2C:49:0F:19:AC:6C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/C09F2DD147DF1D28EAF5BF6B3D2C490F19AC6C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e2:84:8e:ca:79:35:7e:6b:8b:99:41:ae:02:dc:cc:e1:bb: cc:44:38:75:f1:30:15:e7:06:19:e9:a3:76:af:5f:6f:a7:5e: a3:95:d3:f7:c9:83:d1:fc:e9:74:c7:90:e1:df:34:81:b1:fb: f7:4f:3d:df:fb:f1:ff:4c:ba:a6:cd:50:f5:9b:0e:88:da:88: e3:12:9b:43:2f:98:ab:1e:3f:0d:de:b9:46:13:6b:c7:6c:3d: b5:00:c6:7b:54:40:61:28:d1:85:a3:c7:b7:41:21:da:ac:6f: 11:87:27:0a:ba:2b:ac:91:d0:fa:6d:18:86:b2:26:a8:55:8a: af:fc:4a:9b:ed:52:9e:91:6f:31:3f:9a:e6:83:9f:d3:ee:35: b5:fb:6b:ee:e8:97:71:d4:d0:57:6c:ca:66:01:60:da:64:d1: a7:7e:0d:de:13:87:fc:ed:b1:60:b2:c0:38:87:f6:03:e2:10: b5:a0:bf:e1:8c:a1:85:ff:f4:d9:4a:4b:ab:dd:ca:c2:49:15: f7:56:77:4d:4c:c0:a8:30:2c:f3:2d:72:4a:97:e0:e2:cd:74: 39:02:5c:b2:1f:a1:dd:f3:26:48:84:5e:8b:9c:85:50:c8:ef: de:8a:57:d7:29:5d:c7:45:47:65:2b:50:db:9d:b9:e1:47:08: 22:3c:1c:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWb134lGLRM2wXCxzxjcR65//CUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA5RjJERDE0N0RGMUQyOEVBRjVCRjZCM0QyQzQ5MEYx OUFDNkM0MjAeFw0yNTEyMDYxNDIzNTNaFw0yNTEyMDcxNTU3NTNaMDMxMTAvBgNV BAMTKEUzRTRFQkMwMTkwQ0I1MUREMDQxMjJDOUIyQTBBNTk1OTlFN0IyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfvlMZHaKkweniy+k6floCj7H GRwlUwI9iAtfGq8V21ZE5PRedYuGOU5vaJTS1aoZK5n+fdzDs99TgLRDcdaslapP ue0XUEvYqQRUCKJQ3bxjneylJv7r65+oksWnp+jfqir1v6BElxs+5E2EUoskzXTc B6v/3uD03uQLJxi7LloAExUPWQfdEEFeNgJQIQ1N0rfWm8yQvktfUc2ZQv4lI6Q7 jN5nRrJfFpimFC4jjW2G7OtQQHyWMvmtnBQYKi6gAaa38gPd+HzCDcbCl7xhel1G 3E8z+8v8/SPt9iwikKIzJWxDH1Y53+mg7x3y1uYT0NhMzLzfLDu+CYCXJrLlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4+TrwBkMtR3QQSLJsqCllZnnslQwHwYDVR0j BBgwFoAUwJ8t0UffHSjq9b9rPSxJDxmsbEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2o0M0VyTGNXMnpScUc0Mnp3Q2ZNM2ZFWFZ2MWRjOGJvU3FjakptOG5z VXIvMC9DMDlGMkREMTQ3REYxRDI4RUFGNUJGNkIzRDJDNDkwRjE5QUM2QzQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwOUYyREQxNDdERjFEMjhF QUY1QkY2QjNEMkM0OTBGMTlBQzZDNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2o0M0VyTGNXMnpScUc0Mnp3Q2ZNM2ZFWFZ2MWRjOGJvU3FjakptOG5zVXIvMC9D MDlGMkREMTQ3REYxRDI4RUFGNUJGNkIzRDJDNDkwRjE5QUM2QzQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATeKEjsp5NX5ri5lBrgLczOG7zEQ4dfEwFecGGemjdq9fb6deo5XT98mD0fzp dMeQ4d80gbH790893/vx/0y6ps1Q9ZsOiNqI4xKbQy+Yqx4/Dd65RhNrx2w9tQDG e1RAYSjRhaPHt0Eh2qxvEYcnCrorrJHQ+m0YhrImqFWKr/xKm+1SnpFvMT+a5oOf 0+41tftr7uiXcdTQV2zKZgFg2mTRp34N3hOH/O2xYLLAOIf2A+IQtaC/4Yyhhf/0 2UpLq93KwkkV91Z3TUzAqDAs8y1ySpfg4s10OQJcsh+h3fMmSIRei5yFUMjv3opX 1yldx0VHZStQ25254UcIIjwcoQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:14 2025 by rpki-client