This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json) Hash identifier: XObcg9qZNOOERRbg7ZZMOrgqVuC6che8tDqBtZ2YhcU= Subject key identifier: 0C:EB:65:91:03:B5:4A:83:1C:65:48:E7:82:E1:DC:BD:E2:F9:14:77 Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Certificate issuer: /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Certificate serial: 35AA443580C6A830F8DD84FC922A4A17EFC6083E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft Manifest number: 03AA Signing time: Thu 18 Dec 2025 06:40:00 +0000 Manifest this update: Thu 18 Dec 2025 06:35:00 +0000 Manifest next update: Fri 19 Dec 2025 06:40:00 +0000 Files and hashes: 1: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=) 2: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=) 3: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: SPBtEmsP3Ju0/5vHQHjtl2McZwrK3habeNlz3pvTJZM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 06:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:aa:44:35:80:c6:a8:30:f8:dd:84:fc:92:2a:4a:17:ef:c6:08:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Validity Not Before: Dec 18 06:35:00 2025 GMT Not After : Dec 19 06:40:00 2025 GMT Subject: CN=3082010A0282010100F501175BD5084B02CC5815145177D0441FDD2AFF6571D937D6D521044802B85892944BBB123222E357C95EB54BFF569C6CFC13E2D8D6F9570C43D213EE6ABE6645FD19CDF6CE3320DCC54C44C7C9D920D70D3DDAA1A90A3C0A7CFC0457052077137DAF392C09CDE0D5F95BE44BAAEDDE2713EDC2D067F7F3EF14B928A60507B9D5D4AB28FA231F1F87433CBADF66E5BC549FF3D26C07445F84BE4ACF2394D84040630443F840CFD6C66F08D587FCC96CB461782252E3FD81C98D6E3C8868E599E568F5EBF28ACC26ED7D5CDA4B1E920731D7C3426DCD0E47B87051FE367317AB36FD1F21ABA5D22B60E2A82511293A42A05CEDC6573845005DB39276A238A64F0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:01:17:5b:d5:08:4b:02:cc:58:15:14:51:77: d0:44:1f:dd:2a:ff:65:71:d9:37:d6:d5:21:04:48: 02:b8:58:92:94:4b:bb:12:32:22:e3:57:c9:5e:b5: 4b:ff:56:9c:6c:fc:13:e2:d8:d6:f9:57:0c:43:d2: 13:ee:6a:be:66:45:fd:19:cd:f6:ce:33:20:dc:c5: 4c:44:c7:c9:d9:20:d7:0d:3d:da:a1:a9:0a:3c:0a: 7c:fc:04:57:05:20:77:13:7d:af:39:2c:09:cd:e0: d5:f9:5b:e4:4b:aa:ed:de:27:13:ed:c2:d0:67:f7: f3:ef:14:b9:28:a6:05:07:b9:d5:d4:ab:28:fa:23: 1f:1f:87:43:3c:ba:df:66:e5:bc:54:9f:f3:d2:6c: 07:44:5f:84:be:4a:cf:23:94:d8:40:40:63:04:43: f8:40:cf:d6:c6:6f:08:d5:87:fc:c9:6c:b4:61:78: 22:52:e3:fd:81:c9:8d:6e:3c:88:68:e5:99:e5:68: f5:eb:f2:8a:cc:26:ed:7d:5c:da:4b:1e:92:07:31: d7:c3:42:6d:cd:0e:47:b8:70:51:fe:36:73:17:ab: 36:fd:1f:21:ab:a5:d2:2b:60:e2:a8:25:11:29:3a: 42:a0:5c:ed:c6:57:38:45:00:5d:b3:92:76:a2:38: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EB:65:91:03:B5:4A:83:1C:65:48:E7:82:E1:DC:BD:E2:F9:14:77 X509v3 Authority Key Identifier: keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:85:69:0e:10:42:ce:13:50:9a:0a:52:ab:3e:18:be:29:99: 47:78:2f:90:9d:e6:ac:5e:97:c9:d8:a2:8e:d5:1e:49:2e:4c: 9f:5b:30:8a:00:e8:d8:e4:c0:95:18:24:2d:2c:e8:ae:31:8d: 63:03:55:df:a4:51:15:f7:c7:b4:c3:2b:b0:24:44:5f:b2:b5: 62:91:9b:d3:ef:56:3f:98:61:83:00:fc:42:31:8a:69:f7:29: 39:04:54:c2:d8:df:d1:25:f4:5f:72:b2:39:6a:c9:85:56:a8: ed:8f:5a:68:b7:34:31:ad:8d:80:99:ef:1f:c4:b2:2d:db:e4: 38:2d:f1:17:0f:7f:55:f7:45:61:08:58:4c:23:5a:c3:67:91: 3a:20:94:f0:44:d9:59:c4:ac:08:6a:48:b5:60:14:bf:7b:d6: dd:48:f9:3b:18:55:94:eb:96:e5:ce:65:3d:48:f6:75:1d:5b: 8f:66:d2:e3:48:1c:77:b9:4b:14:59:15:ea:25:c1:5d:40:6c: f4:be:c6:18:47:d9:40:27:b9:2e:8e:81:60:1e:ce:19:40:f2: 79:2f:a9:e2:18:f9:03:78:92:89:0e:73:5f:01:a9:30:c6:46: 52:81:52:ca:59:a5:69:e5:99:86:52:b8:e9:2f:cd:c0:31:01: 98:a7:90:9c -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUNapENYDGqDD43YT8kipKF+/GCD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RGNkRGODdGQzc2Q0Mx NTdBMDdDMTAeFw0yNTEyMTgwNjM1MDBaFw0yNTEyMTkwNjQwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjUwMTE3NUJENTA4NEIwMkND NTgxNTE0NTE3N0QwNDQxRkREMkFGRjY1NzFEOTM3RDZENTIxMDQ0ODAyQjg1ODky OTQ0QkJCMTIzMjIyRTM1N0M5NUVCNTRCRkY1NjlDNkNGQzEzRTJEOEQ2Rjk1NzBD NDNEMjEzRUU2QUJFNjY0NUZEMTlDREY2Q0UzMzIwRENDNTRDNDRDN0M5RDkyMEQ3 MEQzRERBQTFBOTBBM0MwQTdDRkMwNDU3MDUyMDc3MTM3REFGMzkyQzA5Q0RFMEQ1 Rjk1QkU0NEJBQUVEREUyNzEzRURDMkQwNjdGN0YzRUYxNEI5MjhBNjA1MDdCOUQ1 RDRBQjI4RkEyMzFGMUY4NzQzM0NCQURGNjZFNUJDNTQ5RkYzRDI2QzA3NDQ1Rjg0 QkU0QUNGMjM5NEQ4NDA0MDYzMDQ0M0Y4NDBDRkQ2QzY2RjA4RDU4N0ZDQzk2Q0I0 NjE3ODIyNTJFM0ZEODFDOThENkUzQzg4NjhFNTk5RTU2OEY1RUJGMjhBQ0MyNkVE N0Q1Q0RBNEIxRTkyMDczMUQ3QzM0MjZEQ0QwRTQ3Qjg3MDUxRkUzNjczMTdBQjM2 RkQxRjIxQUJBNUQyMkI2MEUyQTgyNTExMjkzQTQyQTA1Q0VEQzY1NzM4NDUwMDVE QjM5Mjc2QTIzOEE2NEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA9QEXW9UISwLMWBUUUXfQRB/dKv9lcdk31tUhBEgCuFiSlEu7EjIi 41fJXrVL/1acbPwT4tjW+VcMQ9IT7mq+ZkX9Gc32zjMg3MVMRMfJ2SDXDT3aoakK PAp8/ARXBSB3E32vOSwJzeDV+VvkS6rt3icT7cLQZ/fz7xS5KKYFB7nV1Kso+iMf H4dDPLrfZuW8VJ/z0mwHRF+EvkrPI5TYQEBjBEP4QM/Wxm8I1Yf8yWy0YXgiUuP9 gcmNbjyIaOWZ5Wj16/KKzCbtfVzaSx6SBzHXw0JtzQ5HuHBR/jZzF6s2/R8hq6XS K2DiqCURKTpCoFztxlc4RQBds5J2ojimTwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FAzrZZEDtUqDHGVI54Lh3L3i+RR3MB8GA1UdIwQYMBaAFCPs1NGviM4uGz3234f8 dswVegfBMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2 NndQSE5wYnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0Uy RTFCM0RGNkRGODdGQzc2Q0MxNTdBMDdDMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8yM0VDRDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0Ew N0MxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2NndQSE5w YnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RG NkRGODdGQzc2Q0MxNTdBMDdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMSFaQ4QQs4TUJoKUqs+GL4p mUd4L5Cd5qxel8nYoo7VHkkuTJ9bMIoA6NjkwJUYJC0s6K4xjWMDVd+kURX3x7TD K7AkRF+ytWKRm9PvVj+YYYMA/EIximn3KTkEVMLY39El9F9ysjlqyYVWqO2PWmi3 NDGtjYCZ7x/Esi3b5Dgt8RcPf1X3RWEIWEwjWsNnkToglPBE2VnErAhqSLVgFL97 1t1I+TsYVZTrluXOZT1I9nUdW49m0uNIHHe5SxRZFeolwV1AbPS+xhhH2UAnuS6O gWAezhlA8nkvqeIY+QN4kokOc18BqTDGRlKBUspZpWnlmYZSuOkvzcAxAZinkJw= -----END CERTIFICATE-----Generated at Thu Dec 18 15:43:49 2025 by rpki-client