This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: 9cIomHxn7ntiYdvJICm9mYZEEaF0zr8xdlhZE1MpxAU= Subject key identifier: 04:A4:BF:16:0F:B4:09:98:57:13:99:CE:92:42:3E:BE:53:40:27:95 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 01C892AA5796CFB642476051BF22B1334E97DCAA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 0330 Signing time: Fri 05 Dec 2025 21:13:18 +0000 Manifest this update: Fri 05 Dec 2025 21:08:18 +0000 Manifest next update: Sat 06 Dec 2025 22:35:18 +0000 Files and hashes: 1: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 2: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 3: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: lnjHjwSPKxSop01LRLhkpUfdxRetEYB4cOEca5npzac=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c8:92:aa:57:96:cf:b6:42:47:60:51:bf:22:b1:33:4e:97:dc:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Dec 5 21:08:18 2025 GMT Not After : Dec 6 22:35:18 2025 GMT Subject: CN=04A4BF160FB40998571399CE92423EBE53402795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:4b:08:b4:24:2b:2e:7a:06:bb:bc:3d:b7: a3:be:85:f9:06:71:80:1c:8e:50:72:ce:ad:78:8b: f3:5d:e3:ed:53:fc:6a:e8:94:4a:37:bc:88:0f:24: 53:8f:d1:10:ff:d0:1f:80:c1:76:cc:ea:08:fa:15: af:8d:d3:54:db:d0:af:c6:c9:71:ac:c7:b7:80:b7: ea:85:d5:8e:71:15:a6:69:99:60:1c:45:e4:46:c1: 3d:71:4c:6b:ab:29:50:10:e0:ab:f4:f0:f1:05:22: bf:5f:dd:0d:bf:d4:39:d3:6e:0b:99:6d:20:95:cd: 87:62:40:e7:8f:51:12:62:9b:e2:66:f0:23:d6:f1: c2:46:29:c8:19:e0:b8:44:6e:9f:b5:b1:d5:13:54: b5:c6:fe:8f:e9:56:f3:b7:37:4f:4f:a7:f7:e5:28: 90:b0:5d:e6:d2:99:3d:90:fc:7b:56:49:af:8a:50: 51:bb:ed:0e:23:b4:36:4d:67:93:e8:f1:13:89:43: e5:3b:f6:41:57:61:5a:96:1d:bf:30:29:df:47:96: fe:d5:1d:d6:7f:97:71:9a:f2:1c:3a:09:01:47:25: 79:b2:ae:36:90:ca:a8:d4:b6:31:dc:19:22:12:5a: fb:91:d0:9f:2b:c0:2a:98:1d:94:81:80:b6:b1:80: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A4:BF:16:0F:B4:09:98:57:13:99:CE:92:42:3E:BE:53:40:27:95 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:82:67:50:74:6d:53:0b:40:78:76:fe:a1:f2:40:49:0f:47: 41:42:bc:c7:f0:34:d2:5a:31:24:00:a7:8d:29:3a:83:c4:43: 29:fa:03:6e:d6:b1:4f:33:05:78:ba:73:41:37:ce:d6:e1:7d: 97:d6:b7:2c:42:6b:11:ff:fc:7d:24:b2:1b:46:3e:9b:4f:11: 92:72:ca:19:bd:14:9e:6a:60:56:1e:fd:a0:04:6a:b0:39:66: 02:e4:09:c8:a2:d2:43:25:90:8b:a4:57:a0:90:8d:aa:cc:70: e8:0d:16:46:3a:b5:4c:ab:3a:f7:04:d6:0c:cb:0c:ee:2d:da: 3c:ee:e5:e6:02:dc:71:71:60:6e:52:65:a3:0f:10:c3:14:58: 46:09:07:da:3b:51:69:e8:48:e0:4d:bd:20:17:e3:12:b8:fe: 7a:c7:35:98:1b:c5:70:53:8a:d8:ce:93:a1:f9:2a:3c:35:d5: 47:96:b4:aa:6d:9e:0a:a4:78:c0:c7:52:92:ce:22:c0:df:2b: 24:53:7e:38:f4:2e:51:1e:40:92:38:da:62:92:80:36:19:67: f4:c7:f7:8d:6a:50:b5:ef:bb:91:9c:ea:96:bd:07:f7:3b:62: 42:3c:51:7a:0e:c1:cb:3d:0b:11:a5:75:18:a5:93:03:76:e9: 4b:8b:86:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAciSqleWz7ZCR2BRvyKxM06X3KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTEyMDUyMTA4MThaFw0yNTEyMDYyMjM1MThaMDMxMTAvBgNV BAMTKDA0QTRCRjE2MEZCNDA5OTg1NzEzOTlDRTkyNDIzRUJFNTM0MDI3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSu0sItCQrLnoGu7w9t6O+hfkG cYAcjlByzq14i/Nd4+1T/GrolEo3vIgPJFOP0RD/0B+AwXbM6gj6Fa+N01Tb0K/G yXGsx7eAt+qF1Y5xFaZpmWAcReRGwT1xTGurKVAQ4Kv08PEFIr9f3Q2/1DnTbguZ bSCVzYdiQOePURJim+Jm8CPW8cJGKcgZ4LhEbp+1sdUTVLXG/o/pVvO3N09Pp/fl KJCwXebSmT2Q/HtWSa+KUFG77Q4jtDZNZ5Po8ROJQ+U79kFXYVqWHb8wKd9Hlv7V HdZ/l3Ga8hw6CQFHJXmyrjaQyqjUtjHcGSISWvuR0J8rwCqYHZSBgLaxgMs1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBKS/Fg+0CZhXE5nOkkI+vlNAJ5UwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJIJnUHRtUwtAeHb+ofJASQ9HQUK8x/A00loxJACnjSk6g8RDKfoDbtaxTzMF eLpzQTfO1uF9l9a3LEJrEf/8fSSyG0Y+m08RknLKGb0UnmpgVh79oARqsDlmAuQJ yKLSQyWQi6RXoJCNqsxw6A0WRjq1TKs69wTWDMsM7i3aPO7l5gLccXFgblJlow8Q wxRYRgkH2jtRaehI4E29IBfjErj+esc1mBvFcFOK2M6TofkqPDXVR5a0qm2eCqR4 wMdSks4iwN8rJFN+OPQuUR5AkjjaYpKANhln9Mf3jWpQte+7kZzqlr0H9ztiQjxR eg7Byz0LEaV1GKWTA3bpS4uGYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:55 2025 by rpki-client