This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft File: 2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft (raw, json) Hash identifier: NSrVignZ+3AqbGpfF4rLbllC/fBEEcIvOVEU8+moi+g= Subject key identifier: 4F:F2:AE:13:0D:64:11:DD:10:97:5D:17:85:CB:5B:0C:F6:61:40:25 Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0 Certificate issuer: /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0 Certificate serial: 3F1B5295BC01016FE50D7E93AE2AE5587A90961F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft Manifest number: 01DA Signing time: Sat 06 Dec 2025 15:26:21 +0000 Manifest this update: Sat 06 Dec 2025 15:21:21 +0000 Manifest next update: Sun 07 Dec 2025 18:09:21 +0000 Files and hashes: 1: 34352e342e34342e302f32322d3234203d3e20323636303535.roa (hash: MSfPL1voEf6iilZVKaNFDpKTA9N+mGuNBh6nanxtXIY=) 2: 323830343a333964633a3a2f33322d3438203d3e20323636303535.roa (hash: 4dvfmTkc7ov6mnCdXPO0waoZQ9/wpf26FI+tsEHj1RM=) 3: 2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl (hash: Rx8U3mceTrl0xP091QTOeo/ptLuCiBIlpss2Vt8eU2g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1b:52:95:bc:01:01:6f:e5:0d:7e:93:ae:2a:e5:58:7a:90:96:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0 Validity Not Before: Dec 6 15:21:21 2025 GMT Not After : Dec 7 18:09:21 2025 GMT Subject: CN=4FF2AE130D6411DD10975D1785CB5B0CF6614025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:4a:28:29:92:fc:43:96:91:9f:87:be:3c: 4e:ae:ca:8c:47:77:67:0c:9e:a8:a0:2f:60:53:74: ff:1a:03:60:25:6b:fe:7b:03:bb:e1:c9:31:59:57: b6:36:9c:5d:72:55:86:e8:9e:5c:a5:f5:60:bb:d1: d6:5d:19:bf:db:4a:f6:20:d6:ad:e8:9c:c5:05:15: 97:b2:b6:7b:72:c7:86:ef:fb:43:89:3d:d6:9f:a8: ae:b9:47:59:34:ec:f6:30:07:45:72:2a:61:7b:17: b9:a8:d2:c2:e2:52:67:67:95:42:71:5d:de:8a:c4: 70:eb:ca:75:62:99:e1:32:5e:f8:76:d2:33:e7:68: 01:51:ba:7c:27:b2:b1:19:42:d9:53:18:28:f8:bb: 33:0e:50:47:87:ec:e8:54:da:90:77:9a:b5:f1:89: 2d:7a:8b:fe:33:54:aa:aa:a7:f8:62:06:3a:af:46: 5f:48:8f:67:65:3f:d5:c1:d1:ce:61:e6:11:e8:24: 4b:2c:21:76:d2:7c:10:65:7a:70:69:64:df:9a:48: 7d:86:61:0e:29:81:bf:ff:26:90:69:1e:78:bb:93: a6:cb:b4:d8:86:07:4e:eb:60:ce:74:48:42:e0:69: f5:4b:21:cb:9f:a2:fb:90:60:eb:4b:fc:79:4d:bb: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F2:AE:13:0D:64:11:DD:10:97:5D:17:85:CB:5B:0C:F6:61:40:25 X509v3 Authority Key Identifier: keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:26:04:9f:0a:02:5f:56:24:65:e3:95:23:d1:d0:51:b2:12: b7:25:d5:5c:2d:d3:23:e9:e9:c7:ad:44:76:76:70:1e:47:57: a0:9f:ec:21:13:c5:e5:99:4c:1d:69:db:30:ab:8b:43:41:ea: e7:e9:f6:67:c7:28:45:da:18:9f:c1:41:9c:8a:69:32:eb:24: 8b:5b:a3:12:7d:1a:37:af:d5:42:e2:21:fb:6e:8e:9f:eb:2f: 8f:4c:e5:ae:4b:78:c7:07:bb:a8:14:e1:56:6e:20:ac:73:fe: 9f:1d:35:52:99:30:57:20:e0:7f:9e:9e:5e:d0:2c:4b:ec:b6: 55:37:d2:77:9c:ff:a0:8a:c8:be:e7:61:43:0a:bb:9b:8f:62: 39:76:9f:e6:f3:37:93:a1:6f:a1:f3:57:7f:07:a5:ba:41:a9: 13:4f:f5:5a:c4:4a:5b:91:3b:4a:f4:37:db:da:72:4f:01:03: e2:e5:60:06:5a:0e:ac:11:4a:5a:33:85:16:ee:9f:15:ea:ad: 79:5c:76:03:b2:18:7c:08:6a:c7:e5:2a:b8:9d:a2:a7:9e:bd: 3d:c6:6b:43:15:46:1e:6a:d8:fc:58:65:ec:d4:40:58:f6:81: 83:c1:56:89:7d:88:df:fb:f2:d3:ae:c2:0c:07:90:3b:0b:80: c4:12:00:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPxtSlbwBAW/lDX6TrirlWHqQlh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NEQxN0ExREU2NThGMjVGQTBFQjc3NzNEQTdGNkI0 MUU1MkZEMDAeFw0yNTEyMDYxNTIxMjFaFw0yNTEyMDcxODA5MjFaMDMxMTAvBgNV BAMTKDRGRjJBRTEzMEQ2NDExREQxMDk3NUQxNzg1Q0I1QjBDRjY2MTQwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDodUooKZL8Q5aRn4e+PE6uyoxH d2cMnqigL2BTdP8aA2Ala/57A7vhyTFZV7Y2nF1yVYbonlyl9WC70dZdGb/bSvYg 1q3onMUFFZeytntyx4bv+0OJPdafqK65R1k07PYwB0VyKmF7F7mo0sLiUmdnlUJx Xd6KxHDrynVimeEyXvh20jPnaAFRunwnsrEZQtlTGCj4uzMOUEeH7OhU2pB3mrXx iS16i/4zVKqqp/hiBjqvRl9Ij2dlP9XB0c5h5hHoJEssIXbSfBBlenBpZN+aSH2G YQ4pgb//JpBpHni7k6bLtNiGB07rYM50SELgafVLIcufovuQYOtL/HlNu+FPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT/KuEw1kEd0Ql10XhctbDPZhQCUwHwYDVR0j BBgwFoAUImTReh3mWPJfoOt3c9p/a0HlL9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFB3MjQ5M1pHM2ExN1BtZFdXYVNDdTFHNjJ3SjM2TGZ6VnpZS3haVVJi dEovMC8yMjY0RDE3QTFERTY1OEYyNUZBMEVCNzc3M0RBN0Y2QjQxRTUyRkQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNjREMTdBMURFNjU4RjI1 RkEwRUI3NzczREE3RjZCNDFFNTJGRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFB3MjQ5M1pHM2ExN1BtZFdXYVNDdTFHNjJ3SjM2TGZ6VnpZS3haVVJidEovMC8y MjY0RDE3QTFERTY1OEYyNUZBMEVCNzc3M0RBN0Y2QjQxRTUyRkQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnCYEnwoCX1YkZeOVI9HQUbIStyXVXC3TI+npx61EdnZwHkdXoJ/sIRPF5ZlM HWnbMKuLQ0Hq5+n2Z8coRdoYn8FBnIppMuski1ujEn0aN6/VQuIh+26On+svj0zl rkt4xwe7qBThVm4grHP+nx01UpkwVyDgf56eXtAsS+y2VTfSd5z/oIrIvudhQwq7 m49iOXaf5vM3k6FvofNXfwelukGpE0/1WsRKW5E7SvQ329pyTwED4uVgBloOrBFK WjOFFu6fFeqteVx2A7IYfAhqx+UquJ2ip569PcZrQxVGHmrY/Fhl7NRAWPaBg8FW iX2I3/vy067CDAeQOwuAxBIAaA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:37 2025 by rpki-client