This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft File: 0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft (raw, json) Hash identifier: WYyf8cGEMk1M39VpKE8mEjJzDJNXTim/TLuWK0vJWWM= Subject key identifier: 43:D4:EB:3F:BF:C4:3C:22:28:96:3D:62:CE:1D:C1:5F:07:C2:09:55 Authority key identifier: 0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88 Certificate issuer: /CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488 Certificate serial: 17D41C82E7528988B298D866AF5DAAC5DEBA2370 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft Manifest number: 0122 Signing time: Sat 06 Dec 2025 19:37:45 +0000 Manifest this update: Sat 06 Dec 2025 19:32:45 +0000 Manifest next update: Sun 07 Dec 2025 21:59:45 +0000 Files and hashes: 1: 3137372e32322e33322e302f32302d3234203d3e203532393831.roa (hash: BtHO1/BvTn/rzMwnPK3Yuahu5bdt5KP1wDLdBeKpufg=) 2: 323830343a3337633a3a2f33322d3438203d3e203532393831.roa (hash: b5KezCkhblAJ5Z4TIFGPKB/zvKk9ibX93mC500F/5y0=) 3: 0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl (hash: 0QIVqEdbCe+niBVRrmvlgIReG/RaJDoHCtMkBQxW5Zk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 20:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d4:1c:82:e7:52:89:88:b2:98:d8:66:af:5d:aa:c5:de:ba:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488 Validity Not Before: Dec 6 19:32:45 2025 GMT Not After : Dec 7 21:59:45 2025 GMT Subject: CN=43D4EB3FBFC43C2228963D62CE1DC15F07C20955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:c9:26:3f:04:25:f5:ef:e6:86:f2:9a:6c: 88:6d:9c:e2:21:90:31:62:dd:f6:e7:b7:39:6f:c4: fd:04:a8:f4:c4:4e:08:ba:4f:59:8a:d3:1a:be:0c: 00:2f:ff:16:5f:00:1a:b4:10:2a:cd:da:46:c9:b6: 79:e1:ef:f9:94:48:e3:6d:59:14:e5:61:54:95:d4: da:a2:39:13:eb:a5:32:d0:2e:81:31:d4:5c:62:13: 2b:de:e5:f6:80:c5:59:c7:4e:0a:71:b4:b5:4d:79: c8:c5:b5:6c:fd:ee:87:e0:c8:2f:6a:43:3c:16:ea: 46:76:18:64:62:f8:5b:ea:60:b3:04:42:1f:96:25: 7c:b1:97:18:8e:cf:dd:0f:4a:c6:7f:41:55:f7:b0: a1:7b:da:2a:10:ea:e7:cd:6a:b1:77:a9:db:e5:05: b4:53:d4:be:72:98:27:d9:55:1e:6d:c3:e9:b5:8f: 1a:46:16:72:e9:79:1e:d7:de:e1:05:7f:f9:be:fe: 3e:98:f3:ee:40:79:93:76:e3:d1:67:41:6f:23:16: 0a:45:c2:0b:ed:0e:a9:c2:ae:c0:6d:45:04:2d:a4: 8e:60:03:1a:29:45:91:25:1e:ef:c8:d7:59:b9:f1: bc:ff:2d:82:72:63:8b:b1:a2:05:da:e3:85:df:9b: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:EB:3F:BF:C4:3C:22:28:96:3D:62:CE:1D:C1:5F:07:C2:09:55 X509v3 Authority Key Identifier: keyid:0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f3:e2:c2:c4:97:ab:61:5c:34:f0:66:84:2f:d2:23:2d:81: a2:99:49:47:d2:30:a4:2c:eb:33:a9:85:89:6e:b8:dc:f7:df: 18:e6:60:ce:03:5d:b9:88:a9:6e:12:85:18:18:5d:ec:4f:2a: 63:c8:c9:c4:23:da:0d:25:67:9f:bd:ad:9b:6f:33:05:f3:c9: 60:ba:e0:57:5b:51:79:75:7c:b9:3f:70:a0:5f:f7:44:eb:fc: 76:2d:fc:56:d8:a2:d5:7a:a6:d3:11:b1:2e:b6:97:97:75:b7: 8c:f8:ae:b1:39:6e:26:83:c7:33:bd:2c:88:d9:81:1e:5d:04: 61:b8:27:05:78:f9:2c:9a:39:ea:d7:5a:03:4b:cb:21:96:85: 1e:30:13:76:71:ac:19:db:42:cb:a3:59:bd:46:1b:40:66:5f: c0:0d:a7:e8:ee:39:4d:11:86:58:16:34:bf:b5:8e:ae:28:50: d1:ed:e9:ba:f4:9f:9a:b5:74:7b:8f:38:eb:a0:90:73:08:26: e3:4b:41:a2:a7:00:43:7b:36:a7:33:49:d3:c9:02:e3:df:29: 4a:09:8c:cb:d3:4c:a3:3f:de:ea:6f:29:b2:a7:09:73:f6:a8: 01:6e:f8:0e:4c:12:6c:8b:56:ee:e3:c4:2c:fc:59:07:d2:93: bf:13:d8:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF9QcgudSiYiymNhmr12qxd66I3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxQ0IwRjY0RjJFQjZGNjA1MDc5NkFDNENEMTYyMDhF QzEyMzQ4ODAeFw0yNTEyMDYxOTMyNDVaFw0yNTEyMDcyMTU5NDVaMDMxMTAvBgNV BAMTKDQzRDRFQjNGQkZDNDNDMjIyODk2M0Q2MkNFMURDMTVGMDdDMjA5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbockmPwQl9e/mhvKabIhtnOIh kDFi3fbntzlvxP0EqPTETgi6T1mK0xq+DAAv/xZfABq0ECrN2kbJtnnh7/mUSONt WRTlYVSV1NqiORPrpTLQLoEx1FxiEyve5faAxVnHTgpxtLVNecjFtWz97ofgyC9q QzwW6kZ2GGRi+FvqYLMEQh+WJXyxlxiOz90PSsZ/QVX3sKF72ioQ6ufNarF3qdvl BbRT1L5ymCfZVR5tw+m1jxpGFnLpeR7X3uEFf/m+/j6Y8+5AeZN249FnQW8jFgpF wgvtDqnCrsBtRQQtpI5gAxopRZElHu/I11m58bz/LYJyY4uxogXa44Xfm1v9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ9TrP7/EPCIolj1izh3BXwfCCVUwHwYDVR0j BBgwFoAUCxyw9k8utvYFB5asTNFiCOwSNIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVrTUxkemQ4UEFoRjJ4Tmo1Y1JnbmFONFZCamRMZG50a3BiTm50RTN0 UUovMC8wQjFDQjBGNjRGMkVCNkY2MDUwNzk2QUM0Q0QxNjIwOEVDMTIzNDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMUNCMEY2NEYyRUI2RjYw NTA3OTZBQzRDRDE2MjA4RUMxMjM0ODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVrTUxkemQ4UEFoRjJ4Tmo1Y1JnbmFONFZCamRMZG50a3BiTm50RTN0UUovMC8w QjFDQjBGNjRGMkVCNkY2MDUwNzk2QUM0Q0QxNjIwOEVDMTIzNDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZfPiwsSXq2FcNPBmhC/SIy2BoplJR9IwpCzrM6mFiW643PffGOZgzgNduYip bhKFGBhd7E8qY8jJxCPaDSVnn72tm28zBfPJYLrgV1tReXV8uT9woF/3ROv8di38 Vtii1Xqm0xGxLraXl3W3jPiusTluJoPHM70siNmBHl0EYbgnBXj5LJo56tdaA0vL IZaFHjATdnGsGdtCy6NZvUYbQGZfwA2n6O45TRGGWBY0v7WOrihQ0e3puvSfmrV0 e48466CQcwgm40tBoqcAQ3s2pzNJ08kC498pSgmMy9NMoz/e6m8psqcJc/aoAW74 DkwSbItW7uPELPxZB9KTvxPYRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:55 2025 by rpki-client