This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft File: 1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft (raw, json) Hash identifier: xuUrgh0Mbr9SUeyPuF+TM5ClZY5M7CsBDK3K9uc1C9w= Subject key identifier: A5:A7:88:AB:CC:11:B9:00:FF:E0:BA:C2:AF:C2:41:E1:AE:76:C4:07 Authority key identifier: 1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35 Certificate issuer: /CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35 Certificate serial: 37CA34A2CCF66DD6641D914703A5A2D8B0EEC5F3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft Manifest number: 24 Signing time: Sat 06 Dec 2025 03:03:26 +0000 Manifest this update: Sat 06 Dec 2025 02:58:26 +0000 Manifest next update: Sun 07 Dec 2025 04:45:26 +0000 Files and hashes: 1: 3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (hash: JyZfkIOLq33nnCJFS0DfBN/aauusqE3Y9f6Bn1ZJobI=) 2: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (hash: cHMEH3okxWfwROJpehpqXokpVfIavyGmq4FX80L1Gbw=) 3: 1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl (hash: LYmRHqB48ZSM1VHIQiOcvKwYx7U9qYl1clxDyYXOiw8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ca:34:a2:cc:f6:6d:d6:64:1d:91:47:03:a5:a2:d8:b0:ee:c5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35 Validity Not Before: Dec 6 02:58:26 2025 GMT Not After : Dec 7 04:45:26 2025 GMT Subject: CN=A5A788ABCC11B900FFE0BAC2AFC241E1AE76C407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cd:da:8b:07:6b:fd:ee:3c:cc:7e:83:a6:e7: b4:8c:1a:bb:5e:5d:f8:29:1e:c9:b7:6c:d2:14:4d: f1:d1:36:99:a2:fe:cc:df:2d:77:dd:cb:c5:91:73: 87:cb:0e:89:f5:db:86:b7:36:ea:eb:21:44:f4:07: 02:64:bc:a8:f8:62:c9:18:dc:82:2b:bf:cd:0d:0b: b1:b7:11:b9:21:dc:e6:96:c6:c5:fd:29:20:e8:21: c7:57:db:c0:40:b9:22:42:c8:a8:02:99:dd:3d:eb: 7f:b3:54:72:bc:67:f6:5f:31:e4:cb:79:d1:7c:6d: 6c:43:76:8b:3d:6a:bb:0d:b6:de:fd:17:54:b6:2f: bb:0d:d1:f3:47:39:b5:ba:f1:81:0d:5b:f7:da:c5: 83:8f:5a:a2:40:fa:a1:31:c9:af:f7:9a:99:3b:a9: e8:4b:ca:d1:96:0f:cd:6e:3d:33:af:c9:f9:76:9b: 8c:f5:66:e9:d9:f8:c0:11:23:fe:f7:d3:81:9a:3e: 6c:a7:ff:c6:c7:e6:14:09:96:97:22:34:00:36:d0: dd:c4:e2:8c:18:c6:f1:c6:b6:75:ea:a6:93:62:4a: 22:14:22:32:fb:5e:ef:53:99:1d:5a:aa:1f:68:c9: c1:12:20:c4:b2:40:aa:fb:ae:df:ac:e1:04:49:c3: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A7:88:AB:CC:11:B9:00:FF:E0:BA:C2:AF:C2:41:E1:AE:76:C4:07 X509v3 Authority Key Identifier: keyid:1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b6:2f:8d:f6:b9:a2:4a:7f:4a:b9:3c:8b:b8:f6:14:81:ef: d3:c0:36:92:c4:d6:00:23:98:f5:70:cc:77:b0:65:c7:6b:f1: 25:c3:fd:03:23:77:5f:1c:8c:d8:f0:db:6e:30:af:68:15:e3: a3:4e:cf:11:6e:d7:81:b6:5d:de:a4:62:59:97:b1:e0:39:1b: 00:fc:81:d5:97:f2:0e:f0:26:52:85:f2:33:bd:28:62:66:fe: 58:3a:98:70:92:85:cf:76:e7:e2:1d:84:cb:11:24:73:93:2e: 54:2e:c2:e4:44:e9:47:42:49:3c:f8:e0:24:7d:1c:6d:38:88: 68:85:de:9f:9e:df:df:3f:31:6a:83:d0:14:5f:46:5e:be:99: 12:3d:19:ef:f1:fd:4e:85:6a:1a:ab:76:9b:3f:96:11:c2:34: 69:3c:ed:0b:f9:9f:dd:14:82:3e:3e:b8:0b:da:3e:3b:56:d5: c0:e2:d8:5d:31:8d:52:74:86:62:2e:1b:58:fd:c7:f2:bb:84: c9:d0:85:a1:65:2e:cc:b6:65:5c:d6:b6:45:ae:5a:3d:d7:4a: 38:ed:bb:d2:02:2c:29:57:c1:02:98:4c:ce:8a:2d:5e:4f:f4: a6:69:70:21:b0:f1:1c:ea:a8:67:83:ea:5c:09:58:b9:c4:13: 0d:00:fc:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN8o0osz2bdZkHZFHA6Wi2LDuxfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFMUFDRDFGODUyOUIwNTREQTc4RDFCNTk3NEI4RDVF ODQ2RkEzNTAeFw0yNTEyMDYwMjU4MjZaFw0yNTEyMDcwNDQ1MjZaMDMxMTAvBgNV BAMTKEE1QTc4OEFCQ0MxMUI5MDBGRkUwQkFDMkFGQzI0MUUxQUU3NkM0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkzdqLB2v97jzMfoOm57SMGrte XfgpHsm3bNIUTfHRNpmi/szfLXfdy8WRc4fLDon124a3NurrIUT0BwJkvKj4YskY 3IIrv80NC7G3Ebkh3OaWxsX9KSDoIcdX28BAuSJCyKgCmd0963+zVHK8Z/ZfMeTL edF8bWxDdos9arsNtt79F1S2L7sN0fNHObW68YENW/faxYOPWqJA+qExya/3mpk7 qehLytGWD81uPTOvyfl2m4z1ZunZ+MARI/7304GaPmyn/8bH5hQJlpciNAA20N3E 4owYxvHGtnXqppNiSiIUIjL7Xu9TmR1aqh9oycESIMSyQKr7rt+s4QRJw6HpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpaeIq8wRuQD/4LrCr8JB4a52xAcwHwYDVR0j BBgwFoAUHOGs0fhSmwVNp40bWXS41ehG+jUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4 c1kvMC8xQ0UxQUNEMUY4NTI5QjA1NERBNzhEMUI1OTc0QjhENUU4NDZGQTM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRTFBQ0QxRjg1MjlCMDU0 REE3OEQxQjU5NzRCOEQ1RTg0NkZBMzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4c1kvMC8x Q0UxQUNEMUY4NTI5QjA1NERBNzhEMUI1OTc0QjhENUU4NDZGQTM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfbYvjfa5okp/Srk8i7j2FIHv08A2ksTWACOY9XDMd7Blx2vxJcP9AyN3XxyM 2PDbbjCvaBXjo07PEW7XgbZd3qRiWZex4DkbAPyB1ZfyDvAmUoXyM70oYmb+WDqY cJKFz3bn4h2EyxEkc5MuVC7C5ETpR0JJPPjgJH0cbTiIaIXen57f3z8xaoPQFF9G Xr6ZEj0Z7/H9ToVqGqt2mz+WEcI0aTztC/mf3RSCPj64C9o+O1bVwOLYXTGNUnSG Yi4bWP3H8ruEydCFoWUuzLZlXNa2Ra5aPddKOO270gIsKVfBAphMzootXk/0pmlw IbDxHOqoZ4PqXAlYucQTDQD8cA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:03 2025 by rpki-client