This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.mft File: 88317B76B846F9CB3074395BEF7D4F045F879D1E.mft (raw, json) Hash identifier: ltmLiE394tz9ATZHgOv8C3o0gsABno/nnLPNHCBhefM= Subject key identifier: 14:A8:97:15:43:AE:5A:56:F7:35:B4:C1:BD:0D:8D:F8:51:59:8E:C8 Authority key identifier: 88:31:7B:76:B8:46:F9:CB:30:74:39:5B:EF:7D:4F:04:5F:87:9D:1E Certificate issuer: /CN=88317B76B846F9CB3074395BEF7D4F045F879D1E Certificate serial: 438CBCAC5455344C5BF407ADDCFA15EFC3676995 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.mft Manifest number: 029B Signing time: Sat 06 Dec 2025 04:02:42 +0000 Manifest this update: Sat 06 Dec 2025 03:57:42 +0000 Manifest next update: Sun 07 Dec 2025 05:12:42 +0000 Files and hashes: 1: 323830343a373035383a3a2f33322d3438203d3e20323730373231.roa (hash: wywsxGO5yedqVPfJ2uIGNt8wpsEmdFl21nCNUOuO6dQ=) 2: 88317B76B846F9CB3074395BEF7D4F045F879D1E.crl (hash: mtWu+msXWLYpr/kop+94HR186+0bSSvu1OC4HTzt2gE=) 3: 3138392e3132372e3138342e302f32322d3234203d3e20323730373231.roa (hash: YBXzmdHvfJN2me3DAHytoGVbKsuHOUzBHKbyJG4sBkE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.crl rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8c:bc:ac:54:55:34:4c:5b:f4:07:ad:dc:fa:15:ef:c3:67:69:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88317B76B846F9CB3074395BEF7D4F045F879D1E Validity Not Before: Dec 6 03:57:42 2025 GMT Not After : Dec 7 05:12:42 2025 GMT Subject: CN=14A8971543AE5A56F735B4C1BD0D8DF851598EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:83:56:1a:03:d9:da:ed:87:44:93:5a:fd: 38:61:f4:13:e3:6d:1a:75:8c:4a:5a:c0:d6:9a:fb: 07:52:c5:aa:32:86:c0:56:c2:a5:d1:71:95:9e:e4: 10:ed:28:31:20:fe:7a:42:a2:35:b5:ea:3b:11:10: 91:87:6c:df:77:7b:e9:75:1f:8d:ef:46:e5:5d:cd: 1a:3c:20:58:21:79:6b:7c:1e:be:74:0e:eb:c5:e2: e5:c8:6e:8e:52:7f:dc:27:6d:35:35:bf:4b:74:eb: c3:ff:e9:5a:bf:af:ab:32:f6:8b:8e:87:0d:d7:56: 81:ce:c2:25:f2:8a:0b:b3:ac:be:b1:16:3b:1c:c8: 64:aa:11:a8:12:f8:57:5d:d2:a6:82:36:32:b5:ee: 68:c2:5f:1d:d4:d1:0e:9b:fa:e7:af:43:e9:0a:df: 6b:42:2d:d9:f0:63:02:1c:11:ef:55:e4:a4:57:68: e2:72:62:fc:99:01:e3:cf:10:e5:69:5c:e4:a9:10: da:32:4e:06:94:1a:64:37:38:3f:79:f6:bd:19:18: fd:26:81:aa:41:15:43:db:75:42:8a:02:3b:e0:77: 87:e8:55:91:2f:18:49:c7:5a:1a:b4:12:bd:97:39: aa:0d:5d:42:a2:e5:a8:bb:2e:e1:8b:86:af:2a:b6: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A8:97:15:43:AE:5A:56:F7:35:B4:C1:BD:0D:8D:F8:51:59:8E:C8 X509v3 Authority Key Identifier: keyid:88:31:7B:76:B8:46:F9:CB:30:74:39:5B:EF:7D:4F:04:5F:87:9D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88317B76B846F9CB3074395BEF7D4F045F879D1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8b76zff7aZRTksshVJeNXNvZUb1o7nKhdekLsFqF5zos/0/88317B76B846F9CB3074395BEF7D4F045F879D1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:75:64:3c:bc:0c:00:e9:e8:a6:98:ad:ae:3f:ac:98:ee:de: 84:53:34:5a:01:93:71:c4:4d:8a:2d:9b:ef:46:6a:ea:a0:ba: ae:74:b7:ca:77:1b:7e:93:a6:a2:17:df:b3:82:60:44:6f:54: 4f:65:8c:d3:d4:a6:a5:3b:bb:18:22:5b:85:d9:cf:41:ba:64: 4f:ee:e5:73:0e:c1:00:e2:a5:b9:44:95:b2:a3:69:ff:4e:94: 4e:70:4e:42:49:f0:bf:98:e5:e8:5e:10:2f:a9:1e:bf:ee:7e: 9e:c4:2f:7d:47:ea:7d:f1:83:fd:5c:7b:4c:62:95:af:ce:e1: 43:db:c9:08:f2:57:68:60:88:d1:d6:20:67:00:30:0b:17:06: 34:6a:1a:7b:7a:44:9f:98:c5:63:8c:e8:f1:1b:32:07:77:63: 54:83:c8:a1:f5:1d:3b:cf:ce:0a:15:80:db:35:96:b0:5b:91: 47:66:bb:83:0d:67:f6:03:fc:08:df:10:c7:72:0a:7a:f2:5f: 3d:32:6c:53:f8:62:f3:45:69:cc:f7:3a:1e:0c:eb:66:87:32: fd:ba:93:fe:7e:fd:67:a3:cb:88:e3:2f:37:e5:ac:b8:55:df: b0:a1:09:c1:2d:65:14:bc:45:e4:21:7e:df:f5:b9:b9:17:ac: 6c:f6:a1:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ4y8rFRVNExb9Aet3PoV78NnaZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzMTdCNzZCODQ2RjlDQjMwNzQzOTVCRUY3RDRGMDQ1 Rjg3OUQxRTAeFw0yNTEyMDYwMzU3NDJaFw0yNTEyMDcwNTEyNDJaMDMxMTAvBgNV BAMTKDE0QTg5NzE1NDNBRTVBNTZGNzM1QjRDMUJEMEQ4REY4NTE1OThFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7oNWGgPZ2u2HRJNa/Thh9BPj bRp1jEpawNaa+wdSxaoyhsBWwqXRcZWe5BDtKDEg/npCojW16jsREJGHbN93e+l1 H43vRuVdzRo8IFgheWt8Hr50DuvF4uXIbo5Sf9wnbTU1v0t068P/6Vq/r6sy9ouO hw3XVoHOwiXyiguzrL6xFjscyGSqEagS+Fdd0qaCNjK17mjCXx3U0Q6b+uevQ+kK 32tCLdnwYwIcEe9V5KRXaOJyYvyZAePPEOVpXOSpENoyTgaUGmQ3OD959r0ZGP0m gapBFUPbdUKKAjvgd4foVZEvGEnHWhq0Er2XOaoNXUKi5ai7LuGLhq8qtnEJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFKiXFUOuWlb3NbTBvQ2N+FFZjsgwHwYDVR0j BBgwFoAUiDF7drhG+cswdDlb731PBF+HnR4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGI3NnpmZjdhWlJUa3NzaFZKZU5YTnZaVWIxbzduS2hkZWtMc0ZxRjV6 b3MvMC84ODMxN0I3NkI4NDZGOUNCMzA3NDM5NUJFRjdENEYwNDVGODc5RDFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MzE3Qjc2Qjg0NkY5Q0Iz MDc0Mzk1QkVGN0Q0RjA0NUY4NzlEMUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGI3NnpmZjdhWlJUa3NzaFZKZU5YTnZaVWIxbzduS2hkZWtMc0ZxRjV6b3MvMC84 ODMxN0I3NkI4NDZGOUNCMzA3NDM5NUJFRjdENEYwNDVGODc5RDFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnVkPLwMAOnoppitrj+smO7ehFM0WgGTccRNii2b70Zq6qC6rnS3yncbfpOm ohffs4JgRG9UT2WM09SmpTu7GCJbhdnPQbpkT+7lcw7BAOKluUSVsqNp/06UTnBO Qknwv5jl6F4QL6kev+5+nsQvfUfqffGD/Vx7TGKVr87hQ9vJCPJXaGCI0dYgZwAw CxcGNGoae3pEn5jFY4zo8RsyB3djVIPIofUdO8/OChWA2zWWsFuRR2a7gw1n9gP8 CN8Qx3IKevJfPTJsU/hi80VpzPc6HgzrZocy/bqT/n79Z6PLiOMvN+WsuFXfsKEJ wS1lFLxF5CF+3/W5uResbPahcw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:49 2025 by rpki-client