This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft File: 702838DD0B14B4FF3D09CE89247C34EBD427D264.mft (raw, json) Hash identifier: PvIkmNNPmiQN/bvHepo0IpbTethbOuIn9KFci1pwKUI= Subject key identifier: DE:AE:8C:BA:EC:08:5D:59:8C:9E:47:27:C2:70:B9:A9:75:7C:98:80 Authority key identifier: 70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64 Certificate issuer: /CN=702838DD0B14B4FF3D09CE89247C34EBD427D264 Certificate serial: 1D33DEB1565435BB2172B844377C4EA8C26670BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer Subject info access: rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft Manifest number: 46 Signing time: Sun 07 Dec 2025 19:30:51 +0000 Manifest this update: Sun 07 Dec 2025 19:25:51 +0000 Manifest next update: Mon 08 Dec 2025 23:05:51 +0000 Files and hashes: 1: 702838DD0B14B4FF3D09CE89247C34EBD427D264.crl (hash: CWnbcVg3EeU/StCKbhZzdkpw5wAqOpsn8IFi0u5Dg+U=) 2: 323830343a386431303a3a2f33322d3332203d3e20323733333332.roa (hash: tCFfZQU7pTELSE9DaLwJFNcYdEDP3QVERPinbHl2iao=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.crl rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 23:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:33:de:b1:56:54:35:bb:21:72:b8:44:37:7c:4e:a8:c2:66:70:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702838DD0B14B4FF3D09CE89247C34EBD427D264 Validity Not Before: Dec 7 19:25:51 2025 GMT Not After : Dec 8 23:05:51 2025 GMT Subject: CN=DEAE8CBAEC085D598C9E4727C270B9A9757C9880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:6e:91:d1:36:a5:19:18:54:86:e1:c0:e4: 6e:f7:43:3f:6b:bd:54:19:2f:ea:8c:6a:a3:61:b7: 72:89:77:2d:70:be:9f:80:6c:dd:f1:c8:8f:ed:a8: 25:91:28:79:2d:46:42:04:7a:99:73:10:9e:04:d8: af:e8:f7:3f:b6:2a:49:96:8d:b3:48:4f:12:fa:9a: 53:a1:11:32:c7:f2:4f:9e:97:c3:69:72:0d:02:12: d6:62:4c:08:78:e8:8c:eb:90:05:b3:56:23:16:c1: 99:26:e5:b5:f2:b3:94:99:2d:ea:a9:61:4d:99:ac: d2:06:96:b2:69:9b:a9:6f:28:6d:ae:51:4e:c3:ba: 82:4e:f1:bb:e2:f7:3b:57:a3:43:96:93:30:97:f0: 7b:9c:d4:49:31:44:e8:6a:9c:89:12:dc:06:01:d7: 17:00:6e:fb:c1:40:5f:83:d4:93:97:ee:e6:c2:7a: 3a:78:c2:65:0d:00:b8:b7:73:ed:76:21:5d:ee:45: 6f:b0:47:2b:bf:a8:52:fe:7a:1c:fb:c9:d1:0f:25: 0a:a9:51:b8:5a:10:74:7d:12:a8:f5:36:bf:71:92: 47:f2:d2:df:55:20:44:f3:aa:41:1f:fc:70:22:0c: 5c:26:25:b3:c0:e0:a0:48:9f:fc:e6:5c:64:90:a4: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AE:8C:BA:EC:08:5D:59:8C:9E:47:27:C2:70:B9:A9:75:7C:98:80 X509v3 Authority Key Identifier: keyid:70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8a:b0:9b:1c:f8:f7:c9:93:bf:aa:a1:e0:fb:1a:fd:dc:a3: 4c:1a:d7:ab:30:a3:4f:7a:ad:9e:88:17:d9:c9:eb:9c:2f:3b: c1:99:53:41:0f:04:1a:0f:c1:9c:57:97:88:77:d5:7f:39:2f: 5d:8f:52:de:b8:3c:e3:56:bf:89:22:89:13:42:f8:ff:11:f3: 3a:14:57:f4:ef:80:98:4e:33:af:49:8a:cd:7a:3b:43:f2:fb: dc:1e:e7:a4:00:7b:8a:81:af:97:51:de:d4:32:e1:5f:0a:33: df:b6:02:7a:e8:98:62:a0:b8:d1:e5:41:c9:37:54:12:71:d2: e7:22:6d:e6:be:8b:2e:b7:a8:8e:46:22:b6:31:89:a8:fa:d0: b6:1e:16:00:0b:7f:ea:87:71:76:ba:88:85:fe:24:8a:e1:66: e8:8a:d6:49:1f:e7:16:60:e1:2b:5d:ce:f2:b7:c1:35:c8:93: bf:32:9d:66:ca:69:7b:06:34:17:10:b5:d9:fb:71:a0:fb:09: 00:ff:8c:bd:50:27:20:c1:c6:25:67:21:c7:bd:03:c2:15:c9: 30:44:c6:7b:eb:cf:a5:5e:ea:8b:9e:d0:c2:37:b0:86:03:19: 13:fe:21:33:c1:86:da:ac:da:2a:13:ba:c1:1a:64:f9:55:11: de:b6:c3:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHTPesVZUNbshcrhEN3xOqMJmcLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyODM4REQwQjE0QjRGRjNEMDlDRTg5MjQ3QzM0RUJE NDI3RDI2NDAeFw0yNTEyMDcxOTI1NTFaFw0yNTEyMDgyMzA1NTFaMDMxMTAvBgNV BAMTKERFQUU4Q0JBRUMwODVENTk4QzlFNDcyN0MyNzBCOUE5NzU3Qzk4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbG6R0TalGRhUhuHA5G73Qz9r vVQZL+qMaqNht3KJdy1wvp+AbN3xyI/tqCWRKHktRkIEeplzEJ4E2K/o9z+2KkmW jbNITxL6mlOhETLH8k+el8Npcg0CEtZiTAh46IzrkAWzViMWwZkm5bXys5SZLeqp YU2ZrNIGlrJpm6lvKG2uUU7DuoJO8bvi9ztXo0OWkzCX8Huc1EkxROhqnIkS3AYB 1xcAbvvBQF+D1JOX7ubCejp4wmUNALi3c+12IV3uRW+wRyu/qFL+ehz7ydEPJQqp UbhaEHR9Eqj1Nr9xkkfy0t9VIETzqkEf/HAiDFwmJbPA4KBIn/zmXGSQpKxJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3q6MuuwIXVmMnkcnwnC5qXV8mIAwHwYDVR0j BBgwFoAUcCg43QsUtP89Cc6JJHw069Qn0mQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGVOMll0SFdVMk5hZDNBYkpkWTZQTW5qVnI3VWlkeHJGcWlEVEhwb1l5 bzMvMC83MDI4MzhERDBCMTRCNEZGM0QwOUNFODkyNDdDMzRFQkQ0MjdEMjY0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMjgzOEREMEIxNEI0RkYz RDA5Q0U4OTI0N0MzNEVCRDQyN0QyNjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGVOMll0SFdVMk5hZDNBYkpkWTZQTW5qVnI3VWlkeHJGcWlEVEhwb1l5bzMvMC83 MDI4MzhERDBCMTRCNEZGM0QwOUNFODkyNDdDMzRFQkQ0MjdEMjY0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApoqwmxz498mTv6qh4Psa/dyjTBrXqzCjT3qtnogX2cnrnC87wZlTQQ8EGg/B nFeXiHfVfzkvXY9S3rg841a/iSKJE0L4/xHzOhRX9O+AmE4zr0mKzXo7Q/L73B7n pAB7ioGvl1He1DLhXwoz37YCeuiYYqC40eVByTdUEnHS5yJt5r6LLreojkYitjGJ qPrQth4WAAt/6odxdrqIhf4kiuFm6IrWSR/nFmDhK13O8rfBNciTvzKdZsppewY0 FxC12ftxoPsJAP+MvVAnIMHGJWchx70DwhXJMETGe+vPpV7qi57QwjewhgMZE/4h M8GG2qzaKhO6wRpk+VUR3rbDaQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:40:23 2025 by rpki-client