This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft File: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json) Hash identifier: ChJ2N2jNww4AOBBfhreSG9m/CJhJzpW78IA8D8+R4+4= Subject key identifier: 1D:DE:0B:65:EC:ED:63:A6:2D:E1:19:A7:0F:28:C2:9C:12:1E:93:48 Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Certificate serial: 6F5069A4E0343DCA19C05B59C5CB621C20C9428D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft Manifest number: 0339 Signing time: Wed 17 Dec 2025 12:06:57 +0000 Manifest this update: Wed 17 Dec 2025 12:01:57 +0000 Manifest next update: Thu 18 Dec 2025 15:14:57 +0000 Files and hashes: 1: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: DhWML9LbNA2RRgnB1Kuj0sl9O7DJQowUJBfIgbd8raM=) 2: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: s8z7liz0PbVVeUAXN7CYLym+2VWuinR5wpEDgw7BSrk=) 3: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 15:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:50:69:a4:e0:34:3d:ca:19:c0:5b:59:c5:cb:62:1c:20:c9:42:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Validity Not Before: Dec 17 12:01:57 2025 GMT Not After : Dec 18 15:14:57 2025 GMT Subject: CN=1DDE0B65ECED63A62DE119A70F28C29C121E9348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:03:f4:0f:f7:e0:e7:a5:45:c1:cf:a7:32: d9:5e:23:ef:8d:e2:fc:03:8b:ce:79:c4:5a:78:63: 01:e8:74:ad:a5:26:b1:7b:96:90:a6:2d:0e:ed:c5: 59:41:93:ab:af:46:70:99:b8:8b:1e:b0:ed:d8:79: 9e:4d:2c:77:6a:74:ce:05:17:84:32:c3:9b:4d:a2: df:05:4b:b8:b6:0b:69:72:1c:1d:12:6d:b5:56:e1: a4:2f:2a:7d:dd:bd:e8:71:9f:cc:14:cd:cf:d6:e9: f9:58:46:9a:b9:bf:47:21:9d:89:21:c6:11:08:c6: ad:71:19:d9:ce:e7:b7:b0:27:6c:01:a4:f5:12:76: 89:b5:3d:1e:92:7d:cb:8b:b7:e7:98:b0:5a:0c:90: 50:87:52:7a:ed:e5:ec:eb:4f:f3:96:69:dd:0b:d4: b3:30:62:1f:7e:ea:6c:50:f9:3a:08:4f:92:f4:4f: a1:21:98:b6:1c:e6:e6:5d:6b:44:b3:d1:fd:ef:34: 0b:84:b4:2a:69:91:a1:d9:95:ba:81:3b:bc:0d:df: 7e:5f:86:e1:f6:a5:0b:70:de:ac:e3:45:d5:e8:6b: f8:65:51:01:6a:62:cf:d8:b3:d9:a6:68:bf:91:8d: 43:80:69:8f:e6:f2:e7:cc:0a:e4:1e:eb:11:d8:78: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:0B:65:EC:ED:63:A6:2D:E1:19:A7:0F:28:C2:9C:12:1E:93:48 X509v3 Authority Key Identifier: keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:52:f9:76:11:29:c2:21:fd:3a:b6:83:55:24:56:2a:3f:e6: a9:22:2e:37:70:01:ab:aa:d1:5e:4f:bc:10:4b:d7:9b:f1:d5: 99:d6:3a:79:28:7d:4e:f5:0f:55:06:da:30:53:f0:0c:0e:6f: ba:3f:b4:15:da:d3:25:48:26:fa:97:c7:09:86:52:7d:90:b9: fc:32:88:db:25:26:4c:41:ed:b0:4c:c8:9c:65:59:2f:f3:c6: eb:fa:24:9d:73:42:c4:fb:4a:8b:a3:b0:0f:0a:cc:ac:5b:3a: 07:f3:60:f1:e1:0d:4f:0e:b7:13:38:15:c0:ba:be:ba:ce:cb: 3c:e0:d5:01:a8:26:61:c9:3f:39:4e:4f:4b:0d:ab:55:a5:a2: ab:6d:b1:49:5e:d0:79:b8:56:b5:d0:8d:7a:36:da:19:5f:60: dd:b4:c6:d7:cf:30:0b:27:a6:5b:4c:3c:77:91:84:a4:0e:79: 03:00:a3:6c:9e:bd:fb:a8:14:cb:57:54:1d:7f:63:ad:d6:39: 56:ce:97:b5:bc:31:84:6b:91:20:63:10:0d:78:03:bc:66:19: a0:bf:80:1c:e8:84:c2:8d:6f:bb:f8:d5:a2:7e:2d:06:72:f4: 33:b0:7d:3d:82:2b:e4:b9:60:24:45:7c:d7:24:5c:cc:af:f6: 7a:47:1a:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb1BppOA0PcoZwFtZxctiHCDJQo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCQTVDQ0ZCN0JGRTA5NEZDM0E0QTZBRTdENTI3RDM4 RkM2MDhEODAeFw0yNTEyMTcxMjAxNTdaFw0yNTEyMTgxNTE0NTdaMDMxMTAvBgNV BAMTKDFEREUwQjY1RUNFRDYzQTYyREUxMTlBNzBGMjhDMjlDMTIxRTkzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsQP0D/fg56VFwc+nMtleI++N 4vwDi855xFp4YwHodK2lJrF7lpCmLQ7txVlBk6uvRnCZuIsesO3YeZ5NLHdqdM4F F4Qyw5tNot8FS7i2C2lyHB0SbbVW4aQvKn3dvehxn8wUzc/W6flYRpq5v0chnYkh xhEIxq1xGdnO57ewJ2wBpPUSdom1PR6SfcuLt+eYsFoMkFCHUnrt5ezrT/OWad0L 1LMwYh9+6mxQ+ToIT5L0T6EhmLYc5uZda0Sz0f3vNAuEtCppkaHZlbqBO7wN335f huH2pQtw3qzjRdXoa/hlUQFqYs/Ys9mmaL+RjUOAaY/m8ufMCuQe6xHYeDE9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHd4LZeztY6Yt4RmnDyjCnBIek0gwHwYDVR0j BBgwFoAU1Lpcz7e/4JT8Okpq59Un04/GCNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI M2kvMS9ENEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkE1Q0NGQjdCRkUwOTRG QzNBNEE2QUU3RDUyN0QzOEZDNjA4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpIM2kvMS9E NEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOlL5dhEpwiH9OraDVSRWKj/mqSIuN3ABq6rRXk+8EEvXm/HVmdY6eSh9TvUP VQbaMFPwDA5vuj+0FdrTJUgm+pfHCYZSfZC5/DKI2yUmTEHtsEzInGVZL/PG6/ok nXNCxPtKi6OwDwrMrFs6B/Ng8eENTw63EzgVwLq+us7LPODVAagmYck/OU5PSw2r VaWiq22xSV7QebhWtdCNejbaGV9g3bTG188wCyemW0w8d5GEpA55AwCjbJ69+6gU y1dUHX9jrdY5Vs6XtbwxhGuRIGMQDXgDvGYZoL+AHOiEwo1vu/jVon4tBnL0M7B9 PYIr5LlgJEV81yRczK/2ekca1A== -----END CERTIFICATE-----Generated at Wed Dec 17 18:14:11 2025 by rpki-client