This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft File: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft (raw, json) Hash identifier: oXjtm/Y8eD2msNBdkbmGPSEUqon6hFhL10sooUrwBRE= Subject key identifier: B7:8D:BD:4A:DF:7B:C8:80:DC:B4:84:FF:F0:E2:3F:D4:84:8F:14:8C Authority key identifier: 21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62 Certificate issuer: /CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62 Certificate serial: 054CC0EE380E096BEF0C1CAE93828A6D85B8E033 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer Subject info access: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft Manifest number: 1B Signing time: Fri 05 Dec 2025 14:01:51 +0000 Manifest this update: Fri 05 Dec 2025 13:56:51 +0000 Manifest next update: Sat 06 Dec 2025 17:21:51 +0000 Files and hashes: 1: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl (hash: q7zBPJDd0G84d6AQnZwfpbwuwXb7Hq+2g/8M9bqtujM=) 2: 34352e3136312e3232342e302f32322d3234203d3e20323638343737.roa (hash: VQI4ymWbBnU+UgVt+pYFL4UDEQuVU0M1Kf8Kqq/NFjI=) 3: 323830343a353163383a3a2f33322d3336203d3e20323638343737.roa (hash: ZeYF/IADxUCs97amTb0H/O7aiJsJoEpO8oClUzCl2Rs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4c:c0:ee:38:0e:09:6b:ef:0c:1c:ae:93:82:8a:6d:85:b8:e0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62 Validity Not Before: Dec 5 13:56:51 2025 GMT Not After : Dec 6 17:21:51 2025 GMT Subject: CN=B78DBD4ADF7BC880DCB484FFF0E23FD4848F148C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:2b:91:a2:99:7e:0d:31:a5:c6:81:9c:ea: 03:f3:31:d8:09:8a:46:bc:a0:11:fd:4a:1c:6d:ed: 3a:fd:3e:a8:04:31:88:fa:21:8f:95:0e:8a:1e:a3: 10:64:ce:27:0a:0e:48:a8:fb:2f:57:19:5e:f4:04: 77:5d:71:16:e7:e8:4d:78:1e:d1:a9:9b:1e:4e:ab: db:7d:9b:cf:d7:1a:8e:af:4e:02:b1:4d:91:55:9e: d9:e6:56:0c:9f:1d:d0:93:e9:95:44:87:44:9d:44: 57:5c:5a:15:0f:d0:38:77:5a:de:f2:56:10:c4:bf: f6:25:b6:06:d7:e3:73:90:1c:67:31:db:6b:32:a0: e9:9d:a3:27:c7:91:ff:1a:6b:89:88:34:b6:f3:42: 6d:52:20:6b:bb:2f:3d:00:07:5c:11:b0:c5:db:7d: 1c:bb:ff:94:31:5e:d0:cb:4d:18:6e:af:b8:8c:e6: b1:b9:15:cf:62:5d:f5:7a:c3:0d:63:46:51:36:00: 29:66:a3:9e:79:d4:f3:a6:97:41:5c:d8:4d:f3:e6: 04:72:93:e3:95:fb:90:5a:a3:d4:4d:f1:74:1b:fa: cc:b5:13:75:04:c6:e7:f7:7a:4e:22:2c:0e:f0:c5: 5f:20:1b:d5:7c:21:9b:a6:5e:41:9d:f7:75:65:80: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8D:BD:4A:DF:7B:C8:80:DC:B4:84:FF:F0:E2:3F:D4:84:8F:14:8C X509v3 Authority Key Identifier: keyid:21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bb:aa:c4:51:58:88:8a:60:58:ab:4e:38:10:20:d2:68:92: 09:9a:ff:e8:61:b9:3c:dd:c8:3e:57:16:65:13:20:20:14:c5: 72:cb:28:24:a8:79:24:d4:d9:de:82:fb:77:4a:bf:31:da:5e: 30:dc:f7:d1:d0:9d:4a:1d:29:64:f6:b8:49:49:69:df:e5:7e: c6:d4:99:00:43:1e:2d:6a:9e:99:ec:a9:d4:af:9a:b6:93:99: de:b5:f2:3a:b3:31:ba:67:02:e1:a6:c6:5b:e8:0c:1c:d2:e9: 22:c6:67:08:56:b5:f9:7d:c7:07:af:c7:9e:b5:e6:9b:7b:d6: 90:ab:41:d5:b3:89:ae:4e:e5:68:e0:60:b5:6b:80:e8:35:f7: 39:92:42:ab:ae:11:bd:b1:c8:6b:1b:db:35:6a:23:1d:83:e4: 8a:c9:7b:75:0f:3c:1b:08:b3:f5:3f:9f:c9:a4:3a:d3:0a:54: 48:11:77:8c:bd:1b:64:c8:61:41:60:1b:73:78:ce:18:12:6f: ef:7b:a1:a1:c3:02:6b:2a:76:6a:29:1c:f1:20:33:e1:bf:07: e5:1d:1b:3a:1b:8b:9d:35:df:36:3c:43:ce:a3:69:3d:81:38: 01:40:37:87:c8:36:84:2b:39:6b:2a:43:cd:81:9f:47:af:cd: b6:5b:38:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBUzA7jgOCWvvDByuk4KKbYW44DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQTY5MjRDRjVDQkUzRjk3MEREMzgyRTVFNDg2MEFE NjdDQUI2MjAeFw0yNTEyMDUxMzU2NTFaFw0yNTEyMDYxNzIxNTFaMDMxMTAvBgNV BAMTKEI3OERCRDRBREY3QkM4ODBEQ0I0ODRGRkYwRTIzRkQ0ODQ4RjE0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeciuRopl+DTGlxoGc6gPzMdgJ ika8oBH9Shxt7Tr9PqgEMYj6IY+VDooeoxBkzicKDkio+y9XGV70BHddcRbn6E14 HtGpmx5Oq9t9m8/XGo6vTgKxTZFVntnmVgyfHdCT6ZVEh0SdRFdcWhUP0Dh3Wt7y VhDEv/YltgbX43OQHGcx22syoOmdoyfHkf8aa4mINLbzQm1SIGu7Lz0AB1wRsMXb fRy7/5QxXtDLTRhur7iM5rG5Fc9iXfV6ww1jRlE2AClmo5551POml0Fc2E3z5gRy k+OV+5Bao9RN8XQb+sy1E3UExuf3ek4iLA7wxV8gG9V8IZumXkGd93VlgM05AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUt429St97yIDctIT/8OI/1ISPFIwwHwYDVR0j BBgwFoAUIbppJM9cvj+XDdOC5eSGCtZ8q2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHpWQ3lQS0piTmc4NHpkYlRvMUZLU2E5ZlVGNDlpNkVjUlFYQ2I0dEZo aFovMC8yMUJBNjkyNENGNUNCRTNGOTcwREQzODJFNUU0ODYwQUQ2N0NBQjYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQkE2OTI0Q0Y1Q0JFM0Y5 NzBERDM4MkU1RTQ4NjBBRDY3Q0FCNjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHpWQ3lQS0piTmc4NHpkYlRvMUZLU2E5ZlVGNDlpNkVjUlFYQ2I0dEZoaFovMC8y MUJBNjkyNENGNUNCRTNGOTcwREQzODJFNUU0ODYwQUQ2N0NBQjYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7uqxFFYiIpgWKtOOBAg0miSCZr/6GG5PN3IPlcWZRMgIBTFcssoJKh5JNTZ 3oL7d0q/MdpeMNz30dCdSh0pZPa4SUlp3+V+xtSZAEMeLWqemeyp1K+atpOZ3rXy OrMxumcC4abGW+gMHNLpIsZnCFa1+X3HB6/HnrXmm3vWkKtB1bOJrk7laOBgtWuA 6DX3OZJCq64RvbHIaxvbNWojHYPkisl7dQ88Gwiz9T+fyaQ60wpUSBF3jL0bZMhh QWAbc3jOGBJv73uhocMCayp2aikc8SAz4b8H5R0bOhuLnTXfNjxDzqNpPYE4AUA3 h8g2hCs5aypDzYGfR6/Ntls4jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:45 2025 by rpki-client