This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.mft File: AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.mft (raw, json) Hash identifier: SfFyFCiUmwj4HGdMOgtxSnJVVcMM+i7bapdOWB798wg= Subject key identifier: 52:A2:1C:73:89:66:20:FF:F7:37:14:76:B1:75:95:35:80:4A:09:79 Authority key identifier: AC:5B:09:55:2A:68:EA:DD:67:DD:35:DE:88:EC:BD:0C:5D:B9:D6:24 Certificate issuer: /CN=AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624 Certificate serial: 1C4842AE15EFA923678070C027C411AC81CDF687 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer Subject info access: rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.mft Manifest number: F0 Signing time: Sat 06 Dec 2025 00:45:17 +0000 Manifest this update: Sat 06 Dec 2025 00:40:17 +0000 Manifest next update: Sun 07 Dec 2025 02:50:17 +0000 Files and hashes: 1: 323830343a353335383a3a2f33322d313238203d3e20323638353738.roa (hash: LkxR+PfMgVbN1MGOUQ7bQJFksWIeMPvyt35MoKyrjBQ=) 2: AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.crl (hash: PW8nG6NsDc97T+uOF9PNNKFBxgYITRCrN27Uu8Z45vA=) 3: 34352e3136332e3137362e302f32322d3332203d3e20323638353738.roa (hash: gnntwG26jgFqUQsWWg5GeY6h2MJCY108gK0ydNlpcls=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.crl rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:48:42:ae:15:ef:a9:23:67:80:70:c0:27:c4:11:ac:81:cd:f6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624 Validity Not Before: Dec 6 00:40:17 2025 GMT Not After : Dec 7 02:50:17 2025 GMT Subject: CN=52A21C73896620FFF7371476B1759535804A0979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:6b:5a:d6:b8:70:23:e1:c8:79:1e:7f:f1: 86:ab:59:29:49:ca:cd:64:b1:15:73:07:cf:35:8a: 36:96:ea:84:2c:58:5d:70:f1:0b:7c:8b:9c:0b:6d: ca:36:fb:34:91:e4:fe:02:37:02:d2:ed:f9:41:50: b2:07:3b:df:a9:d5:e9:e4:4b:7c:a5:92:73:ac:9e: 97:f1:04:49:10:ad:0f:83:e4:8a:d9:87:58:6f:61: a4:b3:39:78:8d:bf:59:d9:79:93:41:f9:b3:07:63: c2:84:f2:18:d2:a0:d1:74:fe:41:b3:4f:6d:0c:1a: 2c:3a:fb:71:fa:91:97:61:32:f2:bc:3a:fa:8f:3b: f8:a1:c9:7f:25:14:c6:97:66:a5:72:1c:0f:58:f7: 24:68:dc:e7:d8:4e:85:92:9e:22:4a:d4:fb:de:36: 5a:23:f6:7b:90:d1:dd:c7:f5:53:4f:24:21:8b:24: fa:75:e5:fe:f0:ef:67:79:0a:88:4b:3f:76:5c:e8: 4e:fb:18:88:06:39:9a:57:df:61:0a:d4:20:62:ab: 2b:fe:3d:26:76:ae:30:52:9a:fc:63:fd:9d:a0:89: c2:17:48:4f:29:ce:ae:74:a4:07:1d:bf:d2:e3:25: 75:be:b1:3c:82:7b:64:c5:67:d1:cc:2b:eb:eb:48: 98:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:1C:73:89:66:20:FF:F7:37:14:76:B1:75:95:35:80:4A:09:79 X509v3 Authority Key Identifier: keyid:AC:5B:09:55:2A:68:EA:DD:67:DD:35:DE:88:EC:BD:0C:5D:B9:D6:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2d:e9:7b:48:3c:49:6f:93:5d:58:45:69:ff:95:62:e5:31: ab:1b:79:94:9c:f0:8c:69:97:1d:e9:7f:85:d0:0b:fb:dc:e8: d7:21:4c:91:20:95:2a:74:af:5f:44:63:dc:2c:1c:f1:f8:f3: 96:e7:cb:9b:c3:bc:04:45:1c:ea:83:81:47:fc:18:f0:c9:f5: fc:14:50:24:8e:a3:a8:48:53:71:5c:8b:c7:b6:8b:ff:75:42: e5:a7:0c:52:56:80:75:e1:05:d0:35:67:e5:4c:aa:9f:1a:66: 2b:f4:e8:26:7e:4f:07:a0:a8:fa:4d:ea:ad:38:e5:f2:74:89: 17:35:11:25:f5:67:cf:25:7f:a9:84:ff:f7:92:f9:4f:ae:d8: bf:cf:fc:4b:58:ab:e9:ec:38:b1:1a:5c:6f:43:b5:d9:56:7e: ec:87:76:c6:46:0f:db:bb:ee:4a:f6:1d:1f:72:7b:50:f2:f4: a7:db:25:9d:d5:7a:bc:cd:59:81:99:a2:a4:62:5a:33:ca:90: d2:44:1a:66:ee:61:9b:bd:7d:23:8f:08:df:c1:94:e2:d9:2a: 2b:73:08:fd:f8:a2:e5:34:bb:d8:a2:1f:e1:e0:45:50:0f:b1: 5e:6d:7d:44:f6:88:81:b0:56:3a:b5:c4:2d:62:e9:0d:91:86: a6:b7:62:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHEhCrhXvqSNngHDAJ8QRrIHN9ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1QjA5NTUyQTY4RUFERDY3REQzNURFODhFQ0JEMEM1 REI5RDYyNDAeFw0yNTEyMDYwMDQwMTdaFw0yNTEyMDcwMjUwMTdaMDMxMTAvBgNV BAMTKDUyQTIxQzczODk2NjIwRkZGNzM3MTQ3NkIxNzU5NTM1ODA0QTA5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOmta1rhwI+HIeR5/8YarWSlJ ys1ksRVzB881ijaW6oQsWF1w8Qt8i5wLbco2+zSR5P4CNwLS7flBULIHO9+p1enk S3ylknOsnpfxBEkQrQ+D5IrZh1hvYaSzOXiNv1nZeZNB+bMHY8KE8hjSoNF0/kGz T20MGiw6+3H6kZdhMvK8OvqPO/ihyX8lFMaXZqVyHA9Y9yRo3OfYToWSniJK1Pve Nloj9nuQ0d3H9VNPJCGLJPp15f7w72d5CohLP3Zc6E77GIgGOZpX32EK1CBiqyv+ PSZ2rjBSmvxj/Z2gicIXSE8pzq50pAcdv9LjJXW+sTyCe2TFZ9HMK+vrSJgtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUqIcc4lmIP/3NxR2sXWVNYBKCXkwHwYDVR0j BBgwFoAUrFsJVSpo6t1n3TXeiOy9DF251iQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTVLcG9XM0FxdFZjcjVMeks3U25mcVU2TXhYYlYyMlJSTG9oaWc5ZFBm WksvMC9BQzVCMDk1NTJBNjhFQURENjdERDM1REU4OEVDQkQwQzVEQjlENjI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNUIwOTU1MkE2OEVBREQ2 N0REMzVERTg4RUNCRDBDNURCOUQ2MjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTVLcG9XM0FxdFZjcjVMeks3U25mcVU2TXhYYlYyMlJSTG9oaWc5ZFBmWksvMC9B QzVCMDk1NTJBNjhFQURENjdERDM1REU4OEVDQkQwQzVEQjlENjI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvi3pe0g8SW+TXVhFaf+VYuUxqxt5lJzwjGmXHel/hdAL+9zo1yFMkSCVKnSv X0Rj3Cwc8fjzlufLm8O8BEUc6oOBR/wY8Mn1/BRQJI6jqEhTcVyLx7aL/3VC5acM UlaAdeEF0DVn5UyqnxpmK/ToJn5PB6Co+k3qrTjl8nSJFzURJfVnzyV/qYT/95L5 T67Yv8/8S1ir6ew4sRpcb0O12VZ+7Id2xkYP27vuSvYdH3J7UPL0p9slndV6vM1Z gZmipGJaM8qQ0kQaZu5hm719I48I38GU4tkqK3MI/fii5TS72KIf4eBFUA+xXm19 RPaIgbBWOrXELWLpDZGGprdi6g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:46 2025 by rpki-client