This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: QsecbTnaaTtSzz6rHg5cq673WdL8h/+SWph+GHFvC3M= Subject key identifier: 7D:B8:C4:28:5E:FC:3B:85:6C:D5:15:6E:48:51:00:B0:98:3D:DB:56 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 2E220B6BE6601305439F290B8A9F016943F2FA24 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 02AE Signing time: Sat 06 Dec 2025 06:14:24 +0000 Manifest this update: Sat 06 Dec 2025 06:09:24 +0000 Manifest next update: Sun 07 Dec 2025 09:30:24 +0000 Files and hashes: 1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) 2: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: 2C8xDVSGlw/9tfb7GVXEEQ4nBPxGdJpUpRknfEq0KfI=) 3: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:22:0b:6b:e6:60:13:05:43:9f:29:0b:8a:9f:01:69:43:f2:fa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Dec 6 06:09:24 2025 GMT Not After : Dec 7 09:30:24 2025 GMT Subject: CN=7DB8C4285EFC3B856CD5156E485100B0983DDB56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:f3:48:98:dd:4d:db:53:2b:2e:3c:88:c3: 62:9a:7c:d9:1b:a9:43:cb:21:d6:d1:88:b7:dd:f2: 5f:08:0c:45:dd:46:82:83:92:44:38:f9:e9:66:01: 7c:3d:b4:f7:32:f3:c0:26:4c:22:6b:7f:58:fe:df: 7b:e3:92:4c:62:88:4e:ff:68:79:95:6f:aa:da:7a: ae:b4:19:72:96:43:f5:12:bb:f9:b7:a3:8f:e0:e7: 35:d1:fb:2d:37:be:4b:21:b8:f8:c8:0b:51:92:36: 1d:ea:d1:59:de:db:6e:b3:05:92:01:4e:0a:af:19: b4:73:7b:a5:1b:b1:08:cc:8f:d8:f6:0d:3a:d6:76: 12:55:7b:f6:7e:df:39:3e:ac:21:90:9e:95:90:be: e7:78:2c:9f:59:4d:4a:3a:21:71:3a:5c:79:1f:83: cb:9f:de:29:63:47:a7:74:4f:cb:fd:a1:07:d6:72: 61:3a:25:f0:67:a7:78:cd:70:47:ba:82:ad:91:2c: f0:d8:8a:ae:ee:53:9a:20:0b:80:92:d5:82:83:29: 06:7c:61:1b:8a:ba:63:20:9d:f3:ac:57:60:cc:35: 5c:7f:20:3d:2b:b5:42:05:25:fa:de:41:06:46:6c: b4:f7:44:e9:99:ad:5e:ee:08:e1:b7:7c:0f:24:14: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B8:C4:28:5E:FC:3B:85:6C:D5:15:6E:48:51:00:B0:98:3D:DB:56 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:44:ed:ce:b9:cf:94:3a:72:19:6c:50:64:fa:58:a6:4e:e1: e6:a9:5d:9f:26:c5:43:cf:84:c9:8d:3d:41:f0:8b:14:b5:27: a1:6b:24:05:16:01:03:ac:ae:17:50:2d:6a:1f:ab:fb:2d:77: 02:05:17:8f:e7:5c:2a:1e:68:6f:ad:b0:3d:d0:e2:af:b3:56: 65:93:d2:fc:ab:79:ff:3e:a3:dd:e0:00:31:0d:50:17:50:92: 43:b7:4b:02:bb:ee:19:51:72:a6:c6:32:57:82:c4:83:df:f8: 76:47:0d:04:33:47:5a:ed:25:a1:fa:7e:37:05:c7:92:2a:c2: 8e:73:96:14:bd:11:30:68:ac:5d:03:6d:a5:1d:ca:36:5f:1b: aa:a3:de:1a:3d:33:81:8b:93:bb:c6:4d:d1:c5:7d:12:9b:10: 6b:8e:42:93:5c:fd:d7:b3:f9:81:e9:b7:11:27:58:09:2d:eb: 16:0c:af:80:ea:38:09:57:01:95:49:6e:de:8e:15:8b:e0:87: 35:3e:be:92:0a:73:84:dd:bc:d8:11:1f:42:a2:cf:77:57:3a: 1f:04:8a:be:8b:0c:a3:aa:21:0b:7b:aa:41:be:bb:26:47:91: d3:c2:57:9e:c9:08:af:01:24:0c:2e:a3:22:48:4e:06:84:08: 58:14:0a:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULiILa+ZgEwVDnykLip8BaUPy+iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTEyMDYwNjA5MjRaFw0yNTEyMDcwOTMwMjRaMDMxMTAvBgNV BAMTKDdEQjhDNDI4NUVGQzNCODU2Q0Q1MTU2RTQ4NTEwMEIwOTgzRERCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxfNImN1N21MrLjyIw2KafNkb qUPLIdbRiLfd8l8IDEXdRoKDkkQ4+elmAXw9tPcy88AmTCJrf1j+33vjkkxiiE7/ aHmVb6raeq60GXKWQ/USu/m3o4/g5zXR+y03vkshuPjIC1GSNh3q0Vne226zBZIB TgqvGbRze6UbsQjMj9j2DTrWdhJVe/Z+3zk+rCGQnpWQvud4LJ9ZTUo6IXE6XHkf g8uf3iljR6d0T8v9oQfWcmE6JfBnp3jNcEe6gq2RLPDYiq7uU5ogC4CS1YKDKQZ8 YRuKumMgnfOsV2DMNVx/ID0rtUIFJfreQQZGbLT3ROmZrV7uCOG3fA8kFLrHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfbjEKF78O4Vs1RVuSFEAsJg921YwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPETtzrnPlDpyGWxQZPpYpk7h5qldnybFQ8+EyY09QfCLFLUnoWskBRYBA6yu F1Atah+r+y13AgUXj+dcKh5ob62wPdDir7NWZZPS/Kt5/z6j3eAAMQ1QF1CSQ7dL ArvuGVFypsYyV4LEg9/4dkcNBDNHWu0lofp+NwXHkirCjnOWFL0RMGisXQNtpR3K Nl8bqqPeGj0zgYuTu8ZN0cV9EpsQa45Ck1z917P5gem3ESdYCS3rFgyvgOo4CVcB lUlu3o4Vi+CHNT6+kgpzhN282BEfQqLPd1c6HwSKvosMo6ohC3uqQb67JkeR08JX nskIrwEkDC6jIkhOBoQIWBQK8g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:43 2025 by rpki-client