This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/C78D449A00869AA878AA59AA5FA8ACA505083EA8.mft File: C78D449A00869AA878AA59AA5FA8ACA505083EA8.mft (raw, json) Hash identifier: vQLUhVYehCPN7XLtuwZOJX7JKndRCQA9RT15H5dowIY= Subject key identifier: CE:9F:3B:9D:B7:29:43:8C:25:91:7F:26:13:DE:33:B4:FC:01:66:0B Authority key identifier: C7:8D:44:9A:00:86:9A:A8:78:AA:59:AA:5F:A8:AC:A5:05:08:3E:A8 Certificate issuer: /CN=C78D449A00869AA878AA59AA5FA8ACA505083EA8 Certificate serial: 3252579938B2DD7240BF30EA8945AA411F202528 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C78D449A00869AA878AA59AA5FA8ACA505083EA8.cer Subject info access: rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/C78D449A00869AA878AA59AA5FA8ACA505083EA8.mft Manifest number: 52 Signing time: Sat 06 Dec 2025 21:04:27 +0000 Manifest this update: Sat 06 Dec 2025 20:59:27 +0000 Manifest next update: Mon 08 Dec 2025 00:06:27 +0000 Files and hashes: 1: C78D449A00869AA878AA59AA5FA8ACA505083EA8.crl (hash: sPl5v2GO1kIO2MqAVkpyoTJMNvpGvQ3TvUQex+Q9cB0=) 2: 323830343a386232343a3a2f33322d313238203d3e20323733373134.roa (hash: 86GPO8budMRuzhpzltGSzI+lRThhRE+t/RkcWZcE1og=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/C78D449A00869AA878AA59AA5FA8ACA505083EA8.crl rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/C78D449A00869AA878AA59AA5FA8ACA505083EA8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C78D449A00869AA878AA59AA5FA8ACA505083EA8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 08 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:52:57:99:38:b2:dd:72:40:bf:30:ea:89:45:aa:41:1f:20:25:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C78D449A00869AA878AA59AA5FA8ACA505083EA8 Validity Not Before: Dec 6 20:59:27 2025 GMT Not After : Dec 8 00:06:27 2025 GMT Subject: CN=CE9F3B9DB729438C25917F2613DE33B4FC01660B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:fb:d0:45:4c:93:50:54:d4:e5:25:e0:a8: 53:78:69:35:2b:dd:a8:28:0e:75:67:4a:0a:6f:3e: 1b:ce:1c:c8:c5:ee:e8:d0:a3:e2:88:35:d4:93:3c: db:88:59:9e:c7:17:7c:33:d7:fe:9f:e2:7b:01:37: 30:71:5e:f9:0b:42:c8:1b:50:e0:76:83:80:4c:12: 76:a8:5b:d5:56:c0:83:ed:1b:e0:3c:94:45:14:7a: ba:db:c8:cf:c4:b1:9a:8c:bb:09:12:db:e8:43:60: 5a:d5:6c:22:2c:00:1a:60:74:59:5a:b6:28:7a:81: 57:71:4f:6c:c6:fe:8b:e6:64:64:01:48:ce:31:af: f6:3d:50:af:0c:fe:06:e1:3e:2c:ed:03:19:6f:d1: aa:74:2f:02:e7:f1:eb:34:a4:49:d4:72:a3:ad:3f: b8:19:54:dc:ee:5b:3b:85:b9:a4:21:04:a9:3f:f1: 03:b9:ec:02:83:bf:75:ed:f1:18:dc:c0:b2:af:96: 51:1c:ec:ac:72:9b:33:da:00:72:00:80:04:4f:7c: 39:34:29:af:4f:03:2c:87:b2:03:f5:b3:13:08:5a: 9f:e0:c8:b0:6e:9a:68:e1:99:aa:ed:7d:ee:83:92: 03:54:22:e4:f4:8d:80:12:9e:4a:2f:74:10:8a:b3: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9F:3B:9D:B7:29:43:8C:25:91:7F:26:13:DE:33:B4:FC:01:66:0B X509v3 Authority Key Identifier: keyid:C7:8D:44:9A:00:86:9A:A8:78:AA:59:AA:5F:A8:AC:A5:05:08:3E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/C78D449A00869AA878AA59AA5FA8ACA505083EA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C78D449A00869AA878AA59AA5FA8ACA505083EA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/C78D449A00869AA878AA59AA5FA8ACA505083EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:02:a7:e3:b7:91:21:50:be:2f:98:70:7e:ca:27:c6:c1:0b: 2e:d7:3d:46:77:0b:ab:92:db:a1:89:0a:26:c1:8b:da:9a:f2: a5:eb:ce:f9:82:51:0b:dd:fd:37:42:e4:76:b9:4b:e7:19:11: 04:02:3b:ed:0f:78:06:94:b8:79:b0:10:b9:f9:6e:6b:82:2a: 42:c3:bc:c0:1e:b5:45:69:de:c1:27:af:f9:a7:2c:22:5b:33: d1:49:ee:99:0d:29:4e:8f:6c:f6:c1:19:89:22:31:ec:0c:31: 0b:2a:51:05:c0:67:a7:fb:a9:8f:f3:9e:ed:bf:04:1c:e6:b4: c2:ec:e5:8c:ff:b2:21:a9:53:2b:39:18:6e:78:87:6a:e7:86: c9:5a:43:bd:ce:05:41:ce:5c:77:31:8c:65:cc:f6:94:2b:86: b2:06:81:0f:21:d9:d3:11:5b:38:06:e6:85:48:03:6b:db:02: 8e:41:28:80:41:c1:d9:27:81:64:f7:06:98:aa:89:40:50:9f: e5:24:5c:72:ac:19:00:49:86:5c:dd:e5:b1:b8:d5:cd:c5:d8: 17:7e:aa:9f:9b:6e:7e:0c:da:2c:2e:f7:79:28:91:9a:3f:a4: dc:91:08:95:fc:c9:61:1a:f6:cb:cd:9f:d3:cd:35:dd:ef:b8: 72:d6:fa:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMlJXmTiy3XJAvzDqiUWqQR8gJSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4RDQ0OUEwMDg2OUFBODc4QUE1OUFBNUZBOEFDQTUw NTA4M0VBODAeFw0yNTEyMDYyMDU5MjdaFw0yNTEyMDgwMDA2MjdaMDMxMTAvBgNV BAMTKENFOUYzQjlEQjcyOTQzOEMyNTkxN0YyNjEzREUzM0I0RkMwMTY2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKfvQRUyTUFTU5SXgqFN4aTUr 3agoDnVnSgpvPhvOHMjF7ujQo+KINdSTPNuIWZ7HF3wz1/6f4nsBNzBxXvkLQsgb UOB2g4BMEnaoW9VWwIPtG+A8lEUUerrbyM/EsZqMuwkS2+hDYFrVbCIsABpgdFla tih6gVdxT2zG/ovmZGQBSM4xr/Y9UK8M/gbhPiztAxlv0ap0LwLn8es0pEnUcqOt P7gZVNzuWzuFuaQhBKk/8QO57AKDv3Xt8RjcwLKvllEc7KxymzPaAHIAgARPfDk0 Ka9PAyyHsgP1sxMIWp/gyLBummjhmartfe6DkgNUIuT0jYASnkovdBCKs+AFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzp87nbcpQ4wlkX8mE94ztPwBZgswHwYDVR0j BBgwFoAUx41EmgCGmqh4qlmqX6ispQUIPqgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOU11U0w1aUt6NlRDZzhaQThyc3l3cFlNS2Jxd2lRUVJxWkc3b29OZ3Z4 SHAvMC9DNzhENDQ5QTAwODY5QUE4NzhBQTU5QUE1RkE4QUNBNTA1MDgzRUE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OEQ0NDlBMDA4NjlBQTg3 OEFBNTlBQTVGQThBQ0E1MDUwODNFQTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OU11U0w1aUt6NlRDZzhaQThyc3l3cFlNS2Jxd2lRUVJxWkc3b29OZ3Z4SHAvMC9D NzhENDQ5QTAwODY5QUE4NzhBQTU5QUE1RkE4QUNBNTA1MDgzRUE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEQKn47eRIVC+L5hwfsonxsELLtc9RncLq5LboYkKJsGL2prypevO+YJRC939 N0LkdrlL5xkRBAI77Q94BpS4ebAQuflua4IqQsO8wB61RWnewSev+acsIlsz0Unu mQ0pTo9s9sEZiSIx7AwxCypRBcBnp/upj/Oe7b8EHOa0wuzljP+yIalTKzkYbniH aueGyVpDvc4FQc5cdzGMZcz2lCuGsgaBDyHZ0xFbOAbmhUgDa9sCjkEogEHB2SeB ZPcGmKqJQFCf5SRccqwZAEmGXN3lsbjVzcXYF36qn5tufgzaLC73eSiRmj+k3JEI lfzJYRr2y82f08013e+4ctb6/A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:05 2025 by rpki-client