This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft File: 0B07367A81B15A220D69956D612B34AE5A9E594E.mft (raw, json) Hash identifier: KSPRdZONJ1BRWLuAcXECCNvJwI3PS0nH1SiVl3TgWQk= Subject key identifier: BA:6A:7A:58:FA:96:DD:AD:D3:4F:E8:DA:34:F2:22:80:6E:4D:20:4D Authority key identifier: 0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E Certificate issuer: /CN=0B07367A81B15A220D69956D612B34AE5A9E594E Certificate serial: 35060B2E6F21DF3640C532B4B693AAA1F726B108 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer Subject info access: rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft Manifest number: 032C Signing time: Fri 05 Dec 2025 19:14:20 +0000 Manifest this update: Fri 05 Dec 2025 19:09:20 +0000 Manifest next update: Sat 06 Dec 2025 21:44:20 +0000 Files and hashes: 1: 0B07367A81B15A220D69956D612B34AE5A9E594E.crl (hash: QNruMRMMdSKRrMUS5SaR24sfwFTYMtTv7LDeUORPsi4=) 2: 3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa (hash: hWVuso3iktMsN6arhEMEV54TKHIUBHX/bLX92j11JB4=) 3: 323830343a326662303a3a2f33322d3438203d3e20323634393036.roa (hash: WIThuXa2HV7nmvFdNH5FyA7bQBhQqT2AVu39oS5fCnA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:06:0b:2e:6f:21:df:36:40:c5:32:b4:b6:93:aa:a1:f7:26:b1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B07367A81B15A220D69956D612B34AE5A9E594E Validity Not Before: Dec 5 19:09:20 2025 GMT Not After : Dec 6 21:44:20 2025 GMT Subject: CN=BA6A7A58FA96DDADD34FE8DA34F222806E4D204D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:3e:50:f2:a8:ef:53:81:ac:81:3b:36:95: ce:29:eb:77:12:03:32:f2:a4:0e:95:bd:b3:d2:e9: 86:97:77:8d:24:ff:b0:89:00:f8:f8:44:89:b3:f6: 05:3f:c4:19:ea:0b:51:00:88:64:4e:68:17:f9:e3: d5:bc:04:7f:3a:d0:a0:53:70:4e:b8:e6:1f:f1:14: 63:37:76:b0:eb:bd:56:4b:cd:d0:3e:0d:32:3f:a1: c9:de:65:e5:49:a7:dd:eb:6a:41:41:1b:c4:a7:e6: b7:c0:92:d0:60:41:09:ff:1f:1e:0d:88:4c:c8:d3: e4:bd:39:4e:99:f0:31:4c:19:6d:4e:e1:ba:8b:76: f0:8a:29:e8:21:5a:de:18:cf:78:38:b4:2a:85:20: d7:00:06:52:d4:ff:6f:4f:96:1a:7a:63:ff:5d:ad: a8:f0:ee:00:12:bc:b4:f4:e9:84:6f:47:c9:2e:8c: a1:fe:72:73:97:3b:29:ab:f4:9e:b5:a4:fc:76:f3: 20:1e:38:db:1c:e8:5d:68:85:a3:0a:35:a2:1a:f1: 52:ef:cb:11:4f:74:e5:bd:45:74:2f:e1:38:46:29: e9:0e:8e:8b:b6:31:11:3e:34:fd:5a:19:91:e9:9c: 76:a1:3f:6e:71:21:83:4c:76:bc:49:77:99:62:ce: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6A:7A:58:FA:96:DD:AD:D3:4F:E8:DA:34:F2:22:80:6E:4D:20:4D X509v3 Authority Key Identifier: keyid:0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b6:2f:9d:e4:54:aa:93:7f:33:4d:24:9c:17:c7:76:86:5b: d6:21:89:3e:75:2a:ca:48:01:be:94:78:26:e8:23:b7:1e:ba: 1e:13:f9:23:46:7b:de:37:c0:6e:bf:53:46:6a:e7:8b:de:80: e1:da:3a:6d:a4:b5:05:fe:ca:84:e4:e2:84:b9:f7:c6:64:06: ae:8c:51:2e:c3:08:0b:d3:bb:c2:50:53:bf:57:76:13:6f:1b: 1f:60:e9:74:eb:9b:7d:51:c6:61:28:2e:f9:0c:7c:62:da:1e: d2:8f:e3:01:f1:5a:14:2b:a2:9a:9d:18:3d:8e:32:61:31:43: a0:2a:b2:76:84:13:37:71:32:b5:f2:f9:38:d4:ea:dd:a8:c9: df:81:e6:a5:0e:33:62:6c:36:43:c3:4d:84:54:7c:ab:54:fb: d6:c7:06:31:21:d1:93:dc:18:80:6e:2e:4d:61:62:a4:8c:58: 2e:3e:36:5b:89:ac:c6:ce:6f:d7:d8:dd:61:15:73:e2:d2:34: 25:0c:3f:5f:e4:b5:86:7d:98:4e:67:98:4b:fc:ba:df:a6:b4: 24:4a:b0:a6:20:ff:ab:2e:5e:eb:46:42:46:dd:48:a7:ac:cc: c5:6e:cb:63:46:c2:b6:63:11:8e:c4:55:31:f5:37:4b:a5:96: 1a:51:51:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNQYLLm8h3zZAxTK0tpOqofcmsQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIwNzM2N0E4MUIxNUEyMjBENjk5NTZENjEyQjM0QUU1 QTlFNTk0RTAeFw0yNTEyMDUxOTA5MjBaFw0yNTEyMDYyMTQ0MjBaMDMxMTAvBgNV BAMTKEJBNkE3QTU4RkE5NkREQUREMzRGRThEQTM0RjIyMjgwNkU0RDIwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCT5Q8qjvU4GsgTs2lc4p63cS AzLypA6VvbPS6YaXd40k/7CJAPj4RImz9gU/xBnqC1EAiGROaBf549W8BH860KBT cE645h/xFGM3drDrvVZLzdA+DTI/ocneZeVJp93rakFBG8Sn5rfAktBgQQn/Hx4N iEzI0+S9OU6Z8DFMGW1O4bqLdvCKKeghWt4Yz3g4tCqFINcABlLU/29Plhp6Y/9d rajw7gASvLT06YRvR8kujKH+cnOXOymr9J61pPx28yAeONsc6F1ohaMKNaIa8VLv yxFPdOW9RXQv4ThGKekOjou2MRE+NP1aGZHpnHahP25xIYNMdrxJd5lizqKZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUump6WPqW3a3TT+jaNPIigG5NIE0wHwYDVR0j BBgwFoAUCwc2eoGxWiINaZVtYSs0rlqeWU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWJaNG5oNERoQVRFZktNcnZ3TWZVQkVRWnRXaEI0MkZ4WkRzVk5NRnA1 YlYvMS8wQjA3MzY3QTgxQjE1QTIyMEQ2OTk1NkQ2MTJCMzRBRTVBOUU1OTRFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMDczNjdBODFCMTVBMjIw RDY5OTU2RDYxMkIzNEFFNUE5RTU5NEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWJaNG5oNERoQVRFZktNcnZ3TWZVQkVRWnRXaEI0MkZ4WkRzVk5NRnA1YlYvMS8w QjA3MzY3QTgxQjE1QTIyMEQ2OTk1NkQ2MTJCMzRBRTVBOUU1OTRFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgLYvneRUqpN/M00knBfHdoZb1iGJPnUqykgBvpR4Jugjtx66HhP5I0Z73jfA br9TRmrni96A4do6baS1Bf7KhOTihLn3xmQGroxRLsMIC9O7wlBTv1d2E28bH2Dp dOubfVHGYSgu+Qx8Ytoe0o/jAfFaFCuimp0YPY4yYTFDoCqydoQTN3EytfL5ONTq 3ajJ34HmpQ4zYmw2Q8NNhFR8q1T71scGMSHRk9wYgG4uTWFipIxYLj42W4msxs5v 19jdYRVz4tI0JQw/X+S1hn2YTmeYS/y636a0JEqwpiD/qy5e60ZCRt1Ip6zMxW7L Y0bCtmMRjsRVMfU3S6WWGlFRbg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:35 2025 by rpki-client