This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft File: 687D5F008B520395E4289191144220E2C472A669.mft (raw, json) Hash identifier: F6hhfcKJaEk29H9ZPs8PCpJjAqedMHUbDs3OmBf8GIw= Subject key identifier: EC:2F:0E:0A:FB:0D:BE:F1:BC:09:61:1D:E3:6E:4C:3E:5B:8E:6F:47 Authority key identifier: 68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69 Certificate issuer: /CN=687D5F008B520395E4289191144220E2C472A669 Certificate serial: 0EED5844F8CE1FBF8CF9C821F13CA603B54361EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft Manifest number: 67 Signing time: Sat 06 Dec 2025 16:22:34 +0000 Manifest this update: Sat 06 Dec 2025 16:17:34 +0000 Manifest next update: Sun 07 Dec 2025 18:32:34 +0000 Files and hashes: 1: 687D5F008B520395E4289191144220E2C472A669.crl (hash: X/UMu8xdoilxRpJl0p3IyWdcHd2MY2zl3z3wcY2hY/I=) 2: 3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa (hash: kdjvMgt4WKFDG11VUvvzllBV2iitiEy2lt7hQDUlrNU=) 3: 323830343a326232343a3a2f33322d3438203d3e20323635313337.roa (hash: ijEr3f7j1DppUG1sCN5o0v9QuT/FdCpQy+KDTJiXd6E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ed:58:44:f8:ce:1f:bf:8c:f9:c8:21:f1:3c:a6:03:b5:43:61:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687D5F008B520395E4289191144220E2C472A669 Validity Not Before: Dec 6 16:17:34 2025 GMT Not After : Dec 7 18:32:34 2025 GMT Subject: CN=EC2F0E0AFB0DBEF1BC09611DE36E4C3E5B8E6F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:bc:dd:cf:bc:22:51:62:7e:b2:75:33:46: 89:99:8a:bc:79:5f:f1:e6:09:dc:7f:75:d8:7e:e1: 9a:49:f3:14:1d:d3:dd:fb:14:86:6c:b2:29:fa:5e: 58:f6:87:f2:89:ee:28:77:56:47:ea:3f:00:55:91: 11:a2:9c:eb:1a:af:ec:13:2b:78:5f:dd:f9:68:c5: d8:96:75:55:37:40:60:26:2c:5a:19:fa:e2:2b:35: 80:fb:13:43:b9:80:94:c5:f0:f8:ee:e0:51:27:bd: 52:5e:f6:ce:60:ec:9a:8b:99:80:96:ea:51:4a:30: b6:8b:be:b9:7e:6c:d3:15:8d:6a:f8:36:35:5f:8d: 6b:8b:40:f9:33:8d:d9:2d:c1:be:8c:29:30:e1:fa: 5d:fc:c9:75:26:19:7f:a8:4c:0c:9a:7f:b4:81:e5: 1f:31:25:b6:54:f4:3f:f0:1c:f9:64:b3:d0:b3:9c: 56:93:29:ab:54:e4:44:38:e1:77:b6:6f:11:b5:3d: 55:55:cb:e7:da:e2:dd:d2:c0:ce:39:7e:f2:82:e2: 1c:56:80:05:79:85:cb:c8:23:77:1d:74:5b:56:73: 20:67:35:27:2c:48:8f:b7:a2:19:2e:9a:64:5b:8d: 50:30:94:a5:4f:06:7c:19:8c:12:c2:2a:a3:4c:ba: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:0E:0A:FB:0D:BE:F1:BC:09:61:1D:E3:6E:4C:3E:5B:8E:6F:47 X509v3 Authority Key Identifier: keyid:68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b7:61:0f:69:3b:ae:2f:82:1c:a3:6b:ee:79:be:69:7e:91: 20:df:69:77:b0:58:15:11:84:34:bf:1c:01:77:9f:ec:dd:b2: 12:e4:cc:60:ee:d3:d4:7e:c1:28:7f:dc:06:e3:a9:ee:7b:c1: e6:b9:4c:97:76:f9:8f:0b:9e:b5:21:48:5c:33:4e:82:81:c8: b9:be:fd:9d:ad:47:c6:61:24:41:71:8c:ea:06:87:e0:72:05: 4e:9a:70:bd:5e:9d:e4:b7:92:3b:88:40:0e:ba:0d:38:e6:75: 24:e8:92:e6:91:00:bd:b0:0c:61:dc:64:55:43:0f:59:a5:7a: d6:01:80:d0:37:f2:59:5b:f2:3c:bf:5a:3a:f4:d6:fe:39:48: da:e8:8a:d1:39:64:dc:59:37:dc:39:cd:9b:49:75:f4:cd:6e: e6:1e:dd:5c:0f:da:95:9d:62:b0:71:95:46:10:be:11:c2:d7: 1a:8f:25:39:e0:f4:da:0d:04:21:ca:a8:af:53:89:51:3a:6b: d7:2d:40:d1:29:99:5b:1a:c8:37:8d:e7:b4:d2:2e:99:e2:9b: 01:e8:83:fa:87:35:f9:d9:31:4f:31:6a:ab:55:1a:a6:e4:7d: 8d:31:89:11:56:7a:60:2c:47:e0:6b:16:69:49:f6:f5:23:e2: d1:50:7c:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDu1YRPjOH7+M+cgh8TymA7VDYewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3RDVGMDA4QjUyMDM5NUU0Mjg5MTkxMTQ0MjIwRTJD NDcyQTY2OTAeFw0yNTEyMDYxNjE3MzRaFw0yNTEyMDcxODMyMzRaMDMxMTAvBgNV BAMTKEVDMkYwRTBBRkIwREJFRjFCQzA5NjExREUzNkU0QzNFNUI4RTZGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJ7zdz7wiUWJ+snUzRomZirx5 X/HmCdx/ddh+4ZpJ8xQd0937FIZssin6Xlj2h/KJ7ih3VkfqPwBVkRGinOsar+wT K3hf3floxdiWdVU3QGAmLFoZ+uIrNYD7E0O5gJTF8Pju4FEnvVJe9s5g7JqLmYCW 6lFKMLaLvrl+bNMVjWr4NjVfjWuLQPkzjdktwb6MKTDh+l38yXUmGX+oTAyaf7SB 5R8xJbZU9D/wHPlks9CznFaTKatU5EQ44Xe2bxG1PVVVy+fa4t3SwM45fvKC4hxW gAV5hcvII3cddFtWcyBnNScsSI+3ohkummRbjVAwlKVPBnwZjBLCKqNMuo9bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7C8OCvsNvvG8CWEd425MPluOb0cwHwYDVR0j BBgwFoAUaH1fAItSA5XkKJGRFEIg4sRypmkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdpQmZmZ3hEQnhZcWR1VkJxWFZKUFJ0aWdpRDFrbjVSd3k2RGVlRUt4 a0wvMC82ODdENUYwMDhCNTIwMzk1RTQyODkxOTExNDQyMjBFMkM0NzJBNjY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0Q1RjAwOEI1MjAzOTVF NDI4OTE5MTE0NDIyMEUyQzQ3MkE2NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdpQmZmZ3hEQnhZcWR1VkJxWFZKUFJ0aWdpRDFrbjVSd3k2RGVlRUt4a0wvMC82 ODdENUYwMDhCNTIwMzk1RTQyODkxOTExNDQyMjBFMkM0NzJBNjY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGbdhD2k7ri+CHKNr7nm+aX6RIN9pd7BYFRGENL8cAXef7N2yEuTMYO7T1H7B KH/cBuOp7nvB5rlMl3b5jwuetSFIXDNOgoHIub79na1HxmEkQXGM6gaH4HIFTppw vV6d5LeSO4hADroNOOZ1JOiS5pEAvbAMYdxkVUMPWaV61gGA0DfyWVvyPL9aOvTW /jlI2uiK0Tlk3Fk33DnNm0l19M1u5h7dXA/alZ1isHGVRhC+EcLXGo8lOeD02g0E Icqor1OJUTpr1y1A0SmZWxrIN43ntNIumeKbAeiD+oc1+dkxTzFqq1UapuR9jTGJ EVZ6YCxH4GsWaUn29SPi0VB8RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:42 2025 by rpki-client