This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft File: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json) Hash identifier: CJiaRE6RRJZUQrb/BMgsvRDNUSh35GJgwmCSyfj6roQ= Subject key identifier: 22:0A:E0:22:DB:5F:77:7D:64:07:A5:87:09:C9:01:37:10:E9:2A:72 Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 Certificate issuer: /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Certificate serial: 5F4A05207F5304E34B2D7E1D6ADD9244738DA3AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft Manifest number: 0267 Signing time: Sat 06 Dec 2025 10:44:48 +0000 Manifest this update: Sat 06 Dec 2025 10:39:48 +0000 Manifest next update: Sun 07 Dec 2025 12:11:48 +0000 Files and hashes: 1: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: Q1uNYyBjGbyIhtDBLHYu22N+qGJlESCPootyri/UJWg=) 2: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: 6rw4YD/Tlj0T56maVYNrvrC9bGL8mb00Cp47U4QV7JE=) 3: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: tnjJpaX42qhrNEfwxFNIHRMECda6natWe4mEIY7HkLY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 12:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4a:05:20:7f:53:04:e3:4b:2d:7e:1d:6a:dd:92:44:73:8d:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Validity Not Before: Dec 6 10:39:48 2025 GMT Not After : Dec 7 12:11:48 2025 GMT Subject: CN=220AE022DB5F777D6407A58709C9013710E92A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:25:f7:1b:9f:e0:78:62:a1:78:d7:c6:49: 36:19:f3:8e:7c:45:6f:e0:8e:ab:fd:0b:85:1e:bd: 70:a1:f7:fa:1a:6d:44:78:e1:bc:e6:b3:54:71:a3: 5b:b7:45:4d:9c:51:2a:69:10:d4:f8:82:10:1e:0f: ed:e8:a0:89:31:9e:8f:1a:6e:f5:91:24:a1:9e:59: cf:c7:64:6d:15:5f:8d:3c:91:72:ca:75:1f:b9:b0: f1:c3:2c:ea:28:d9:2d:da:fd:89:92:ee:ae:9c:0a: 83:38:b5:d6:9c:b5:6e:da:64:db:54:ed:93:4f:bb: 38:c6:39:14:bb:2b:6d:98:15:41:3f:74:dd:35:67: 9b:be:b7:00:35:17:ab:13:77:d4:0c:c9:d3:3d:54: 13:04:07:c0:3d:88:38:8b:e3:83:e0:93:0a:51:c0: c0:f4:79:ea:9d:73:72:a9:78:ae:53:0d:b4:48:f5: 84:37:27:33:c7:b6:78:41:c3:ac:b3:7b:fc:b4:fb: bd:1d:35:9c:f5:6a:d5:e1:6d:04:d7:5b:2c:2f:8d: 20:e5:07:d4:60:55:88:95:f4:7d:03:cf:ff:26:6c: a9:2e:6f:d4:aa:0c:51:26:8f:6d:22:8c:5e:bb:9a: b3:24:f9:e7:16:16:41:07:03:2a:81:d5:c8:85:31: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:E0:22:DB:5F:77:7D:64:07:A5:87:09:C9:01:37:10:E9:2A:72 X509v3 Authority Key Identifier: keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:03:c2:24:57:37:0f:d4:5b:f1:6d:6d:02:3b:ae:00:90:93: 78:cf:2d:72:ea:f3:dd:c6:15:fe:4e:e0:aa:30:e0:3b:60:85: 52:a8:a6:2a:b6:c9:96:64:13:d4:7f:02:b8:a3:b0:06:7a:05: 1b:ab:05:5f:37:e8:b8:73:79:8f:9e:8d:dd:46:c9:3d:41:d9: 0b:ad:49:42:06:41:d3:3a:40:97:64:52:75:9b:93:78:6f:01: 11:aa:1a:85:14:9b:ab:0f:f8:fb:04:d1:bc:7b:3a:41:c5:0c: e3:b0:ed:88:41:08:87:7a:33:94:85:62:b3:e2:2b:9c:7f:5c: b3:a0:f2:59:f3:b1:a4:a5:d4:54:3c:fc:48:04:09:39:60:d9: 3c:79:0d:01:89:5c:14:6f:6f:74:e3:56:ee:aa:10:97:2a:bf: 5c:72:61:94:5d:20:82:af:c4:d8:4b:d5:52:1b:52:d7:4f:0c: 8a:86:d2:54:18:95:3b:db:84:de:1e:89:00:6d:6e:8d:df:a2: cb:86:ee:35:b3:98:5e:64:a3:63:0f:f3:fe:39:2f:59:38:86: bd:a1:c2:c5:09:55:58:41:bd:f2:53:a3:fc:01:2a:a0:43:4f: 13:5b:db:e7:5d:3f:d3:0d:fa:48:ae:54:57:2b:09:bf:c0:93: c7:e8:b9:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX0oFIH9TBONLLX4dat2SRHONo64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2 RjY2QUJFOTAeFw0yNTEyMDYxMDM5NDhaFw0yNTEyMDcxMjExNDhaMDMxMTAvBgNV BAMTKDIyMEFFMDIyREI1Rjc3N0Q2NDA3QTU4NzA5QzkwMTM3MTBFOTJBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfiX3G5/geGKheNfGSTYZ8458 RW/gjqv9C4UevXCh9/oabUR44bzms1Rxo1u3RU2cUSppENT4ghAeD+3ooIkxno8a bvWRJKGeWc/HZG0VX408kXLKdR+5sPHDLOoo2S3a/YmS7q6cCoM4tdactW7aZNtU 7ZNPuzjGORS7K22YFUE/dN01Z5u+twA1F6sTd9QMydM9VBMEB8A9iDiL44PgkwpR wMD0eeqdc3KpeK5TDbRI9YQ3JzPHtnhBw6yze/y0+70dNZz1atXhbQTXWywvjSDl B9RgVYiV9H0Dz/8mbKkub9SqDFEmj20ijF67mrMk+ecWFkEHAyqB1ciFMTSvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIgrgIttfd31kB6WHCckBNxDpKnIwHwYDVR0j BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4 MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC85 Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZwPCJFc3D9Rb8W1tAjuuAJCTeM8tcurz3cYV/k7gqjDgO2CFUqimKrbJlmQT 1H8CuKOwBnoFG6sFXzfouHN5j56N3UbJPUHZC61JQgZB0zpAl2RSdZuTeG8BEaoa hRSbqw/4+wTRvHs6QcUM47DtiEEIh3ozlIVis+IrnH9cs6DyWfOxpKXUVDz8SAQJ OWDZPHkNAYlcFG9vdONW7qoQlyq/XHJhlF0ggq/E2EvVUhtS108MiobSVBiVO9uE 3h6JAG1ujd+iy4buNbOYXmSjYw/z/jkvWTiGvaHCxQlVWEG98lOj/AEqoENPE1vb 510/0w36SK5UVysJv8CTx+i53Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:34 2025 by rpki-client