This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft File: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft (raw, json) Hash identifier: BgxCRIYc33g/xZX1/TGqugowFCoDOryBiQKUr+5jEGM= Subject key identifier: 56:BE:F7:23:C8:AF:76:30:62:2E:50:B9:4C:9F:CE:F0:81:F7:23:33 Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE Certificate issuer: /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Certificate serial: 5C535D835A6142E704CE9D7213E05DC1CE84876B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft Manifest number: 0195 Signing time: Fri 05 Dec 2025 21:23:52 +0000 Manifest this update: Fri 05 Dec 2025 21:18:52 +0000 Manifest next update: Sun 07 Dec 2025 01:02:52 +0000 Files and hashes: 1: 323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (hash: 5fhRq321I9L3kTTV+fwC5X89HSpGKCAld/CiGq3rZfQ=) 2: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl (hash: VGGRn1RHe5+GZ5r2xkrw0vShBssQiyKrSIbBdZ+JaM8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:53:5d:83:5a:61:42:e7:04:ce:9d:72:13:e0:5d:c1:ce:84:87:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Validity Not Before: Dec 5 21:18:52 2025 GMT Not After : Dec 7 01:02:52 2025 GMT Subject: CN=56BEF723C8AF7630622E50B94C9FCEF081F72333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:33:a8:42:f4:24:f9:32:86:99:71:e6:f1: a6:d7:03:6f:9a:34:d9:19:f7:b2:4a:d2:bc:d7:b8: 22:e1:55:c0:c8:b2:43:d6:2c:4b:0e:6f:e6:64:01: ed:da:2a:08:b7:7c:73:99:23:12:67:2f:a0:e6:50: 57:f2:2c:45:9f:b9:57:da:7a:93:51:d1:20:c1:5c: f3:fa:a0:14:cf:8f:05:3b:fe:11:9f:93:79:89:67: d1:b1:71:08:be:88:f3:48:85:c1:d8:79:6f:47:4e: de:41:4d:65:77:87:66:fc:bb:89:a1:26:e4:75:44: 0c:51:0f:e3:63:c9:13:b0:df:ee:fe:54:8c:58:97: 80:2e:2f:04:e7:ce:2c:3d:0c:99:91:a0:a6:c9:c7: a6:bd:67:d9:d5:cd:33:0e:34:42:60:ed:40:51:df: 3f:21:7a:23:13:dc:c3:d9:3a:4a:9c:c1:22:5c:aa: ca:f4:0c:3e:e1:be:18:dd:4b:0f:fe:f7:96:77:28: 24:f7:10:6f:12:33:ba:e0:4e:8a:46:cc:09:b9:a6: 00:e1:25:4b:50:7c:fd:58:9b:63:75:02:0d:ee:97: d1:bc:2e:d3:f4:11:fb:55:b9:8e:fb:45:df:91:39: c4:c6:85:29:cd:d4:d6:0d:f8:6f:44:0b:2a:4f:c5: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BE:F7:23:C8:AF:76:30:62:2E:50:B9:4C:9F:CE:F0:81:F7:23:33 X509v3 Authority Key Identifier: keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a5:de:4d:e2:82:a7:de:57:49:dc:15:7b:59:b3:e0:e6:07: 04:6d:94:6e:9e:9e:b0:71:f5:a5:dd:91:5a:57:98:30:5f:ab: 96:c3:12:ba:75:75:16:15:24:b3:12:7f:f0:9d:b0:2f:3c:e5: 41:cf:4f:0b:99:3a:95:14:49:a4:9e:41:e2:a2:4c:31:e0:75: 1c:7c:1b:ef:25:bf:52:5e:03:9b:65:37:9b:00:2c:de:0c:09: 5a:83:c3:82:54:46:fb:96:d4:08:67:da:0e:44:94:68:11:be: eb:71:e4:d1:69:90:93:b6:b0:8f:2c:96:98:75:a4:e0:33:8f: 85:eb:23:77:f2:9d:88:35:23:f3:4d:eb:ea:cb:8a:50:18:25: 74:57:d3:75:70:0e:dd:23:3f:a5:07:e5:75:c4:99:b7:d9:14: 16:ff:cb:06:05:76:e8:cb:e7:b0:7b:13:06:4d:77:45:15:87: 7e:6e:0e:e0:12:e2:93:c4:1d:21:1e:e6:df:7c:4c:f5:c8:b8: a4:07:a1:5b:24:45:c7:c6:97:76:8b:58:8e:b1:f4:ba:a4:0b: 39:31:35:65:2e:13:e5:5d:a9:00:51:8d:8c:1b:6f:65:76:65: 99:a4:f1:6d:3a:6c:cc:88:91:a2:2d:c3:fe:1e:5f:23:22:94: 19:5e:12:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXFNdg1phQucEzp1yE+Bdwc6Eh2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4NzNDM0RDMDYxODIxRkZFRjFDMjBFNjQ4NDUxQjhG RTY0NkZBRTAeFw0yNTEyMDUyMTE4NTJaFw0yNTEyMDcwMTAyNTJaMDMxMTAvBgNV BAMTKDU2QkVGNzIzQzhBRjc2MzA2MjJFNTBCOTRDOUZDRUYwODFGNzIzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0zOoQvQk+TKGmXHm8abXA2+a NNkZ97JK0rzXuCLhVcDIskPWLEsOb+ZkAe3aKgi3fHOZIxJnL6DmUFfyLEWfuVfa epNR0SDBXPP6oBTPjwU7/hGfk3mJZ9GxcQi+iPNIhcHYeW9HTt5BTWV3h2b8u4mh JuR1RAxRD+NjyROw3+7+VIxYl4AuLwTnziw9DJmRoKbJx6a9Z9nVzTMONEJg7UBR 3z8heiMT3MPZOkqcwSJcqsr0DD7hvhjdSw/+95Z3KCT3EG8SM7rgTopGzAm5pgDh JUtQfP1Ym2N1Ag3ul9G8LtP0EftVuY77Rd+ROcTGhSnN1NYN+G9ECypPxQLhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVr73I8ivdjBiLlC5TJ/O8IH3IzMwHwYDVR0j BBgwFoAUioc8PcBhgh/+8cIOZIRRuP5kb64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFh a2UvMC84QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBODczQzNEQzA2MTgyMUZG RUYxQzIwRTY0ODQ1MUI4RkU2NDZGQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFha2UvMC84 QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKXeTeKCp95XSdwVe1mz4OYHBG2Ubp6esHH1pd2RWleYMF+rlsMSunV1FhUk sxJ/8J2wLzzlQc9PC5k6lRRJpJ5B4qJMMeB1HHwb7yW/Ul4Dm2U3mwAs3gwJWoPD glRG+5bUCGfaDkSUaBG+63Hk0WmQk7awjyyWmHWk4DOPhesjd/KdiDUj803r6suK UBgldFfTdXAO3SM/pQfldcSZt9kUFv/LBgV26MvnsHsTBk13RRWHfm4O4BLik8Qd IR7m33xM9ci4pAehWyRFx8aXdotYjrH0uqQLOTE1ZS4T5V2pAFGNjBtvZXZlmaTx bTpszIiRoi3D/h5fIyKUGV4Spw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:53 2025 by rpki-client