This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft File: 987C49173148EC0A164D79BE3F0B7F94AF367573.mft (raw, json) Hash identifier: z52uCrBBNYR/6jFk0Roig/iGiMZ0t1g7ZdQIxA7aZYo= Subject key identifier: 4A:5E:A2:29:A3:24:FA:E2:BA:16:90:79:68:4B:2C:AF:E7:D1:39:24 Authority key identifier: 98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73 Certificate issuer: /CN=987C49173148EC0A164D79BE3F0B7F94AF367573 Certificate serial: 2FA5D32077B8A119E70C1DE90D0192D11A7124BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer Subject info access: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft Manifest number: 1A Signing time: Fri 05 Dec 2025 15:16:41 +0000 Manifest this update: Fri 05 Dec 2025 15:11:41 +0000 Manifest next update: Sat 06 Dec 2025 16:44:41 +0000 Files and hashes: 1: 323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (hash: XIGTCoQg/BSob8oqo96n3uBMyrck0rCAY0jz87O7OUY=) 2: 987C49173148EC0A164D79BE3F0B7F94AF367573.crl (hash: bfH4moSrtKhTeLnElwRI+p+rC0u+oJ6/VWwnj4FhH8s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 16:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a5:d3:20:77:b8:a1:19:e7:0c:1d:e9:0d:01:92:d1:1a:71:24:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987C49173148EC0A164D79BE3F0B7F94AF367573 Validity Not Before: Dec 5 15:11:41 2025 GMT Not After : Dec 6 16:44:41 2025 GMT Subject: CN=4A5EA229A324FAE2BA169079684B2CAFE7D13924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:8b:20:8d:70:0f:cd:d9:96:eb:55:2f:3d: 30:a8:5e:95:a5:77:6c:85:0a:a4:ac:75:e0:ac:0d: b3:81:d4:13:fa:c3:e7:2f:8b:7d:76:18:e2:d8:d1: a1:4e:1c:73:42:2b:7c:02:f4:f7:5a:67:39:43:51: ee:4d:c8:f5:68:95:34:3d:37:2f:a8:9f:d8:d7:70: f8:54:af:47:b1:95:ec:4e:15:a3:7f:62:45:26:e5: a1:67:bd:2a:dc:3d:b9:16:71:53:fa:05:1f:ed:64: 84:67:30:8f:81:39:c4:3a:ab:94:a6:13:b6:2a:b8: 86:14:ff:af:76:40:c3:07:a2:57:d6:61:fa:0a:20: 9d:a3:e7:09:26:f0:3d:57:84:80:92:8c:9e:ba:9b: 44:b2:13:2b:03:5c:63:67:f1:e3:b1:0d:e3:66:fa: c5:ad:19:16:cb:0c:a7:5f:b2:ca:3f:e1:9a:d8:58: fa:91:e0:58:1a:36:04:33:f5:90:cc:ab:af:f6:6d: 1a:32:52:ac:13:73:71:bc:ff:96:f4:ea:4e:9b:44: 4d:9b:b9:c6:d6:bc:bd:e7:21:d4:9e:00:fc:44:c5: c7:9f:34:86:fe:91:5f:ce:6b:1c:e3:44:41:2e:dc: d8:b0:a2:5f:82:ae:7e:02:6e:de:8f:ed:3c:e7:39: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5E:A2:29:A3:24:FA:E2:BA:16:90:79:68:4B:2C:AF:E7:D1:39:24 X509v3 Authority Key Identifier: keyid:98:7C:49:17:31:48:EC:0A:16:4D:79:BE:3F:0B:7F:94:AF:36:75:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C49173148EC0A164D79BE3F0B7F94AF367573.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/987C49173148EC0A164D79BE3F0B7F94AF367573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:18:2a:83:90:3f:60:fc:b0:79:4d:b7:dc:7a:de:34:d5:c4: 3d:46:db:53:69:e3:8e:1c:c5:05:15:4a:9b:43:64:f9:9c:44: b3:67:89:84:41:dd:4b:47:13:6d:b7:5d:2b:a6:fe:95:01:e7: 9b:9b:9e:f6:8a:98:19:da:61:e3:5b:fc:3b:0d:5f:0e:80:15: 16:f2:5b:c5:e3:82:ed:ea:32:95:7c:ca:26:fd:99:7d:55:91: 70:44:d0:24:eb:d8:2a:6f:30:90:14:4d:19:53:5b:a9:b2:75: 58:a0:fc:87:e7:3f:35:1a:fa:8c:7f:70:75:7f:72:7b:7c:ad: 39:41:5b:49:52:f0:75:cd:7c:22:36:2b:a3:2a:95:a9:b4:d7: fa:6b:9b:46:d4:79:75:3e:c4:69:1b:95:42:d8:c8:f2:55:9a: 60:57:74:9b:a1:92:9c:eb:9d:55:c2:f3:69:ed:f8:06:c1:e4: d5:89:72:13:d1:d2:5b:4d:a4:44:8e:1c:ef:b8:32:57:0e:39: 83:b5:c5:bb:98:30:27:bb:42:bc:05:9f:8b:5a:e3:7d:df:a6: b5:6f:f8:71:34:78:08:c9:e8:c7:cb:b0:4c:94:2b:02:7b:db: 40:2c:bf:2a:48:57:ed:48:3d:67:db:b9:a3:a1:c3:0c:9a:4e: 9a:72:c2:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL6XTIHe4oRnnDB3pDQGS0RpxJL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3QzQ5MTczMTQ4RUMwQTE2NEQ3OUJFM0YwQjdGOTRB RjM2NzU3MzAeFw0yNTEyMDUxNTExNDFaFw0yNTEyMDYxNjQ0NDFaMDMxMTAvBgNV BAMTKDRBNUVBMjI5QTMyNEZBRTJCQTE2OTA3OTY4NEIyQ0FGRTdEMTM5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9t4sgjXAPzdmW61UvPTCoXpWl d2yFCqSsdeCsDbOB1BP6w+cvi312GOLY0aFOHHNCK3wC9PdaZzlDUe5NyPVolTQ9 Ny+on9jXcPhUr0exlexOFaN/YkUm5aFnvSrcPbkWcVP6BR/tZIRnMI+BOcQ6q5Sm E7YquIYU/692QMMHolfWYfoKIJ2j5wkm8D1XhICSjJ66m0SyEysDXGNn8eOxDeNm +sWtGRbLDKdfsso/4ZrYWPqR4FgaNgQz9ZDMq6/2bRoyUqwTc3G8/5b06k6bRE2b ucbWvL3nIdSeAPxExcefNIb+kV/OaxzjREEu3Niwol+Crn4Cbt6P7TznOWwRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSl6iKaMk+uK6FpB5aEssr+fROSQwHwYDVR0j BBgwFoAUmHxJFzFI7AoWTXm+Pwt/lK82dXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFq SzcvMC85ODdDNDkxNzMxNDhFQzBBMTY0RDc5QkUzRjBCN0Y5NEFGMzY3NTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4N0M0OTE3MzE0OEVDMEEx NjRENzlCRTNGMEI3Rjk0QUYzNjc1NzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFqSzcvMC85 ODdDNDkxNzMxNDhFQzBBMTY0RDc5QkUzRjBCN0Y5NEFGMzY3NTczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAphgqg5A/YPyweU233HreNNXEPUbbU2njjhzFBRVKm0Nk+ZxEs2eJhEHdS0cT bbddK6b+lQHnm5ue9oqYGdph41v8Ow1fDoAVFvJbxeOC7eoylXzKJv2ZfVWRcETQ JOvYKm8wkBRNGVNbqbJ1WKD8h+c/NRr6jH9wdX9ye3ytOUFbSVLwdc18IjYroyqV qbTX+mubRtR5dT7EaRuVQtjI8lWaYFd0m6GSnOudVcLzae34BsHk1YlyE9HSW02k RI4c77gyVw45g7XFu5gwJ7tCvAWfi1rjfd+mtW/4cTR4CMnox8uwTJQrAnvbQCy/ KkhX7Ug9Z9u5o6HDDJpOmnLCrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:32 2025 by rpki-client