This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft File: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json) Hash identifier: 6Hyr/Bz/IRoQI8IVwlEAB7raO12eivZnQONpXdVisj0= Subject key identifier: 65:92:57:6D:16:2B:8A:28:6A:3B:74:85:72:87:43:E0:9D:3C:39:55 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 68049431640FCC5C69677656EC715C59F4D3F7C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft Manifest number: 019B Signing time: Fri 05 Dec 2025 15:26:01 +0000 Manifest this update: Fri 05 Dec 2025 15:21:01 +0000 Manifest next update: Sat 06 Dec 2025 18:07:01 +0000 Files and hashes: 1: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=) 2: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: E5BskTWahakDCB5a8fA+/SMHL3a48tAKYpix+9Lt0WU=) 3: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 18:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:04:94:31:64:0f:cc:5c:69:67:76:56:ec:71:5c:59:f4:d3:f7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Dec 5 15:21:01 2025 GMT Not After : Dec 6 18:07:01 2025 GMT Subject: CN=6592576D162B8A286A3B7485728743E09D3C3955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:1b:8f:8d:fc:e3:d0:cc:81:64:c2:91:98: 1b:67:e1:da:61:b8:ff:06:99:d6:53:ab:8f:84:f9: 6d:57:18:aa:a2:92:ad:50:c4:2e:6e:f4:f1:a4:a5: e7:e1:7b:82:02:f2:f5:0f:16:69:1b:02:67:4c:67: 90:f2:8c:8e:33:1c:d5:12:de:fe:c0:69:96:1a:d8: 89:6c:c2:64:05:f8:09:28:b2:12:36:5a:30:75:b2: cc:98:41:28:12:d0:c3:4b:3f:ed:71:be:2c:50:81: f9:cb:5d:a2:e8:b6:81:f9:f9:17:07:0b:25:00:c9: 77:60:32:dd:0b:3d:8a:fa:6f:a6:c6:3e:71:92:d6: 5b:fb:86:0a:9e:01:05:d3:81:cb:3c:e1:e5:1e:bd: ad:e5:fc:79:b1:79:8e:f1:6c:ea:33:8d:60:3f:74: 8f:2c:64:76:f9:fd:1c:a4:97:53:40:88:60:b6:e0: 6b:8a:29:dd:e9:d7:e9:44:da:82:9c:36:a2:f7:13: af:cf:0c:1b:77:86:06:9a:9b:88:26:c4:7b:cf:be: 76:7d:8f:a5:69:47:d5:83:37:de:b9:f8:0d:42:9c: 8e:94:f3:8f:1a:eb:20:c9:ae:d4:b7:dd:eb:67:1b: 8d:35:b1:ff:80:fa:62:bc:16:59:74:42:41:05:f9: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:57:6D:16:2B:8A:28:6A:3B:74:85:72:87:43:E0:9D:3C:39:55 X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:45:3e:32:40:cd:80:89:a8:b0:c6:04:c5:db:47:ac:81:fa: b7:16:00:6d:86:ed:c4:5f:b6:30:ca:fc:cd:51:0c:46:b9:4c: b4:12:47:5f:13:6b:64:b6:06:34:27:77:49:45:5a:4e:32:05: 1c:23:1b:39:46:c3:6c:c1:51:87:72:23:6d:77:7c:15:ff:54: 07:5a:13:91:0b:6e:ea:f6:60:69:d8:a1:5b:ab:5e:9e:35:f1: 69:36:f5:13:e9:28:34:35:64:f4:6c:33:2e:77:bd:f5:47:f7: 9c:c7:a2:e2:25:63:ba:1d:96:8e:f6:35:d3:91:f8:bd:32:09: 46:9b:76:78:31:b1:01:a7:61:c6:cf:64:b6:38:d5:1b:ab:e9: f8:94:38:39:62:81:40:89:28:8e:8f:56:09:f2:95:54:47:21: 62:95:67:c2:e2:4e:f9:fc:42:84:54:85:8c:ad:1a:e8:ae:71: 17:bc:19:32:98:ac:79:95:af:5f:39:35:7c:75:6e:2f:0c:6c: a3:7c:9e:7e:07:e1:76:39:ed:3b:80:89:3a:34:07:78:5d:67: 28:a8:6b:12:90:2b:60:ff:9b:92:6d:76:f5:d4:f8:37:ab:d0: bc:2c:06:17:bd:7f:c9:fa:ea:d0:32:1b:74:35:2a:7a:82:33: e8:23:90:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaASUMWQPzFxpZ3ZW7HFcWfTT98YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNTEyMDUxNTIxMDFaFw0yNTEyMDYxODA3MDFaMDMxMTAvBgNV BAMTKDY1OTI1NzZEMTYyQjhBMjg2QTNCNzQ4NTcyODc0M0UwOUQzQzM5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXBuPjfzj0MyBZMKRmBtn4dph uP8GmdZTq4+E+W1XGKqikq1QxC5u9PGkpefhe4IC8vUPFmkbAmdMZ5DyjI4zHNUS 3v7AaZYa2IlswmQF+AkoshI2WjB1ssyYQSgS0MNLP+1xvixQgfnLXaLotoH5+RcH CyUAyXdgMt0LPYr6b6bGPnGS1lv7hgqeAQXTgcs84eUeva3l/HmxeY7xbOozjWA/ dI8sZHb5/Rykl1NAiGC24GuKKd3p1+lE2oKcNqL3E6/PDBt3hgaam4gmxHvPvnZ9 j6VpR9WDN965+A1CnI6U848a6yDJrtS33etnG401sf+A+mK8Fll0QkEF+ZpFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZZJXbRYriihqO3SFcodD4J08OVUwHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRtMmcvMC85 QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATUU+MkDNgImosMYExdtHrIH6txYAbYbtxF+2MMr8zVEMRrlMtBJHXxNrZLYG NCd3SUVaTjIFHCMbOUbDbMFRh3IjbXd8Ff9UB1oTkQtu6vZgadihW6tenjXxaTb1 E+koNDVk9GwzLne99Uf3nMei4iVjuh2WjvY105H4vTIJRpt2eDGxAadhxs9ktjjV G6vp+JQ4OWKBQIkojo9WCfKVVEchYpVnwuJO+fxChFSFjK0a6K5xF7wZMpiseZWv Xzk1fHVuLwxso3yefgfhdjntO4CJOjQHeF1nKKhrEpArYP+bkm129dT4N6vQvCwG F71/yfrq0DIbdDUqeoIz6COQyA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:26 2025 by rpki-client