This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: q+zwT/zdvmNfwFSriWagc7IQGBjU1JeDSVoYnce2M5w= Subject key identifier: 2A:DC:D9:1C:FB:E4:F0:1B:69:16:78:C6:1F:87:91:6E:B5:74:D3:E4 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 5F155434D6D472456A33389AEA4E57B67A7ACBF8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 026B Signing time: Sat 06 Dec 2025 10:03:29 +0000 Manifest this update: Sat 06 Dec 2025 09:58:29 +0000 Manifest next update: Sun 07 Dec 2025 10:55:29 +0000 Files and hashes: 1: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) 2: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) 3: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: 8mN4gTEo+ADzmjhKTiHPCRAhC3jVoV1S+dnTT7mch0A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:15:54:34:d6:d4:72:45:6a:33:38:9a:ea:4e:57:b6:7a:7a:cb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Dec 6 09:58:29 2025 GMT Not After : Dec 7 10:55:29 2025 GMT Subject: CN=2ADCD91CFBE4F01B691678C61F87916EB574D3E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:2a:9c:86:51:d3:25:b3:c1:0a:60:1c:ad: 3f:cf:c9:d3:e2:52:66:b9:b6:21:b9:41:6c:f3:80: b3:13:d0:ea:28:86:4f:df:f0:ec:99:53:a1:fc:df: 0b:82:15:97:1e:46:e9:75:e2:2c:35:81:62:82:49: e3:19:ca:ff:06:a1:78:8b:9b:27:7b:8d:7d:76:48: d6:92:c5:fc:97:b2:d9:20:94:e9:3a:20:be:8e:2f: d9:52:bc:7b:fd:db:11:3e:fb:a8:dc:bb:e6:2d:66: 06:26:7a:99:ba:0e:2c:c9:8a:2f:48:cf:ff:19:ee: 16:c3:ea:c3:0f:f0:79:d5:bb:a9:27:a5:51:ca:30: cb:46:19:17:86:07:fb:30:51:e7:b9:c9:d4:9b:42: 77:31:27:3b:fd:a4:55:3e:71:bd:07:37:c0:b3:3c: 93:97:9c:b7:60:40:55:5d:c8:83:67:34:9b:8b:a7: 4c:d1:5b:4e:62:cf:85:ac:42:78:2c:39:6c:97:65: 31:b8:c3:31:8b:1b:ba:f8:74:e8:3c:7e:43:24:fd: a3:48:3f:9c:05:f9:96:69:19:79:35:ef:6a:86:bd: 4a:01:0f:b1:4d:4b:3a:ba:92:18:ae:73:58:ff:32: c2:27:87:63:83:07:b7:97:70:80:07:54:b2:e1:cf: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:D9:1C:FB:E4:F0:1B:69:16:78:C6:1F:87:91:6E:B5:74:D3:E4 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:41:7a:5d:54:00:83:e1:71:49:f5:f9:c3:f5:fc:85:d9:84: 15:2d:44:ae:63:83:64:ca:b3:e1:60:39:76:5b:e6:35:a8:5d: 2e:c6:8b:25:f8:f0:ff:67:64:99:b3:90:c5:34:97:45:3c:13: 30:9f:a9:93:ef:c6:36:0c:46:54:a7:7e:b8:ef:5e:79:ab:1e: 11:63:36:db:95:27:e6:a5:6e:3b:02:e3:db:1b:2a:e5:eb:bc: 5c:16:dd:eb:83:14:54:69:69:41:2a:9a:4b:11:bb:92:1d:df: 9f:3b:70:0b:79:a8:a6:6e:12:c4:b0:0d:01:1f:22:45:03:c9: 39:27:97:e4:08:4d:3b:b4:64:d7:70:26:be:e8:9f:21:85:64: 1d:d2:8f:00:20:b3:5d:ba:90:5f:9d:ae:4d:29:9c:df:bb:2c: d8:6f:88:01:c7:48:be:70:eb:75:9a:88:ca:8f:c8:63:cc:e0: a8:03:dd:56:ef:d3:a4:76:70:1e:c7:db:3d:d5:71:26:0c:09: 4f:4e:0f:67:8a:81:84:16:13:f8:65:55:81:14:35:f2:d8:7a: 18:59:44:90:3d:d4:17:49:fb:61:65:e3:c0:18:c5:dc:3f:69: 19:d0:70:8b:71:b5:80:3e:34:e1:82:18:ee:d5:c5:ac:b8:c3: d2:f1:64:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXxVUNNbUckVqMzia6k5Xtnp6y/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTEyMDYwOTU4MjlaFw0yNTEyMDcxMDU1MjlaMDMxMTAvBgNV BAMTKDJBRENEOTFDRkJFNEYwMUI2OTE2NzhDNjFGODc5MTZFQjU3NEQzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswCqchlHTJbPBCmAcrT/PydPi Uma5tiG5QWzzgLMT0Ooohk/f8OyZU6H83wuCFZceRul14iw1gWKCSeMZyv8GoXiL myd7jX12SNaSxfyXstkglOk6IL6OL9lSvHv92xE++6jcu+YtZgYmepm6DizJii9I z/8Z7hbD6sMP8HnVu6knpVHKMMtGGReGB/swUee5ydSbQncxJzv9pFU+cb0HN8Cz PJOXnLdgQFVdyINnNJuLp0zRW05iz4WsQngsOWyXZTG4wzGLG7r4dOg8fkMk/aNI P5wF+ZZpGXk172qGvUoBD7FNSzq6khiuc1j/MsInh2ODB7eXcIAHVLLhz58LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKtzZHPvk8BtpFnjGH4eRbrV00+QwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHUF6XVQAg+FxSfX5w/X8hdmEFS1ErmODZMqz4WA5dlvmNahdLsaLJfjw/2dk mbOQxTSXRTwTMJ+pk+/GNgxGVKd+uO9eeaseEWM225Un5qVuOwLj2xsq5eu8XBbd 64MUVGlpQSqaSxG7kh3fnztwC3mopm4SxLANAR8iRQPJOSeX5AhNO7Rk13Amvuif IYVkHdKPACCzXbqQX52uTSmc37ss2G+IAcdIvnDrdZqIyo/IY8zgqAPdVu/TpHZw HsfbPdVxJgwJT04PZ4qBhBYT+GVVgRQ18th6GFlEkD3UF0n7YWXjwBjF3D9pGdBw i3G1gD404YIY7tXFrLjD0vFk3w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:37 2025 by rpki-client