This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft File: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json) Hash identifier: OW7cTVjNZyeReGnLQRWOw9uXMlB7X+ZlH1IRqG87mN8= Subject key identifier: 97:08:CB:C4:CA:4C:BB:F8:FF:7B:BE:97:30:77:2F:60:74:0D:1B:DA Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB Certificate issuer: /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Certificate serial: 1315E878E6A52E3392356E79007D162679487DA0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft Manifest number: 0240 Signing time: Sat 06 Dec 2025 18:20:50 +0000 Manifest this update: Sat 06 Dec 2025 18:15:50 +0000 Manifest next update: Sun 07 Dec 2025 18:25:50 +0000 Files and hashes: 1: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: 67sP77oehV8OsJ5C0Di39/vL9cRCepWrYKC3lCcA8nA=) 2: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: sXEB3N632CJdoLkCeni+7IpZM2jJ3mGY/w149wdeu3w=) 3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: qUS5KHPZEvYDxHf+siYN4MUP0Cpfb4EwFfNL+bHx6tE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 18:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:15:e8:78:e6:a5:2e:33:92:35:6e:79:00:7d:16:26:79:48:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB Validity Not Before: Dec 6 18:15:50 2025 GMT Not After : Dec 7 18:25:50 2025 GMT Subject: CN=9708CBC4CA4CBBF8FF7BBE9730772F60740D1BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:07:b4:06:84:97:5e:ff:56:61:fc:6a:c7: a4:1f:0c:2f:19:56:1a:c5:0a:33:82:85:bc:c4:1c: f9:b4:e2:31:71:20:68:c5:82:9f:af:ca:bd:0f:12: f4:38:75:2c:ac:e3:72:4f:3a:bc:cf:02:ee:cf:ff: ee:85:0a:c0:08:fb:69:35:23:38:87:3d:df:c4:e5: c4:c6:f6:ca:da:cb:45:94:e4:9b:f3:d5:6c:55:79: 9d:7d:3d:d5:36:f9:58:36:c2:4a:88:46:95:e7:ec: 31:d5:e3:7c:e7:46:32:e1:0c:e0:1c:f1:f4:eb:af: 08:ce:a9:3f:e6:b3:8f:b7:e3:80:f8:66:f8:83:a8: 82:d7:99:b5:e5:2e:84:d5:8e:e1:cc:31:81:06:c0: 9a:3f:97:a8:fb:15:50:05:9c:6c:a1:7a:0b:31:fb: cf:40:a1:c1:ca:02:8d:2b:7c:aa:e9:c0:5d:7d:77: f2:c2:8e:98:56:57:9f:aa:10:b4:72:77:85:70:0c: 18:5a:cb:61:56:8c:39:26:e6:00:dd:3e:77:0e:ca: a7:ac:e9:c9:65:56:9c:3d:df:bd:b1:1e:13:9c:de: 38:90:9c:0a:73:7d:91:0f:d7:46:0d:2e:70:99:5b: a5:13:9a:64:d5:be:9d:53:4d:07:61:f3:6e:2e:f9: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:08:CB:C4:CA:4C:BB:F8:FF:7B:BE:97:30:77:2F:60:74:0D:1B:DA X509v3 Authority Key Identifier: keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:46:77:e2:8c:6a:5c:08:19:5e:89:7b:7d:d1:ed:f1:b9:11: bb:bb:1d:c6:7b:3b:f0:85:1d:8a:d3:d0:57:00:af:dd:83:20: ef:74:2d:a0:9e:a5:fe:a0:0a:1e:69:8a:9d:30:a8:75:53:bd: eb:fa:f9:7e:eb:da:e2:a2:dd:ed:eb:ac:ae:3a:a0:97:b5:1d: 99:e6:51:82:ae:23:d1:42:f6:98:0c:53:26:8c:1c:ae:2a:1e: 3d:f1:09:d5:b8:4d:93:32:36:2b:6b:3f:34:b6:71:69:a1:30: db:4a:53:9e:a8:59:ef:95:04:a1:6d:b4:2d:b8:a8:9f:ea:61: 22:44:2c:10:06:24:d5:34:7d:b3:f1:8a:cb:99:7b:37:2e:73: fc:0e:fb:51:70:1a:be:58:a1:b3:f3:2e:1d:14:01:65:63:9d: 23:d6:13:99:5e:2f:37:ca:e7:d9:8e:0e:6f:60:96:ba:31:a1: 66:9f:5d:f8:43:dd:f4:5a:82:50:4d:0e:4c:ab:19:3b:9a:63: 7d:a5:df:35:85:3e:fd:bf:ad:6c:97:71:1c:5e:5c:c7:f9:a4: 4e:2a:25:a5:06:61:9f:a2:c0:33:88:6e:b6:39:c6:c2:2d:f9: 6a:a0:a6:fd:35:10:59:16:a8:13:b0:2a:9f:19:2f:00:f7:01: f4:1f:95:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUExXoeOalLjOSNW55AH0WJnlIfaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5Qzg3N0NFNDk2QjRGM0ZBQkJBMUQ0OTk2QzM0RkM4 QkJGOTlCQjAeFw0yNTEyMDYxODE1NTBaFw0yNTEyMDcxODI1NTBaMDMxMTAvBgNV BAMTKDk3MDhDQkM0Q0E0Q0JCRjhGRjdCQkU5NzMwNzcyRjYwNzQwRDFCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGge0BoSXXv9WYfxqx6QfDC8Z VhrFCjOChbzEHPm04jFxIGjFgp+vyr0PEvQ4dSys43JPOrzPAu7P/+6FCsAI+2k1 IziHPd/E5cTG9sray0WU5Jvz1WxVeZ19PdU2+Vg2wkqIRpXn7DHV43znRjLhDOAc 8fTrrwjOqT/ms4+344D4ZviDqILXmbXlLoTVjuHMMYEGwJo/l6j7FVAFnGyhegsx +89AocHKAo0rfKrpwF19d/LCjphWV5+qELRyd4VwDBhay2FWjDkm5gDdPncOyqes 6cllVpw9372xHhOc3jiQnApzfZEP10YNLnCZW6UTmmTVvp1TTQdh824u+aW1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlwjLxMpMu/j/e76XMHcvYHQNG9owHwYDVR0j BBgwFoAUipyHfOSWtPP6u6HUmWw0/Iu/mbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVT NkovMC84QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBOUM4NzdDRTQ5NkI0RjNG QUJCQTFENDk5NkMzNEZDOEJCRjk5QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0V6cG5YVjNnMWhjekJIV3FhRzZMNmczcDZwRnZuTVN0M1RGRHhNeEVTNkovMC84 QTlDODc3Q0U0OTZCNEYzRkFCQkExRDQ5OTZDMzRGQzhCQkY5OUJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALUZ34oxqXAgZXol7fdHt8bkRu7sdxns78IUditPQVwCv3YMg73QtoJ6l/qAK HmmKnTCodVO96/r5fuva4qLd7eusrjqgl7UdmeZRgq4j0UL2mAxTJowcrioePfEJ 1bhNkzI2K2s/NLZxaaEw20pTnqhZ75UEoW20Lbion+phIkQsEAYk1TR9s/GKy5l7 Ny5z/A77UXAavlihs/MuHRQBZWOdI9YTmV4vN8rn2Y4Ob2CWujGhZp9d+EPd9FqC UE0OTKsZO5pjfaXfNYU+/b+tbJdxHF5cx/mkTiolpQZhn6LAM4hutjnGwi35aqCm /TUQWRaoE7AqnxkvAPcB9B+Vgw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:39 2025 by rpki-client