This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft File: 8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft (raw, json) Hash identifier: JOe/Q7B2PlE41jTKdKa/YbO8HFZBsKD+zV3zDo1sKZc= Subject key identifier: 42:AE:C2:67:38:B4:68:74:25:9E:8B:E1:B2:72:50:A2:F3:40:AC:EC Authority key identifier: 8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8 Certificate issuer: /CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8 Certificate serial: 470AE99A19F4B6221F8F89B593408299C119BEF9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft Manifest number: 4D Signing time: Sat 06 Dec 2025 13:11:29 +0000 Manifest this update: Sat 06 Dec 2025 13:06:29 +0000 Manifest next update: Sun 07 Dec 2025 15:07:29 +0000 Files and hashes: 1: 8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl (hash: 49zUvUW3LvqX/FjUFjfo5HgrjyUJVh92RqWLiGiGZb0=) 2: 323830343a393432383a3a2f33322d313238203d3e20323734383235.roa (hash: FzCAE8eUu2sdUtzU7IKkFBXrwi3x7JsqMdGSg0/OQCY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0a:e9:9a:19:f4:b6:22:1f:8f:89:b5:93:40:82:99:c1:19:be:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC525FDF72B816B66C1CE836CA937CE99A682E8 Validity Not Before: Dec 6 13:06:29 2025 GMT Not After : Dec 7 15:07:29 2025 GMT Subject: CN=42AEC26738B46874259E8BE1B27250A2F340ACEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:09:3a:de:53:66:2a:82:a8:70:1a:eb:47: 76:8c:3d:57:04:76:2c:31:d3:f2:00:b6:d5:7c:1d: 44:43:51:cc:01:5d:7e:23:1f:9a:58:fa:c0:ea:96: b8:15:07:7e:6c:07:bf:88:52:4b:a1:b0:c4:ac:64: 92:e4:69:48:1a:eb:1c:12:dd:a4:ce:3d:a4:97:1b: 5f:f7:ba:5c:ba:d6:03:b4:a4:15:fc:41:a9:e5:bf: d1:e8:86:71:d1:c0:26:91:65:c9:ba:a0:29:38:60: 4f:27:0e:fb:3c:fb:2f:e4:08:11:af:fd:41:e7:28: 42:91:1b:69:4d:4d:ef:89:60:98:a5:ee:3e:60:ab: 55:50:4c:3e:f9:d6:39:94:90:4e:f2:93:23:68:16: 5a:2b:d6:75:61:12:73:04:d9:db:fe:79:9e:e0:df: fa:aa:3f:8e:f2:b0:cd:c8:0b:44:0b:24:99:fc:26: f4:99:12:c5:e2:98:ba:0a:2e:71:41:fe:98:60:30: 0c:5c:1c:81:9c:24:16:e6:51:b8:66:e7:b7:69:6c: 84:5e:7d:bd:e9:be:07:80:db:f0:3c:ac:13:36:a7: 20:57:e3:ca:b8:1f:3d:a9:5d:d4:78:80:c5:c2:fd: 24:06:26:77:28:8b:e4:c1:99:a7:63:1c:21:a6:e9: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AE:C2:67:38:B4:68:74:25:9E:8B:E1:B2:72:50:A2:F3:40:AC:EC X509v3 Authority Key Identifier: keyid:8C:C5:25:FD:F7:2B:81:6B:66:C1:CE:83:6C:A9:37:CE:99:A6:82:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC525FDF72B816B66C1CE836CA937CE99A682E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/8CC525FDF72B816B66C1CE836CA937CE99A682E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:85:34:d9:79:23:55:88:5d:35:a0:8e:54:66:69:e7:67:77: f6:69:92:3c:4e:81:b4:8b:c3:6f:39:51:1f:29:5a:61:d2:7c: a2:93:28:f4:5a:33:04:56:c2:b1:b8:8a:92:27:19:df:cb:48: 75:a1:55:9c:07:84:97:77:45:9f:3a:49:dc:6f:84:5f:5d:e8: bd:b3:c6:95:0a:15:9c:cf:87:be:4c:a0:a2:72:2f:f8:81:d9: a0:d5:24:4c:00:e4:ff:f8:95:58:75:6a:af:a5:d5:15:66:1b: 47:24:73:07:09:ff:52:72:bf:19:0f:17:96:7e:af:c3:41:4a: 7d:6e:66:ec:5d:54:19:b9:45:0b:83:9c:af:5b:ee:3d:61:66: 3e:b0:c4:b2:12:60:ef:b9:c3:e0:e3:1e:44:ad:06:70:d4:cf: fb:55:6a:45:f4:42:da:80:8d:a1:f3:eb:32:ee:d9:cc:f4:ad: e3:59:af:f2:57:a1:18:1e:7c:91:2a:89:37:f9:5e:b1:60:9c: 6e:34:26:d1:30:21:39:bf:dd:dc:7e:83:3a:a4:6f:34:71:c6: 31:79:d1:03:2c:9e:d0:47:b7:79:40:ef:3f:8d:d4:34:10:8e: fa:45:e0:db:04:42:18:1a:5f:1d:e1:a3:a6:77:de:5f:db:1f: 01:ea:1d:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURwrpmhn0tiIfj4m1k0CCmcEZvvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDNTI1RkRGNzJCODE2QjY2QzFDRTgzNkNBOTM3Q0U5 OUE2ODJFODAeFw0yNTEyMDYxMzA2MjlaFw0yNTEyMDcxNTA3MjlaMDMxMTAvBgNV BAMTKDQyQUVDMjY3MzhCNDY4NzQyNTlFOEJFMUIyNzI1MEEyRjM0MEFDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufgk63lNmKoKocBrrR3aMPVcE diwx0/IAttV8HURDUcwBXX4jH5pY+sDqlrgVB35sB7+IUkuhsMSsZJLkaUga6xwS 3aTOPaSXG1/3uly61gO0pBX8Qanlv9HohnHRwCaRZcm6oCk4YE8nDvs8+y/kCBGv /UHnKEKRG2lNTe+JYJil7j5gq1VQTD751jmUkE7ykyNoFlor1nVhEnME2dv+eZ7g 3/qqP47ysM3IC0QLJJn8JvSZEsXimLoKLnFB/phgMAxcHIGcJBbmUbhm57dpbIRe fb3pvgeA2/A8rBM2pyBX48q4Hz2pXdR4gMXC/SQGJncoi+TBmadjHCGm6UeXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQq7CZzi0aHQlnovhsnJQovNArOwwHwYDVR0j BBgwFoAUjMUl/fcrgWtmwc6DbKk3zpmmgugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJX TjIvMC84Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQzUyNUZERjcyQjgxNkI2 NkMxQ0U4MzZDQTkzN0NFOTlBNjgyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJXTjIvMC84 Q0M1MjVGREY3MkI4MTZCNjZDMUNFODM2Q0E5MzdDRTk5QTY4MkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADoU02XkjVYhdNaCOVGZp52d39mmSPE6BtIvDbzlRHylaYdJ8opMo9FozBFbC sbiKkicZ38tIdaFVnAeEl3dFnzpJ3G+EX13ovbPGlQoVnM+HvkygonIv+IHZoNUk TADk//iVWHVqr6XVFWYbRyRzBwn/UnK/GQ8Xln6vw0FKfW5m7F1UGblFC4Ocr1vu PWFmPrDEshJg77nD4OMeRK0GcNTP+1VqRfRC2oCNofPrMu7ZzPSt41mv8lehGB58 kSqJN/lesWCcbjQm0TAhOb/d3H6DOqRvNHHGMXnRAyye0Ee3eUDvP43UNBCO+kXg 2wRCGBpfHeGjpnfeX9sfAeodOg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:43 2025 by rpki-client