This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft File: F976CD824C8D193A1DDC32222B9CE1F619152F24.mft (raw, json) Hash identifier: lF5ykh7GVK90wNkQ1NnmMTgDQWVezfHYatN0DoaDQtE= Subject key identifier: 34:3C:EF:74:F7:E3:49:CA:52:76:BE:F5:2E:12:BD:9B:53:CC:FA:00 Authority key identifier: F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24 Certificate issuer: /CN=F976CD824C8D193A1DDC32222B9CE1F619152F24 Certificate serial: 24A598177FABB791BBE24AA0B303728F9993FD7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft Manifest number: 0128 Signing time: Sat 06 Dec 2025 09:55:28 +0000 Manifest this update: Sat 06 Dec 2025 09:50:28 +0000 Manifest next update: Sun 07 Dec 2025 10:26:28 +0000 Files and hashes: 1: 3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (hash: HgfZ/fcQ28inSITNwY808xHwgKqyITaZEtNAMXCWm3o=) 2: 323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (hash: 05gWsIe1pMsdW47OlOwcp0vXdcMuDXYzSPh7SCFMDuQ=) 3: F976CD824C8D193A1DDC32222B9CE1F619152F24.crl (hash: 4dp9QBNPnk1YmvngSzGS5FWeQLcviw2iIPdFY0e/Eeg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.crl rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a5:98:17:7f:ab:b7:91:bb:e2:4a:a0:b3:03:72:8f:99:93:fd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F976CD824C8D193A1DDC32222B9CE1F619152F24 Validity Not Before: Dec 6 09:50:28 2025 GMT Not After : Dec 7 10:26:28 2025 GMT Subject: CN=343CEF74F7E349CA5276BEF52E12BD9B53CCFA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:cf:52:46:38:97:e9:e6:5a:d2:5c:ae:9b: a0:c5:89:2a:f6:c5:d0:97:c3:d4:fb:7b:f8:75:0e: 0d:5b:5f:8d:3f:7c:ae:71:bf:9a:d5:84:8e:76:c4: aa:1e:eb:06:d7:19:f4:c9:e8:23:40:44:be:85:ef: b9:b5:d3:e3:30:4b:c8:fc:8f:e4:d5:6e:ce:e5:f2: 9d:88:de:72:4c:a7:04:ce:b1:02:eb:7b:2e:7a:a6: 2d:4c:b2:74:39:52:a1:29:37:7e:35:7f:b4:fd:d7: a5:53:0b:76:bc:48:25:ca:69:d9:2e:39:f8:01:e0: 16:51:ce:b4:1e:99:b6:e8:7e:7c:cc:e7:33:7e:87: b6:f2:e3:14:8b:8e:b7:0f:b5:49:b6:2e:63:a9:83: 6b:94:3c:03:1a:78:9d:2c:30:02:03:c6:f1:27:32: 49:72:ae:40:29:db:7c:fe:30:56:ae:01:4f:38:70: b9:d1:fb:5b:91:6e:94:a1:95:07:61:f3:85:e7:b9: 72:f2:d0:77:c2:0e:d0:02:0c:80:80:b7:0c:0e:43: 5b:01:52:15:b3:49:28:09:26:44:f3:ae:5a:30:cc: a7:1a:51:7f:3b:1b:59:86:95:9e:60:d1:cf:d8:ca: 27:83:7b:f8:2e:a1:69:27:73:12:f3:5d:1e:d2:53: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3C:EF:74:F7:E3:49:CA:52:76:BE:F5:2E:12:BD:9B:53:CC:FA:00 X509v3 Authority Key Identifier: keyid:F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:71:4c:29:09:ec:19:40:42:20:30:f4:34:ef:fc:3a:28:58: 29:9c:9f:b1:e1:92:d3:2e:5c:6d:dc:93:94:51:ff:57:72:84: 56:e2:46:97:60:cc:f5:5a:64:02:a1:0d:40:da:0b:c4:f1:8e: 53:b6:ae:78:09:c8:f4:3e:0d:61:a4:87:b1:28:bf:c0:b6:dd: 68:3c:60:b3:1b:dc:e5:ce:bd:11:bb:0a:0a:1a:3a:35:2a:a6: d9:1d:c4:d8:43:a5:1e:ec:05:b4:cf:90:60:a2:4c:6e:8b:78: 01:fd:af:2b:12:40:95:34:80:f1:aa:b5:6a:5c:ac:d3:54:49: ab:a2:9e:bd:72:d3:bd:c9:fd:bb:43:52:91:ef:4a:fd:08:25: 1a:f0:ea:08:55:9d:6b:2b:37:39:92:8d:5b:2a:38:e9:d9:0d: 95:9e:45:2d:01:93:ae:85:c6:27:ef:d7:ee:d4:b7:8b:ac:89: 6e:b3:0b:ee:f9:26:66:28:99:44:86:9a:81:2f:03:0f:23:84: f1:4e:f5:ed:b7:a5:ef:c3:dc:b3:2d:d4:ea:10:28:56:4c:24: a8:b9:a3:5b:8c:ac:fb:b6:c2:c4:0b:9c:9f:9b:e7:ae:b1:06: 06:15:ba:23:1d:10:a9:2f:fe:d1:5c:08:c2:5b:de:fc:f0:f4: f3:d4:45:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJKWYF3+rt5G74kqgswNyj5mT/X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk3NkNEODI0QzhEMTkzQTFEREMzMjIyMkI5Q0UxRjYx OTE1MkYyNDAeFw0yNTEyMDYwOTUwMjhaFw0yNTEyMDcxMDI2MjhaMDMxMTAvBgNV BAMTKDM0M0NFRjc0RjdFMzQ5Q0E1Mjc2QkVGNTJFMTJCRDlCNTNDQ0ZBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYLs9SRjiX6eZa0lyum6DFiSr2 xdCXw9T7e/h1Dg1bX40/fK5xv5rVhI52xKoe6wbXGfTJ6CNARL6F77m10+MwS8j8 j+TVbs7l8p2I3nJMpwTOsQLrey56pi1MsnQ5UqEpN341f7T916VTC3a8SCXKadku OfgB4BZRzrQembbofnzM5zN+h7by4xSLjrcPtUm2LmOpg2uUPAMaeJ0sMAIDxvEn MklyrkAp23z+MFauAU84cLnR+1uRbpShlQdh84XnuXLy0HfCDtACDICAtwwOQ1sB UhWzSSgJJkTzrlowzKcaUX87G1mGlZ5g0c/YyieDe/guoWkncxLzXR7SU1cjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNDzvdPfjScpSdr71LhK9m1PM+gAwHwYDVR0j BBgwFoAU+XbNgkyNGTod3DIiK5zh9hkVLyQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhCenp0cHNvdmtnMlFDWEViclV1OHppUGU3QVlZckcxQ292c1lCQmlz NFAvMC9GOTc2Q0Q4MjRDOEQxOTNBMUREQzMyMjIyQjlDRTFGNjE5MTUyRjI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzZDRDgyNEM4RDE5M0Ex RERDMzIyMjJCOUNFMUY2MTkxNTJGMjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhCenp0cHNvdmtnMlFDWEViclV1OHppUGU3QVlZckcxQ292c1lCQmlzNFAvMC9G OTc2Q0Q4MjRDOEQxOTNBMUREQzMyMjIyQjlDRTFGNjE5MTUyRjI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQnFMKQnsGUBCIDD0NO/8OihYKZyfseGS0y5cbdyTlFH/V3KEVuJGl2DM9Vpk AqENQNoLxPGOU7aueAnI9D4NYaSHsSi/wLbdaDxgsxvc5c69EbsKCho6NSqm2R3E 2EOlHuwFtM+QYKJMbot4Af2vKxJAlTSA8aq1alys01RJq6KevXLTvcn9u0NSke9K /QglGvDqCFWdays3OZKNWyo46dkNlZ5FLQGTroXGJ+/X7tS3i6yJbrML7vkmZiiZ RIaagS8DDyOE8U717bel78Pcsy3U6hAoVkwkqLmjW4ys+7bCxAucn5vnrrEGBhW6 Ix0QqS/+0VwIwlve/PD089RFyQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:00 2025 by rpki-client