This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft File: 0F44F5750AB24A7D6E844281A724F470994C316E.mft (raw, json) Hash identifier: erzDvYYmOHW01kcXuE0yOMGKZHH7t30pc18PtunjO6U= Subject key identifier: AF:C0:81:B0:14:23:26:7C:6C:90:56:3B:11:1A:36:D2:2B:A9:30:C0 Authority key identifier: 0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E Certificate issuer: /CN=0F44F5750AB24A7D6E844281A724F470994C316E Certificate serial: 4E5A63AC13291A820C561AEA4CE577D2B6F32D7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft Manifest number: 01D3 Signing time: Sat 06 Dec 2025 18:03:00 +0000 Manifest this update: Sat 06 Dec 2025 17:58:00 +0000 Manifest next update: Sun 07 Dec 2025 20:32:00 +0000 Files and hashes: 1: 323830343a343564343a3a2f33322d3334203d3e20323636393532.roa (hash: CXzNb4G2GphJ1TIFeCdVumYJctK0+mEXyMAVo+V69Ek=) 2: 34352e3232352e3235322e302f32322d3234203d3e20323636393532.roa (hash: YdoF+7d38TupvLHfFFGrLqea38RQ20/TNcHeY4fDrqo=) 3: 0F44F5750AB24A7D6E844281A724F470994C316E.crl (hash: QGGrVPG+uj+2MqewK37wd7fmgWLsn2BTLOrdUAov954=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 20:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5a:63:ac:13:29:1a:82:0c:56:1a:ea:4c:e5:77:d2:b6:f3:2d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44F5750AB24A7D6E844281A724F470994C316E Validity Not Before: Dec 6 17:58:00 2025 GMT Not After : Dec 7 20:32:00 2025 GMT Subject: CN=AFC081B01423267C6C90563B111A36D22BA930C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:92:bf:05:a1:f0:61:fa:09:73:0c:96:c0:24: c0:8e:d6:25:bb:b3:3f:7e:af:6e:fc:25:66:0b:43: 12:8c:50:04:6c:ef:aa:d6:7b:58:93:73:5f:3a:ed: 87:78:c9:5a:53:da:aa:19:f0:8e:6b:0d:29:51:73: 6b:b0:55:f6:5f:63:f1:f6:5a:19:00:10:d2:5f:d1: f3:67:64:2a:48:40:a3:33:38:b8:d2:5a:28:f2:d9: 79:4b:ba:00:b8:6c:27:d0:86:5c:e3:1e:43:bc:85: fd:9c:7a:b8:01:66:57:c0:b3:bd:e3:b8:61:7d:48: ca:5a:cd:98:63:90:5f:c4:bd:e0:06:f7:47:5f:fd: db:8c:a0:ff:6b:fa:00:96:e2:1c:07:cd:f8:ca:84: ba:22:bc:f7:66:55:41:fd:ee:cb:0f:a6:5e:bc:39: 4c:8d:8b:0c:4b:b3:a0:24:2f:70:10:55:2c:60:98: 7b:24:54:d6:58:d3:06:1b:bb:e3:77:46:94:a6:13: 8f:49:38:f2:a3:31:f7:67:7d:63:1d:54:a0:f7:49: 9f:9b:7b:3c:df:79:9f:f2:8b:fa:05:7d:7e:0c:9f: 56:45:f4:cb:06:54:58:04:0f:4a:6d:8e:8a:58:97: 40:57:a1:48:ce:13:ba:a6:52:ec:ae:80:51:99:69: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:81:B0:14:23:26:7C:6C:90:56:3B:11:1A:36:D2:2B:A9:30:C0 X509v3 Authority Key Identifier: keyid:0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ce:c7:dc:a0:e6:28:4e:cc:dc:50:35:02:97:d0:76:ac:93: 35:da:3f:1c:ae:d4:47:cd:d3:81:b3:e8:c0:c7:4d:fb:e8:e7: 26:59:b0:fe:16:b0:16:71:93:cb:ca:3d:ee:31:a0:1f:90:47: 7c:7a:72:18:ca:9a:6a:6f:f6:38:74:0c:c5:67:6f:6c:93:0f: 40:c4:af:70:8b:8e:0d:5b:4c:1c:82:58:24:61:c3:c0:bb:dc: 99:ec:87:3a:c5:c8:ff:16:55:99:07:85:48:2d:e3:70:c5:62: 3b:78:0a:5a:6f:70:3f:f7:51:24:3f:2a:22:a7:31:39:d3:97: a3:f2:25:60:8b:32:4f:8d:49:d3:2d:e1:a1:ea:0a:25:ea:e8: a8:98:69:b5:08:af:ff:69:db:1c:bc:ab:de:19:83:4c:39:22: 00:28:fd:54:25:7f:8e:56:98:6f:28:41:08:15:69:60:36:43: 59:44:af:0b:59:ff:6e:01:d7:b0:0b:5d:83:6a:df:30:36:86: 02:4e:e9:b0:86:b4:1f:cd:33:37:dd:f0:ed:28:65:fc:bc:92: bd:c2:0f:d7:7d:fe:e2:95:6f:66:eb:31:10:d5:96:c4:d9:19: 0d:1a:78:27:d0:c7:3d:d6:73:3c:2a:dc:1e:c7:20:e4:60:da: 14:e3:c1:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTlpjrBMpGoIMVhrqTOV30rbzLX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEY1NzUwQUIyNEE3RDZFODQ0MjgxQTcyNEY0NzA5 OTRDMzE2RTAeFw0yNTEyMDYxNzU4MDBaFw0yNTEyMDcyMDMyMDBaMDMxMTAvBgNV BAMTKEFGQzA4MUIwMTQyMzI2N0M2QzkwNTYzQjExMUEzNkQyMkJBOTMwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkr8FofBh+glzDJbAJMCO1iW7 sz9+r278JWYLQxKMUARs76rWe1iTc1867Yd4yVpT2qoZ8I5rDSlRc2uwVfZfY/H2 WhkAENJf0fNnZCpIQKMzOLjSWijy2XlLugC4bCfQhlzjHkO8hf2cergBZlfAs73j uGF9SMpazZhjkF/EveAG90df/duMoP9r+gCW4hwHzfjKhLoivPdmVUH97ssPpl68 OUyNiwxLs6AkL3AQVSxgmHskVNZY0wYbu+N3RpSmE49JOPKjMfdnfWMdVKD3SZ+b ezzfeZ/yi/oFfX4Mn1ZF9MsGVFgED0ptjopYl0BXoUjOE7qmUuyugFGZaWThAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr8CBsBQjJnxskFY7ERo20iupMMAwHwYDVR0j BBgwFoAUD0T1dQqySn1uhEKBpyT0cJlMMW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0 Y1QvMC8wRjQ0RjU3NTBBQjI0QTdENkU4NDQyODFBNzI0RjQ3MDk5NEMzMTZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNDRGNTc1MEFCMjRBN0Q2 RTg0NDI4MUE3MjRGNDcwOTk0QzMxNkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0Y1QvMC8w RjQ0RjU3NTBBQjI0QTdENkU4NDQyODFBNzI0RjQ3MDk5NEMzMTZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjM7H3KDmKE7M3FA1ApfQdqyTNdo/HK7UR83TgbPowMdN++jnJlmw/hawFnGT y8o97jGgH5BHfHpyGMqaam/2OHQMxWdvbJMPQMSvcIuODVtMHIJYJGHDwLvcmeyH OsXI/xZVmQeFSC3jcMViO3gKWm9wP/dRJD8qIqcxOdOXo/IlYIsyT41J0y3hoeoK JeroqJhptQiv/2nbHLyr3hmDTDkiACj9VCV/jlaYbyhBCBVpYDZDWUSvC1n/bgHX sAtdg2rfMDaGAk7psIa0H80zN93w7Shl/LySvcIP133+4pVvZusxENWWxNkZDRp4 J9DHPdZzPCrcHscg5GDaFOPBIw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:38:44 2025 by rpki-client