This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft File: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft (raw, json) Hash identifier: M4vKXU/xSdrOq7vUvhhmxHSOHfzlpVep4FDtFGvtcmM= Subject key identifier: 0F:6B:E6:77:5D:C0:09:07:B5:B0:84:91:5E:B7:D5:06:9E:D0:D2:D4 Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25 Certificate issuer: /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025 Certificate serial: 5F0A815AF3C1BDC47D83DB4105667FF9B0B50052 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer Subject info access: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft Manifest number: 02A4 Signing time: Fri 05 Dec 2025 19:26:53 +0000 Manifest this update: Fri 05 Dec 2025 19:21:53 +0000 Manifest next update: Sat 06 Dec 2025 20:33:53 +0000 Files and hashes: 1: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: TWgboQvD5ElxCD7GryGFp3lioM8xkrhIZhs+YOtG00s=) 2: 323830343a343130343a3a2f33322d313238203d3e20323635393938.roa (hash: 2RhvcmCViO7K6rvzNLUvrSfyH4uASVKfLVRVw16Kfio=) 3: 964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl (hash: b7nop7S0Ek/Tksj/2bkOJCPfgIFTZliUWpjOxS6rLH4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0a:81:5a:f3:c1:bd:c4:7d:83:db:41:05:66:7f:f9:b0:b5:00:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025 Validity Not Before: Dec 5 19:21:53 2025 GMT Not After : Dec 6 20:33:53 2025 GMT Subject: CN=0F6BE6775DC00907B5B084915EB7D5069ED0D2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:c4:6d:b6:11:16:9d:43:91:1c:fe:9c:44: ac:f8:a2:5e:db:71:db:80:9e:00:6a:1b:69:d7:61: c9:ca:cb:ee:9a:b3:76:bc:28:c9:51:5b:20:b7:ed: ab:47:eb:39:d8:b3:10:f2:52:ea:fb:3f:8c:cb:7c: ee:9d:0a:f1:a1:9e:e0:4a:4c:cb:ee:3e:63:15:d2: ac:83:33:c9:63:b4:95:4d:54:ab:9d:98:a5:dd:0a: 18:fd:05:17:f1:8c:d4:c9:04:a6:02:61:49:59:43: 60:9c:a0:0c:26:9b:0e:14:23:39:d6:48:27:97:d5: fe:8e:1f:6e:27:c0:b2:fc:b4:07:24:94:50:b1:b7: 12:c9:32:f1:26:2c:54:02:80:3b:68:d5:be:00:85: e1:98:aa:60:6f:e9:4c:15:cc:81:73:e0:5c:26:f3: 07:65:59:68:64:f7:72:69:e9:6d:e6:9d:2d:f5:42: 64:d6:73:dc:31:03:07:c6:72:c1:c5:0f:66:cf:ee: a7:be:37:65:e4:3b:73:3e:74:e1:45:cf:13:34:01: 81:3b:9b:f4:f4:ee:78:0a:e5:82:2f:e4:9d:5a:5a: 10:15:c3:d2:30:1e:5b:7b:95:ff:d3:f6:bd:0e:e3: a9:5f:d8:ee:27:7a:35:86:c5:38:d1:b0:38:45:99: 0c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6B:E6:77:5D:C0:09:07:B5:B0:84:91:5E:B7:D5:06:9E:D0:D2:D4 X509v3 Authority Key Identifier: keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f2:10:a6:68:5c:bf:2c:70:69:2d:f9:2c:cb:45:31:cb:63: 7e:15:bf:3c:56:1b:90:05:f0:76:ee:4a:1f:33:d3:5b:95:fc: 66:29:e7:37:3a:29:5f:dd:af:77:ab:6c:aa:70:f1:4f:af:f6: 98:94:b4:73:eb:56:a8:85:0f:a1:4b:05:69:f7:b8:0a:59:07: 9f:b3:af:74:2d:9b:c3:ff:09:33:64:fe:05:c2:1c:12:d1:ec: 41:07:12:29:c1:dc:8c:f1:22:14:85:b1:b2:d7:c2:a0:00:d0: b2:e1:88:88:5d:d2:4a:ed:f2:89:06:6e:92:aa:c6:c4:75:ce: 46:03:b4:54:32:a3:32:54:b4:52:75:82:a8:18:c8:45:29:a4: af:78:65:1f:81:ff:e8:8f:98:37:d2:12:90:b4:e1:68:74:25: 6e:44:85:e3:d5:22:09:0a:84:3e:8e:b0:5e:52:3a:67:0f:61: 97:b4:b6:75:bc:5b:11:b3:5a:66:d1:c6:20:af:8f:c3:00:17: 19:38:da:2b:8d:7a:93:50:20:16:f2:3e:a0:62:a8:5b:bf:2f: 1a:74:a2:55:e9:b4:f1:a0:5b:a1:92:cb:14:1b:bf:3b:87:9a: 4b:f9:b2:0e:37:02:cf:f3:88:e4:53:3d:06:12:a6:f6:79:de: cd:30:8b:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXwqBWvPBvcR9g9tBBWZ/+bC1AFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0RTQ2ODNCQjJCMjU5NjMwMEY4MUZFQkQ5RUE5REI1 MDVBRjAyNTAeFw0yNTEyMDUxOTIxNTNaFw0yNTEyMDYyMDMzNTNaMDMxMTAvBgNV BAMTKDBGNkJFNjc3NURDMDA5MDdCNUIwODQ5MTVFQjdENTA2OUVEMEQyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwsRtthEWnUORHP6cRKz4ol7b cduAngBqG2nXYcnKy+6as3a8KMlRWyC37atH6znYsxDyUur7P4zLfO6dCvGhnuBK TMvuPmMV0qyDM8ljtJVNVKudmKXdChj9BRfxjNTJBKYCYUlZQ2CcoAwmmw4UIznW SCeX1f6OH24nwLL8tAcklFCxtxLJMvEmLFQCgDto1b4AheGYqmBv6UwVzIFz4Fwm 8wdlWWhk93Jp6W3mnS31QmTWc9wxAwfGcsHFD2bP7qe+N2XkO3M+dOFFzxM0AYE7 m/T07ngK5YIv5J1aWhAVw9IwHlt7lf/T9r0O46lf2O4nejWGxTjRsDhFmQxzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD2vmd13ACQe1sISRXrfVBp7Q0tQwHwYDVR0j BBgwFoAUlk5Gg7srJZYwD4H+vZ6p21Ba8CUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGt4UWg4eFVrbkQ1akdEcmRMSE1IZXFlZHlGbUt1UEtKVWFDeXN1ZXhY UVAvMC85NjRFNDY4M0JCMkIyNTk2MzAwRjgxRkVCRDlFQTlEQjUwNUFGMDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NEU0NjgzQkIyQjI1OTYz MDBGODFGRUJEOUVBOURCNTA1QUYwMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGt4UWg4eFVrbkQ1akdEcmRMSE1IZXFlZHlGbUt1UEtKVWFDeXN1ZXhYUVAvMC85 NjRFNDY4M0JCMkIyNTk2MzAwRjgxRkVCRDlFQTlEQjUwNUFGMDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ/IQpmhcvyxwaS35LMtFMctjfhW/PFYbkAXwdu5KHzPTW5X8ZinnNzopX92v d6tsqnDxT6/2mJS0c+tWqIUPoUsFafe4ClkHn7OvdC2bw/8JM2T+BcIcEtHsQQcS KcHcjPEiFIWxstfCoADQsuGIiF3SSu3yiQZukqrGxHXORgO0VDKjMlS0UnWCqBjI RSmkr3hlH4H/6I+YN9ISkLThaHQlbkSF49UiCQqEPo6wXlI6Zw9hl7S2dbxbEbNa ZtHGIK+PwwAXGTjaK416k1AgFvI+oGKoW78vGnSiVem08aBboZLLFBu/O4eaS/my DjcCz/OI5FM9BhKm9nnezTCLgA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:19 2025 by rpki-client