This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft File: 421509EE0B333FF7D576BF479ED0155BADFB2A90.mft (raw, json) Hash identifier: yd1+P9GE11Csh8jjr7e0pc2Dt/oceDgvx6PoZcemoGk= Subject key identifier: 46:0A:5A:8F:64:E3:63:B9:D4:11:67:96:DF:82:C7:A9:10:25:67:7C Authority key identifier: 42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90 Certificate issuer: /CN=421509EE0B333FF7D576BF479ED0155BADFB2A90 Certificate serial: 48BAA75A9A4CC31928B2073804F1CEB70D79BE8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer Subject info access: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft Manifest number: 0162 Signing time: Sat 06 Dec 2025 06:11:45 +0000 Manifest this update: Sat 06 Dec 2025 06:06:45 +0000 Manifest next update: Sun 07 Dec 2025 09:31:45 +0000 Files and hashes: 1: 34352e3136362e39362e302f32342d3234203d3e20323637393539.roa (hash: HmIVPaWFHQDFb9ehHmUe+M86a5PovezP3h348KDU/vg=) 2: 421509EE0B333FF7D576BF479ED0155BADFB2A90.crl (hash: pY2y9Kh2TGIGeaGlI5eXrDy+ZvN+a1T6P0RYV6CFoSo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ba:a7:5a:9a:4c:c3:19:28:b2:07:38:04:f1:ce:b7:0d:79:be:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421509EE0B333FF7D576BF479ED0155BADFB2A90 Validity Not Before: Dec 6 06:06:45 2025 GMT Not After : Dec 7 09:31:45 2025 GMT Subject: CN=460A5A8F64E363B9D4116796DF82C7A91025677C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e4:d9:61:11:af:e5:80:31:d7:f5:42:18:9b: be:46:e5:61:e1:7e:9d:88:31:79:b2:bc:c0:ea:d1: 36:fb:e4:dc:dd:a5:d1:a1:e1:57:0d:52:e4:fb:bb: aa:e1:b5:25:50:cb:4e:78:1a:51:9d:a0:f8:d4:e6: 1d:2b:07:a2:40:7b:e5:86:eb:6e:6b:3a:1a:cf:dc: ba:97:e2:07:d4:da:27:29:22:f3:a2:f8:90:22:dc: b7:14:c7:f0:c3:cc:68:58:33:03:d5:bb:1b:cd:74: a4:41:6c:54:ec:70:0b:85:ea:b3:45:60:5e:46:0c: af:dd:a6:54:77:f2:03:fc:08:3c:37:bc:a2:45:5e: a9:26:31:82:4d:ea:96:9b:e8:7a:64:15:bc:ad:cf: f8:be:05:9a:6a:e0:10:31:92:f5:37:b8:a6:74:e9: 34:0f:52:34:8f:bf:f9:1a:de:32:62:9f:ef:8a:5d: 04:3f:99:4a:6a:a0:0c:40:98:96:4d:18:d3:bf:dd: cf:1f:ef:96:f8:27:94:5d:6a:61:d7:a3:e3:08:b9: 78:90:7f:05:eb:d6:e7:e0:0b:77:33:41:48:9a:65: 1c:7e:43:61:b4:d6:de:25:98:fe:16:a2:d5:7d:5f: a3:fa:87:bf:d7:bd:2d:40:6e:ec:8e:6d:a0:10:3b: 74:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:5A:8F:64:E3:63:B9:D4:11:67:96:DF:82:C7:A9:10:25:67:7C X509v3 Authority Key Identifier: keyid:42:15:09:EE:0B:33:3F:F7:D5:76:BF:47:9E:D0:15:5B:AD:FB:2A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/421509EE0B333FF7D576BF479ED0155BADFB2A90.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/421509EE0B333FF7D576BF479ED0155BADFB2A90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:df:16:95:06:e0:34:19:95:a2:9f:33:60:f1:17:b4:01:f1: 81:b1:03:e8:0e:02:19:e2:87:55:03:9a:1b:5b:0e:53:ab:95: 82:62:e5:b2:18:11:79:c6:12:43:fc:b8:e0:33:9f:88:29:f5: 8d:36:d1:65:1c:8a:13:ec:7d:59:f9:53:72:cc:64:57:59:6c: 91:c6:c9:02:fe:f2:71:f3:1c:de:a0:cf:16:4d:14:1f:be:c4: 3a:81:d1:a0:4c:54:ae:98:d9:46:6f:f5:d8:3d:4e:d3:4b:fd: 86:e4:b3:16:04:a5:6c:b3:29:1f:e4:7e:d7:55:f0:97:db:0c: 40:82:8c:c2:ec:bb:a2:2c:40:6d:5a:a9:6b:d9:32:47:1a:a9: 8b:4e:94:cf:b5:55:90:56:03:7a:50:ba:b4:5b:6c:72:63:0a: 4f:ae:7a:e6:24:5e:e8:8b:42:b0:c9:4b:c0:ea:ea:31:0c:f1: 19:6c:d3:19:db:10:fa:18:f4:fa:4f:9d:d8:41:e0:e9:f7:74: d3:a0:cf:4b:26:20:78:a4:43:40:cf:48:44:02:3f:79:17:55: c6:69:c6:ba:8c:b8:54:b6:3c:7d:55:c6:7e:4a:ab:5d:2a:e8: c4:3b:56:0d:be:c1:c3:0f:1e:4c:be:f8:cd:10:dc:0c:a1:6d: b2:cb:72:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSLqnWppMwxkosgc4BPHOtw15voowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxNTA5RUUwQjMzM0ZGN0Q1NzZCRjQ3OUVEMDE1NUJB REZCMkE5MDAeFw0yNTEyMDYwNjA2NDVaFw0yNTEyMDcwOTMxNDVaMDMxMTAvBgNV BAMTKDQ2MEE1QThGNjRFMzYzQjlENDExNjc5NkRGODJDN0E5MTAyNTY3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5NlhEa/lgDHX9UIYm75G5WHh fp2IMXmyvMDq0Tb75NzdpdGh4VcNUuT7u6rhtSVQy054GlGdoPjU5h0rB6JAe+WG 625rOhrP3LqX4gfU2icpIvOi+JAi3LcUx/DDzGhYMwPVuxvNdKRBbFTscAuF6rNF YF5GDK/dplR38gP8CDw3vKJFXqkmMYJN6pab6HpkFbytz/i+BZpq4BAxkvU3uKZ0 6TQPUjSPv/ka3jJin++KXQQ/mUpqoAxAmJZNGNO/3c8f75b4J5RdamHXo+MIuXiQ fwXr1ufgC3czQUiaZRx+Q2G01t4lmP4WotV9X6P6h7/XvS1AbuyObaAQO3R1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURgpaj2TjY7nUEWeW34LHqRAlZ3wwHwYDVR0j BBgwFoAUQhUJ7gszP/fVdr9HntAVW637KpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxL NVovMC80MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMTUwOUVFMEIzMzNGRjdE NTc2QkY0NzlFRDAxNTVCQURGQjJBOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RG1UdmJYVVZtTVR2WnJGbjFvd0U5RXhHUDV6ekxOYW1kc3o1b2FwdUxLNVovMC80 MjE1MDlFRTBCMzMzRkY3RDU3NkJGNDc5RUQwMTU1QkFERkIyQTkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlN8WlQbgNBmVop8zYPEXtAHxgbED6A4CGeKHVQOaG1sOU6uVgmLlshgRecYS Q/y44DOfiCn1jTbRZRyKE+x9WflTcsxkV1lskcbJAv7ycfMc3qDPFk0UH77EOoHR oExUrpjZRm/12D1O00v9huSzFgSlbLMpH+R+11Xwl9sMQIKMwuy7oixAbVqpa9ky Rxqpi06Uz7VVkFYDelC6tFtscmMKT6565iRe6ItCsMlLwOrqMQzxGWzTGdsQ+hj0 +k+d2EHg6fd006DPSyYgeKRDQM9IRAI/eRdVxmnGuoy4VLY8fVXGfkqrXSroxDtW Db7Bww8eTL74zRDcDKFtsstyyw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:20 2025 by rpki-client