This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft File: 679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft (raw, json) Hash identifier: djiePv1kJagzVeSs81pDMWEHsnMTxZSTcPK2eEw5DE8= Subject key identifier: A3:4F:63:4A:66:BF:FE:1A:BF:FB:2E:27:AE:C8:39:23:D2:D4:C5:A6 Authority key identifier: 67:9A:17:C4:EA:F3:C5:21:92:42:E0:F4:69:4C:02:B2:85:02:C2:BE Certificate issuer: /CN=679A17C4EAF3C5219242E0F4694C02B28502C2BE Certificate serial: 2B6A2B13554F5F366F5B61C1499AA516816284B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft Manifest number: 0222 Signing time: Sat 06 Dec 2025 08:02:43 +0000 Manifest this update: Sat 06 Dec 2025 07:57:43 +0000 Manifest next update: Sun 07 Dec 2025 10:50:43 +0000 Files and hashes: 1: 323830343a373361343a3a2f33322d3438203d3e20323730393238.roa (hash: ow/M/tR4vMYkj5VboYTCfUK2AEwsuRC7xOtx+HT8g5U=) 2: 679A17C4EAF3C5219242E0F4694C02B28502C2BE.crl (hash: DoUPk23xEZUln8Fp+bKMs2tEEROPE8LGs1/s4QWwK+Q=) 3: 3139302e3132332e322e302f32332d3234203d3e20323730393238.roa (hash: EZ7X2kS+h2/iHl51lG24tFRi8FeFEVwf04H8jcLoabw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.crl rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6a:2b:13:55:4f:5f:36:6f:5b:61:c1:49:9a:a5:16:81:62:84:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=679A17C4EAF3C5219242E0F4694C02B28502C2BE Validity Not Before: Dec 6 07:57:43 2025 GMT Not After : Dec 7 10:50:43 2025 GMT Subject: CN=A34F634A66BFFE1ABFFB2E27AEC83923D2D4C5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:b8:91:03:63:03:cc:a1:c2:1a:50:02:d7: b2:43:d3:40:72:b4:a7:53:d0:53:11:1b:4f:5b:87: 46:83:4e:08:00:f2:eb:62:67:d7:26:f5:b5:af:48: cf:62:38:b8:9a:c7:18:80:b3:76:82:29:a9:28:d8: c6:1d:f3:34:90:bd:0a:64:0c:5c:ff:34:a0:be:88: fa:cc:0e:cd:cd:be:01:67:5e:5f:67:cc:cb:ba:85: b2:57:5b:11:42:f4:36:68:7e:9b:65:7a:e3:8b:dd: 2a:63:a4:c0:55:ef:21:28:73:e0:7a:6d:19:8f:fe: 82:cd:df:84:68:cd:12:8a:6a:69:63:4e:81:df:37: 45:20:88:d4:b2:dc:55:9d:4e:2c:36:a5:50:0e:54: c4:81:64:97:49:79:a7:0e:e5:69:15:a0:bc:49:3f: 53:5d:2d:24:be:8a:d5:fb:ce:ba:18:08:f7:46:c5: 61:32:34:28:1a:96:fa:1a:fc:5a:a5:cc:d4:22:3b: 67:57:e9:5d:cf:6b:fe:f1:f7:62:c8:d6:2c:c0:8b: 64:b5:ff:46:6d:5d:07:69:43:39:ba:d4:0f:02:bb: 1a:3d:05:63:e4:fa:f5:83:b3:e7:c9:59:16:df:21: e5:4a:8a:0b:81:1e:91:0a:fb:73:3f:63:e1:f3:b2: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4F:63:4A:66:BF:FE:1A:BF:FB:2E:27:AE:C8:39:23:D2:D4:C5:A6 X509v3 Authority Key Identifier: keyid:67:9A:17:C4:EA:F3:C5:21:92:42:E0:F4:69:4C:02:B2:85:02:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679A17C4EAF3C5219242E0F4694C02B28502C2BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/679A17C4EAF3C5219242E0F4694C02B28502C2BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a0:76:0f:3b:34:5d:60:ea:97:6a:55:e0:d2:e6:61:bf:0b: eb:38:2f:13:d2:cf:5c:ca:a9:25:ae:8c:1d:1e:76:db:53:4a: 2f:16:3c:15:47:eb:24:3d:4d:7b:bc:12:b2:38:2c:2a:4d:dd: 1b:0e:37:97:6a:ad:8f:21:17:ee:54:4a:1d:73:3b:81:f0:e7: 03:9c:e1:23:61:13:09:3c:94:19:36:d1:34:22:96:bc:bf:1a: 5e:9e:6e:2a:f9:7b:55:5c:ef:b9:33:ea:5b:13:3d:36:dc:7a: 4a:0d:d0:11:a3:40:a3:50:59:99:92:e3:91:cc:90:f3:dc:4a: 7d:6c:86:63:eb:ce:3c:46:3e:0e:07:2d:83:6a:c9:05:4e:a9: 2c:f9:2e:17:22:b7:46:93:57:d7:87:73:a6:8b:7b:44:c1:f0: 67:45:05:a4:fe:e2:37:30:c0:3e:f6:d1:a9:cc:86:5c:74:f3: 20:2c:47:a8:e5:29:24:60:2e:05:80:92:a1:be:d5:8b:f6:93: 6e:b5:c5:8d:3e:30:8b:dd:9e:00:1f:05:e5:76:b0:93:b2:43: 11:d0:82:75:ac:8f:d6:4c:ef:be:40:0f:75:f9:7e:13:c7:a0: f9:69:0c:32:b5:da:3f:52:ea:7b:4b:0e:bb:e8:85:45:9c:d1: ed:61:07:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK2orE1VPXzZvW2HBSZqlFoFihLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5QTE3QzRFQUYzQzUyMTkyNDJFMEY0Njk0QzAyQjI4 NTAyQzJCRTAeFw0yNTEyMDYwNzU3NDNaFw0yNTEyMDcxMDUwNDNaMDMxMTAvBgNV BAMTKEEzNEY2MzRBNjZCRkZFMUFCRkZCMkUyN0FFQzgzOTIzRDJENEM1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+7iRA2MDzKHCGlAC17JD00By tKdT0FMRG09bh0aDTggA8utiZ9cm9bWvSM9iOLiaxxiAs3aCKako2MYd8zSQvQpk DFz/NKC+iPrMDs3NvgFnXl9nzMu6hbJXWxFC9DZofptleuOL3SpjpMBV7yEoc+B6 bRmP/oLN34RozRKKamljToHfN0UgiNSy3FWdTiw2pVAOVMSBZJdJeacO5WkVoLxJ P1NdLSS+itX7zroYCPdGxWEyNCgalvoa/FqlzNQiO2dX6V3Pa/7x92LI1izAi2S1 /0ZtXQdpQzm61A8Cuxo9BWPk+vWDs+fJWRbfIeVKiguBHpEK+3M/Y+HzslUpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo09jSma//hq/+y4nrsg5I9LUxaYwHwYDVR0j BBgwFoAUZ5oXxOrzxSGSQuD0aUwCsoUCwr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHFKUEFTOXhMYVNrWldlOEJuMTJURTdlcFJkQWF1Y1NzdFhFTWJMU0Zt WHYvMC82NzlBMTdDNEVBRjNDNTIxOTI0MkUwRjQ2OTRDMDJCMjg1MDJDMkJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3OUExN0M0RUFGM0M1MjE5 MjQyRTBGNDY5NEMwMkIyODUwMkMyQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHFKUEFTOXhMYVNrWldlOEJuMTJURTdlcFJkQWF1Y1NzdFhFTWJMU0ZtWHYvMC82 NzlBMTdDNEVBRjNDNTIxOTI0MkUwRjQ2OTRDMDJCMjg1MDJDMkJFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkqB2Dzs0XWDql2pV4NLmYb8L6zgvE9LPXMqpJa6MHR5221NKLxY8FUfrJD1N e7wSsjgsKk3dGw43l2qtjyEX7lRKHXM7gfDnA5zhI2ETCTyUGTbRNCKWvL8aXp5u Kvl7VVzvuTPqWxM9Ntx6Sg3QEaNAo1BZmZLjkcyQ89xKfWyGY+vOPEY+Dgctg2rJ BU6pLPkuFyK3RpNX14dzpot7RMHwZ0UFpP7iNzDAPvbRqcyGXHTzICxHqOUpJGAu BYCSob7Vi/aTbrXFjT4wi92eAB8F5Xawk7JDEdCCdayP1kzvvkAPdfl+E8eg+WkM MrXaP1Lqe0sOu+iFRZzR7WEH3A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:28 2025 by rpki-client