This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft File: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft (raw, json) Hash identifier: muuLwF59NLkPs9km3ZI/JomyxMN4n+mKaPAQ1ozGmEg= Subject key identifier: 7D:90:28:1B:D6:8E:1C:BD:F6:1B:8F:33:84:18:1D:F3:E4:DE:73:B0 Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C Certificate issuer: /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Certificate serial: 549269AEF4044F3D5E0CB3E21BAD70219C5FB290 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject info access: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft Manifest number: 02A1 Signing time: Sat 06 Dec 2025 12:13:10 +0000 Manifest this update: Sat 06 Dec 2025 12:08:10 +0000 Manifest next update: Sun 07 Dec 2025 15:04:10 +0000 Files and hashes: 1: 3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (hash: wKAb1UDvZiPDekR65fEEYenq6zheNgIFDzzMrJdoquA=) 2: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl (hash: wom5uaers6eIKwKR8gAuiwiIYZp0VIFlESvfj06Dz50=) 3: 323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (hash: VmhohPCz9KS+aX0cz1omXVFO2DRFWZR9rKAG0HIoc2o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 15:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:92:69:ae:f4:04:4f:3d:5e:0c:b3:e2:1b:ad:70:21:9c:5f:b2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Validity Not Before: Dec 6 12:08:10 2025 GMT Not After : Dec 7 15:04:10 2025 GMT Subject: CN=7D90281BD68E1CBDF61B8F3384181DF3E4DE73B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:29:f4:4e:dd:da:35:5f:87:6a:f5:99:f3: 64:24:5b:65:99:b8:7e:a0:fc:aa:2a:3b:ee:bf:52: 5c:88:a2:42:8f:6e:0d:ba:74:6f:77:b5:ab:12:8c: 11:f3:28:e3:21:cb:a7:d4:8b:3f:71:0d:48:30:df: 7c:f8:ed:95:95:4a:8d:8e:09:53:e2:f0:5a:91:b7: 22:78:da:e4:af:ab:87:c3:5c:ec:57:12:e1:0a:69: a1:43:e3:ac:c1:ff:8d:2b:17:0f:83:d6:c3:68:7e: 50:85:00:22:b3:da:e3:ef:85:cb:40:41:3d:44:19: ab:04:e6:16:df:98:a8:2f:4f:b8:1b:2b:f7:0c:ed: 04:e8:56:03:3a:13:f1:2e:ff:ba:a3:3b:1f:33:24: e9:ad:74:18:09:e8:14:11:ef:2a:9d:50:48:c3:dc: 1f:64:83:b8:16:6e:2a:7d:f5:6d:94:71:53:d0:b0: 3e:8c:3e:45:9e:cf:a8:75:bf:d7:ee:3d:01:c1:e8: 4d:0c:9a:8d:03:1a:0b:d3:de:44:fe:8b:81:cb:f3: 32:12:73:f2:72:db:1e:b8:18:26:2c:0f:51:38:d3: ef:6c:10:4d:fa:f0:80:50:32:c1:3d:e5:df:3c:5c: 68:09:30:f9:d7:d4:7d:42:ba:b5:a1:af:03:7c:5a: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:90:28:1B:D6:8E:1C:BD:F6:1B:8F:33:84:18:1D:F3:E4:DE:73:B0 X509v3 Authority Key Identifier: keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fa:51:1d:a7:39:57:ce:dc:ba:c5:54:3d:6c:18:3d:6e:d9: 9d:0e:96:18:ed:7d:f6:7c:27:16:ea:28:27:6f:6a:9e:3d:e4: b1:78:ac:f4:72:13:ea:28:72:12:c2:39:04:a9:da:2a:73:b0: eb:bd:c1:7d:3d:8b:5c:07:58:ca:33:d5:1e:15:74:32:2e:b1: db:11:0d:38:4e:b3:44:13:04:58:16:91:ef:ac:16:60:2c:6e: c3:31:b4:34:02:6d:6e:c9:eb:51:1b:b0:ad:bd:19:c3:fd:b3: c1:bf:91:cb:e4:1a:39:3b:85:cd:69:f2:0e:ef:b2:21:d7:f4: c2:51:b5:fb:56:9e:7c:fc:51:2c:43:73:14:eb:ad:21:8a:9c: 3a:a9:ca:3c:ed:91:26:43:65:96:94:5e:27:08:ed:53:ea:3f: 78:d7:38:01:c5:b3:ce:3a:f6:60:ac:eb:ab:37:68:c9:e7:2f: c5:4d:0b:52:cf:95:ba:dd:50:90:9e:09:cc:a5:47:d4:74:79: 1d:bf:e7:0e:30:d1:48:59:5a:76:06:de:00:b8:3d:e0:c5:5b: 64:96:13:87:10:39:18:b5:ec:06:99:11:ba:39:5b:3c:ff:f3: 97:2b:5e:ce:75:c7:24:89:9c:31:1f:f8:c5:92:a3:d7:af:63: 5f:09:85:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVJJprvQETz1eDLPiG61wIZxfspAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRjdDMjBCMjQ1NkJBMzZFQkNDODkyNzBBQ0U5NzZE QUNGQzM1QzAeFw0yNTEyMDYxMjA4MTBaFw0yNTEyMDcxNTA0MTBaMDMxMTAvBgNV BAMTKDdEOTAyODFCRDY4RTFDQkRGNjFCOEYzMzg0MTgxREYzRTRERTczQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNiCn0Tt3aNV+HavWZ82QkW2WZ uH6g/KoqO+6/UlyIokKPbg26dG93tasSjBHzKOMhy6fUiz9xDUgw33z47ZWVSo2O CVPi8FqRtyJ42uSvq4fDXOxXEuEKaaFD46zB/40rFw+D1sNoflCFACKz2uPvhctA QT1EGasE5hbfmKgvT7gbK/cM7QToVgM6E/Eu/7qjOx8zJOmtdBgJ6BQR7yqdUEjD 3B9kg7gWbip99W2UcVPQsD6MPkWez6h1v9fuPQHB6E0Mmo0DGgvT3kT+i4HL8zIS c/Jy2x64GCYsD1E40+9sEE368IBQMsE95d88XGgJMPnX1H1CurWhrwN8WuhBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfZAoG9aOHL32G48zhBgd8+Tec7AwHwYDVR0j BBgwFoAUwR98ILJFa6NuvMiScKzpdtrPw1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldV MksvMC9DMTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUY3QzIwQjI0NTZCQTM2 RUJDQzg5MjcwQUNFOTc2REFDRkMzNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldVMksvMC9D MTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJvpRHac5V87cusVUPWwYPW7ZnQ6WGO199nwnFuooJ29qnj3ksXis9HIT6ihy EsI5BKnaKnOw673BfT2LXAdYyjPVHhV0Mi6x2xENOE6zRBMEWBaR76wWYCxuwzG0 NAJtbsnrURuwrb0Zw/2zwb+Ry+QaOTuFzWnyDu+yIdf0wlG1+1aefPxRLENzFOut IYqcOqnKPO2RJkNllpReJwjtU+o/eNc4AcWzzjr2YKzrqzdoyecvxU0LUs+Vut1Q kJ4JzKVH1HR5Hb/nDjDRSFladgbeALg94MVbZJYThxA5GLXsBpkRujlbPP/zlyte znXHJImcMR/4xZKj169jXwmFZA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:49 2025 by rpki-client