This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft File: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft (raw, json) Hash identifier: NTUhj4K3nW5YVEjYkdFPefUb71eSQLN+YV7uP0R5cH8= Subject key identifier: 88:56:03:D8:DA:8C:3D:92:ED:01:07:2D:4E:7C:60:FE:29:EF:FE:7A Authority key identifier: 5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 Certificate issuer: /CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Certificate serial: 3973BBF89E0038BA6FDD598AA58821CB8E516C63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject info access: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft Manifest number: 72 Signing time: Sat 06 Dec 2025 15:43:43 +0000 Manifest this update: Sat 06 Dec 2025 15:38:43 +0000 Manifest next update: Sun 07 Dec 2025 16:27:43 +0000 Files and hashes: 1: 323830343a386539383a3a2f33322d3438203d3e20323733343336.roa (hash: BxvAZqsINc17TFdRXILJwTm+FG+N9YG1areIiru28HI=) 2: 5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl (hash: Bxc+Xf3HIBTXDItiE5EStBqKWlVv2LPiIoJcRRUtNrk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 16:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:73:bb:f8:9e:00:38:ba:6f:dd:59:8a:a5:88:21:cb:8e:51:6c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939 Validity Not Before: Dec 6 15:38:43 2025 GMT Not After : Dec 7 16:27:43 2025 GMT Subject: CN=885603D8DA8C3D92ED01072D4E7C60FE29EFFE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:07:b3:76:95:48:86:e3:7d:c3:98:a3:62: 9d:39:0c:85:ac:5c:86:2f:fd:2f:2d:0e:d9:5c:01: 54:8e:71:f9:6f:96:6b:4e:ef:6e:b4:cb:5b:aa:54: b5:65:55:99:39:f6:ca:8e:d6:40:c7:e1:c5:2c:85: 8f:80:ef:b2:1b:a2:01:4b:27:d3:51:e7:0b:ae:73: d6:47:a0:ce:9c:79:78:08:01:10:ee:7f:2c:d3:2e: fb:bd:6f:d7:0c:31:3b:cc:be:39:2e:fc:12:62:5e: 35:fc:43:d4:e0:9f:28:3a:a8:ab:13:85:b4:2a:51: 7b:dc:57:a9:04:56:4d:35:d4:1f:70:4a:4b:76:0c: c5:2f:f0:7e:17:3e:b3:8d:8f:6a:4e:64:12:29:33: 6d:b3:de:9f:ff:6e:b3:e4:d6:59:da:2d:94:79:98: 6e:3c:a0:b8:39:88:42:33:d1:1f:f7:3e:f8:63:38: 6a:0a:02:42:ff:01:0c:77:2e:e9:f7:77:d6:50:e9: 30:ba:52:cf:c1:f4:aa:a9:f0:d9:b3:ea:2e:02:c3: d2:85:45:71:5c:b7:c8:93:08:ec:13:37:52:63:4b: 7e:94:09:1d:c3:a8:8f:82:f2:a8:5b:fd:94:2f:0b: 8c:b9:21:6e:53:d4:8b:cc:ff:f0:b0:b9:aa:2c:bd: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:03:D8:DA:8C:3D:92:ED:01:07:2D:4E:7C:60:FE:29:EF:FE:7A X509v3 Authority Key Identifier: keyid:5D:C0:8B:C2:E7:CA:BC:11:B8:39:5E:55:BD:1B:E9:CD:DA:57:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/5DC08BC2E7CABC11B8395E55BD1BE9CDDA574939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a5:e6:7e:c1:d3:24:9d:17:36:69:0a:d6:c0:00:a6:52:cf: 8b:aa:56:dc:d5:d4:b8:13:2a:90:92:df:ea:72:5f:04:a3:43: fc:a4:41:45:02:f3:b6:55:00:f9:56:c9:82:7c:7e:79:19:2e: e3:ef:56:b6:d3:94:79:17:97:c6:c2:80:0b:6f:ed:b8:35:ee: 1a:6a:1b:18:f5:e1:52:9c:1b:b0:72:00:27:d9:91:b9:8c:ee: 1c:1f:4d:87:02:9c:84:fc:a7:d6:3f:aa:3c:75:bd:92:bd:9d: 0e:7e:a8:1c:9f:5e:0b:c4:29:ec:b2:55:c1:92:00:9b:c8:46: 23:01:ea:f8:b2:4a:ad:78:83:01:f3:ad:be:3b:e6:c4:55:a4: c6:2a:50:32:5a:51:c6:3d:af:37:54:31:75:ec:cd:ec:dc:76: e0:0a:6e:86:25:2c:a9:6a:00:1f:1d:f2:b2:17:d8:f1:4a:34: ff:13:b0:85:c7:33:86:68:ad:c6:b4:7a:2c:1f:be:ef:94:55: 42:83:37:4a:cc:ca:cd:6c:c3:75:f1:1e:04:52:cc:d5:0d:97: 3d:45:38:c5:60:f7:b5:33:87:2b:1e:30:49:5e:3c:f7:d7:89: c2:57:28:43:e7:54:c4:af:01:93:41:80:4f:7d:e2:71:f2:7e: 4b:c1:aa:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOXO7+J4AOLpv3VmKpYghy45RbGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDMDhCQzJFN0NBQkMxMUI4Mzk1RTU1QkQxQkU5Q0RE QTU3NDkzOTAeFw0yNTEyMDYxNTM4NDNaFw0yNTEyMDcxNjI3NDNaMDMxMTAvBgNV BAMTKDg4NTYwM0Q4REE4QzNEOTJFRDAxMDcyRDRFN0M2MEZFMjlFRkZFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzQezdpVIhuN9w5ijYp05DIWs XIYv/S8tDtlcAVSOcflvlmtO7260y1uqVLVlVZk59sqO1kDH4cUshY+A77IbogFL J9NR5wuuc9ZHoM6ceXgIARDufyzTLvu9b9cMMTvMvjku/BJiXjX8Q9Tgnyg6qKsT hbQqUXvcV6kEVk011B9wSkt2DMUv8H4XPrONj2pOZBIpM22z3p//brPk1lnaLZR5 mG48oLg5iEIz0R/3PvhjOGoKAkL/AQx3Lun3d9ZQ6TC6Us/B9Kqp8Nmz6i4Cw9KF RXFct8iTCOwTN1JjS36UCR3DqI+C8qhb/ZQvC4y5IW5T1IvM//CwuaosvTHFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiFYD2NqMPZLtAQctTnxg/inv/nowHwYDVR0j BBgwFoAUXcCLwufKvBG4OV5VvRvpzdpXSTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2Ja cXAvMC81REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQzA4QkMyRTdDQUJDMTFC ODM5NUU1NUJEMUJFOUNEREE1NzQ5MzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkgzWjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2JacXAvMC81 REMwOEJDMkU3Q0FCQzExQjgzOTVFNTVCRDFCRTlDRERBNTc0OTM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKXmfsHTJJ0XNmkK1sAAplLPi6pW3NXUuBMqkJLf6nJfBKND/KRBRQLztlUA +VbJgnx+eRku4+9WttOUeReXxsKAC2/tuDXuGmobGPXhUpwbsHIAJ9mRuYzuHB9N hwKchPyn1j+qPHW9kr2dDn6oHJ9eC8Qp7LJVwZIAm8hGIwHq+LJKrXiDAfOtvjvm xFWkxipQMlpRxj2vN1QxdezN7Nx24ApuhiUsqWoAHx3yshfY8Uo0/xOwhcczhmit xrR6LB++75RVQoM3SszKzWzDdfEeBFLM1Q2XPUU4xWD3tTOHKx4wSV4899eJwlco Q+dUxK8Bk0GAT33icfJ+S8Gq4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:11 2025 by rpki-client