This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft File: 34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft (raw, json) Hash identifier: 3tgx2XvZjyZS3/D8ee5EzMRwUEmo8VJYaY3z0B390Tw= Subject key identifier: 67:7F:6B:37:B5:B0:2E:1E:2F:AA:F5:EC:35:4D:5C:37:60:6B:84:8D Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F Certificate issuer: /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F Certificate serial: 764A74FE80B5BB67FB13B69BA67A090521078E6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer Subject info access: rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft Manifest number: 0331 Signing time: Sat 06 Dec 2025 10:58:01 +0000 Manifest this update: Sat 06 Dec 2025 10:53:01 +0000 Manifest next update: Sun 07 Dec 2025 12:29:01 +0000 Files and hashes: 1: 3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa (hash: lVJItJB1wmM8POPEtsWyZVB7SR+z5ZVxesmXhl2OYUY=) 2: 34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl (hash: MNU/EkgMM2aMl1RaEQIQPQOwofLMkiS30Vcx8t1vtSQ=) 3: 323830343a383466343a3a2f33322d3431203d3e20323732353438.roa (hash: oXzqou6hsYj2ELcRjSkh2wVr70A0V8XsJDsMDK91qwo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 12:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4a:74:fe:80:b5:bb:67:fb:13:b6:9b:a6:7a:09:05:21:07:8e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F Validity Not Before: Dec 6 10:53:01 2025 GMT Not After : Dec 7 12:29:01 2025 GMT Subject: CN=677F6B37B5B02E1E2FAAF5EC354D5C37606B848D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:2b:c2:dc:b2:af:4e:f3:f1:52:2b:98:a0: f7:05:a4:cb:a5:a9:6d:c8:07:17:34:e8:09:c3:4e: ac:3a:bd:3d:e2:b5:f4:4a:96:d4:1a:73:85:74:26: f1:8f:36:84:f3:6b:fa:d8:e2:57:f0:1c:95:04:88: 0c:ff:7a:65:9c:45:21:6e:27:5e:2c:5e:94:4a:9e: d7:bf:25:e8:2f:1f:07:4d:23:a6:d6:7c:09:34:18: f8:06:45:67:2a:ea:a7:2c:4b:ce:05:b2:a3:5f:2b: e3:23:ca:2c:a5:94:c8:02:c4:3e:12:d7:4c:27:05: 49:43:43:ed:66:36:6a:ff:9a:90:43:3c:3a:c4:0e: 11:6f:5b:a2:4b:2c:be:fa:11:85:ed:c1:b9:c1:02: a9:f6:3b:0b:57:b5:42:41:f9:3f:9c:9d:24:b2:ee: c7:9f:8a:a3:8d:0d:b9:34:06:ce:f0:0b:c2:5d:09: d8:9a:22:bc:2a:98:bd:97:3e:64:17:69:8c:94:da: 3c:21:95:80:01:e2:e5:71:dd:c1:59:f1:fb:5e:52: 5f:c3:57:f4:b6:7d:b5:d8:63:5b:21:a9:6e:36:ed: d2:ce:98:b4:64:58:c7:83:d2:24:5e:8a:72:b6:2b: 9a:88:3c:46:d7:f9:6d:c9:08:7e:39:87:60:1b:53: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7F:6B:37:B5:B0:2E:1E:2F:AA:F5:EC:35:4D:5C:37:60:6B:84:8D X509v3 Authority Key Identifier: keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:43:24:10:8a:fa:65:37:4b:f4:67:15:13:3a:4d:05:ff:0b: 9e:75:36:30:e6:f4:f7:4d:c1:d9:fb:c8:cc:5e:00:8c:e1:b0: 41:52:2a:1f:33:16:b1:f8:92:99:b2:f8:dc:aa:cd:cf:b2:99: 1f:9a:6a:16:34:35:be:85:ff:2d:0d:ed:a7:2b:be:24:1a:6c: a8:96:ac:fa:cc:27:04:9e:99:8e:9e:7e:29:5a:de:2d:6c:71: 5c:a4:bd:ab:41:71:8d:5a:90:34:5d:34:0e:24:60:0e:5e:ad: e2:02:05:bf:c1:74:c7:d8:03:8e:2b:76:4b:c6:31:2d:7a:c5: 42:27:e3:37:be:7b:86:3c:04:26:70:ed:e0:5e:0a:78:a8:82: 60:93:ae:bb:72:48:13:59:92:38:5b:5d:0e:8d:70:fa:d1:9c: 09:e6:7b:9d:56:a7:f0:5f:95:3a:9e:f7:4a:5a:32:6e:eb:5e: 4a:53:cd:a7:49:53:d0:1e:2b:f3:fe:92:b0:a9:6c:da:18:f1: f1:50:f8:a5:11:c4:a2:78:0c:33:09:4e:c3:1b:91:ff:42:e2: 09:c8:ef:f4:00:2c:7a:70:90:f6:42:34:7a:9a:5c:7f:b8:46: fc:80:41:19:7b:9b:a6:80:2d:4a:15:be:69:df:75:3c:61:e5: db:4e:93:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdkp0/oC1u2f7E7abpnoJBSEHjm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyOTZBQzAyNzRDOUUxOEZGQTFERTZBNzZEOEU4QjhF RjdGRDMxRjAeFw0yNTEyMDYxMDUzMDFaFw0yNTEyMDcxMjI5MDFaMDMxMTAvBgNV BAMTKDY3N0Y2QjM3QjVCMDJFMUUyRkFBRjVFQzM1NEQ1QzM3NjA2Qjg0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMyvC3LKvTvPxUiuYoPcFpMul qW3IBxc06AnDTqw6vT3itfRKltQac4V0JvGPNoTza/rY4lfwHJUEiAz/emWcRSFu J14sXpRKnte/JegvHwdNI6bWfAk0GPgGRWcq6qcsS84FsqNfK+MjyiyllMgCxD4S 10wnBUlDQ+1mNmr/mpBDPDrEDhFvW6JLLL76EYXtwbnBAqn2OwtXtUJB+T+cnSSy 7sefiqONDbk0Bs7wC8JdCdiaIrwqmL2XPmQXaYyU2jwhlYAB4uVx3cFZ8fteUl/D V/S2fbXYY1shqW427dLOmLRkWMeD0iReinK2K5qIPEbX+W3JCH45h2AbU+i7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ39rN7WwLh4vqvXsNU1cN2BrhI0wHwYDVR0j BBgwFoAUNClqwCdMnhj/od5qdtjouO9/0x8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtS R2svMS8zNDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0Mjk2QUMwMjc0QzlFMThG RkExREU2QTc2RDhFOEI4RUY3RkQzMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtSR2svMS8z NDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbkMkEIr6ZTdL9GcVEzpNBf8LnnU2MOb0903B2fvIzF4AjOGwQVIqHzMWsfiS mbL43KrNz7KZH5pqFjQ1voX/LQ3tpyu+JBpsqJas+swnBJ6Zjp5+KVreLWxxXKS9 q0FxjVqQNF00DiRgDl6t4gIFv8F0x9gDjit2S8YxLXrFQifjN757hjwEJnDt4F4K eKiCYJOuu3JIE1mSOFtdDo1w+tGcCeZ7nVan8F+VOp73SloybuteSlPNp0lT0B4r 8/6SsKls2hjx8VD4pRHEongMMwlOwxuR/0LiCcjv9AAsenCQ9kI0eppcf7hG/IBB GXubpoAtShW+ad91PGHl206TTA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:40 2025 by rpki-client