This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft File: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft (raw, json) Hash identifier: N+j48fSc6IRtaiKsVpc2rsgN4f9QIKRDEgfsBw0ci6I= Subject key identifier: 2C:05:15:75:70:84:32:0B:F8:92:9E:3E:3F:8F:FE:1A:3C:B1:F5:D2 Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD Certificate issuer: /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Certificate serial: 62C3F4DD22D2A2D2895F3FFD0756C0762FEA732F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft Manifest number: 0291 Signing time: Sat 06 Dec 2025 13:13:22 +0000 Manifest this update: Sat 06 Dec 2025 13:08:22 +0000 Manifest next update: Sun 07 Dec 2025 14:25:22 +0000 Files and hashes: 1: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl (hash: 1xtdlbqEK28mLeeD5A7wH7rBju58p7NHjHyvGMWIKyU=) 2: 323830343a373538383a3a2f33322d3334203d3e20323731303533.roa (hash: nnZxddMxtPYXvLGrokRo727KDyxmpu+gR99v39ppU0Y=) 3: 3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (hash: PMpXdMUlCp4Q+HwwLd4ysJ8VQ/NQRUOFxlCc29bb4nI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c3:f4:dd:22:d2:a2:d2:89:5f:3f:fd:07:56:c0:76:2f:ea:73:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Validity Not Before: Dec 6 13:08:22 2025 GMT Not After : Dec 7 14:25:22 2025 GMT Subject: CN=2C0515757084320BF8929E3E3F8FFE1A3CB1F5D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:8b:b1:a6:71:d4:11:17:3f:12:5b:1c:3b: ef:aa:3f:e4:97:17:58:32:f2:b7:42:39:0a:4f:c9: 8a:2a:1b:e6:0f:e4:f2:6b:74:f2:17:b7:5f:3a:c8: 07:a1:16:ff:e6:3d:56:9d:5e:5e:2f:23:c8:e1:b3: b3:7b:51:aa:73:b0:08:73:17:cc:c7:1f:2a:05:67: 5f:9b:ce:bb:97:70:1d:a8:80:74:04:82:4b:9c:31: 70:b1:eb:0d:67:e6:fa:1d:c9:a0:c3:bc:8b:45:a6: 40:9b:61:5e:fa:df:86:d8:47:12:70:9b:94:00:91: 87:99:7f:53:5e:67:28:fb:f3:48:db:59:2b:07:8e: 1f:1d:11:14:e7:29:32:c5:15:3c:af:5d:84:f0:52: f2:94:89:1b:88:37:0e:8f:79:49:b5:31:ac:08:7d: f5:8d:fa:c6:0f:c6:7f:5b:aa:f6:b2:de:bb:92:29: 67:05:f4:ad:a4:ca:07:c2:93:7f:5d:e1:8b:ad:2f: 32:93:23:26:4f:cd:d0:b5:a4:30:6a:fb:9f:54:cc: f5:6f:ec:4e:37:ce:e7:60:8f:c3:76:48:e3:c8:53: 5e:69:f3:eb:fa:15:89:0b:a8:8e:23:7f:df:3c:57: 13:a8:4b:ee:a8:b2:69:56:ec:02:0f:68:14:40:53: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:05:15:75:70:84:32:0B:F8:92:9E:3E:3F:8F:FE:1A:3C:B1:F5:D2 X509v3 Authority Key Identifier: keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:0e:9d:e7:b1:8c:3a:58:62:de:b5:38:60:34:fa:52:87:b2: 8f:af:ea:e9:b6:3e:a1:30:cb:bc:5e:92:ae:16:e9:3d:ec:57: 96:0a:9c:4f:c7:8a:ce:92:cf:82:a8:d5:ee:db:a5:5d:ff:be: a9:20:ec:43:d8:f6:ff:8f:06:14:cf:27:b4:52:f3:8b:a2:e3: 0d:bb:ca:8e:dd:9f:d3:28:54:be:59:13:ce:48:16:73:f6:ab: 3b:c2:c2:1e:61:6a:27:de:67:9e:17:52:df:5b:d5:29:3c:1a: 2e:09:94:33:ea:b6:d1:9a:bf:15:01:d8:6e:a2:f1:9f:d8:20: 4b:be:03:42:ba:43:bd:f8:71:ae:19:52:67:b7:14:70:74:cd: 81:23:60:d5:49:09:cc:4b:86:f4:b6:08:9d:fd:8e:66:a7:51: 0b:a6:a2:9a:19:39:68:59:13:4c:48:47:56:00:cd:34:c8:8e: 49:a1:6a:ba:80:70:2c:b3:de:cf:b6:ae:f8:ae:b0:8f:2b:05: d0:77:8a:b6:7c:23:8e:8e:b1:00:41:29:53:06:bb:5b:ac:76: f4:1d:0a:b5:c6:78:03:71:04:2e:03:d2:06:d5:20:15:17:be: 80:3f:24:d5:ca:30:3f:f4:ab:89:88:f4:c7:62:7c:80:e0:1a: 46:11:90:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYsP03SLSotKJXz/9B1bAdi/qcy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGQTUzRkQ3OTI4QzE3NUM3NDMyRTczREQxNDcyOTU1 RTVBMzVGRDAeFw0yNTEyMDYxMzA4MjJaFw0yNTEyMDcxNDI1MjJaMDMxMTAvBgNV BAMTKDJDMDUxNTc1NzA4NDMyMEJGODkyOUUzRTNGOEZGRTFBM0NCMUY1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePouxpnHUERc/ElscO++qP+SX F1gy8rdCOQpPyYoqG+YP5PJrdPIXt186yAehFv/mPVadXl4vI8jhs7N7UapzsAhz F8zHHyoFZ1+bzruXcB2ogHQEgkucMXCx6w1n5vodyaDDvItFpkCbYV7634bYRxJw m5QAkYeZf1NeZyj780jbWSsHjh8dERTnKTLFFTyvXYTwUvKUiRuINw6PeUm1MawI ffWN+sYPxn9bqvay3ruSKWcF9K2kygfCk39d4YutLzKTIyZPzdC1pDBq+59UzPVv 7E43zudgj8N2SOPIU15p8+v6FYkLqI4jf988VxOoS+6osmlW7AIPaBRAUwxpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULAUVdXCEMgv4kp4+P4/+Gjyx9dIwHwYDVR0j BBgwFoAUHPpT/XkowXXHQy5z3RRylV5aNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAx bVEvMC8xQ0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRkE1M0ZENzkyOEMxNzVD NzQzMkU3M0REMTQ3Mjk1NUU1QTM1RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAxbVEvMC8x Q0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANg6d57GMOlhi3rU4YDT6Uoeyj6/q6bY+oTDLvF6SrhbpPexXlgqcT8eKzpLP gqjV7tulXf++qSDsQ9j2/48GFM8ntFLzi6LjDbvKjt2f0yhUvlkTzkgWc/arO8LC HmFqJ95nnhdS31vVKTwaLgmUM+q20Zq/FQHYbqLxn9ggS74DQrpDvfhxrhlSZ7cU cHTNgSNg1UkJzEuG9LYInf2OZqdRC6aimhk5aFkTTEhHVgDNNMiOSaFquoBwLLPe z7au+K6wjysF0HeKtnwjjo6xAEEpUwa7W6x29B0KtcZ4A3EELgPSBtUgFRe+gD8k 1cowP/SriYj0x2J8gOAaRhGQbw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:22 2025 by rpki-client