This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft File: 697580E8392CC653843C7008AA3115A37A09736A.mft (raw, json) Hash identifier: 4Ku5oK1dkLPUKYZ1bXjLwpdL5K46L5FDFibtGv5qFVY= Subject key identifier: 18:BE:07:BD:DE:2D:DE:99:C0:C2:19:EF:50:E4:C7:7C:21:41:A9:D6 Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A Certificate issuer: /CN=697580E8392CC653843C7008AA3115A37A09736A Certificate serial: 75591ACBD4B0FB4722BB7CF90F22CF20D35CE027 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft Manifest number: 033A Signing time: Sat 06 Dec 2025 03:07:48 +0000 Manifest this update: Sat 06 Dec 2025 03:02:48 +0000 Manifest next update: Sun 07 Dec 2025 06:13:48 +0000 Files and hashes: 1: 323830343a353636343a3a2f33322d313238203d3e20323637393935.roa (hash: yBJLVY573oMtFcz0CjlfuteQ1wYsu7OGqA7L4vjCAB4=) 2: 697580E8392CC653843C7008AA3115A37A09736A.crl (hash: ncvCjGsYbwpJqJnPbe90jQw+4ihkKvfpi3e1iOVWfH4=) 3: 34352e3136372e34382e302f32322d3332203d3e20323637393935.roa (hash: 434vOAaxYJM+S1hInfX5jD5BKunos58ASuWuBDgfyNo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 06:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:59:1a:cb:d4:b0:fb:47:22:bb:7c:f9:0f:22:cf:20:d3:5c:e0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A Validity Not Before: Dec 6 03:02:48 2025 GMT Not After : Dec 7 06:13:48 2025 GMT Subject: CN=18BE07BDDE2DDE99C0C219EF50E4C77C2141A9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:97:ac:30:95:11:d2:c7:c5:83:ba:40:10: d7:40:dd:20:65:6d:73:ba:52:1f:74:6c:4a:4d:74: 71:ae:ac:14:fa:c7:25:20:59:98:70:c0:7e:24:22: 8c:96:ec:54:02:c5:57:a9:10:a8:25:74:d5:14:0c: 2d:0a:59:09:37:4e:9e:a2:5c:ca:32:15:82:d5:04: 0d:53:b0:3e:59:73:52:43:8d:7f:80:46:37:69:82: 5c:77:28:2a:13:ba:7d:ef:a0:56:46:fa:14:75:a4: fe:ee:7d:f1:9e:6a:90:f3:17:02:35:23:f8:bd:46: 2a:b5:9b:05:f7:d7:06:68:be:9e:38:21:aa:5b:8a: 69:ac:b2:25:f3:51:6b:92:ac:34:8d:a2:a9:01:dc: f4:46:53:9d:c3:b8:d4:98:f8:ed:91:65:91:e7:ff: 90:f3:ac:fe:2c:f1:3b:eb:40:bd:88:e3:32:28:68: 1c:15:41:38:11:ea:58:f1:5d:b0:a3:8b:ac:4f:a3: b5:7e:88:1d:41:ff:59:b0:eb:e7:77:7b:ae:70:7c: 37:d7:df:e1:f3:86:a8:88:84:ed:eb:55:69:96:56: 43:33:77:31:f9:29:fd:04:dd:ec:78:56:a0:1f:df: 47:88:dc:64:f7:05:b3:18:8c:1e:d5:0b:71:7f:03: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BE:07:BD:DE:2D:DE:99:C0:C2:19:EF:50:E4:C7:7C:21:41:A9:D6 X509v3 Authority Key Identifier: keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:69:55:50:2e:8f:c9:13:e8:cc:ee:5c:1b:e3:9d:b5:33:18: 0e:87:29:9d:7c:cb:bd:09:b8:93:26:d1:fd:0e:ee:04:a2:c5: fb:74:21:a7:ff:77:ad:ff:7a:d1:bd:76:cd:eb:d2:38:e9:67: 53:38:55:9c:8b:77:34:37:ee:a7:f9:9c:4b:a1:b9:47:88:b7: a1:58:be:68:d7:fb:b6:13:96:86:ac:46:bd:86:d1:14:96:54: 0b:0d:ed:cb:8d:7c:e2:fa:d1:f1:ed:b4:fa:84:6a:c7:8d:84: 90:b2:5d:cf:f8:30:d5:05:f6:26:60:96:a5:bc:f1:b7:e3:64: a6:fd:b3:00:51:0b:2b:8a:ae:9a:f6:03:bd:18:a8:7e:78:ea: d8:d5:c5:33:e6:03:74:34:04:ff:44:77:8a:eb:32:29:38:ab: be:bf:14:72:f4:0c:ad:ad:00:da:e9:fc:b5:aa:15:42:6b:2a: 3c:a2:50:50:87:aa:76:de:f9:75:f6:2e:6b:3d:09:9d:13:10: 52:9b:b3:c7:70:05:15:46:32:09:eb:d6:8c:e5:93:ca:d7:5c: 5c:27:07:62:2a:c8:d7:49:67:11:07:58:b2:09:49:cb:90:03: d8:5e:75:85:b1:d7:32:f8:f2:24:d3:ff:ca:21:53:e1:6c:b8: b1:d9:0b:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdVkay9Sw+0ciu3z5DyLPINNc4CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk3NTgwRTgzOTJDQzY1Mzg0M0M3MDA4QUEzMTE1QTM3 QTA5NzM2QTAeFw0yNTEyMDYwMzAyNDhaFw0yNTEyMDcwNjEzNDhaMDMxMTAvBgNV BAMTKDE4QkUwN0JEREUyRERFOTlDMEMyMTlFRjUwRTRDNzdDMjE0MUE5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdpesMJUR0sfFg7pAENdA3SBl bXO6Uh90bEpNdHGurBT6xyUgWZhwwH4kIoyW7FQCxVepEKgldNUUDC0KWQk3Tp6i XMoyFYLVBA1TsD5Zc1JDjX+ARjdpglx3KCoTun3voFZG+hR1pP7uffGeapDzFwI1 I/i9Riq1mwX31wZovp44IapbimmssiXzUWuSrDSNoqkB3PRGU53DuNSY+O2RZZHn /5DzrP4s8TvrQL2I4zIoaBwVQTgR6ljxXbCji6xPo7V+iB1B/1mw6+d3e65wfDfX 3+HzhqiIhO3rVWmWVkMzdzH5Kf0E3ex4VqAf30eI3GT3BbMYjB7VC3F/A5Y/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGL4Hvd4t3pnAwhnvUOTHfCFBqdYwHwYDVR0j BBgwFoAUaXWA6DksxlOEPHAIqjEVo3oJc2owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRM ZUgvMS82OTc1ODBFODM5MkNDNjUzODQzQzcwMDhBQTMxMTVBMzdBMDk3MzZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NzU4MEU4MzkyQ0M2NTM4 NDNDNzAwOEFBMzExNUEzN0EwOTczNkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRMZUgvMS82 OTc1ODBFODM5MkNDNjUzODQzQzcwMDhBQTMxMTVBMzdBMDk3MzZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzWlVUC6PyRPozO5cG+OdtTMYDocpnXzLvQm4kybR/Q7uBKLF+3Qhp/93rf96 0b12zevSOOlnUzhVnIt3NDfup/mcS6G5R4i3oVi+aNf7thOWhqxGvYbRFJZUCw3t y4184vrR8e20+oRqx42EkLJdz/gw1QX2JmCWpbzxt+Nkpv2zAFELK4qumvYDvRio fnjq2NXFM+YDdDQE/0R3iusyKTirvr8UcvQMra0A2un8taoVQmsqPKJQUIeqdt75 dfYuaz0JnRMQUpuzx3AFFUYyCevWjOWTytdcXCcHYirI10lnEQdYsglJy5AD2F51 hbHXMvjyJNP/yiFT4Wy4sdkLhg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:16 2025 by rpki-client