This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/2/B097ACD65342CE2FBAFB5C776921F0CE5E423318.mft File: B097ACD65342CE2FBAFB5C776921F0CE5E423318.mft (raw, json) Hash identifier: eZZ/at9KUI1YI6SG6vX4fSCWmhFtgPVUkVCku/u42QI= Subject key identifier: 55:67:08:8B:ED:69:36:4F:F2:E7:47:9F:09:AE:03:E3:70:E4:B9:4D Authority key identifier: B0:97:AC:D6:53:42:CE:2F:BA:FB:5C:77:69:21:F0:CE:5E:42:33:18 Certificate issuer: /CN=B097ACD65342CE2FBAFB5C776921F0CE5E423318 Certificate serial: 17A770E177C33A59711B6E5DA05DBBF3B29C63A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B097ACD65342CE2FBAFB5C776921F0CE5E423318.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/2/B097ACD65342CE2FBAFB5C776921F0CE5E423318.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 20:39:35 +0000 Manifest this update: Fri 05 Dec 2025 20:34:35 +0000 Manifest next update: Sun 07 Dec 2025 00:10:35 +0000 Files and hashes: 1: 323830343a393566343a3a2f33322d3334203d3e20323734353539.roa (hash: bBnq+3+mpe/4sX1Q8Q8Mn+stKKP9iaBitXExWgLyj50=) 2: B097ACD65342CE2FBAFB5C776921F0CE5E423318.crl (hash: 4vEs8e83MuVjH5IVGr2+BKAnN6ggP5SX3JQkX4xpYl8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/2/B097ACD65342CE2FBAFB5C776921F0CE5E423318.crl rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/2/B097ACD65342CE2FBAFB5C776921F0CE5E423318.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B097ACD65342CE2FBAFB5C776921F0CE5E423318.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a7:70:e1:77:c3:3a:59:71:1b:6e:5d:a0:5d:bb:f3:b2:9c:63:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B097ACD65342CE2FBAFB5C776921F0CE5E423318 Validity Not Before: Dec 5 20:34:35 2025 GMT Not After : Dec 7 00:10:35 2025 GMT Subject: CN=5567088BED69364FF2E7479F09AE03E370E4B94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:50:55:29:0d:96:bf:ed:61:f7:ab:d3:91:9e: 8c:2b:b3:d0:85:71:08:52:0a:bd:0c:b4:7d:a3:c8: 07:1e:e1:b5:90:ae:ed:31:4c:17:3e:21:24:9c:b6: fc:61:00:4f:9c:cc:77:15:ae:68:75:e3:1d:ae:83: 8e:2f:81:d9:cc:4c:25:80:44:1a:bc:09:57:74:fe: a0:05:08:f7:da:81:57:94:94:7d:32:e3:8d:b5:0d: 7f:8e:f4:ad:d5:d2:87:47:95:c5:ed:e2:a7:c4:61: 66:cc:49:f5:2b:f0:22:65:ae:1e:01:39:fd:2b:07: 75:d8:16:02:08:a8:4d:0c:04:e5:43:31:31:8f:0f: 83:e1:2a:c2:ab:3a:9f:cf:4d:90:c2:b3:a0:1b:d0: 32:62:ce:fc:6e:89:9d:08:4c:c0:c4:01:4e:cd:2a: c5:67:7a:a5:2c:35:f6:4e:c2:5c:cf:cf:e4:e7:ea: 0c:bf:9d:1b:c8:69:6e:92:1e:9d:e3:a6:98:c6:0d: db:6e:dc:7f:ae:18:b6:76:5f:27:c2:79:53:36:37: e5:a0:7c:21:59:63:69:64:4a:53:d0:d1:0d:27:6e: b1:e3:ea:50:6d:c9:87:ba:78:93:1c:ad:ba:d6:46: 4a:da:91:83:de:6c:9e:77:f5:f8:a0:99:32:3d:6b: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:67:08:8B:ED:69:36:4F:F2:E7:47:9F:09:AE:03:E3:70:E4:B9:4D X509v3 Authority Key Identifier: keyid:B0:97:AC:D6:53:42:CE:2F:BA:FB:5C:77:69:21:F0:CE:5E:42:33:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/2/B097ACD65342CE2FBAFB5C776921F0CE5E423318.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B097ACD65342CE2FBAFB5C776921F0CE5E423318.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/2/B097ACD65342CE2FBAFB5C776921F0CE5E423318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:96:ec:05:73:7d:8a:e8:fe:18:55:f1:bc:33:29:b5:08:9d: 7c:7b:4d:8d:fb:d3:62:3d:c3:33:fe:28:40:2d:8a:ef:9a:9b: 69:35:1f:ca:42:d9:80:b5:3e:ad:24:d2:3e:c0:5a:30:c9:ef: 3a:e3:be:37:d3:f0:28:b0:fd:21:1d:1d:6c:b2:1b:d6:b4:ba: 18:53:50:76:2c:40:07:07:e9:5f:db:cc:c4:70:a0:3c:b0:b7: 33:31:7c:03:1f:19:dc:49:72:6f:a4:22:17:07:83:81:04:02: 42:9a:e8:87:8b:9e:3e:e4:4a:bc:b0:1c:39:29:6a:55:86:e0: 9a:40:7d:ac:f5:d6:02:79:dc:45:4f:80:9c:a7:4d:f2:d8:e2: 44:5d:e2:23:62:42:eb:c2:59:7e:fa:74:b5:e0:48:e4:d3:6b: 88:e8:ea:32:18:a4:36:3f:3f:07:9c:bb:5c:af:15:94:55:e0: 59:ed:52:75:7d:50:6a:07:ca:48:80:59:d4:8b:d0:cd:a4:9e: 53:b9:19:2a:7f:d5:9a:89:84:cb:7f:6e:f2:99:74:f0:c3:39: 2f:90:57:8b:1b:80:15:87:bf:62:8b:b5:f2:38:0d:7a:7d:05: 26:a9:5a:6c:06:14:bb:db:19:24:d9:44:fc:e0:71:5d:93:b7: 3b:36:62:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF6dw4XfDOllxG25doF2787KcY6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5N0FDRDY1MzQyQ0UyRkJBRkI1Qzc3NjkyMUYwQ0U1 RTQyMzMxODAeFw0yNTEyMDUyMDM0MzVaFw0yNTEyMDcwMDEwMzVaMDMxMTAvBgNV BAMTKDU1NjcwODhCRUQ2OTM2NEZGMkU3NDc5RjA5QUUwM0UzNzBFNEI5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlUFUpDZa/7WH3q9ORnowrs9CF cQhSCr0MtH2jyAce4bWQru0xTBc+ISSctvxhAE+czHcVrmh14x2ug44vgdnMTCWA RBq8CVd0/qAFCPfagVeUlH0y4421DX+O9K3V0odHlcXt4qfEYWbMSfUr8CJlrh4B Of0rB3XYFgIIqE0MBOVDMTGPD4PhKsKrOp/PTZDCs6Ab0DJizvxuiZ0ITMDEAU7N KsVneqUsNfZOwlzPz+Tn6gy/nRvIaW6SHp3jppjGDdtu3H+uGLZ2XyfCeVM2N+Wg fCFZY2lkSlPQ0Q0nbrHj6lBtyYe6eJMcrbrWRkrakYPebJ539figmTI9a6GRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVWcIi+1pNk/y50efCa4D43DkuU0wHwYDVR0j BBgwFoAUsJes1lNCzi+6+1x3aSHwzl5CMxgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDdwOW5od0xQbXFYUFluWGRhVEM2ZGgxQnVQRHFuY2N4Mk1WZ3U3akN3 WlcvMi9CMDk3QUNENjUzNDJDRTJGQkFGQjVDNzc2OTIxRjBDRTVFNDIzMzE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwOTdBQ0Q2NTM0MkNFMkZC QUZCNUM3NzY5MjFGMENFNUU0MjMzMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDdwOW5od0xQbXFYUFluWGRhVEM2ZGgxQnVQRHFuY2N4Mk1WZ3U3akN3WlcvMi9C MDk3QUNENjUzNDJDRTJGQkFGQjVDNzc2OTIxRjBDRTVFNDIzMzE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAApbsBXN9iuj+GFXxvDMptQidfHtNjfvTYj3DM/4oQC2K75qbaTUfykLZgLU+ rSTSPsBaMMnvOuO+N9PwKLD9IR0dbLIb1rS6GFNQdixABwfpX9vMxHCgPLC3MzF8 Ax8Z3Elyb6QiFweDgQQCQproh4uePuRKvLAcOSlqVYbgmkB9rPXWAnncRU+AnKdN 8tjiRF3iI2JC68JZfvp0teBI5NNriOjqMhikNj8/B5y7XK8VlFXgWe1SdX1QagfK SIBZ1IvQzaSeU7kZKn/VmomEy39u8pl08MM5L5BXixuAFYe/You18jgNen0FJqla bAYUu9sZJNlE/OBxXZO3OzZi9g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:04 2025 by rpki-client