This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft File: 24B3423445CE5D36280D8F72151340DCBE34B7BB.mft (raw, json) Hash identifier: qDtj+vxLO14G3BDYpip0ylKDSw6D0P/meoj3VLvevho= Subject key identifier: 3D:64:6D:26:D1:A7:F8:6B:1F:DF:D1:34:6F:18:05:2E:9E:07:64:2E Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Certificate serial: 6942416DF2C04C25C1A78FD4D536EFB4AED7E328 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft Manifest number: 019E Signing time: Sun 21 Dec 2025 06:55:27 +0000 Manifest this update: Sun 21 Dec 2025 06:50:27 +0000 Manifest next update: Mon 22 Dec 2025 09:52:27 +0000 Files and hashes: 1: 24B3423445CE5D36280D8F72151340DCBE34B7BB.crl (hash: e4Mt3H5e5wtjzZx01w9x7Nst2KqJf5HIxi6DnkSwXQA=) 2: 323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (hash: As4Mj+ThKhPxwlbwe6tGecjBFOjSPDkl8Ekf9TrGkqM=) 3: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (hash: iadk4lX1raPtLZkv1Z+/KP8nKU0IiQl/33zAQoqUcX8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 09:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:42:41:6d:f2:c0:4c:25:c1:a7:8f:d4:d5:36:ef:b4:ae:d7:e3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB Validity Not Before: Dec 21 06:50:27 2025 GMT Not After : Dec 22 09:52:27 2025 GMT Subject: CN=3D646D26D1A7F86B1FDFD1346F18052E9E07642E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d3:12:9b:30:34:6e:d2:80:96:ff:34:c0:ff: 73:36:18:a9:b4:14:5e:43:d2:eb:d5:51:18:0f:2f: 42:53:6e:ca:ec:3f:22:40:6c:22:f8:a2:14:31:97: fd:d8:1e:59:a3:36:93:2a:89:dc:bb:b3:e9:f8:a4: 3b:73:32:0b:70:cf:97:85:55:14:ab:08:77:f8:5f: a1:d1:cc:a3:fe:40:f9:85:7a:d1:72:4e:b0:3f:b7: 61:00:f6:dc:f9:10:ec:7f:ac:38:41:84:d7:ab:1e: 88:d4:46:8e:db:92:24:11:29:e5:78:77:2c:b9:22: 74:a8:3e:e7:e9:0f:68:ce:c5:c2:2e:01:56:d2:19: 2c:4b:56:a0:40:25:8e:07:78:b8:a7:65:11:b7:ae: d1:a9:24:50:17:a0:42:2c:80:a9:ad:14:9d:43:97: 5c:2b:07:b0:70:0d:1f:ed:5b:a4:1f:80:1c:ad:df: 13:46:bb:2f:38:a7:b0:64:04:88:18:44:f7:fd:e1: a8:1e:36:10:8a:34:8c:ac:60:93:8f:9a:d0:05:12: b3:f6:f9:79:8b:e5:06:15:a7:ca:11:99:1a:16:b0: d5:c0:83:4a:a1:00:8d:3a:ba:63:53:e0:df:14:c1: c5:75:57:45:8a:07:a7:d6:78:6a:25:40:6a:9a:51: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:64:6D:26:D1:A7:F8:6B:1F:DF:D1:34:6F:18:05:2E:9E:07:64:2E X509v3 Authority Key Identifier: keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d1:1d:1e:38:9e:df:d2:70:9f:e5:18:73:77:0b:63:e5:b8: 9c:12:42:3b:c5:89:36:6a:28:1f:87:77:f0:59:5f:83:22:1d: b3:30:90:b8:0f:da:0a:1a:86:9b:fd:0d:50:e3:6d:ee:e3:b3: 84:6b:97:f6:4f:43:95:9d:54:14:01:ee:a6:21:42:e9:e6:a7: d7:12:83:96:f3:21:21:40:b3:50:57:ed:a3:35:f2:4f:78:58: 5f:5f:c8:7b:8b:72:de:ab:74:34:26:6c:ca:d8:88:da:1f:53: dc:c2:b8:80:63:45:94:de:a0:8e:42:84:d2:d8:16:32:e2:c3: 99:32:35:30:42:81:3e:7d:4e:b5:18:4d:8d:85:c8:a8:e6:ef: c1:54:0d:65:3f:76:5c:70:43:f9:44:27:40:e6:8e:ab:99:c3: 2f:3a:c6:66:d6:ba:3f:b4:1c:42:71:7c:3a:02:95:ad:f8:24: 07:75:a8:f8:b3:68:4d:0b:81:1e:61:7f:7d:60:fd:87:e9:9d: 6b:ca:de:7f:8a:a9:c9:6f:4f:11:15:17:e9:aa:1c:8f:aa:c0: 49:af:dd:03:6d:73:ed:9e:17:c4:b6:33:a6:8d:1a:b0:ca:84: bf:1c:ba:0b:58:e8:49:94:da:ab:b8:84:97:26:46:ed:1a:af: 5e:f6:e3:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaUJBbfLATCXBp4/U1TbvtK7X4ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC RTM0QjdCQjAeFw0yNTEyMjEwNjUwMjdaFw0yNTEyMjIwOTUyMjdaMDMxMTAvBgNV BAMTKDNENjQ2RDI2RDFBN0Y4NkIxRkRGRDEzNDZGMTgwNTJFOUUwNzY0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0xKbMDRu0oCW/zTA/3M2GKm0 FF5D0uvVURgPL0JTbsrsPyJAbCL4ohQxl/3YHlmjNpMqidy7s+n4pDtzMgtwz5eF VRSrCHf4X6HRzKP+QPmFetFyTrA/t2EA9tz5EOx/rDhBhNerHojURo7bkiQRKeV4 dyy5InSoPufpD2jOxcIuAVbSGSxLVqBAJY4HeLinZRG3rtGpJFAXoEIsgKmtFJ1D l1wrB7BwDR/tW6QfgByt3xNGuy84p7BkBIgYRPf94ageNhCKNIysYJOPmtAFErP2 +XmL5QYVp8oRmRoWsNXAg0qhAI06umNT4N8UwcV1V0WKB6fWeGolQGqaUZApAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPWRtJtGn+Gsf39E0bxgFLp4HZC4wHwYDVR0j BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdqQkUvMC8y NEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcdEdHjie39Jwn+UYc3cLY+W4nBJCO8WJNmooH4d38FlfgyIdszCQuA/aChqG m/0NUONt7uOzhGuX9k9DlZ1UFAHupiFC6ean1xKDlvMhIUCzUFftozXyT3hYX1/I e4ty3qt0NCZsytiI2h9T3MK4gGNFlN6gjkKE0tgWMuLDmTI1MEKBPn1OtRhNjYXI qObvwVQNZT92XHBD+UQnQOaOq5nDLzrGZta6P7QcQnF8OgKVrfgkB3Wo+LNoTQuB HmF/fWD9h+mda8ref4qpyW9PERUX6aocj6rASa/dA21z7Z4XxLYzpo0asMqEvxy6 C1joSZTaq7iElyZG7RqvXvbjKQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:28:40 2025 by rpki-client