This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft File: AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft (raw, json) Hash identifier: XTresDyt7iyy+lj5cXwpdIOONPTYMqjR1D1A+c1i4tI= Subject key identifier: 35:CA:65:F7:E6:84:0A:E1:81:21:A6:2F:E4:22:55:B8:46:2E:DA:17 Authority key identifier: AD:74:CA:B9:9F:32:EE:46:80:20:77:0D:4B:DB:78:05:60:E9:EC:EF Certificate issuer: /CN=AD74CAB99F32EE468020770D4BDB780560E9ECEF Certificate serial: 0E59D828A09292A9720D8D0F51A96DDE5220B324 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft Manifest number: 39 Signing time: Fri 05 Dec 2025 19:03:28 +0000 Manifest this update: Fri 05 Dec 2025 18:58:28 +0000 Manifest next update: Sat 06 Dec 2025 21:30:28 +0000 Files and hashes: 1: AD74CAB99F32EE468020770D4BDB780560E9ECEF.crl (hash: Cc1MYjz5xVLHwKug5xnFiUrxifqwf6ONVodQ186cmrE=) 2: 323830343a393566303a3a2f33322d313238203d3e20323734353537.roa (hash: i1e7OX99sSyBcrLH2XI/GXQl0NueN++J3bV7DqzJ/Tg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.crl rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:59:d8:28:a0:92:92:a9:72:0d:8d:0f:51:a9:6d:de:52:20:b3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD74CAB99F32EE468020770D4BDB780560E9ECEF Validity Not Before: Dec 5 18:58:28 2025 GMT Not After : Dec 6 21:30:28 2025 GMT Subject: CN=35CA65F7E6840AE18121A62FE42255B8462EDA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:dc:a6:d6:b0:9a:5e:98:8a:4d:6d:25:17: cf:c4:aa:e9:88:f9:80:ad:4d:27:bb:c2:53:32:ef: c4:07:5f:81:ad:f9:4a:9c:55:40:0e:bb:43:58:f4: df:94:38:4b:8c:1b:50:3e:5e:d3:d0:7c:0f:85:93: 46:ca:44:95:f9:f8:ab:36:45:ac:c6:99:2b:50:8a: 5f:d6:1e:05:92:87:64:69:85:67:96:c5:57:4b:fb: e9:7a:cc:cc:80:ac:33:0d:71:10:49:07:e7:b2:2d: da:0b:0a:a8:7f:f0:c3:ba:f4:18:43:fd:cd:83:39: e5:20:0c:69:f8:00:bc:47:46:f0:cd:42:ae:f0:a6: b0:8a:f6:a7:c8:57:6a:8e:c9:a7:44:45:d9:83:b3: 7e:2f:61:d2:82:31:2f:a2:85:5c:b4:25:26:47:b4: 97:f3:8d:33:48:35:06:bf:62:f4:57:92:ef:1d:45: 4c:2d:07:bf:18:cf:c9:5d:b3:da:4c:fa:09:b9:22: 5b:b5:5b:3f:ba:8b:67:12:d0:be:d7:be:02:59:d3: 5d:1a:bb:85:df:15:28:aa:a1:0a:eb:04:0e:08:26: 88:b7:cd:cd:14:ce:c7:7e:19:6c:08:68:ee:ca:38: 10:24:c3:54:fb:99:29:5f:84:d4:b8:34:c7:33:62: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CA:65:F7:E6:84:0A:E1:81:21:A6:2F:E4:22:55:B8:46:2E:DA:17 X509v3 Authority Key Identifier: keyid:AD:74:CA:B9:9F:32:EE:46:80:20:77:0D:4B:DB:78:05:60:E9:EC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:2c:90:db:94:13:57:2d:94:60:0e:d8:63:8f:01:50:99: d0:ed:88:d6:97:d2:d1:e9:6a:bd:7a:21:a7:1e:56:0a:93:7d: 7e:27:53:6e:c1:74:5f:9c:e1:b0:d7:dc:10:8d:61:ab:a8:a1: 2d:af:c6:42:94:1a:28:a4:3b:d8:a8:14:33:cc:bd:c4:49:27: 40:e5:3e:56:15:dd:15:50:23:ee:ae:ea:54:1c:5f:93:b8:56: 1d:68:37:73:9a:6a:c0:2f:8c:7d:88:55:71:30:e1:3c:6d:15: 25:09:c8:f6:f5:3d:dd:cd:47:5b:7e:21:d1:d0:0d:52:b3:0f: 6e:43:1d:94:a2:e6:9b:69:1c:9d:2e:09:99:51:8b:6f:8a:5b: 6d:e1:35:9c:06:12:7d:a5:56:84:a5:c8:68:47:d9:11:45:92: f3:5c:d8:f3:01:eb:24:15:1e:c5:e5:c3:2b:79:d8:2a:9c:77: de:00:05:a5:d0:e8:2c:f7:93:77:4b:21:30:d6:2e:75:c7:51: a1:a7:d4:b8:74:67:ee:73:1a:6e:21:b1:c1:1e:08:1d:3e:86: fd:d0:8d:9c:9f:55:d1:ae:ab:7a:ca:cd:9a:f9:50:af:ef:60: 80:09:13:f6:09:1a:89:3c:dc:db:4a:1d:07:e5:f6:00:7e:99: d8:47:18:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDlnYKKCSkqlyDY0PUalt3lIgsyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3NENBQjk5RjMyRUU0NjgwMjA3NzBENEJEQjc4MDU2 MEU5RUNFRjAeFw0yNTEyMDUxODU4MjhaFw0yNTEyMDYyMTMwMjhaMDMxMTAvBgNV BAMTKDM1Q0E2NUY3RTY4NDBBRTE4MTIxQTYyRkU0MjI1NUI4NDYyRURBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nNym1rCaXpiKTW0lF8/EqumI +YCtTSe7wlMy78QHX4Gt+UqcVUAOu0NY9N+UOEuMG1A+XtPQfA+Fk0bKRJX5+Ks2 RazGmStQil/WHgWSh2RphWeWxVdL++l6zMyArDMNcRBJB+eyLdoLCqh/8MO69BhD /c2DOeUgDGn4ALxHRvDNQq7wprCK9qfIV2qOyadERdmDs34vYdKCMS+ihVy0JSZH tJfzjTNINQa/YvRXku8dRUwtB78Yz8lds9pM+gm5Ilu1Wz+6i2cS0L7XvgJZ010a u4XfFSiqoQrrBA4IJoi3zc0Uzsd+GWwIaO7KOBAkw1T7mSlfhNS4NMczYkHRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNcpl9+aECuGBIaYv5CJVuEYu2hcwHwYDVR0j BBgwFoAUrXTKuZ8y7kaAIHcNS9t4BWDp7O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHRicEptVjVjeHlHQlh6ZWJzUFRSYmFpTmF0THlvOVRMODhtWmtIejd2 YWkvMC9BRDc0Q0FCOTlGMzJFRTQ2ODAyMDc3MEQ0QkRCNzgwNTYwRTlFQ0VGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENzRDQUI5OUYzMkVFNDY4 MDIwNzcwRDRCREI3ODA1NjBFOUVDRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHRicEptVjVjeHlHQlh6ZWJzUFRSYmFpTmF0THlvOVRMODhtWmtIejd2YWkvMC9B RDc0Q0FCOTlGMzJFRTQ2ODAyMDc3MEQ0QkRCNzgwNTYwRTlFQ0VGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl8MskNuUE1ctlGAO2GOPAVCZ0O2I1pfS0elqvXohpx5WCpN9fidTbsF0X5zh sNfcEI1hq6ihLa/GQpQaKKQ72KgUM8y9xEknQOU+VhXdFVAj7q7qVBxfk7hWHWg3 c5pqwC+MfYhVcTDhPG0VJQnI9vU93c1HW34h0dANUrMPbkMdlKLmm2kcnS4JmVGL b4pbbeE1nAYSfaVWhKXIaEfZEUWS81zY8wHrJBUexeXDK3nYKpx33gAFpdDoLPeT d0shMNYudcdRoafUuHRn7nMabiGxwR4IHT6G/dCNnJ9V0a6resrNmvlQr+9ggAkT 9gkaiTzc20odB+X2AH6Z2EcYBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:04 2025 by rpki-client