This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft File: 8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft (raw, json) Hash identifier: lVX9rrPYcefG3KzMABYMC7EOBSSIFD594AFzPtgI9oo= Subject key identifier: AD:64:75:C7:5C:D9:59:97:B7:BA:5C:A9:CF:39:7D:2B:6A:F3:5D:11 Authority key identifier: 8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F Certificate issuer: /CN=8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F Certificate serial: 33A919C5A1542FE11F0B1A12EB6B2029FE963594 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer Subject info access: rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft Manifest number: 37 Signing time: Fri 05 Dec 2025 19:43:10 +0000 Manifest this update: Fri 05 Dec 2025 19:38:10 +0000 Manifest next update: Sat 06 Dec 2025 20:34:10 +0000 Files and hashes: 1: 3137392e39372e32342e302f32312d3332203d3e20323633343131.roa (hash: s/FISBQija6V7AjZgY9FBSFcPMzOtTNWRMQ6o5F21Jc=) 2: 323830343a313563633a3a2f33322d313238203d3e20323633343131.roa (hash: IXRbPb1fXYyAN+HzCu0Z+EbuJz7MhgHO5uLhMoYI31A=) 3: 8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl (hash: ysW4H3JREqnPhCYka22VII/DjN4w6VP7vrFEyi2lf9w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a9:19:c5:a1:54:2f:e1:1f:0b:1a:12:eb:6b:20:29:fe:96:35:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F Validity Not Before: Dec 5 19:38:10 2025 GMT Not After : Dec 6 20:34:10 2025 GMT Subject: CN=AD6475C75CD95997B7BA5CA9CF397D2B6AF35D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:15:12:bf:56:67:2f:93:12:9d:ff:2c:f6: 68:dd:a2:64:76:65:31:67:46:ea:8f:f1:de:3f:08: 4e:93:cd:c6:b2:d6:5f:e0:15:7e:87:d5:99:aa:ff: 02:ef:25:f9:f3:a8:1f:8c:40:d7:c1:bf:2e:a2:88: a7:f9:fc:61:a0:90:1d:01:db:92:34:84:92:bd:1b: 50:aa:48:51:f5:7e:ab:53:10:63:cf:78:99:c6:1d: ae:33:11:a8:fb:95:8e:90:35:be:3e:1d:89:fe:9f: b6:45:fd:20:71:ae:e4:5e:6a:01:79:dc:9a:6b:4f: 74:87:ae:79:c0:ef:75:79:7c:65:f2:1b:fe:07:37: e4:c4:cc:90:e7:67:f8:fb:53:b7:1d:5b:81:0e:d9: 42:18:07:a8:f5:f6:52:51:df:62:20:b7:3e:41:0d: 35:44:be:a8:e8:46:1d:db:1f:c2:3a:2f:56:ea:34: 6d:9c:a1:09:ac:6e:37:a0:47:8e:36:fd:0a:3b:61: 39:0f:b0:9c:2f:4d:4e:e2:f7:a4:ee:90:f6:99:ee: 6d:16:20:fc:68:5d:f3:53:10:f0:d3:2e:5a:eb:c6: f0:45:af:5f:65:84:f4:6f:75:4e:d0:58:47:0a:c4: 42:d0:c7:05:20:1a:36:d9:4e:42:6a:8c:98:ab:0c: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:64:75:C7:5C:D9:59:97:B7:BA:5C:A9:CF:39:7D:2B:6A:F3:5D:11 X509v3 Authority Key Identifier: keyid:8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:98:59:ab:c2:97:a5:69:c9:c3:43:d3:f4:f7:33:2d:e2:df: da:bf:ce:8b:73:41:79:39:fb:84:5a:45:9c:98:19:2c:73:15: 09:fa:ac:3b:76:3b:1a:5f:94:cd:14:fe:d5:37:43:6d:d0:df: 5f:4d:80:2d:29:26:6b:5c:b7:03:14:4e:52:76:58:de:50:eb: 1c:fa:86:54:ff:67:85:6e:1c:8d:24:5b:98:81:9d:d8:e8:6e: a0:77:d0:df:d9:e3:e8:4e:80:6d:8c:2c:c3:09:d9:db:3e:5c: 0e:93:e1:46:10:f0:c7:f9:a0:d0:8b:cb:e4:6f:88:bf:59:1f: 16:75:43:37:c7:77:3b:dd:35:48:bd:39:fe:5d:93:91:d4:09: a0:b8:5b:d9:c2:a6:c8:ef:50:3c:3a:6a:9a:a4:61:e4:b6:2e: 1f:79:da:15:4d:8d:ea:c4:15:0d:23:cf:0e:39:f6:e6:92:87: 56:f9:6b:d0:73:98:2c:d4:45:00:29:52:78:62:a1:0d:60:d3: 67:9f:84:22:bf:b3:74:b8:66:21:68:06:82:05:4f:37:8f:18: 67:17:91:b8:cd:98:a4:7b:a4:f5:0e:42:49:4b:ef:6b:47:25: 9d:09:67:d1:d4:e2:27:1c:65:26:72:5e:6b:59:97:de:f3:7a: db:4d:85:41 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUM6kZxaFUL+EfCxoS62sgKf6WNZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5NDVGREI3RTMzRjA5RTIxQzBFNzdEMzBCQjRENjBB QTQwNUE2RjAeFw0yNTEyMDUxOTM4MTBaFw0yNTEyMDYyMDM0MTBaMDMxMTAvBgNV BAMTKEFENjQ3NUM3NUNEOTU5OTdCN0JBNUNBOUNGMzk3RDJCNkFGMzVEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRRUSv1ZnL5MSnf8s9mjdomR2 ZTFnRuqP8d4/CE6Tzcay1l/gFX6H1Zmq/wLvJfnzqB+MQNfBvy6iiKf5/GGgkB0B 25I0hJK9G1CqSFH1fqtTEGPPeJnGHa4zEaj7lY6QNb4+HYn+n7ZF/SBxruReagF5 3JprT3SHrnnA73V5fGXyG/4HN+TEzJDnZ/j7U7cdW4EO2UIYB6j19lJR32Igtz5B DTVEvqjoRh3bH8I6L1bqNG2coQmsbjegR442/Qo7YTkPsJwvTU7i96TukPaZ7m0W IPxoXfNTEPDTLlrrxvBFr19lhPRvdU7QWEcKxELQxwUgGjbZTkJqjJirDJczAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUrWR1x1zZWZe3ulypzzl9K2rzXREwHwYDVR0j BBgwFoAUj5Rf234z8J4hwOd9MLtNYKpAWm8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9XcWcydENyTk1TQlB5N2RvRnQxQm5KNlUya0N0d0RLTWV5ek01S0JMSHdr LzAvOEY5NDVGREI3RTMzRjA5RTIxQzBFNzdEMzBCQjRENjBBQTQwNUE2Ri5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84Rjk0NUZEQjdFMzNGMDlFMjFD MEU3N0QzMEJCNEQ2MEFBNDA1QTZGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1dx ZzJ0Q3JOTVNCUHk3ZG9GdDFCbko2VTJrQ3R3REtNZXl6TTVLQkxId2svMC84Rjk0 NUZEQjdFMzNGMDlFMjFDMEU3N0QzMEJCNEQ2MEFBNDA1QTZGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cphZq8KXpWnJw0PT9PczLeLf2r/Oi3NBeTn7hFpFnJgZLHMVCfqsO3Y7Gl+UzRT+ 1TdDbdDfX02ALSkma1y3AxROUnZY3lDrHPqGVP9nhW4cjSRbmIGd2OhuoHfQ39nj 6E6AbYwswwnZ2z5cDpPhRhDwx/mg0IvL5G+Iv1kfFnVDN8d3O901SL05/l2TkdQJ oLhb2cKmyO9QPDpqmqRh5LYuH3naFU2N6sQVDSPPDjn25pKHVvlr0HOYLNRFAClS eGKhDWDTZ5+EIr+zdLhmIWgGggVPN48YZxeRuM2YpHuk9Q5CSUvva0clnQln0dTi JxxlJnJea1mX3vN6202FQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:08 2025 by rpki-client