This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft File: B7EF22DFD881235D264FE132548F573E3667BD1A.mft (raw, json) Hash identifier: rQE11jDT/C+QzxwieiwzAEQNhyRl7tF9MIxr8kk+bvw= Subject key identifier: 5D:6E:67:42:E2:3A:A8:9B:A3:55:B7:8D:AE:57:55:AD:0C:7B:4C:42 Authority key identifier: B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A Certificate issuer: /CN=B7EF22DFD881235D264FE132548F573E3667BD1A Certificate serial: 34E43F79ECAC417E31E2B04E2CD325E226A00B8B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft Manifest number: 0273 Signing time: Sun 21 Dec 2025 20:48:44 +0000 Manifest this update: Sun 21 Dec 2025 20:43:44 +0000 Manifest next update: Tue 23 Dec 2025 09:20:44 +0000 Files and hashes: 1: 3138362e3233322e36322e302f32332d3332203d3e203533303231.roa (hash: OqnIlGrkF8zcu1CJBmm0arYzGKRZ3nGoDFTjLlj5zYE=) 2: B7EF22DFD881235D264FE132548F573E3667BD1A.crl (hash: hqslSmzJX1x8kBrR7o50qb079oMJGwfjqymzAFwtQIA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.crl rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 22:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e4:3f:79:ec:ac:41:7e:31:e2:b0:4e:2c:d3:25:e2:26:a0:0b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7EF22DFD881235D264FE132548F573E3667BD1A Validity Not Before: Dec 21 20:43:44 2025 GMT Not After : Dec 23 09:20:44 2025 GMT Subject: CN=5D6E6742E23AA89BA355B78DAE5755AD0C7B4C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:e5:2a:96:7b:c4:0a:9d:1f:cb:f0:77:9f: 3d:b7:d6:b6:92:b6:ff:3c:58:41:1d:70:bb:9b:70: a6:02:01:5f:23:c3:08:22:19:0f:06:92:f9:84:72: 29:b4:de:7f:61:3a:ab:de:bc:55:57:ea:25:0d:f1: ac:16:63:63:9a:e9:fe:87:62:73:b6:fd:07:a8:ce: 8d:94:46:b8:f2:1b:03:cb:3b:d4:ba:17:28:79:eb: 2c:75:3e:01:36:21:6d:9b:48:9b:86:8a:cc:e7:81: b4:28:fa:78:39:24:bc:a9:ee:21:01:c0:3f:38:12: 3e:19:b7:3f:e6:92:ad:f5:4b:fe:e6:c2:79:80:53: 16:f5:8c:de:c7:f2:90:46:c2:48:f2:fd:f3:ea:06: ab:e9:05:37:02:b3:cf:20:6c:77:eb:e0:4e:51:3c: a6:5c:a9:77:d3:af:34:57:f1:5f:ae:d7:59:3e:8a: 0f:7a:2e:96:70:fd:f3:98:6e:5d:75:03:1b:80:c1: 22:d1:7e:08:a6:72:a7:fa:46:e6:ba:22:7c:80:22: a2:fb:fa:64:d1:0a:f8:04:a7:0f:18:3c:f5:65:98: ed:16:fd:fe:3b:35:10:01:26:fa:d8:81:34:45:dc: d7:23:02:4b:98:06:a8:03:d0:88:0e:72:b9:6e:05: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:67:42:E2:3A:A8:9B:A3:55:B7:8D:AE:57:55:AD:0C:7B:4C:42 X509v3 Authority Key Identifier: keyid:B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:06:4a:4a:71:80:ab:2a:2b:03:a0:f8:7a:20:14:82:fe:e0: 23:07:32:b0:d2:ca:b6:3a:ac:0e:9e:94:27:ca:bf:bb:db:72: 9d:5e:c0:29:c2:14:c1:89:b5:fa:47:67:25:a5:e7:6a:32:c4: cc:6d:73:b9:13:8e:9e:80:3c:eb:62:1c:00:90:dd:af:04:b9: 53:85:d4:7e:29:4b:3e:15:a9:cd:79:38:43:41:c0:68:65:3a: 4e:a4:4a:d0:76:b2:f3:8a:ee:37:8f:03:b5:ab:d1:7c:d2:b2: cf:12:8a:b5:3f:71:3f:ec:6d:e7:7a:60:29:02:00:09:b2:51: 16:33:13:40:2e:d0:e5:ca:31:2f:59:fa:bd:f4:f7:88:95:b8: a1:94:a8:79:70:07:2e:1a:aa:eb:28:7b:c6:8d:40:9e:c2:53: 51:41:97:a5:99:04:37:97:00:76:c9:1b:f5:8f:a2:28:95:4e: 98:53:0f:f9:0e:75:1f:66:b7:2a:94:61:9c:91:33:5a:e9:ca: 02:64:e7:7e:6d:92:e6:c0:53:0f:b3:ce:9c:82:19:4f:eb:e8: 00:a4:d9:af:c5:43:c9:86:e1:99:e5:e6:53:fb:0d:74:7b:7c: 7d:29:4b:9d:19:2f:d5:76:48:96:52:84:ef:be:c1:d2:8f:0f: d4:22:33:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNOQ/eeysQX4x4rBOLNMl4iagC4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdFRjIyREZEODgxMjM1RDI2NEZFMTMyNTQ4RjU3M0Uz NjY3QkQxQTAeFw0yNTEyMjEyMDQzNDRaFw0yNTEyMjMwOTIwNDRaMDMxMTAvBgNV BAMTKDVENkU2NzQyRTIzQUE4OUJBMzU1Qjc4REFFNTc1NUFEMEM3QjRDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdi+UqlnvECp0fy/B3nz231raS tv88WEEdcLubcKYCAV8jwwgiGQ8GkvmEcim03n9hOqvevFVX6iUN8awWY2Oa6f6H YnO2/Qeozo2URrjyGwPLO9S6Fyh56yx1PgE2IW2bSJuGiszngbQo+ng5JLyp7iEB wD84Ej4Ztz/mkq31S/7mwnmAUxb1jN7H8pBGwkjy/fPqBqvpBTcCs88gbHfr4E5R PKZcqXfTrzRX8V+u11k+ig96LpZw/fOYbl11AxuAwSLRfgimcqf6Rua6InyAIqL7 +mTRCvgEpw8YPPVlmO0W/f47NRABJvrYgTRF3NcjAkuYBqgD0IgOcrluBTKNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXW5nQuI6qJujVbeNrldVrQx7TEIwHwYDVR0j BBgwFoAUt+8i39iBI10mT+EyVI9XPjZnvRowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlNUWmJzTWRRMmY0b1BtODY4elNSTGdmSjRiWVdxOXRYb1Y4c1pKemRZ RU4vMC9CN0VGMjJERkQ4ODEyMzVEMjY0RkUxMzI1NDhGNTczRTM2NjdCRDFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3RUYyMkRGRDg4MTIzNUQy NjRGRTEzMjU0OEY1NzNFMzY2N0JEMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlNUWmJzTWRRMmY0b1BtODY4elNSTGdmSjRiWVdxOXRYb1Y4c1pKemRZRU4vMC9C N0VGMjJERkQ4ODEyMzVEMjY0RkUxMzI1NDhGNTczRTM2NjdCRDFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1gZKSnGAqyorA6D4eiAUgv7gIwcysNLKtjqsDp6UJ8q/u9tynV7AKcIUwYm1 +kdnJaXnajLEzG1zuROOnoA862IcAJDdrwS5U4XUfilLPhWpzXk4Q0HAaGU6TqRK 0Hay84ruN48DtavRfNKyzxKKtT9xP+xt53pgKQIACbJRFjMTQC7Q5coxL1n6vfT3 iJW4oZSoeXAHLhqq6yh7xo1AnsJTUUGXpZkEN5cAdskb9Y+iKJVOmFMP+Q51H2a3 KpRhnJEzWunKAmTnfm2S5sBTD7POnIIZT+voAKTZr8VDyYbhmeXmU/sNdHt8fSlL nRkv1XZIllKE777B0o8P1CIzJA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:45:53 2025 by rpki-client