This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft File: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft (raw, json) Hash identifier: knW3y2YzdIwOErUEqBqFvseEgBJes6JWCzZ8PHNvqdQ= Subject key identifier: DE:9B:9C:B7:81:8B:DC:23:96:C7:81:BF:B3:F0:24:E8:BD:28:77:ED Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD Certificate issuer: /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Certificate serial: 256F81889AFBAA039CD473BE6FF7D36C7ED92682 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft Manifest number: 01AF Signing time: Thu 25 Dec 2025 23:44:31 +0000 Manifest this update: Thu 25 Dec 2025 23:39:31 +0000 Manifest next update: Fri 26 Dec 2025 23:58:31 +0000 Files and hashes: 1: 3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (hash: H03Vu8Bfe520dv1rMV0OcFZWYxUrvxZVo6HkfaDNrN0=) 2: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl (hash: i0wjRcwgk0hHabTa82A0u64+j/T6FhSPsIYwufFtcZg=) 3: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (hash: P5vMjk9xZLUcu/EuN4M9DYWvTIbHxAsWjggzhrTxV18=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 26 Dec 2025 23:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6f:81:88:9a:fb:aa:03:9c:d4:73:be:6f:f7:d3:6c:7e:d9:26:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Validity Not Before: Dec 25 23:39:31 2025 GMT Not After : Dec 26 23:58:31 2025 GMT Subject: CN=DE9B9CB7818BDC2396C781BFB3F024E8BD2877ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:f2:ba:b1:9b:c2:81:9d:4e:c7:4b:14:3a: 4d:76:01:15:fb:16:3c:7e:88:bc:46:50:5f:de:cc: 00:33:7d:dd:d3:65:b7:84:33:32:5e:d6:6c:6c:6c: 8a:b3:d9:4a:c8:55:27:20:c1:e3:65:a0:19:e5:d8: 3d:cc:f2:7d:d2:31:a2:22:c9:e1:f5:5e:7d:35:ad: dc:e5:a2:31:a2:71:7d:4e:b4:60:7e:e0:fe:00:26: b6:87:77:c0:ce:99:23:28:8f:87:7f:0e:18:b8:be: 43:82:d0:2b:dd:16:53:53:8b:47:a4:a5:63:ea:4c: a6:a9:35:8c:0c:c3:c3:9f:45:9b:95:ed:1d:36:cc: 4e:2b:b6:34:a0:14:8a:48:37:34:c2:2c:8b:48:0e: ce:d0:c0:99:76:de:16:4c:be:00:ee:68:f6:a4:81: 28:d9:6a:25:9b:34:24:17:21:67:b4:79:2c:18:fd: 64:a4:d9:ff:ad:a6:2f:8b:52:c9:0e:59:71:54:fe: af:c4:db:16:50:d0:6d:38:c0:75:47:e8:d9:88:4d: d0:0b:8e:18:d1:fe:09:42:c9:73:22:14:be:a6:2d: 16:ec:f7:b7:ab:d9:e4:4e:57:93:0d:bb:01:b9:68: b2:a3:b6:ff:29:95:7b:59:b1:67:88:3e:91:e2:9a: b1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9B:9C:B7:81:8B:DC:23:96:C7:81:BF:B3:F0:24:E8:BD:28:77:ED X509v3 Authority Key Identifier: keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a8:ba:7e:58:ea:50:d6:67:30:15:1b:f8:9a:a5:20:75:b5: 22:31:38:5d:68:ec:32:4c:68:b3:cc:4b:a1:ec:7d:34:21:ca: 98:0a:3b:cd:cc:68:8a:ff:8f:07:77:ae:c7:99:41:fc:ee:3e: 62:61:45:4a:d5:8a:67:e6:c4:b6:db:4f:7e:d4:08:31:c6:50: d7:84:89:90:dc:47:73:11:6a:6e:0e:79:d9:d2:19:2c:3f:f8: ad:82:2a:79:be:a4:e9:5d:79:6d:4d:43:dd:b6:ce:82:eb:7e: ee:75:ea:94:3a:64:ff:25:d6:b0:95:5e:e8:d6:4e:e1:83:08: d6:ac:9f:45:fa:16:db:88:d4:23:47:3e:74:59:2e:e0:4d:15: 23:91:6a:9b:9a:66:72:2e:96:12:1d:c6:f5:d8:f9:23:3b:63: 2b:74:e6:ee:f0:ed:74:f2:4e:69:df:86:d6:43:fa:94:8e:9f: 27:9e:e3:3c:78:68:81:b8:e8:c2:59:42:88:3a:55:0e:69:57: d7:95:84:78:60:6f:2a:d7:72:c5:36:ff:d0:1e:fe:cf:23:42: a3:b7:f3:52:09:a7:dc:ea:dc:e6:8e:03:e2:f5:b5:d1:52:c7: 43:b8:13:e7:97:a8:22:85:66:31:28:90:c8:9e:62:94:c1:93: ca:10:c4:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJW+BiJr7qgOc1HO+b/fTbH7ZJoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBNEREQkJFOTc0RTVDMkEyNUE5NTJCRjQ0MzExNDdG MUQxOTVCRDAeFw0yNTEyMjUyMzM5MzFaFw0yNTEyMjYyMzU4MzFaMDMxMTAvBgNV BAMTKERFOUI5Q0I3ODE4QkRDMjM5NkM3ODFCRkIzRjAyNEU4QkQyODc3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuPK6sZvCgZ1Ox0sUOk12ARX7 Fjx+iLxGUF/ezAAzfd3TZbeEMzJe1mxsbIqz2UrIVScgweNloBnl2D3M8n3SMaIi yeH1Xn01rdzlojGicX1OtGB+4P4AJraHd8DOmSMoj4d/Dhi4vkOC0CvdFlNTi0ek pWPqTKapNYwMw8OfRZuV7R02zE4rtjSgFIpINzTCLItIDs7QwJl23hZMvgDuaPak gSjZaiWbNCQXIWe0eSwY/WSk2f+tpi+LUskOWXFU/q/E2xZQ0G04wHVH6NmITdAL jhjR/glCyXMiFL6mLRbs97er2eROV5MNuwG5aLKjtv8plXtZsWeIPpHimrH3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3puct4GL3COWx4G/s/Ak6L0od+0wHwYDVR0j BBgwFoAUW6Tdu+l05cKiWpUr9EMRR/HRlb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9W dEgvMC81QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTREREJCRTk3NEU1QzJB MjVBOTUyQkY0NDMxMTQ3RjFEMTk1QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9WdEgvMC81 QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX6i6fljqUNZnMBUb+JqlIHW1IjE4XWjsMkxos8xLoex9NCHKmAo7zcxoiv+P B3eux5lB/O4+YmFFStWKZ+bEtttPftQIMcZQ14SJkNxHcxFqbg552dIZLD/4rYIq eb6k6V15bU1D3bbOgut+7nXqlDpk/yXWsJVe6NZO4YMI1qyfRfoW24jUI0c+dFku 4E0VI5Fqm5pmci6WEh3G9dj5IztjK3Tm7vDtdPJOad+G1kP6lI6fJ57jPHhogbjo wllCiDpVDmlX15WEeGBvKtdyxTb/0B7+zyNCo7fzUgmn3Orc5o4D4vW10VLHQ7gT 55eoIoVmMSiQyJ5ilMGTyhDE5w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:00:25 2025 by rpki-client