This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.mft File: BEF25DBD3AC7F344FE086C16B051C5B219A969C1.mft (raw, json) Hash identifier: Q0X0FVe7SjifAs3BypfaWTZzzzFT3hHQTzVbc/FMaEg= Subject key identifier: 3A:DF:DD:FA:8B:FE:E3:A1:C4:AE:9B:65:AC:2D:71:37:54:5E:C9:69 Authority key identifier: BE:F2:5D:BD:3A:C7:F3:44:FE:08:6C:16:B0:51:C5:B2:19:A9:69:C1 Certificate issuer: /CN=BEF25DBD3AC7F344FE086C16B051C5B219A969C1 Certificate serial: 47F002D6DB837D790B9DFB83A594C8A3CBC5344A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.mft Manifest number: 0158 Signing time: Fri 19 Dec 2025 21:29:25 +0000 Manifest this update: Fri 19 Dec 2025 21:24:25 +0000 Manifest next update: Sat 20 Dec 2025 23:50:25 +0000 Files and hashes: 1: 323830343a363464303a3a2f33322d3336203d3e20323639343530.roa (hash: lckuNSqqWB3pvhCFoqsJPlFyvGMl64irzmGzSWX7Ek0=) 2: BEF25DBD3AC7F344FE086C16B051C5B219A969C1.crl (hash: 8u0nh/Tv2GRazdz+lalvm8CpHs5HLUw/chzhu0fSRqU=) 3: 34352e3138372e32382e302f32322d3234203d3e20323639343530.roa (hash: FDci40yvcK7JjTem9zJy0mIrp7QPcFKrN44FtfIWQIE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.crl rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 23:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f0:02:d6:db:83:7d:79:0b:9d:fb:83:a5:94:c8:a3:cb:c5:34:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEF25DBD3AC7F344FE086C16B051C5B219A969C1 Validity Not Before: Dec 19 21:24:25 2025 GMT Not After : Dec 20 23:50:25 2025 GMT Subject: CN=3ADFDDFA8BFEE3A1C4AE9B65AC2D7137545EC969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:08:5a:f3:87:d3:ab:02:0d:1d:55:a9:af:4f: 24:1c:81:a9:df:2a:85:64:b2:c0:1b:02:20:d4:bd: b5:62:0f:49:bd:fb:ba:0d:b3:d4:9f:2d:a4:44:81: 41:9d:84:a4:92:15:df:1f:d0:eb:16:21:47:25:19: a7:c0:cd:7e:4c:0a:b3:ec:b4:4a:e5:05:59:33:48: 0a:37:0a:b2:da:37:bd:ca:ea:f7:9e:4e:33:c8:55: ca:b9:26:1e:d8:4a:4b:98:68:ff:91:03:ad:28:01: d0:da:da:ab:2e:ed:b1:a1:21:ec:1c:6d:ff:0e:39: f2:2b:02:cb:2a:5d:ab:d6:af:56:86:82:46:a4:c2: 17:44:9d:07:5f:e4:87:88:b1:c3:bd:5d:09:aa:cc: be:44:bf:bf:74:ff:04:8e:dd:14:24:ba:8c:7f:ae: f7:57:d1:2f:8b:e3:b3:21:b2:68:8a:2b:57:5c:e1: 1f:9e:fc:4f:09:c9:46:42:e9:77:e6:11:56:27:54: d0:db:b3:1c:85:9e:cd:6d:68:f1:ff:21:50:0e:28: 23:63:7e:0a:84:8f:89:c7:3a:2b:81:fe:94:a8:c9: a4:42:7d:e3:ed:f9:38:21:ef:65:a2:d2:bb:56:7e: 8d:68:e3:bf:d1:2e:6f:84:2f:63:7a:f4:89:56:fe: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DF:DD:FA:8B:FE:E3:A1:C4:AE:9B:65:AC:2D:71:37:54:5E:C9:69 X509v3 Authority Key Identifier: keyid:BE:F2:5D:BD:3A:C7:F3:44:FE:08:6C:16:B0:51:C5:B2:19:A9:69:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PwF4A7jEdUBuGEmPghQNexoE48LJ5gjLE5nzb6xuF77/0/BEF25DBD3AC7F344FE086C16B051C5B219A969C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a9:82:51:2d:eb:d1:60:8b:60:20:14:e1:8f:b0:2e:70:07: 28:2d:61:97:c6:12:2d:8b:ec:19:04:1e:7e:79:f7:3f:69:c9: 29:ed:f4:22:9f:e8:aa:fe:12:d8:ad:75:f1:8e:19:48:de:66: 9c:eb:1b:25:5f:1a:93:66:0a:24:82:fb:4c:d3:f8:74:41:02: 46:61:fe:6d:31:0e:8b:b6:d1:ad:89:6f:91:8e:78:c7:2b:20: 26:ae:49:54:bd:d4:07:38:56:35:49:a4:1c:bc:45:5b:0b:84: d0:21:d4:ed:a5:c6:f0:ba:7a:ef:2c:2b:94:f7:e3:87:95:48: bb:69:75:85:12:22:12:a0:4a:8d:bf:21:62:39:f4:43:70:ff: 75:67:a8:7b:4f:14:a7:f9:e8:1b:2c:e0:80:94:16:45:70:1d: 1c:ed:9e:09:85:af:ad:35:9c:ad:f4:14:5a:1d:5c:12:f2:ba: ed:9b:00:7a:51:2c:c0:ed:0e:5a:9e:10:f2:e4:16:22:88:34: 30:89:29:66:80:5b:a6:80:2d:a7:6b:a2:08:8a:fb:48:99:43: 48:95:f7:27:54:da:f3:a2:29:5e:bb:c3:21:64:35:fc:20:0b: 2c:f8:7d:13:04:47:f0:5a:cb:bc:32:3b:22:4f:38:ad:e0:56: 7e:bf:9d:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR/AC1tuDfXkLnfuDpZTIo8vFNEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVGMjVEQkQzQUM3RjM0NEZFMDg2QzE2QjA1MUM1QjIx OUE5NjlDMTAeFw0yNTEyMTkyMTI0MjVaFw0yNTEyMjAyMzUwMjVaMDMxMTAvBgNV BAMTKDNBREZEREZBOEJGRUUzQTFDNEFFOUI2NUFDMkQ3MTM3NTQ1RUM5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCFrzh9OrAg0dVamvTyQcganf KoVkssAbAiDUvbViD0m9+7oNs9SfLaREgUGdhKSSFd8f0OsWIUclGafAzX5MCrPs tErlBVkzSAo3CrLaN73K6veeTjPIVcq5Jh7YSkuYaP+RA60oAdDa2qsu7bGhIewc bf8OOfIrAssqXavWr1aGgkakwhdEnQdf5IeIscO9XQmqzL5Ev790/wSO3RQkuox/ rvdX0S+L47MhsmiKK1dc4R+e/E8JyUZC6XfmEVYnVNDbsxyFns1taPH/IVAOKCNj fgqEj4nHOiuB/pSoyaRCfePt+Tgh72Wi0rtWfo1o47/RLm+EL2N69IlW/oIDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOt/d+ov+46HErptlrC1xN1ReyWkwHwYDVR0j BBgwFoAUvvJdvTrH80T+CGwWsFHFshmpacEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1B3RjRBN2pFZFVCdUdFbVBnaFFOZXhvRTQ4TEo1Z2pMRTVuemI2eHVG NzcvMC9CRUYyNURCRDNBQzdGMzQ0RkUwODZDMTZCMDUxQzVCMjE5QTk2OUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFRjI1REJEM0FDN0YzNDRG RTA4NkMxNkIwNTFDNUIyMTlBOTY5QzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1B3RjRBN2pFZFVCdUdFbVBnaFFOZXhvRTQ4TEo1Z2pMRTVuemI2eHVGNzcvMC9C RUYyNURCRDNBQzdGMzQ0RkUwODZDMTZCMDUxQzVCMjE5QTk2OUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg6mCUS3r0WCLYCAU4Y+wLnAHKC1hl8YSLYvsGQQefnn3P2nJKe30Ip/oqv4S 2K118Y4ZSN5mnOsbJV8ak2YKJIL7TNP4dEECRmH+bTEOi7bRrYlvkY54xysgJq5J VL3UBzhWNUmkHLxFWwuE0CHU7aXG8Lp67ywrlPfjh5VIu2l1hRIiEqBKjb8hYjn0 Q3D/dWeoe08Up/noGyzggJQWRXAdHO2eCYWvrTWcrfQUWh1cEvK67ZsAelEswO0O Wp4Q8uQWIog0MIkpZoBbpoAtp2uiCIr7SJlDSJX3J1Ta86IpXrvDIWQ1/CALLPh9 EwRH8FrLvDI7Ik84reBWfr+dmg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:31:53 2025 by rpki-client