This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft File: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json) Hash identifier: DgUsaFI45yZrK2Ltj6d+m+bFCSKk1YoRIhcYe8pKJHA= Subject key identifier: 35:81:A7:E5:5B:7F:90:77:D4:3E:D8:E8:06:A3:CE:A8:47:AC:C7:14 Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 Certificate issuer: /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Certificate serial: 569078F96C1E17F23F8C3F0B3E271B32DE8B449E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft Manifest number: 033E Signing time: Wed 24 Dec 2025 21:16:41 +0000 Manifest this update: Wed 24 Dec 2025 21:11:41 +0000 Manifest next update: Thu 25 Dec 2025 23:20:41 +0000 Files and hashes: 1: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=) 2: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=) 3: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: 3ROY2RAiZDYd0uin4j64x7fCqpiCi0gGnrAIbxqpS/M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 23:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:90:78:f9:6c:1e:17:f2:3f:8c:3f:0b:3e:27:1b:32:de:8b:44:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Validity Not Before: Dec 24 21:11:41 2025 GMT Not After : Dec 25 23:20:41 2025 GMT Subject: CN=3581A7E55B7F9077D43ED8E806A3CEA847ACC714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f7:30:50:73:9e:e2:52:24:2d:62:fa:ab:bc: ab:5b:d2:b8:22:ae:25:49:6e:9b:60:88:bb:e9:69: 77:68:b6:07:d2:13:a7:01:d9:54:b8:1c:3c:ef:5b: 28:32:67:e1:9d:ea:11:3d:5f:a7:86:22:66:53:b5: c4:69:e2:98:73:da:d5:da:b3:31:7c:ec:be:47:04: b2:76:60:cb:bc:6f:ea:7d:41:5e:a4:6e:79:d0:c5: 41:36:df:1a:b0:94:00:fd:3b:94:c2:3b:10:06:9e: cb:c7:5b:4e:43:db:c5:ff:fd:cb:97:4c:e4:46:6e: 79:a7:2d:e5:3e:d3:7d:0f:5f:76:a0:a7:5c:29:48: 4b:cc:4a:a6:bd:66:fc:f8:ca:66:e6:97:3c:f3:a5: 44:14:9c:00:af:78:62:d8:95:a3:82:7a:11:5c:0f: 99:13:b3:a9:25:2b:e0:df:7e:97:69:a3:f5:0b:04: 01:fd:ce:53:e9:29:bc:c6:6c:bf:31:a1:21:51:66: 1c:55:5c:57:22:ba:63:f5:58:a7:8f:6e:78:71:c5: 5e:29:d3:66:47:96:99:42:e9:d4:32:06:ca:08:3a: 81:64:7c:1c:8c:a8:3c:98:09:14:84:a7:a2:48:77: 6a:fa:e5:40:3c:c9:66:cc:2b:4f:16:00:ba:e2:2a: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:81:A7:E5:5B:7F:90:77:D4:3E:D8:E8:06:A3:CE:A8:47:AC:C7:14 X509v3 Authority Key Identifier: keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0c:6f:3c:99:69:c6:4f:34:05:0f:73:cf:3f:6a:3f:5f:5d: 0b:46:c5:b0:a5:2d:5c:1e:20:7e:c7:f5:2a:0d:e2:92:9c:85: 54:44:8f:6b:63:cf:13:da:d1:08:2e:99:25:73:72:c9:09:a1: a8:fb:cd:cf:80:15:28:30:ad:0e:cf:87:18:dc:57:6d:f1:c0: 8b:75:62:f9:29:32:63:85:c4:df:db:fb:53:2e:dd:d3:e0:34: 5c:82:05:e4:fb:50:2d:44:49:75:eb:86:61:f0:54:63:48:71: 5e:a2:f0:af:45:48:c7:7b:79:0b:8c:0a:7e:c1:ce:72:cc:4f: b7:76:09:c8:1d:47:b1:40:92:f6:dc:4b:72:3c:8e:bf:f8:e2: c4:88:ac:a5:29:a4:f2:d8:bd:97:37:fb:2e:12:b9:f2:47:fd: fb:f1:52:e9:01:2a:24:94:e2:f2:6f:ad:de:6b:ba:58:88:9b: a6:f7:63:89:2e:6e:d0:d8:ad:47:f7:f7:a3:5d:b1:83:ea:dc: ee:f6:3d:47:f2:0c:57:05:75:43:c2:9c:51:9e:b7:4e:7c:48: 88:7e:3a:a1:a6:69:b2:84:e2:e6:09:b1:aa:e1:09:34:6c:4e: 8a:09:e1:28:a5:af:f3:94:48:8a:cd:e0:5f:69:11:3e:36:e0: 66:85:a6:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVpB4+WweF/I/jD8LPicbMt6LRJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3NTY4Q0E0QzMzNDMwRUI3MkREQkM4MjJENDBFNjVG NjMwNDJBMzAeFw0yNTEyMjQyMTExNDFaFw0yNTEyMjUyMzIwNDFaMDMxMTAvBgNV BAMTKDM1ODFBN0U1NUI3RjkwNzdENDNFRDhFODA2QTNDRUE4NDdBQ0M3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9zBQc57iUiQtYvqrvKtb0rgi riVJbptgiLvpaXdotgfSE6cB2VS4HDzvWygyZ+Gd6hE9X6eGImZTtcRp4phz2tXa szF87L5HBLJ2YMu8b+p9QV6kbnnQxUE23xqwlAD9O5TCOxAGnsvHW05D28X//cuX TORGbnmnLeU+030PX3agp1wpSEvMSqa9Zvz4ymbmlzzzpUQUnACveGLYlaOCehFc D5kTs6klK+Dffpdpo/ULBAH9zlPpKbzGbL8xoSFRZhxVXFciumP1WKePbnhxxV4p 02ZHlplC6dQyBsoIOoFkfByMqDyYCRSEp6JId2r65UA8yWbMK08WALriKqD5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNYGn5Vt/kHfUPtjoBqPOqEesxxQwHwYDVR0j BBgwFoAUK3VoykwzQw63LdvIItQOZfYwQqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVk N1kvMC8yQjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzU2OENBNEMzMzQzMEVC NzJEREJDODIyRDQwRTY1RjYzMDQyQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVkN1kvMC8y Qjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZgxvPJlpxk80BQ9zzz9qP19dC0bFsKUtXB4gfsf1Kg3ikpyFVESPa2PPE9rR CC6ZJXNyyQmhqPvNz4AVKDCtDs+HGNxXbfHAi3Vi+SkyY4XE39v7Uy7d0+A0XIIF 5PtQLURJdeuGYfBUY0hxXqLwr0VIx3t5C4wKfsHOcsxPt3YJyB1HsUCS9txLcjyO v/jixIispSmk8ti9lzf7LhK58kf9+/FS6QEqJJTi8m+t3mu6WIibpvdjiS5u0Nit R/f3o12xg+rc7vY9R/IMVwV1Q8KcUZ63TnxIiH46oaZpsoTi5gmxquEJNGxOignh KKWv85RIis3gX2kRPjbgZoWm0Q== -----END CERTIFICATE-----Generated at Thu Dec 25 12:32:02 2025 by rpki-client