This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft File: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json) Hash identifier: dgtu1PqkTUm4evVwGTp5B46J6ypEGjxBJOY+cGERmqk= Subject key identifier: A2:DA:B9:2F:43:EB:5F:DF:25:0C:CB:06:85:24:67:FA:2B:DA:6E:DC Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Certificate serial: 278956DE453BD6DCF46758C49AEA28114DBF0FD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft Manifest number: 02D2 Signing time: Sun 21 Dec 2025 02:32:30 +0000 Manifest this update: Sun 21 Dec 2025 02:27:30 +0000 Manifest next update: Mon 22 Dec 2025 04:33:30 +0000 Files and hashes: 1: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: Knl+wwRgdmDvowjQ9JACRJfXXqw4YrTkY1L1JgQ1SZk=) 2: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: If21jOcvMUFkh16cxpcGthCoNkKvfyC5oUDpgsyZRvQ=) 3: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: CNJzgqEtNzXp6lNqEtCbwuEj6Zyyks+jUNN0XkQ3vqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 04:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:89:56:de:45:3b:d6:dc:f4:67:58:c4:9a:ea:28:11:4d:bf:0f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Validity Not Before: Dec 21 02:27:30 2025 GMT Not After : Dec 22 04:33:30 2025 GMT Subject: CN=A2DAB92F43EB5FDF250CCB06852467FA2BDA6EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:4a:02:4d:00:04:d9:14:e9:16:b7:dc:07: 68:46:0d:89:b8:d0:a2:98:45:0d:10:01:f1:88:d7: e2:1a:6f:30:29:2d:53:f5:94:90:a3:8f:c6:01:72: e8:7d:49:ad:84:ad:c7:07:3c:41:c4:a2:c2:00:e0: 08:eb:1b:0d:10:f6:ef:12:d0:b8:cc:88:cb:1b:77: cd:5a:eb:76:27:4c:72:29:3b:4b:d2:09:4e:a8:2d: 19:d3:54:28:fe:d5:72:63:77:4c:ac:e4:f6:d4:06: 30:f5:22:94:e8:77:1a:2a:49:5c:ee:a0:54:b5:cd: a9:cb:2c:12:ca:c2:6d:0f:69:6a:db:cb:fe:a8:b5: 6d:49:66:67:7f:9e:19:47:8f:e0:bc:67:e3:c6:02: 84:ff:98:0d:4e:64:34:5c:f6:5b:e7:7a:1a:00:3d: b7:63:d3:52:a2:e6:36:e4:a4:9c:a0:6d:d1:c3:b2: b2:75:43:90:f0:c9:7c:52:9b:41:fb:c4:34:4f:23: 72:5f:51:ba:7b:0b:52:bd:14:3c:84:e6:96:a3:74: 17:5c:3a:cd:a4:06:6c:7f:cb:89:78:12:be:a1:43: 63:c5:d0:74:68:f5:6f:fe:f1:56:7d:f4:b1:22:f8: 2e:35:4e:e6:f2:e3:fd:9a:08:ba:24:37:e4:4b:af: dd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:B9:2F:43:EB:5F:DF:25:0C:CB:06:85:24:67:FA:2B:DA:6E:DC X509v3 Authority Key Identifier: keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:e7:68:0a:73:9c:f4:3c:f6:af:91:2c:b0:6b:8d:9b:47: f7:b1:35:82:f9:7a:87:1d:a8:87:08:58:d6:60:4d:e6:3d:8b: 7e:f4:99:0c:96:42:9d:c8:d3:05:94:2d:48:6c:04:52:4e:5e: db:0f:f5:c4:80:ed:df:5a:ef:84:d0:f8:80:67:fd:e1:d6:22: 46:1c:14:55:71:a7:2b:b5:4f:d9:da:31:c0:5e:f2:1d:71:60: f7:e4:ab:46:79:d0:ed:3d:52:16:58:c2:a4:7b:0f:d3:b0:85: ff:6f:8e:60:23:5d:4e:a9:d9:9d:69:e0:53:88:f5:89:6d:84: 27:28:41:64:bd:2b:34:fc:72:22:ee:11:e5:a9:a2:32:92:47: 0e:63:e3:a8:be:a6:3a:75:d8:74:66:5f:06:ff:1f:95:d6:ba: 4b:bd:e5:90:49:bd:e9:02:95:ec:6e:4a:0e:b3:6a:87:b6:df: 2a:3e:b1:dc:8d:40:e4:47:6a:a5:2f:d0:c1:d7:46:6d:80:65: 6c:aa:c1:f9:76:32:2b:02:54:21:8c:6c:0c:3e:aa:12:81:0c: ba:50:8b:d9:d4:d7:c9:46:c7:ce:af:d5:ff:fb:cf:c3:16:74: 81:de:d2:8a:5e:e0:fd:6e:a2:ef:bd:1f:3c:3f:29:62:a8:04: cf:77:56:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ4lW3kU71tz0Z1jEmuooEU2/D9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1QjlEMzY0QkQ3NkE4MUREMzRBQTVENUM5NjVCQjFG QzI3QTUyMDAeFw0yNTEyMjEwMjI3MzBaFw0yNTEyMjIwNDMzMzBaMDMxMTAvBgNV BAMTKEEyREFCOTJGNDNFQjVGREYyNTBDQ0IwNjg1MjQ2N0ZBMkJEQTZFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVkoCTQAE2RTpFrfcB2hGDYm4 0KKYRQ0QAfGI1+IabzApLVP1lJCjj8YBcuh9Sa2ErccHPEHEosIA4AjrGw0Q9u8S 0LjMiMsbd81a63YnTHIpO0vSCU6oLRnTVCj+1XJjd0ys5PbUBjD1IpTodxoqSVzu oFS1zanLLBLKwm0PaWrby/6otW1JZmd/nhlHj+C8Z+PGAoT/mA1OZDRc9lvnehoA Pbdj01Ki5jbkpJygbdHDsrJ1Q5DwyXxSm0H7xDRPI3JfUbp7C1K9FDyE5pajdBdc Os2kBmx/y4l4Er6hQ2PF0HRo9W/+8VZ99LEi+C41Tuby4/2aCLokN+RLr93ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUotq5L0PrX98lDMsGhSRn+ivabtwwHwYDVR0j BBgwFoAUKVudNkvXaoHdNKpdXJZbsfwnpSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1 OVEvMS8yOTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NUI5RDM2NEJENzZBODFE RDM0QUE1RDVDOTY1QkIxRkMyN0E1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1OVEvMS8y OTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhvjnaApznPQ89q+RLLBrjZtH97E1gvl6hx2ohwhY1mBN5j2LfvSZDJZCncjT BZQtSGwEUk5e2w/1xIDt31rvhND4gGf94dYiRhwUVXGnK7VP2doxwF7yHXFg9+Sr RnnQ7T1SFljCpHsP07CF/2+OYCNdTqnZnWngU4j1iW2EJyhBZL0rNPxyIu4R5ami MpJHDmPjqL6mOnXYdGZfBv8flda6S73lkEm96QKV7G5KDrNqh7bfKj6x3I1A5Edq pS/QwddGbYBlbKrB+XYyKwJUIYxsDD6qEoEMulCL2dTXyUbHzq/V//vPwxZ0gd7S il7g/W6i770fPD8pYqgEz3dW2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:26 2025 by rpki-client