This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: L3KI/J1QPfj6LzxQcNOTaW1pmGv75cbDIrD3r+QwP3U= Subject key identifier: DD:2E:09:99:F3:60:05:FC:50:30:84:9C:6E:F0:A5:9C:17:6E:26:D7 Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 3D5A63B75B3764E1DD2752640CD457EEA9CDA853 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 034A Signing time: Sat 27 Dec 2025 03:12:46 +0000 Manifest this update: Sat 27 Dec 2025 03:07:46 +0000 Manifest next update: Sun 28 Dec 2025 06:38:46 +0000 Files and hashes: 1: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: edA3Rs6eMjpScHqME9Ghe5dGKocqfYma+Nqo84HmhRQ=) 2: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: H+FeGKGab0IUgLEuzFGGCe37mfZIJq6U2VyJe46hjV8=) 3: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: KM9thWqBbCezSnN/udktn45yMz+Zf63QSRQur/etjgw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Dec 2025 06:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5a:63:b7:5b:37:64:e1:dd:27:52:64:0c:d4:57:ee:a9:cd:a8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: Dec 27 03:07:46 2025 GMT Not After : Dec 28 06:38:46 2025 GMT Subject: CN=DD2E0999F36005FC5030849C6EF0A59C176E26D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:c4:3e:25:42:2b:a4:62:f1:3d:d7:ec:dc: 42:f7:00:05:4d:49:1d:90:96:bb:3a:6f:8a:b0:b7: 58:ad:24:1e:7f:80:3c:13:15:34:93:4f:44:11:e6: 9d:49:cb:4d:a4:8f:c3:11:c9:1d:92:fd:f5:d0:9e: 4b:63:5d:10:06:61:c8:24:57:65:d9:89:a2:82:82: 6e:b6:fe:d8:ec:72:a4:58:f6:59:a7:e7:4c:f4:f3: 33:79:c7:78:1f:0a:7d:7b:44:26:13:81:92:67:e9: 26:b3:97:5d:69:e5:da:9e:3f:c4:df:27:4a:a9:7f: d8:d4:38:80:b0:3d:13:58:af:6c:58:f2:2b:ae:80: 96:9b:b0:aa:3d:c2:50:a5:fb:e0:49:ea:6c:e2:0e: 4c:39:d1:2c:0d:4e:d8:cb:cc:ff:09:45:e3:c6:73: 65:34:e7:1a:31:30:4a:82:5b:ae:86:92:fd:a1:fe: b7:63:57:b0:fe:dd:ae:ef:b1:80:84:80:cb:f2:8a: c7:f9:43:27:4c:6c:72:8a:30:03:6a:28:f5:98:99: 4b:61:f1:39:de:e4:61:34:74:76:ed:65:41:23:78: 5e:9d:a8:e8:b2:45:96:5b:e8:aa:b7:df:2b:0f:17: 85:7b:36:81:c1:af:39:f6:ea:69:3e:22:fd:67:44: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2E:09:99:F3:60:05:FC:50:30:84:9C:6E:F0:A5:9C:17:6E:26:D7 X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:50:f5:96:59:22:3c:af:16:1b:93:48:73:0e:5c:90:57:69: 0c:45:01:d5:34:ae:f3:56:d6:a4:3f:5d:43:b5:7f:ab:7f:ad: 30:bf:31:bc:e9:d4:b4:1a:42:a8:cb:3d:62:b1:42:88:74:a9: b8:05:05:ea:d7:cb:fc:93:28:d8:66:8d:db:dc:ad:4b:cc:0a: 6b:0e:90:8a:8d:fa:d5:5a:21:59:2b:80:75:6a:8d:81:6b:3b: 4d:a8:91:c3:22:45:6f:00:f4:24:08:e4:e8:84:80:c2:23:06: 75:10:e9:29:94:2f:cf:13:13:7e:fa:25:77:1b:da:ed:5a:58: bd:06:52:31:cb:b9:96:cd:2d:b8:20:80:d4:d8:9d:a3:b1:cc: 86:61:70:56:05:90:fa:05:c7:92:df:c0:b7:c2:86:71:31:5e: 52:dc:9f:35:d3:33:b6:bc:a3:30:e3:c9:b2:ae:3a:61:99:fc: 66:cc:2d:32:70:3e:b1:54:d3:17:24:08:70:eb:42:e0:62:cc: 35:38:fe:52:b0:1a:38:6b:5d:de:a1:10:ac:0a:9e:e6:9b:30: 13:b6:a5:23:2f:93:c5:96:25:9f:73:2c:8e:1d:cf:49:2f:c4: 62:8d:d2:ff:1a:48:ac:fb:99:25:d3:be:b3:97:57:c6:6f:27: 60:58:e9:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPVpjt1s3ZOHdJ1JkDNRX7qnNqFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNTEyMjcwMzA3NDZaFw0yNTEyMjgwNjM4NDZaMDMxMTAvBgNV BAMTKEREMkUwOTk5RjM2MDA1RkM1MDMwODQ5QzZFRjBBNTlDMTc2RTI2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfScQ+JUIrpGLxPdfs3EL3AAVN SR2Qlrs6b4qwt1itJB5/gDwTFTSTT0QR5p1Jy02kj8MRyR2S/fXQnktjXRAGYcgk V2XZiaKCgm62/tjscqRY9lmn50z08zN5x3gfCn17RCYTgZJn6Sazl11p5dqeP8Tf J0qpf9jUOICwPRNYr2xY8iuugJabsKo9wlCl++BJ6mziDkw50SwNTtjLzP8JRePG c2U05xoxMEqCW66Gkv2h/rdjV7D+3a7vsYCEgMvyisf5QydMbHKKMANqKPWYmUth 8Tne5GE0dHbtZUEjeF6dqOiyRZZb6Kq33ysPF4V7NoHBrzn26mk+Iv1nRL6/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3S4JmfNgBfxQMIScbvClnBduJtcwHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApVD1llkiPK8WG5NIcw5ckFdpDEUB1TSu81bWpD9dQ7V/q3+tML8xvOnUtBpC qMs9YrFCiHSpuAUF6tfL/JMo2GaN29ytS8wKaw6Qio361VohWSuAdWqNgWs7TaiR wyJFbwD0JAjk6ISAwiMGdRDpKZQvzxMTfvoldxva7VpYvQZSMcu5ls0tuCCA1Nid o7HMhmFwVgWQ+gXHkt/At8KGcTFeUtyfNdMztryjMOPJsq46YZn8ZswtMnA+sVTT FyQIcOtC4GLMNTj+UrAaOGtd3qEQrAqe5pswE7alIy+TxZYln3Msjh3PSS/EYo3S /xpIrPuZJdO+s5dXxm8nYFjpYw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:03:54 2025 by rpki-client