This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft File: BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft (raw, json) Hash identifier: VOvMYyG+iDr+buorqK3LaJCHu5DgCIOF1dyIB9F4IvY= Subject key identifier: D4:82:9C:8C:44:84:85:4F:2C:C1:8E:93:23:CF:D5:66:96:AC:8D:D8 Authority key identifier: BE:48:F7:A6:CD:BF:E9:B1:69:1A:FE:A4:B6:AF:7E:6C:5F:59:78:CB Certificate issuer: /CN=BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB Certificate serial: 42F90905ADF965C29FC148D25A69C3E93E1A04EE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer Subject info access: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft Manifest number: 47 Signing time: Sat 20 Dec 2025 03:27:27 +0000 Manifest this update: Sat 20 Dec 2025 03:22:27 +0000 Manifest next update: Sun 21 Dec 2025 07:19:27 +0000 Files and hashes: 1: 323830343a333136343a3a2f33322d3438203d3e20323635303131.roa (hash: RCzrflLdtOpQnMCfppZfKTW2rChNBTChSblYUEK32Ok=) 2: 3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (hash: GNAj+FXfeJr1JRGMkcOGGS3tn9KceKRlP2aMi5jKxig=) 3: BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.crl (hash: QeyFpN6aFO/Upr/DukwZugF+v7weqXlg2AMB87G11ek=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.crl rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 07:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f9:09:05:ad:f9:65:c2:9f:c1:48:d2:5a:69:c3:e9:3e:1a:04:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB Validity Not Before: Dec 20 03:22:27 2025 GMT Not After : Dec 21 07:19:27 2025 GMT Subject: CN=D4829C8C4484854F2CC18E9323CFD56696AC8DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:cd:c9:0f:56:9c:1d:ab:90:cc:56:43:99: bc:e1:24:a8:93:ec:6d:e4:e9:cf:0b:28:17:59:41: 48:79:c7:d1:2f:f2:85:dc:29:2d:38:27:47:66:61: e0:c5:69:44:80:6d:5d:21:41:43:14:34:b8:08:78: 1f:8e:c6:2d:46:52:3e:67:60:2d:60:4f:33:1d:bb: 9d:d6:ec:76:b6:af:db:62:78:39:2c:5e:54:d2:d2: f5:72:c6:3d:ed:01:ab:50:86:17:98:67:c2:17:f3: 3f:56:4b:0c:71:6a:63:d8:1f:b7:37:8e:fc:b6:66: 26:45:4d:4b:61:0f:49:f9:89:93:ec:9c:1c:4b:bc: 8d:e0:31:33:a1:86:a1:78:52:e2:5e:2e:a5:f2:02: b5:aa:50:3d:a1:2f:fc:28:f2:57:c2:ad:4f:df:45: b6:6a:5e:66:22:71:76:1a:a6:14:c0:e7:4e:ed:90: 44:31:04:6e:80:a9:78:4b:55:5b:30:76:7e:a1:30: 81:91:2f:47:f6:7e:2b:6b:bc:fa:7f:b4:db:52:65: 10:13:49:b6:91:93:ed:fb:64:85:35:f2:78:92:6f: e4:f2:da:cc:eb:d2:21:3f:c7:80:89:02:d0:b9:a4: 87:bc:a1:38:df:8a:25:dd:93:75:96:74:46:4e:16: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:82:9C:8C:44:84:85:4F:2C:C1:8E:93:23:CF:D5:66:96:AC:8D:D8 X509v3 Authority Key Identifier: keyid:BE:48:F7:A6:CD:BF:E9:B1:69:1A:FE:A4:B6:AF:7E:6C:5F:59:78:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/BE48F7A6CDBFE9B1691AFEA4B6AF7E6C5F5978CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f4:51:87:a6:9c:a7:dc:57:24:cf:b9:10:b5:5b:ef:bb:19: 18:48:22:ae:b8:d1:db:e9:ee:bb:8a:f7:67:5f:47:da:fd:de: 18:73:b9:aa:f3:7e:c6:73:cf:c3:4d:3a:c5:79:27:45:43:aa: 4e:25:13:e6:29:42:55:f5:ab:f6:17:5e:11:8a:fd:e4:18:36: 1e:85:20:8a:f0:2f:3e:ed:fa:17:e1:72:79:c4:25:fa:5f:d6: 41:dc:5e:dd:9f:7c:1f:e2:a3:f7:39:11:11:61:42:50:ac:19: 76:83:1d:a5:5f:08:0f:65:99:64:38:28:d2:76:81:da:08:b9: b1:b7:67:22:e8:2e:84:1c:b1:0a:b1:be:ad:f4:10:78:55:82: d2:5d:a0:1c:2d:41:15:27:40:97:da:71:0e:9b:a1:cf:55:e9: b8:ce:60:bf:c5:16:5a:6f:f9:0c:aa:9f:74:6a:3a:b5:b2:a1: 2f:5e:88:e2:97:88:3b:21:15:3b:44:e5:da:8f:99:3e:53:d5: e7:eb:9f:cc:4e:46:e3:ec:ce:ee:55:ff:e1:4e:4e:5d:47:68: 15:2a:86:8e:c5:0b:cc:ac:0a:e4:9e:be:1e:e4:e6:d6:ae:62: 90:34:80:54:c6:0b:bb:e9:8b:8d:f5:83:30:91:dd:1b:1b:24: 60:90:ff:b0 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUQvkJBa35ZcKfwUjSWmnD6T4aBO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0OEY3QTZDREJGRTlCMTY5MUFGRUE0QjZBRjdFNkM1 RjU5NzhDQjAeFw0yNTEyMjAwMzIyMjdaFw0yNTEyMjEwNzE5MjdaMDMxMTAvBgNV BAMTKEQ0ODI5QzhDNDQ4NDg1NEYyQ0MxOEU5MzIzQ0ZENTY2OTZBQzhERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCym83JD1acHauQzFZDmbzhJKiT 7G3k6c8LKBdZQUh5x9Ev8oXcKS04J0dmYeDFaUSAbV0hQUMUNLgIeB+Oxi1GUj5n YC1gTzMdu53W7Ha2r9tieDksXlTS0vVyxj3tAatQhheYZ8IX8z9WSwxxamPYH7c3 jvy2ZiZFTUthD0n5iZPsnBxLvI3gMTOhhqF4UuJeLqXyArWqUD2hL/wo8lfCrU/f RbZqXmYicXYaphTA507tkEQxBG6AqXhLVVswdn6hMIGRL0f2fitrvPp/tNtSZRAT SbaRk+37ZIU18niSb+Ty2szr0iE/x4CJAtC5pIe8oTjfiiXdk3WWdEZOFqbfAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU1IKcjESEhU8swY6TI8/VZpasjdgwHwYDVR0j BBgwFoAUvkj3ps2/6bFpGv6ktq9+bF9ZeMswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BV2Q0TndKVTVNeGYzeWVRM2lKaXh5QjJuemljMXY4NGJxMmhzOUVxUWhn LzAvQkU0OEY3QTZDREJGRTlCMTY5MUFGRUE0QjZBRjdFNkM1RjU5NzhDQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRTQ4RjdBNkNEQkZFOUIxNjkx QUZFQTRCNkFGN0U2QzVGNTk3OENCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FX ZDROd0pVNU14ZjN5ZVEzaUppeHlCMm56aWMxdjg0YnEyaHM5RXFRaGcvMC9CRTQ4 RjdBNkNEQkZFOUIxNjkxQUZFQTRCNkFGN0U2QzVGNTk3OENCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA XPRRh6acp9xXJM+5ELVb77sZGEgirrjR2+nuu4r3Z19H2v3eGHO5qvN+xnPPw006 xXknRUOqTiUT5ilCVfWr9hdeEYr95Bg2HoUgivAvPu36F+FyecQl+l/WQdxe3Z98 H+Kj9zkREWFCUKwZdoMdpV8ID2WZZDgo0naB2gi5sbdnIuguhByxCrG+rfQQeFWC 0l2gHC1BFSdAl9pxDpuhz1XpuM5gv8UWWm/5DKqfdGo6tbKhL16I4peIOyEVO0Tl 2o+ZPlPV5+ufzE5G4+zO7lX/4U5OXUdoFSqGjsULzKwK5J6+HuTm1q5ikDSAVMYL u+mLjfWDMJHdGxskYJD/sA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:42:17 2025 by rpki-client