This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft File: 0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft (raw, json) Hash identifier: gz76NB8JRmH1iJzqWJ/C26NbtXKCIDEjak5xsqV9XcE= Subject key identifier: ED:33:83:52:C2:91:78:62:CA:29:17:FB:7D:F4:1E:07:88:7D:E5:5C Authority key identifier: 0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0 Certificate issuer: /CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0 Certificate serial: 6DD565E5C2629C02B20857A184C1FDD38C100D92 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft Manifest number: 23 Signing time: Sat 20 Dec 2025 00:06:51 +0000 Manifest this update: Sat 20 Dec 2025 00:01:51 +0000 Manifest next update: Sun 21 Dec 2025 02:34:51 +0000 Files and hashes: 1: 323830343a363261633a3a2f33322d3438203d3e20323639333131.roa (hash: RwoAgXzqXwlplt+uKaPo/pB5TEki3aobVNIeELH1HdY=) 2: 0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl (hash: OTcUy1PNRAFdQAU8tbJzypFKQKJVZvvTKF0v+O7fmwE=) 3: 34352e3138342e34342e302f32322d3234203d3e20323639333131.roa (hash: zjFfHVdkTZHCLeq+NOgiZYSRs1fe85UxqTIn4l5ZRDE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 02:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d5:65:e5:c2:62:9c:02:b2:08:57:a1:84:c1:fd:d3:8c:10:0d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0 Validity Not Before: Dec 20 00:01:51 2025 GMT Not After : Dec 21 02:34:51 2025 GMT Subject: CN=ED338352C2917862CA2917FB7DF41E07887DE55C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:63:fb:fd:9a:85:dd:eb:18:e9:5d:aa:58: dd:c2:77:72:0f:31:e5:72:1f:c1:b9:a5:96:ef:15: 93:33:a2:7e:de:9b:40:cf:6c:58:c6:3c:52:cd:6d: c4:83:6f:52:e4:5f:68:dd:a3:2c:05:41:68:84:8f: dd:78:79:a2:87:bf:95:52:69:b0:f6:40:9f:24:92: 0b:5f:2d:ed:99:ba:68:dd:0d:83:eb:31:25:d5:36: cb:05:e8:fb:83:77:73:8e:f8:ac:7b:50:10:22:12: 99:97:2f:78:7f:2a:6d:c2:94:bf:c8:ac:a3:38:39: ea:d0:3b:15:a1:5f:66:f6:98:3d:db:a7:46:af:d2: a4:71:46:76:e3:d5:05:57:f6:6d:cc:ab:c7:c3:8f: b5:da:6c:ea:a9:6f:09:6c:b8:16:fc:8f:e9:bc:8c: bf:3a:f3:ef:ab:f6:55:f0:d7:23:66:24:d7:60:bf: dd:93:71:6b:7c:3f:28:af:f7:6e:73:d6:37:4c:de: c5:28:a1:e9:71:77:65:dd:4e:b7:93:47:ac:80:63: 2b:38:12:33:a6:07:41:01:3c:7f:10:15:6d:ef:85: 11:30:5d:1d:9f:b1:40:a3:0c:e0:d4:85:4d:6b:ae: 62:57:a0:c6:e2:2d:57:2a:a2:90:b5:bf:28:37:ff: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:33:83:52:C2:91:78:62:CA:29:17:FB:7D:F4:1E:07:88:7D:E5:5C X509v3 Authority Key Identifier: keyid:0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f4:3d:5f:b0:ec:a8:7e:cf:a5:0e:42:95:a4:e3:ca:c9:c9: f6:c9:e0:12:cf:e1:f6:b5:47:a8:57:b2:fa:ca:55:0f:72:ab: f0:c7:0d:a3:91:7e:68:7c:a5:af:e0:60:e5:e4:be:2d:c9:ad: 98:9e:58:94:9b:42:cf:6b:98:db:4e:08:2f:e2:1c:a2:8e:f8: 6e:82:77:ae:e7:e4:47:09:72:c2:b2:21:54:b4:01:36:71:85: 4f:ee:5f:8d:f4:57:dc:60:e1:2e:6e:38:f3:70:01:f0:5e:dd: 2b:c3:3e:1f:e5:bd:1f:31:3b:ef:ce:c9:3d:6b:7a:6c:c3:a0: 71:c3:e8:ed:1a:35:65:c2:c2:c7:dc:a7:19:3d:bb:2d:ab:82: 5c:04:df:8f:b9:23:33:d7:e7:68:99:a8:19:5d:a9:3e:9d:c7: fe:a1:3c:9a:3b:81:73:a4:26:be:4c:16:8a:51:16:06:66:a7: ef:74:a2:1d:65:c0:1c:5f:9e:3a:de:dd:90:75:ed:ae:15:20: 08:07:79:e9:c6:d1:31:10:26:6e:48:92:aa:b2:31:52:9b:ef: 73:1c:11:d9:8b:b9:a0:46:ca:0c:59:7b:79:ce:55:4b:30:30: ad:15:0a:da:ed:55:49:99:53:cf:c5:28:93:ef:c4:6d:16:b8: da:39:ff:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbdVl5cJinAKyCFehhMH904wQDZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQjhDOTUxMEQyNkYyQkI2RUJBQzlCQTg5RTUyNEUz Q0E2NkFEMDAeFw0yNTEyMjAwMDAxNTFaFw0yNTEyMjEwMjM0NTFaMDMxMTAvBgNV BAMTKEVEMzM4MzUyQzI5MTc4NjJDQTI5MTdGQjdERjQxRTA3ODg3REU1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zWP7/ZqF3esY6V2qWN3Cd3IP MeVyH8G5pZbvFZMzon7em0DPbFjGPFLNbcSDb1LkX2jdoywFQWiEj914eaKHv5VS abD2QJ8kkgtfLe2ZumjdDYPrMSXVNssF6PuDd3OO+Kx7UBAiEpmXL3h/Km3ClL/I rKM4OerQOxWhX2b2mD3bp0av0qRxRnbj1QVX9m3Mq8fDj7XabOqpbwlsuBb8j+m8 jL868++r9lXw1yNmJNdgv92TcWt8Pyiv925z1jdM3sUooelxd2XdTreTR6yAYys4 EjOmB0EBPH8QFW3vhREwXR2fsUCjDODUhU1rrmJXoMbiLVcqopC1vyg3/1RjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7TODUsKReGLKKRf7ffQeB4h95VwwHwYDVR0j BBgwFoAUC7uMlRDSbyu266ybqJ5STjymatAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkE3dkRZWTJWZGo5TGNDdG9peGN0MmdtUG9xZWdMWXA5bUV1VDE4TXBX WXMvMC8wQkJCOEM5NTEwRDI2RjJCQjZFQkFDOUJBODlFNTI0RTNDQTY2QUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQkI4Qzk1MTBEMjZGMkJC NkVCQUM5QkE4OUU1MjRFM0NBNjZBRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkE3dkRZWTJWZGo5TGNDdG9peGN0MmdtUG9xZWdMWXA5bUV1VDE4TXBXWXMvMC8w QkJCOEM5NTEwRDI2RjJCQjZFQkFDOUJBODlFNTI0RTNDQTY2QUQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmPQ9X7DsqH7PpQ5ClaTjysnJ9sngEs/h9rVHqFey+spVD3Kr8McNo5F+aHyl r+Bg5eS+LcmtmJ5YlJtCz2uY204IL+Icoo74boJ3rufkRwlywrIhVLQBNnGFT+5f jfRX3GDhLm4483AB8F7dK8M+H+W9HzE7787JPWt6bMOgccPo7Ro1ZcLCx9ynGT27 LauCXATfj7kjM9fnaJmoGV2pPp3H/qE8mjuBc6QmvkwWilEWBman73SiHWXAHF+e Ot7dkHXtrhUgCAd56cbRMRAmbkiSqrIxUpvvcxwR2Yu5oEbKDFl7ec5VSzAwrRUK 2u1VSZlTz8Uok+/EbRa42jn/nQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:22:13 2025 by rpki-client