This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft File: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft (raw, json) Hash identifier: Gxm+x6odNr6jysLn5tSZF3KsL7EacLS76n3yr5U/nBU= Subject key identifier: F5:85:73:96:1E:F2:65:A7:81:97:4E:64:4B:2F:9C:07:19:31:65:1D Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 Certificate issuer: /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Certificate serial: 548F302DD40A0EFD683F2CEB8BF0CB29A795F4C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft Manifest number: 0230 Signing time: Wed 31 Dec 2025 15:37:34 +0000 Manifest this update: Wed 31 Dec 2025 15:32:34 +0000 Manifest next update: Thu 01 Jan 2026 18:51:34 +0000 Files and hashes: 1: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: ctYl9J9TTj+GlVTx/djEI8ydQ4q/0hlaqEto9cd0hFQ=) 2: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl (hash: VpXFc+8RUHcOc1985cVxVR1GEy1q3DgpdBPSAdR/HUA=) 3: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: VT2dIpvor0j1YnG2BQMLIN5CUYFFKwD7FsBUY9oYGtM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 Jan 2026 18:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8f:30:2d:d4:0a:0e:fd:68:3f:2c:eb:8b:f0:cb:29:a7:95:f4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Validity Not Before: Dec 31 15:32:34 2025 GMT Not After : Jan 1 18:51:34 2026 GMT Subject: CN=F58573961EF265A781974E644B2F9C071931651D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:07:6a:74:c2:0f:96:33:1b:26:45:c8:f3: 64:9a:df:42:68:9c:1d:9a:95:2c:70:a7:b0:3a:fb: 34:44:2d:6f:c9:cf:04:60:ae:1a:76:a0:1c:8f:7d: da:06:ae:b2:e6:49:7a:97:63:98:94:fa:02:7c:dd: 24:67:63:38:ad:bf:73:e2:21:b2:26:73:17:50:62: 0a:79:d2:78:ea:42:2f:6e:c8:ae:65:4a:5d:2a:1c: 43:da:71:97:95:16:d0:1b:cf:20:9f:07:90:23:d6: 6b:ce:87:52:94:6f:27:e5:f9:96:70:32:16:38:de: cd:21:c7:14:8f:87:79:e9:65:a9:7d:5e:07:af:96: cd:52:6e:9e:16:aa:60:e8:e0:ce:88:40:b9:a0:f7: fe:2e:dd:4e:cf:1f:73:4e:9e:6d:bd:fe:9d:4b:34: 98:d4:76:02:ae:9a:de:99:9a:7f:b8:e3:03:e4:3f: 7f:77:55:07:ac:1a:f4:4b:82:e4:6b:a6:99:ac:25: b7:42:6a:1a:2e:2d:f7:4a:b8:36:de:02:ad:59:72: 33:c1:f8:a7:67:be:e8:49:f8:8d:31:d2:10:ef:01: be:34:65:36:53:c8:ae:60:6d:a3:d5:31:95:13:a2: 9b:89:e4:d8:9a:d4:1c:49:b1:81:04:e4:76:7f:66: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:85:73:96:1E:F2:65:A7:81:97:4E:64:4B:2F:9C:07:19:31:65:1D X509v3 Authority Key Identifier: keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c7:2a:e2:a9:e6:bf:b2:0a:d8:e6:61:a2:b1:90:83:3e:5f: 7e:ae:31:a7:bf:19:46:57:aa:e4:a5:69:88:4f:48:9f:25:1f: ce:f2:4c:45:79:a1:43:74:79:41:5d:34:d1:90:5e:dd:ef:bc: 93:ac:82:eb:cb:22:ae:72:e2:a5:6c:60:fa:0e:67:f9:f9:c7: 18:a7:13:84:82:cd:56:6c:09:64:04:b8:b3:b2:f7:25:aa:da: 37:45:a7:c2:01:6d:e4:b5:67:a1:7a:3b:3f:c7:61:9a:79:37: 11:b2:b7:8a:55:a1:11:7f:d4:dd:83:60:0f:b7:14:fa:6f:65: 3f:c5:15:5c:ac:9c:b1:04:da:4f:19:b6:c1:28:48:1e:5c:56: d5:57:e2:6b:9e:20:f8:2f:f2:d0:ad:99:72:3d:fd:19:93:26: 70:db:94:7f:7c:cd:ec:18:0d:e3:0e:72:5c:cf:ec:51:6e:7a: 93:40:85:24:e5:9f:4f:49:69:1e:ce:a8:aa:99:ee:cc:e8:48: 1e:fa:ee:b5:70:ff:71:7e:cd:c4:80:a5:28:01:03:6f:6c:5e: f4:70:e9:c8:ed:2c:95:72:24:d1:19:cf:d2:62:a3:a6:27:f1: 5d:fd:0a:3a:5f:8b:27:c9:0a:26:2e:e2:8a:78:99:00:8d:3f: 6c:00:15:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVI8wLdQKDv1oPyzri/DLKaeV9MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzQkM3RjhFOTE1NkIxNEUxMUQ1NUZEOEQzNThEMEE5 MUZDRThFMjAeFw0yNTEyMzExNTMyMzRaFw0yNjAxMDExODUxMzRaMDMxMTAvBgNV BAMTKEY1ODU3Mzk2MUVGMjY1QTc4MTk3NEU2NDRCMkY5QzA3MTkzMTY1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOngdqdMIPljMbJkXI82Sa30Jo nB2alSxwp7A6+zRELW/JzwRgrhp2oByPfdoGrrLmSXqXY5iU+gJ83SRnYzitv3Pi IbImcxdQYgp50njqQi9uyK5lSl0qHEPacZeVFtAbzyCfB5Aj1mvOh1KUbyfl+ZZw MhY43s0hxxSPh3npZal9Xgevls1Sbp4WqmDo4M6IQLmg9/4u3U7PH3NOnm29/p1L NJjUdgKumt6Zmn+44wPkP393VQesGvRLguRrppmsJbdCahouLfdKuDbeAq1ZcjPB +KdnvuhJ+I0x0hDvAb40ZTZTyK5gbaPVMZUTopuJ5Nia1BxJsYEE5HZ/ZgsPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9YVzlh7yZaeBl05kSy+cBxkxZR0wHwYDVR0j BBgwFoAUtTvH+OkVaxThHVX9jTWNCpH86OIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy Tm0vMC9CNTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1M0JDN0Y4RTkxNTZCMTRF MTFENTVGRDhEMzU4RDBBOTFGQ0U4RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUyTm0vMC9C NTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABccq4qnmv7IK2OZhorGQgz5ffq4xp78ZRleq5KVpiE9InyUfzvJMRXmhQ3R5 QV000ZBe3e+8k6yC68sirnLipWxg+g5n+fnHGKcThILNVmwJZAS4s7L3JaraN0Wn wgFt5LVnoXo7P8dhmnk3EbK3ilWhEX/U3YNgD7cU+m9lP8UVXKycsQTaTxm2wShI HlxW1Vfia54g+C/y0K2Zcj39GZMmcNuUf3zN7BgN4w5yXM/sUW56k0CFJOWfT0lp Hs6oqpnuzOhIHvrutXD/cX7NxIClKAEDb2xe9HDpyO0slXIk0RnP0mKjpifxXf0K Ol+LJ8kKJi7iiniZAI0/bAAV2w== -----END CERTIFICATE-----Generated at Thu Jan 1 11:08:11 2026 by rpki-client