This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft File: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json) Hash identifier: gYljwBgiQcvbzUaiGNLw5TN6xmzMlKTji1v+5CfZRfI= Subject key identifier: BA:FF:B3:F8:E9:01:B1:89:CA:7C:CC:59:11:28:FF:0A:78:A9:28:17 Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E Certificate issuer: /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Certificate serial: 235033F986F8BBEEB3FAA96FE221D4C65055066E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft Manifest number: 4F Signing time: Sat 20 Dec 2025 05:30:18 +0000 Manifest this update: Sat 20 Dec 2025 05:25:18 +0000 Manifest next update: Sun 21 Dec 2025 08:25:18 +0000 Files and hashes: 1: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=) 2: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=) 3: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: LLcO8MmT0j997MMN3bNRNqgyPmwKDpTHY7K7y7ER8EE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:50:33:f9:86:f8:bb:ee:b3:fa:a9:6f:e2:21:d4:c6:50:55:06:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Validity Not Before: Dec 20 05:25:18 2025 GMT Not After : Dec 21 08:25:18 2025 GMT Subject: CN=BAFFB3F8E901B189CA7CCC591128FF0A78A92817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b9:14:a3:c6:e5:11:96:5c:a3:7a:c2:6d:0f: 57:0e:c7:ff:5b:a4:22:71:88:a2:d5:78:9a:60:6e: b0:d3:bc:17:19:12:4a:2a:05:2a:9d:ab:73:85:bd: c1:52:50:eb:4b:8c:50:89:3a:28:bf:e8:d2:24:ac: 63:ab:05:cc:c2:82:a0:ec:49:ce:70:90:ba:ce:23: 68:07:28:9b:bb:ce:c8:93:a7:0e:57:c1:38:98:bb: 9a:40:92:d0:df:a6:af:6c:48:73:b8:21:54:7c:08: ca:cc:d7:fd:76:ba:8f:02:3b:d5:58:7d:91:77:34: b4:c6:06:e5:79:60:08:ec:3a:db:02:69:ee:fe:5a: ad:b1:00:88:dc:db:fb:83:49:d7:7c:42:9b:be:e4: 9b:fa:2f:31:da:e4:6f:52:60:9e:50:4c:65:52:c8: c8:c1:79:58:28:7c:36:10:80:90:81:b3:99:c0:12: 55:b2:90:cb:c2:b2:e6:b5:a9:01:51:8f:d7:d9:7f: fb:96:75:c0:b0:3b:be:2a:24:16:17:61:b1:95:53: b7:d8:ac:08:01:22:b8:e7:ea:7f:9c:21:07:db:f5: 5d:e1:30:84:af:a2:1a:ab:c0:f8:bc:ea:bf:59:2b: 1e:94:19:88:f8:97:2f:92:15:ef:8c:b2:a5:7b:7f: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FF:B3:F8:E9:01:B1:89:CA:7C:CC:59:11:28:FF:0A:78:A9:28:17 X509v3 Authority Key Identifier: keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d9:fe:65:30:90:1e:26:cd:47:f5:84:b8:cf:06:90:a3:16: db:47:75:1b:a7:ca:34:08:4a:32:b9:5d:9a:79:54:0b:26:37: 2e:b0:df:8f:5a:70:46:56:f7:bc:e3:95:2e:46:2f:10:5b:e5: ed:fa:5b:e2:23:f9:2e:2d:93:52:cd:2b:84:88:20:f0:d0:cd: 3f:7d:d1:d3:23:29:4a:ff:91:c2:2f:11:0b:c1:50:06:20:15: e5:b7:35:4f:30:e2:c7:44:ef:b9:80:16:c7:e7:bd:16:46:ed: 10:26:87:91:b7:e7:af:8c:2d:09:b5:8d:f7:d4:74:9f:15:65: 77:39:73:26:aa:20:bf:62:5e:7e:3c:63:11:58:04:23:69:5e: 16:c9:96:90:a0:6c:09:d0:c1:8d:12:10:88:a4:9d:c8:64:7c: 2d:39:bc:65:41:a7:02:ea:21:1f:04:8c:0a:dc:f4:b1:c0:99: 1b:3b:f3:6f:e3:85:1b:21:a0:dc:08:35:1f:b3:8a:87:49:28: bf:4e:6b:33:f7:a7:df:94:79:c8:f9:67:8a:6e:f8:4c:d5:a0: 66:89:ae:35:91:83:37:ef:68:12:b2:c1:08:cc:78:98:33:4e: ec:95:77:35:01:88:e4:cf:c4:7f:ea:4c:66:ac:05:01:a7:24: 6d:3e:c4:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI1Az+Yb4u+6z+qlv4iHUxlBVBm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyNUMxNTJCQUNGRDJERDk4OEUyM0U5Qzk3QUExQUVC NEJBNUIzRTAeFw0yNTEyMjAwNTI1MThaFw0yNTEyMjEwODI1MThaMDMxMTAvBgNV BAMTKEJBRkZCM0Y4RTkwMUIxODlDQTdDQ0M1OTExMjhGRjBBNzhBOTI4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnuRSjxuURllyjesJtD1cOx/9b pCJxiKLVeJpgbrDTvBcZEkoqBSqdq3OFvcFSUOtLjFCJOii/6NIkrGOrBczCgqDs Sc5wkLrOI2gHKJu7zsiTpw5XwTiYu5pAktDfpq9sSHO4IVR8CMrM1/12uo8CO9VY fZF3NLTGBuV5YAjsOtsCae7+Wq2xAIjc2/uDSdd8Qpu+5Jv6LzHa5G9SYJ5QTGVS yMjBeVgofDYQgJCBs5nAElWykMvCsua1qQFRj9fZf/uWdcCwO74qJBYXYbGVU7fY rAgBIrjn6n+cIQfb9V3hMISvohqrwPi86r9ZKx6UGYj4ly+SFe+MsqV7fyKrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuv+z+OkBsYnKfMxZESj/CnipKBcwHwYDVR0j BBgwFoAUviXBUrrP0t2YjiPpyXqhrrS6Wz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdo cHYvMC9CRTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMjVDMTUyQkFDRkQyREQ5 ODhFMjNFOUM5N0FBMUFFQjRCQTVCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdocHYvMC9C RTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT9n+ZTCQHibNR/WEuM8GkKMW20d1G6fKNAhKMrldmnlUCyY3LrDfj1pwRlb3 vOOVLkYvEFvl7fpb4iP5Li2TUs0rhIgg8NDNP33R0yMpSv+Rwi8RC8FQBiAV5bc1 TzDix0TvuYAWx+e9FkbtECaHkbfnr4wtCbWN99R0nxVldzlzJqogv2JefjxjEVgE I2leFsmWkKBsCdDBjRIQiKSdyGR8LTm8ZUGnAuohHwSMCtz0scCZGzvzb+OFGyGg 3Ag1H7OKh0kov05rM/en35R5yPlnim74TNWgZomuNZGDN+9oErLBCMx4mDNO7JV3 NQGI5M/Ef+pMZqwFAackbT7EEA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:30:57 2025 by rpki-client