This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft File: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft (raw, json) Hash identifier: AwuJJXhk4S0zu8Hw1LzrmlCWbtIYI5A7eJtFECGgqOc= Subject key identifier: E8:64:B7:01:74:8B:7E:DF:78:62:D7:C2:7E:67:BC:53:7E:9C:C5:34 Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89 Certificate issuer: /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89 Certificate serial: 1DB518E2058258D2F33706660E21FF61108CE34B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer Subject info access: rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft Manifest number: 0224 Signing time: Sun 21 Dec 2025 23:42:43 +0000 Manifest this update: Sun 21 Dec 2025 23:37:43 +0000 Manifest next update: Tue 23 Dec 2025 00:57:43 +0000 Files and hashes: 1: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl (hash: 34I9CGLYW7XcZOw645cs7nL+g5b5Ya7DCgCYokOBlB8=) 2: 323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (hash: 5or+ffjF3ckLhryOsz3IIIYfCzvKN8SwjJrOnTxOTgw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 00:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b5:18:e2:05:82:58:d2:f3:37:06:66:0e:21:ff:61:10:8c:e3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89 Validity Not Before: Dec 21 23:37:43 2025 GMT Not After : Dec 23 00:57:43 2025 GMT Subject: CN=E864B701748B7EDF7862D7C27E67BC537E9CC534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:3a:ae:b8:da:81:56:e3:3e:59:de:49:ef: 55:41:78:58:6a:e4:86:80:b7:ae:4b:9e:f8:9c:a0: a2:7e:49:61:a4:8d:c4:72:17:6b:0c:66:cb:f2:a8: 18:e5:05:fb:eb:c3:11:5b:50:c0:3d:3f:1d:a9:70: 83:b6:a9:63:d9:c0:32:32:e5:77:f4:0b:1a:21:db: 13:7d:3c:83:a7:10:06:54:9d:ba:90:5e:ec:76:19: a0:0e:bc:e2:35:6f:81:2d:41:30:fd:c0:15:4e:5b: df:7e:f4:6b:ad:c1:d4:61:98:b3:fb:ba:31:7c:22: e9:e6:30:f7:58:a3:52:6c:22:32:4a:fd:fe:33:ca: db:ef:4b:e6:7f:a4:5e:83:dc:b2:cb:49:e3:f5:b0: fa:be:d7:e7:e7:73:68:0c:54:ed:cd:61:91:03:2f: a9:52:a0:bc:fa:48:28:07:75:ff:3c:51:aa:5f:a5: 82:10:47:a5:b3:0a:be:bc:40:8a:42:dc:22:4d:c4: 99:89:f0:1c:ec:74:00:1e:4b:cb:2a:ab:51:9a:05: e8:85:df:f6:8f:b7:53:83:2a:0c:c0:8a:26:d0:c9: b9:63:92:82:02:c3:5c:fe:e9:4e:03:9e:eb:bf:ca: db:9c:85:ee:1e:b7:45:3f:75:ba:7c:06:e2:b0:3b: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:64:B7:01:74:8B:7E:DF:78:62:D7:C2:7E:67:BC:53:7E:9C:C5:34 X509v3 Authority Key Identifier: keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7c:09:2b:fc:6a:e0:6d:05:d5:24:50:4a:11:69:74:8a:e9: 71:3a:26:ed:96:a7:a2:00:f3:5f:52:34:82:6c:60:6d:18:f9: 1e:5f:f1:12:46:64:96:d4:dc:76:b5:26:5d:21:2d:c6:b4:c3: fc:91:9d:36:4f:a9:e4:d3:f2:94:77:bc:c9:82:d0:0a:86:ad: 22:31:fc:25:48:82:a6:a5:f6:08:ee:52:41:bf:20:f9:3f:37: 9d:4e:97:81:2e:93:08:ba:2b:9c:6d:c4:48:13:ea:0f:36:43: a5:4c:12:54:8c:20:64:f2:d4:63:49:e4:57:24:64:dc:d2:6b: 41:91:80:aa:f4:52:c4:1c:f4:6b:df:43:99:24:dc:56:ea:9d: 2d:b9:31:e2:49:a8:23:50:73:12:52:87:5c:82:74:4b:76:ac: 59:78:51:5f:53:d8:f3:ed:c8:94:5e:94:72:18:f4:c1:4d:36: 49:7f:45:0e:79:63:fd:bb:e5:19:1f:3e:d5:19:db:82:ad:5e: f6:e0:2f:92:d4:9a:97:5b:26:c9:68:65:d3:78:f7:db:73:1a: 81:6e:05:86:6a:8a:ba:66:24:0f:bf:2d:11:14:43:41:07:c3: 6e:09:bf:e3:f5:ef:27:65:fa:6d:7a:20:7e:7d:6a:7e:fc:2e: d6:08:f3:bc -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHbUY4gWCWNLzNwZmDiH/YRCM40swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3 QTQyNEQ4OTAeFw0yNTEyMjEyMzM3NDNaFw0yNTEyMjMwMDU3NDNaMDMxMTAvBgNV BAMTKEU4NjRCNzAxNzQ4QjdFREY3ODYyRDdDMjdFNjdCQzUzN0U5Q0M1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCauDquuNqBVuM+Wd5J71VBeFhq 5IaAt65LnvicoKJ+SWGkjcRyF2sMZsvyqBjlBfvrwxFbUMA9Px2pcIO2qWPZwDIy 5Xf0Cxoh2xN9PIOnEAZUnbqQXux2GaAOvOI1b4EtQTD9wBVOW99+9GutwdRhmLP7 ujF8IunmMPdYo1JsIjJK/f4zytvvS+Z/pF6D3LLLSeP1sPq+1+fnc2gMVO3NYZED L6lSoLz6SCgHdf88UapfpYIQR6WzCr68QIpC3CJNxJmJ8BzsdAAeS8sqq1GaBeiF 3/aPt1ODKgzAiibQybljkoICw1z+6U4Dnuu/ytuche4et0U/dbp8BuKwO3VJAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU6GS3AXSLft94YtfCfme8U36cxTQwHwYDVR0j BBgwFoAULCJ75t77S56wBcCsn8KEcnpCTYkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9idWs2UnBaSk55YUQ3ek1RN1cyTVlvc3ZRckZCQVpMcENwdnV6Wk4xZUhu LzAvMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3QTQyNEQ4OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzIyN0JFNkRFRkI0QjlFQjAw NUMwQUM5RkMyODQ3MjdBNDI0RDg5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2J1 azZScFpKTnlhRDd6TVE3VzJNWW9zdlFyRkJBWkxwQ3B2dXpaTjFlSG4vMC8yQzIy N0JFNkRFRkI0QjlFQjAwNUMwQUM5RkMyODQ3MjdBNDI0RDg5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA oXwJK/xq4G0F1SRQShFpdIrpcTom7ZanogDzX1I0gmxgbRj5Hl/xEkZkltTcdrUm XSEtxrTD/JGdNk+p5NPylHe8yYLQCoatIjH8JUiCpqX2CO5SQb8g+T83nU6XgS6T CLornG3ESBPqDzZDpUwSVIwgZPLUY0nkVyRk3NJrQZGAqvRSxBz0a99DmSTcVuqd Lbkx4kmoI1BzElKHXIJ0S3asWXhRX1PY8+3IlF6Uchj0wU02SX9FDnlj/bvlGR8+ 1Rnbgq1e9uAvktSal1smyWhl03j323MagW4FhmqKumYkD78tERRDQQfDbgm/4/Xv J2X6bXogfn1qfvwu1gjzvA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:27 2025 by rpki-client