This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft File: B52A0D870CC703D8D9FE35123E1890C611011310.mft (raw, json) Hash identifier: TTtJviK3HRnTxfn3GBEIOZfkmXdwjWo1uZ1SJ3Inbmw= Subject key identifier: F2:33:AF:FE:B8:75:11:A4:FF:94:B6:7C:DD:53:4E:21:FE:76:08:28 Authority key identifier: B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10 Certificate issuer: /CN=B52A0D870CC703D8D9FE35123E1890C611011310 Certificate serial: 4B787E9BBB9221DC29411BA5E6A2E240DC6A9CF4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer Subject info access: rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft Manifest number: 01CE Signing time: Wed 24 Dec 2025 12:35:33 +0000 Manifest this update: Wed 24 Dec 2025 12:30:33 +0000 Manifest next update: Thu 25 Dec 2025 15:57:33 +0000 Files and hashes: 1: 3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (hash: bZP5ER+h+ra7MAKCwfQrRp9/leZ9/TEA5OHjfMmzFrA=) 2: 323830343a316563633a3a2f33322d3438203d3e20323634343438.roa (hash: x4D+RR475255YD8WkvS4MMEFntZsaRLQ7bJy8kJa7rE=) 3: B52A0D870CC703D8D9FE35123E1890C611011310.crl (hash: GKWsQxwTgiVZPHEK94StfV7rBL9opGaXP9I5G9psl/8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 15:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:78:7e:9b:bb:92:21:dc:29:41:1b:a5:e6:a2:e2:40:dc:6a:9c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52A0D870CC703D8D9FE35123E1890C611011310 Validity Not Before: Dec 24 12:30:33 2025 GMT Not After : Dec 25 15:57:33 2025 GMT Subject: CN=F233AFFEB87511A4FF94B67CDD534E21FE760828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:47:14:ba:8d:ef:c2:dd:19:56:7b:1d:d7: 5b:40:d5:66:20:7a:24:79:c3:98:a5:d4:b0:5b:05: 07:00:dd:19:1f:00:b6:22:2e:54:ab:5e:47:93:e9: c0:5d:36:89:af:d8:41:04:95:9c:01:c8:ec:91:15: a5:0e:54:c2:f4:bd:ca:61:14:dd:6e:b5:65:e9:d9: 5a:ab:1b:91:e4:43:be:79:2c:af:e1:0f:5c:96:85: ff:f0:65:f5:f2:f3:bb:d8:bb:29:f4:3e:3b:d5:51: e7:0b:6f:43:88:ea:32:b2:ea:39:44:56:e4:3b:ba: 78:89:33:9e:b2:93:42:ff:ac:95:85:e5:66:23:df: 3f:b0:7a:b6:3f:b3:12:7e:c1:95:3f:2e:95:9a:a7: e1:82:bc:c1:42:53:ba:90:7d:71:c3:70:b0:d8:5b: 56:b9:88:b8:8e:28:07:4b:24:29:61:20:e7:da:7e: 97:80:e0:32:26:23:60:6a:f6:59:f8:0b:0d:f3:e4: ba:dc:4d:56:f6:a2:b4:95:c3:bd:1e:1c:90:22:c6: 03:df:97:fa:be:de:da:18:10:b3:8d:a0:67:40:3a: c5:54:1b:0c:02:ab:77:35:5a:49:5d:42:b1:91:f5: dc:7b:f1:08:50:df:16:8a:f3:48:33:2c:c5:cf:4c: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:33:AF:FE:B8:75:11:A4:FF:94:B6:7C:DD:53:4E:21:FE:76:08:28 X509v3 Authority Key Identifier: keyid:B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cf:ec:74:b9:92:4e:a7:53:4d:79:a5:95:e4:7d:64:51:45: 01:f2:e5:af:a7:ac:87:6e:88:5a:eb:a9:76:b6:57:1c:2e:1c: be:ea:ab:a3:27:20:e9:e7:f9:66:5f:74:41:d2:da:8b:ac:71: b5:d2:b1:4e:76:e7:e3:ce:63:d0:b3:d1:b0:a1:d0:f5:39:b4: 76:e5:3a:2a:c1:aa:67:b2:5c:15:5b:78:bb:33:1e:3f:f1:2f: 78:d3:59:31:2f:45:bc:22:59:42:43:51:aa:87:24:5d:0f:3e: d8:6d:c8:9e:89:e8:51:bf:3f:62:71:aa:c9:a3:8c:e2:7e:bb: bb:71:70:d9:84:66:00:f4:89:31:d1:25:96:49:85:09:62:90: 58:1b:c4:70:3c:70:cf:cb:87:2f:16:44:ee:d5:3c:33:2a:c2: 38:d7:6e:cb:fe:9a:62:45:3a:c7:5c:7c:a7:4c:1a:1c:0e:7f: 0d:5e:5d:02:ab:54:88:d9:d0:34:ea:92:8a:74:aa:28:35:6e: eb:09:db:07:5c:6f:ab:1f:40:4a:57:35:c1:ae:6d:c9:0d:09: 15:d8:67:5e:8a:f4:24:26:f5:10:11:cd:da:c9:24:42:56:aa: cc:3c:32:a4:21:64:b4:89:27:c4:38:40:22:08:6d:38:f3:dc: 6d:79:7b:ea -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUS3h+m7uSIdwpQRul5qLiQNxqnPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyQTBEODcwQ0M3MDNEOEQ5RkUzNTEyM0UxODkwQzYx MTAxMTMxMDAeFw0yNTEyMjQxMjMwMzNaFw0yNTEyMjUxNTU3MzNaMDMxMTAvBgNV BAMTKEYyMzNBRkZFQjg3NTExQTRGRjk0QjY3Q0RENTM0RTIxRkU3NjA4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQuEcUuo3vwt0ZVnsd11tA1WYg eiR5w5il1LBbBQcA3RkfALYiLlSrXkeT6cBdNomv2EEElZwByOyRFaUOVML0vcph FN1utWXp2VqrG5HkQ755LK/hD1yWhf/wZfXy87vYuyn0PjvVUecLb0OI6jKy6jlE VuQ7uniJM56yk0L/rJWF5WYj3z+werY/sxJ+wZU/LpWap+GCvMFCU7qQfXHDcLDY W1a5iLiOKAdLJClhIOfafpeA4DImI2Bq9ln4Cw3z5LrcTVb2orSVw70eHJAixgPf l/q+3toYELONoGdAOsVUGwwCq3c1WkldQrGR9dx78QhQ3xaK80gzLMXPTIHFAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU8jOv/rh1EaT/lLZ83VNOIf52CCgwHwYDVR0j BBgwFoAUtSoNhwzHA9jZ/jUSPhiQxhEBExAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9wOWJ4cFhNandnNE1UUW5MQnRqR2RNelJiamZTUnBGUjFHQ0JmV01Ba1pV LzAvQjUyQTBEODcwQ0M3MDNEOEQ5RkUzNTEyM0UxODkwQzYxMTAxMTMxMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNTJBMEQ4NzBDQzcwM0Q4RDlG RTM1MTIzRTE4OTBDNjExMDExMzEwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3A5 YnhwWE1qd2c0TVRRbkxCdGpHZE16UmJqZlNScEZSMUdDQmZXTUFrWlUvMC9CNTJB MEQ4NzBDQzcwM0Q4RDlGRTM1MTIzRTE4OTBDNjExMDExMzEwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA XM/sdLmSTqdTTXmlleR9ZFFFAfLlr6esh26IWuupdrZXHC4cvuqroycg6ef5Zl90 QdLai6xxtdKxTnbn485j0LPRsKHQ9Tm0duU6KsGqZ7JcFVt4uzMeP/EveNNZMS9F vCJZQkNRqockXQ8+2G3InonoUb8/YnGqyaOM4n67u3Fw2YRmAPSJMdEllkmFCWKQ WBvEcDxwz8uHLxZE7tU8MyrCONduy/6aYkU6x1x8p0waHA5/DV5dAqtUiNnQNOqS inSqKDVu6wnbB1xvqx9ASlc1wa5tyQ0JFdhnXor0JCb1EBHN2skkQlaqzDwypCFk tIknxDhAIghtOPPcbXl76g== -----END CERTIFICATE-----Generated at Thu Dec 25 06:59:09 2025 by rpki-client