This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft File: 2917CE017809B6041B895DCC93EFF28388A27E5E.mft (raw, json) Hash identifier: m4vI6NDaPWM1GGwakTZyscOzkSQmWGXMN30uvHRN24k= Subject key identifier: 62:48:43:4A:45:28:C8:8C:5A:AB:AB:39:C3:D7:C8:84:4A:13:DB:D1 Authority key identifier: 29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E Certificate issuer: /CN=2917CE017809B6041B895DCC93EFF28388A27E5E Certificate serial: 130ECC9780D7C13BBDFE908F75E11F7B60D4FE7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft Manifest number: 7E Signing time: Fri 05 Dec 2025 21:18:04 +0000 Manifest this update: Fri 05 Dec 2025 21:13:04 +0000 Manifest next update: Sun 07 Dec 2025 01:09:04 +0000 Files and hashes: 1: 34352e3138372e3138302e302f32322d3332203d3e20323639343831.roa (hash: QlSCqtGUYaZI4ilpEf6rQRrlbybda/U4cpUItDoNsjA=) 2: 2917CE017809B6041B895DCC93EFF28388A27E5E.crl (hash: i6AvXjdXw8oxkBE8GJYeqcF45WNW46uk5UAoSounmJ0=) 3: 32342e3135322e302e302f32322d3332203d3e20323639343831.roa (hash: mrYj5PfHpVIg25olFqGJ7bb6lin+ykVvEDj0EOB/IzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 01:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0e:cc:97:80:d7:c1:3b:bd:fe:90:8f:75:e1:1f:7b:60:d4:fe:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2917CE017809B6041B895DCC93EFF28388A27E5E Validity Not Before: Dec 5 21:13:04 2025 GMT Not After : Dec 7 01:09:04 2025 GMT Subject: CN=6248434A4528C88C5AABAB39C3D7C8844A13DBD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:5d:3e:60:93:95:47:cd:7c:41:c6:57:e8:c1: 67:c6:6b:77:9d:4f:89:83:6c:91:e4:20:71:c7:f3: 69:de:74:e0:fb:40:01:fa:2b:06:1c:a9:22:ea:00: 50:44:07:3d:54:0b:97:ff:89:ff:ab:ef:cf:43:fe: ab:f0:81:9f:79:c9:eb:50:c3:1d:4f:a0:39:a5:c6: be:e9:9d:12:28:2e:fa:c8:be:2e:9f:53:51:4b:c3: bf:cb:42:42:86:94:2d:0a:3d:f7:c4:e5:c5:d0:c7: d9:a6:29:d5:06:c2:09:78:4c:9d:4d:e4:c5:47:64: 1a:c9:20:5e:14:43:ba:b1:24:6e:93:cc:6b:ee:0f: 9c:5d:0d:a6:43:55:0d:b5:83:41:02:eb:31:c3:81: cb:44:df:ae:ee:31:f2:cf:06:00:84:f2:45:bd:44: 8e:bc:30:fd:bc:38:8d:8a:8f:28:91:9b:9b:e6:16: c1:3e:a4:f8:56:af:4d:41:0e:ca:99:2a:fe:a2:01: 88:89:5b:0a:b6:4d:33:f5:77:b6:ca:d3:b8:8c:85: b1:d7:c3:4b:5a:c5:e3:52:7e:c7:cb:8f:c0:a5:37: 32:c4:a0:d4:68:e0:ac:3b:a4:1f:aa:99:2c:78:46: 11:d4:7a:d5:c6:a4:9a:3d:a4:54:7b:07:a4:18:a3: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:48:43:4A:45:28:C8:8C:5A:AB:AB:39:C3:D7:C8:84:4A:13:DB:D1 X509v3 Authority Key Identifier: keyid:29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7f:94:76:e3:3f:c6:b2:fa:fa:a9:c8:bb:fa:a3:06:63:0a: 90:7c:4d:11:ac:70:99:61:9b:4d:51:83:32:72:32:93:1d:a7: 3a:4f:e0:91:67:91:63:8d:d0:4d:98:b3:f3:34:44:f3:e1:38: a9:64:ec:27:bc:a5:a3:4b:92:66:65:0e:aa:60:f6:b7:09:6b: 25:0f:de:85:18:e1:74:4a:6e:d7:a9:49:88:d1:9e:5c:e4:2d: fb:24:1f:b5:a9:d7:fd:f6:63:4c:27:fc:ae:1e:28:7b:cd:53: 8d:26:e5:c1:d8:84:3b:a4:01:8a:13:5c:28:0c:0d:2f:3e:aa: 3a:ca:f2:78:4c:36:b9:14:e6:16:69:bc:ef:bf:79:42:7c:93: 7a:50:9a:55:40:e7:6c:ee:3a:32:be:02:36:e7:18:82:80:51: 26:b5:47:98:da:b9:31:b8:6f:ad:d9:34:ac:21:9a:bf:cf:7a: 89:97:c8:b1:ef:19:16:2a:36:3a:12:d5:60:85:6f:5a:f8:c2: f9:20:75:ce:ba:47:36:5f:1c:72:12:b7:0e:c1:0b:d4:5c:d3: f9:f7:e7:d1:1f:42:71:a1:e4:4c:b4:fd:47:bb:ef:24:b5:b7: b9:11:f0:f7:ef:68:0e:a3:c0:e6:28:8c:b7:ed:61:d5:89:f9: 5d:84:3d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEw7Ml4DXwTu9/pCPdeEfe2DU/nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkxN0NFMDE3ODA5QjYwNDFCODk1RENDOTNFRkYyODM4 OEEyN0U1RTAeFw0yNTEyMDUyMTEzMDRaFw0yNTEyMDcwMTA5MDRaMDMxMTAvBgNV BAMTKDYyNDg0MzRBNDUyOEM4OEM1QUFCQUIzOUMzRDdDODg0NEExM0RCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8XT5gk5VHzXxBxlfowWfGa3ed T4mDbJHkIHHH82nedOD7QAH6KwYcqSLqAFBEBz1UC5f/if+r789D/qvwgZ95yetQ wx1PoDmlxr7pnRIoLvrIvi6fU1FLw7/LQkKGlC0KPffE5cXQx9mmKdUGwgl4TJ1N 5MVHZBrJIF4UQ7qxJG6TzGvuD5xdDaZDVQ21g0EC6zHDgctE367uMfLPBgCE8kW9 RI68MP28OI2KjyiRm5vmFsE+pPhWr01BDsqZKv6iAYiJWwq2TTP1d7bK07iMhbHX w0taxeNSfsfLj8ClNzLEoNRo4Kw7pB+qmSx4RhHUetXGpJo9pFR7B6QYoyfdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYkhDSkUoyIxaq6s5w9fIhEoT29EwHwYDVR0j BBgwFoAUKRfOAXgJtgQbiV3Mk+/yg4iifl4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjVMMlBISFNxUVVxYjRZcUdScTJpRldnY3pIVEpySDZIdHhkVzl4VkhO QmovMC8yOTE3Q0UwMTc4MDlCNjA0MUI4OTVEQ0M5M0VGRjI4Mzg4QTI3RTVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5MTdDRTAxNzgwOUI2MDQx Qjg5NURDQzkzRUZGMjgzODhBMjdFNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MjVMMlBISFNxUVVxYjRZcUdScTJpRldnY3pIVEpySDZIdHhkVzl4VkhOQmovMC8y OTE3Q0UwMTc4MDlCNjA0MUI4OTVEQ0M5M0VGRjI4Mzg4QTI3RTVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY3+UduM/xrL6+qnIu/qjBmMKkHxNEaxwmWGbTVGDMnIykx2nOk/gkWeRY43Q TZiz8zRE8+E4qWTsJ7ylo0uSZmUOqmD2twlrJQ/ehRjhdEpu16lJiNGeXOQt+yQf tanX/fZjTCf8rh4oe81TjSblwdiEO6QBihNcKAwNLz6qOsryeEw2uRTmFmm87795 QnyTelCaVUDnbO46Mr4CNucYgoBRJrVHmNq5Mbhvrdk0rCGav896iZfIse8ZFio2 OhLVYIVvWvjC+SB1zrpHNl8cchK3DsEL1FzT+ffn0R9CcaHkTLT9R7vvJLW3uRHw 9+9oDqPA5iiMt+1h1Yn5XYQ9yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:34 2025 by rpki-client