This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft File: 8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft (raw, json) Hash identifier: PckpA8vpGaq9cW2lM3b6t3BSKQFMEXsmxkzRyUo/edA= Subject key identifier: 5B:9A:B7:81:C1:1C:F0:23:16:7E:D8:CA:52:1C:71:94:14:F4:1B:D8 Authority key identifier: 8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B Certificate issuer: /CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B Certificate serial: 0D9582AD2F4C6730F9D30E9DC7E079190FB99C94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft Manifest number: 0276 Signing time: Fri 05 Dec 2025 16:33:22 +0000 Manifest this update: Fri 05 Dec 2025 16:28:22 +0000 Manifest next update: Sat 06 Dec 2025 18:14:22 +0000 Files and hashes: 1: 3133382e3132312e3139362e302f32322d3234203d3e20323634333031.roa (hash: Lw3oXs27+kclpcAbki3gab/aEtoYxajf5Cmi//fS1As=) 2: 8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl (hash: mO7Mdia21ZabGeTtY4gwkN/bhNijN2/HYrUZAMMJb7M=) 3: 323830343a323563343a3a2f33322d3438203d3e20323634333031.roa (hash: AGb/N8ZPtoihV0bqDpsml/vTt3PMTKJp7EIpf44fJ3E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 18:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:95:82:ad:2f:4c:67:30:f9:d3:0e:9d:c7:e0:79:19:0f:b9:9c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B Validity Not Before: Dec 5 16:28:22 2025 GMT Not After : Dec 6 18:14:22 2025 GMT Subject: CN=5B9AB781C11CF023167ED8CA521C719414F41BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:a2:70:87:1e:fe:22:03:dc:ab:9f:8c:9a: 05:9c:3f:33:bf:db:c0:d0:2b:f7:14:d7:3b:e4:93: fb:5a:82:47:7a:50:53:91:cb:fe:eb:42:1d:26:71: 02:14:26:d5:45:dc:76:44:29:d6:d6:4e:5a:ab:1f: bf:9e:32:88:79:c7:ff:bf:11:e1:b0:59:3e:8d:c9: c7:3a:6e:31:01:69:b3:3d:4d:fb:ef:5b:60:90:28: 3c:3a:89:be:fb:aa:89:68:f7:93:99:0e:c4:96:1f: d0:8e:74:1d:a3:67:eb:df:09:21:33:10:0c:dc:dd: f0:40:45:7d:51:0d:70:a9:7c:7b:e2:51:9f:1f:3e: 99:31:be:63:79:42:08:bc:1d:bd:0a:41:68:73:41: 75:00:17:a1:e6:93:f4:40:96:41:10:d6:bd:74:97: d4:17:ad:69:13:87:ce:99:28:e6:53:c1:84:af:c8: 07:ca:41:23:dc:39:8b:f9:af:0b:fb:3f:42:c0:02: 77:d8:15:e2:ab:56:61:06:aa:04:1d:a3:60:5a:99: cd:d4:25:c8:fc:57:e3:27:46:18:2b:0f:88:32:bf: f5:a9:17:dd:89:f1:f2:1e:75:00:a0:8a:0b:23:9c: 95:e9:d7:f8:50:9c:d3:74:42:79:79:11:3a:f6:a7: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9A:B7:81:C1:1C:F0:23:16:7E:D8:CA:52:1C:71:94:14:F4:1B:D8 X509v3 Authority Key Identifier: keyid:8B:E6:51:CB:0C:FD:9D:3B:1C:7B:C9:48:3B:51:70:67:2B:77:ED:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AH4t4Fb9BChtNDxHzWJXX9uvJZfPdwQCfNNWXxiLwg8/0/8BE651CB0CFD9D3B1C7BC9483B5170672B77ED4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:10:88:f8:42:16:c1:fc:c9:8e:14:62:50:de:aa:47:87:a9: 7c:fe:20:65:82:67:12:14:ac:7d:ce:3f:b9:e2:e1:3f:09:c1: 02:1b:1a:a9:22:6f:ff:61:eb:8f:70:7a:da:47:d8:12:fa:12: 39:93:24:f0:74:4d:e4:a5:b4:40:3b:12:05:03:c9:fd:54:72: c8:71:1f:80:33:b4:8c:64:ee:73:50:cc:e2:d8:a3:a5:aa:f1: 15:3a:71:1b:66:3e:a7:63:50:06:68:95:d0:4e:28:31:db:3d: 40:c4:83:a4:57:0d:fd:bb:8f:70:7d:6f:59:68:1e:43:4a:cc: 9b:f5:7c:8b:10:21:d3:18:7c:28:86:6b:c6:91:de:cc:1c:06: ea:c8:fc:0b:6c:36:bc:c5:cb:66:3c:10:8e:cc:b9:1d:86:ef: c9:9b:0c:ca:97:4f:26:6e:8c:7a:1e:d8:36:20:1c:be:e0:a2: 2d:f4:8b:83:fd:27:99:bf:22:84:17:5c:8e:ec:23:27:08:e6: dc:56:e7:f6:16:f1:27:5c:f8:46:9f:3d:82:b1:4d:80:4b:52: 93:8f:5a:0b:58:fe:88:77:16:8d:29:1f:66:9b:eb:9f:23:0c: ec:ed:f8:30:3c:f2:fd:06:d3:9b:35:cd:73:53:e2:61:7a:02: 3a:7d:00:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDZWCrS9MZzD50w6dx+B5GQ+5nJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNjUxQ0IwQ0ZEOUQzQjFDN0JDOTQ4M0I1MTcwNjcy Qjc3RUQ0QjAeFw0yNTEyMDUxNjI4MjJaFw0yNTEyMDYxODE0MjJaMDMxMTAvBgNV BAMTKDVCOUFCNzgxQzExQ0YwMjMxNjdFRDhDQTUyMUM3MTk0MTRGNDFCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH56Jwhx7+IgPcq5+MmgWcPzO/ 28DQK/cU1zvkk/tagkd6UFORy/7rQh0mcQIUJtVF3HZEKdbWTlqrH7+eMoh5x/+/ EeGwWT6Nycc6bjEBabM9TfvvW2CQKDw6ib77qolo95OZDsSWH9COdB2jZ+vfCSEz EAzc3fBARX1RDXCpfHviUZ8fPpkxvmN5Qgi8Hb0KQWhzQXUAF6Hmk/RAlkEQ1r10 l9QXrWkTh86ZKOZTwYSvyAfKQSPcOYv5rwv7P0LAAnfYFeKrVmEGqgQdo2Bamc3U Jcj8V+MnRhgrD4gyv/WpF92J8fIedQCgigsjnJXp1/hQnNN0Qnl5ETr2p1DJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW5q3gcEc8CMWftjKUhxxlBT0G9gwHwYDVR0j BBgwFoAUi+ZRywz9nTsce8lIO1FwZyt37UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFINHQ0RmI5QkNodE5EeEh6V0pYWDl1dkpaZlBkd1FDZk5OV1h4aUx3 ZzgvMC84QkU2NTFDQjBDRkQ5RDNCMUM3QkM5NDgzQjUxNzA2NzJCNzdFRDRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCRTY1MUNCMENGRDlEM0Ix QzdCQzk0ODNCNTE3MDY3MkI3N0VENEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFINHQ0RmI5QkNodE5EeEh6V0pYWDl1dkpaZlBkd1FDZk5OV1h4aUx3ZzgvMC84 QkU2NTFDQjBDRkQ5RDNCMUM3QkM5NDgzQjUxNzA2NzJCNzdFRDRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAhCI+EIWwfzJjhRiUN6qR4epfP4gZYJnEhSsfc4/ueLhPwnBAhsaqSJv/2Hr j3B62kfYEvoSOZMk8HRN5KW0QDsSBQPJ/VRyyHEfgDO0jGTuc1DM4tijparxFTpx G2Y+p2NQBmiV0E4oMds9QMSDpFcN/buPcH1vWWgeQ0rMm/V8ixAh0xh8KIZrxpHe zBwG6sj8C2w2vMXLZjwQjsy5HYbvyZsMypdPJm6Meh7YNiAcvuCiLfSLg/0nmb8i hBdcjuwjJwjm3Fbn9hbxJ1z4Rp89grFNgEtSk49aC1j+iHcWjSkfZpvrnyMM7O34 MDzy/QbTmzXNc1PiYXoCOn0AkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:08 2025 by rpki-client