This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft File: B7EF22DFD881235D264FE132548F573E3667BD1A.mft (raw, json) Hash identifier: ntG0igeUzCEmZ/XjIkJqNJ5l9A+KssF0C7TrIJ865bk= Subject key identifier: 26:CE:99:4B:D9:40:EC:7B:B9:27:BD:70:2E:36:F7:1D:0C:F1:A0:A4 Authority key identifier: B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A Certificate issuer: /CN=B7EF22DFD881235D264FE132548F573E3667BD1A Certificate serial: 7D294C2E5BFDF13506714C4EC64EADCEE83B858A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft Manifest number: 0258 Signing time: Sat 06 Dec 2025 06:48:43 +0000 Manifest this update: Sat 06 Dec 2025 06:43:43 +0000 Manifest next update: Sun 07 Dec 2025 19:45:43 +0000 Files and hashes: 1: 3138362e3233322e36322e302f32332d3332203d3e203533303231.roa (hash: OqnIlGrkF8zcu1CJBmm0arYzGKRZ3nGoDFTjLlj5zYE=) 2: B7EF22DFD881235D264FE132548F573E3667BD1A.crl (hash: gIgbFkdVu9hrqa+og3zAZ7dNLqEcyh1wIzdlgKF3L50=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.crl rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 10:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:29:4c:2e:5b:fd:f1:35:06:71:4c:4e:c6:4e:ad:ce:e8:3b:85:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7EF22DFD881235D264FE132548F573E3667BD1A Validity Not Before: Dec 6 06:43:43 2025 GMT Not After : Dec 7 19:45:43 2025 GMT Subject: CN=26CE994BD940EC7BB927BD702E36F71D0CF1A0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:20:95:10:68:89:6d:27:83:e3:ac:99:92: 61:78:30:33:81:88:6e:0b:60:a2:ac:25:57:ad:96: 97:3a:be:67:0f:b6:e9:a2:6a:10:2b:4b:ad:3d:6c: 44:33:f4:98:ea:96:ba:9c:02:ab:3f:f0:84:2b:07: 86:62:ba:3c:83:85:31:92:82:21:ca:c3:ce:6a:b5: 5e:a9:b5:37:0a:9d:70:7a:47:38:78:e6:27:9e:39: 2f:a5:f2:52:f7:92:15:90:ec:82:25:8e:b1:55:71: 2c:e4:fc:4a:8e:6e:52:5a:ac:39:1d:37:34:45:fc: ff:74:90:2a:4f:ba:8c:78:c6:8d:78:05:c3:c2:9b: 66:38:7c:93:4a:b1:35:44:ae:66:7f:a6:36:d9:a6: 3f:67:a2:63:16:21:65:51:f3:4f:65:d6:0f:09:6f: 30:b1:db:d9:1e:7a:e2:b1:1a:93:98:b5:56:83:a1: d0:8d:0b:81:9a:07:9a:35:ce:3a:10:96:d9:ec:f4: 39:cd:db:79:9e:68:55:d0:34:e1:2d:d2:b2:8c:10: 7c:d6:0d:79:3c:ff:1f:16:ed:70:12:d1:87:aa:1a: 79:c5:6c:4a:8f:3b:83:97:8a:77:59:37:70:d0:4d: 0f:7a:41:71:a3:d5:e2:3c:e2:07:79:b1:48:0c:6d: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CE:99:4B:D9:40:EC:7B:B9:27:BD:70:2E:36:F7:1D:0C:F1:A0:A4 X509v3 Authority Key Identifier: keyid:B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:82:0e:60:4b:9c:fb:0e:74:79:48:05:de:54:59:4f:fd:03: 0b:62:c6:7d:4c:d7:ec:e7:4e:a4:6a:3b:86:31:e3:1c:b8:6e: a1:c7:5f:01:a1:ee:f1:68:fc:41:6e:d4:8b:92:5b:fc:54:62: 37:b3:88:49:a4:5d:31:68:c7:10:03:70:10:34:24:d3:55:59: ca:e3:b1:9c:d3:a5:63:b0:2e:59:d7:7c:51:f9:29:8b:c1:61: 13:50:23:7a:b7:b2:75:95:db:0e:e5:7e:70:06:f8:0d:9a:dd: e5:8d:21:4f:45:7c:05:70:8f:fe:63:e9:7e:ab:61:63:07:32: db:da:d1:15:b2:6e:2b:d1:7b:e6:a0:56:7c:3c:cb:75:f7:80: bd:11:40:96:82:c6:d9:aa:78:62:eb:30:12:f4:87:d1:f0:29: 31:a4:12:ff:28:62:d4:6f:ed:af:01:25:60:37:c1:39:39:90: b2:0c:d1:a9:0f:cf:29:a1:a3:6f:ca:50:89:7b:07:c1:25:35: 2b:78:dd:b6:8d:cd:61:bf:b2:91:23:82:4e:64:49:0d:ad:24: 84:3f:07:33:04:84:bb:3f:5c:13:45:25:82:1b:42:b0:61:c4: 6c:ef:01:af:12:44:0d:80:29:7a:8d:da:c9:63:62:94:df:84: db:93:f3:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfSlMLlv98TUGcUxOxk6tzug7hYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdFRjIyREZEODgxMjM1RDI2NEZFMTMyNTQ4RjU3M0Uz NjY3QkQxQTAeFw0yNTEyMDYwNjQzNDNaFw0yNTEyMDcxOTQ1NDNaMDMxMTAvBgNV BAMTKDI2Q0U5OTRCRDk0MEVDN0JCOTI3QkQ3MDJFMzZGNzFEMENGMUEwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52iCVEGiJbSeD46yZkmF4MDOB iG4LYKKsJVetlpc6vmcPtumiahArS609bEQz9JjqlrqcAqs/8IQrB4ZiujyDhTGS giHKw85qtV6ptTcKnXB6Rzh45ieeOS+l8lL3khWQ7IIljrFVcSzk/EqOblJarDkd NzRF/P90kCpPuox4xo14BcPCm2Y4fJNKsTVErmZ/pjbZpj9nomMWIWVR809l1g8J bzCx29keeuKxGpOYtVaDodCNC4GaB5o1zjoQltns9DnN23meaFXQNOEt0rKMEHzW DXk8/x8W7XAS0YeqGnnFbEqPO4OXindZN3DQTQ96QXGj1eI84gd5sUgMbcMTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJs6ZS9lA7Hu5J71wLjb3HQzxoKQwHwYDVR0j BBgwFoAUt+8i39iBI10mT+EyVI9XPjZnvRowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlNUWmJzTWRRMmY0b1BtODY4elNSTGdmSjRiWVdxOXRYb1Y4c1pKemRZ RU4vMC9CN0VGMjJERkQ4ODEyMzVEMjY0RkUxMzI1NDhGNTczRTM2NjdCRDFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3RUYyMkRGRDg4MTIzNUQy NjRGRTEzMjU0OEY1NzNFMzY2N0JEMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlNUWmJzTWRRMmY0b1BtODY4elNSTGdmSjRiWVdxOXRYb1Y4c1pKemRZRU4vMC9C N0VGMjJERkQ4ODEyMzVEMjY0RkUxMzI1NDhGNTczRTM2NjdCRDFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkoIOYEuc+w50eUgF3lRZT/0DC2LGfUzX7OdOpGo7hjHjHLhuocdfAaHu8Wj8 QW7Ui5Jb/FRiN7OISaRdMWjHEANwEDQk01VZyuOxnNOlY7AuWdd8Ufkpi8FhE1Aj ereydZXbDuV+cAb4DZrd5Y0hT0V8BXCP/mPpfqthYwcy29rRFbJuK9F75qBWfDzL dfeAvRFAloLG2ap4YuswEvSH0fApMaQS/yhi1G/trwElYDfBOTmQsgzRqQ/PKaGj b8pQiXsHwSU1K3jdto3NYb+ykSOCTmRJDa0khD8HMwSEuz9cE0UlghtCsGHEbO8B rxJEDYApeo3ayWNilN+E25PzMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:47 2025 by rpki-client