This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft File: A99D272225729B303C95F28914878741C6AE29BE.mft (raw, json) Hash identifier: Ra4RWnjteVJQaEICY+HMYE8hECURfJNBKx4GVHtHDuI= Subject key identifier: BB:5A:C2:A9:2A:3E:72:11:D2:18:7B:43:DC:63:53:D2:10:45:0E:DA Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE Certificate issuer: /CN=A99D272225729B303C95F28914878741C6AE29BE Certificate serial: 42E446D8A582AD7920C92B0F0D031489D6A3B843 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft Manifest number: 033B Signing time: Sat 06 Dec 2025 10:49:00 +0000 Manifest this update: Sat 06 Dec 2025 10:44:00 +0000 Manifest next update: Sun 07 Dec 2025 11:43:00 +0000 Files and hashes: 1: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: mDfQLK61XcBdcZJh8AKS28XE2sEJ3Uz/m7Pd8PTtlc4=) 2: 323830343a343134633a3a2f33322d3438203d3e203238323034.roa (hash: r8cnAZ/4v8S40dmgDmHooqNyAvqo3wuz9559tBYcDq0=) 3: A99D272225729B303C95F28914878741C6AE29BE.crl (hash: NPrrO13+XomSEpNtv5P5FIdrUPGG83vLLQ1LWwdg5+4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e4:46:d8:a5:82:ad:79:20:c9:2b:0f:0d:03:14:89:d6:a3:b8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE Validity Not Before: Dec 6 10:44:00 2025 GMT Not After : Dec 7 11:43:00 2025 GMT Subject: CN=BB5AC2A92A3E7211D2187B43DC6353D210450EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:a1:9b:de:de:5c:05:5a:57:30:41:fc:42: 7e:84:4f:92:81:de:f2:fa:14:fb:50:e6:f1:75:97: f4:5e:69:ab:a5:bc:f4:bb:71:69:66:7a:eb:54:cf: 45:14:6e:dc:66:99:96:10:e1:84:9a:f7:03:14:c7: 45:fc:9e:d6:57:62:03:47:71:a1:d3:5f:7c:11:b8: da:c6:09:44:d4:26:c2:5b:18:04:c4:d4:15:09:a4: a9:43:4b:64:a7:0e:03:cd:1d:d5:7d:60:49:d1:9f: 6c:4b:10:61:15:d8:93:80:94:fe:1e:87:14:d9:0c: 52:12:cb:4d:a7:7d:b5:ac:64:3d:8c:cb:2e:cc:20: 41:54:f6:ff:4a:ba:4c:8e:5a:01:05:65:24:4a:cb: f5:76:22:4f:e9:7f:6a:13:72:81:eb:08:5e:56:74: 9e:95:06:f8:11:e5:6b:12:38:b8:68:9f:b2:e4:c0: e0:20:34:c5:a5:83:9e:2d:3e:3b:e3:47:ad:fa:67: 60:58:cf:c8:c0:32:15:19:d3:7b:c3:35:89:c4:52: 84:30:dd:9d:35:25:a5:87:ec:78:06:d4:da:e0:73: 5a:d3:1a:b8:f7:5b:10:7d:d6:67:17:fe:a5:c7:cb: c9:e9:dc:c5:47:a5:14:0c:28:be:93:04:51:1f:1c: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5A:C2:A9:2A:3E:72:11:D2:18:7B:43:DC:63:53:D2:10:45:0E:DA X509v3 Authority Key Identifier: keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b1:58:c1:fa:34:2f:6a:35:dc:0a:9a:db:a1:95:d6:98:4c: e9:66:94:8c:d0:8a:95:6c:88:0f:96:7c:ab:b6:bb:a3:34:44: 50:a1:6a:1f:9b:b6:8b:17:cd:61:5c:b6:72:4d:22:d0:3f:24: 0e:5a:c0:7d:09:0d:89:81:a5:fe:0d:b5:12:be:d5:6c:60:08: 4f:c0:a6:0b:a4:81:b3:54:71:7c:87:2e:d6:a1:31:04:42:c8: f1:6a:6b:5a:42:1d:16:51:d2:ea:be:a5:18:94:14:f4:54:de: 0f:9e:9d:42:a4:ba:0f:d3:43:ad:76:14:e3:ed:22:13:c9:68: 22:49:04:17:71:ad:42:1e:1d:9b:3b:59:d6:ad:56:d8:b9:e7: c0:bc:0a:15:5c:56:42:78:8f:bd:d0:c7:73:8a:e7:0d:46:ab: ab:3a:85:26:ba:07:f1:9e:52:2d:c1:02:37:c8:86:3a:53:10: 8a:f9:68:ed:91:a2:2f:46:4c:e3:ea:d4:f3:08:fc:76:9e:88: 84:ed:9e:76:c9:15:4f:ed:f5:62:69:4c:a5:17:9f:87:3a:bb: 3c:42:62:ec:1b:81:cb:fd:9b:d8:9f:2f:fe:31:ed:70:5c:dc: 2b:cd:08:15:cc:a7:fc:83:85:df:a0:17:0e:58:fe:fb:e1:be: fa:bb:1e:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQuRG2KWCrXkgySsPDQMUidajuEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFD NkFFMjlCRTAeFw0yNTEyMDYxMDQ0MDBaFw0yNTEyMDcxMTQzMDBaMDMxMTAvBgNV BAMTKEJCNUFDMkE5MkEzRTcyMTFEMjE4N0I0M0RDNjM1M0QyMTA0NTBFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZC6Gb3t5cBVpXMEH8Qn6ET5KB 3vL6FPtQ5vF1l/ReaaulvPS7cWlmeutUz0UUbtxmmZYQ4YSa9wMUx0X8ntZXYgNH caHTX3wRuNrGCUTUJsJbGATE1BUJpKlDS2SnDgPNHdV9YEnRn2xLEGEV2JOAlP4e hxTZDFISy02nfbWsZD2Myy7MIEFU9v9KukyOWgEFZSRKy/V2Ik/pf2oTcoHrCF5W dJ6VBvgR5WsSOLhon7LkwOAgNMWlg54tPjvjR636Z2BYz8jAMhUZ03vDNYnEUoQw 3Z01JaWH7HgG1Nrgc1rTGrj3WxB91mcX/qXHy8np3MVHpRQMKL6TBFEfHIITAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu1rCqSo+chHSGHtD3GNT0hBFDtowHwYDVR0j BBgwFoAUqZ0nIiVymzA8lfKJFIeHQcauKb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN RmgvMC9BOTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OUQyNzIyMjU3MjlCMzAz Qzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC9B OTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApbFYwfo0L2o13Aqa26GV1phM6WaUjNCKlWyID5Z8q7a7ozREUKFqH5u2ixfN YVy2ck0i0D8kDlrAfQkNiYGl/g21Er7VbGAIT8CmC6SBs1RxfIcu1qExBELI8Wpr WkIdFlHS6r6lGJQU9FTeD56dQqS6D9NDrXYU4+0iE8loIkkEF3GtQh4dmztZ1q1W 2LnnwLwKFVxWQniPvdDHc4rnDUarqzqFJroH8Z5SLcECN8iGOlMQivlo7ZGiL0ZM 4+rU8wj8dp6IhO2edskVT+31YmlMpRefhzq7PEJi7BuBy/2b2J8v/jHtcFzcK80I Fcyn/IOF36AXDlj+++G++rseTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:37 2025 by rpki-client