This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft File: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json) Hash identifier: kCFSifiY5whu4uM7plV/NWU40vrbnDT97u7M8W9JwF4= Subject key identifier: 51:E7:80:E5:02:D7:3B:79:13:F7:5F:0C:F3:C5:FA:7C:9F:C1:72:96 Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Certificate serial: 7858E81CA5D92C45EED0793088F4270ECBC82208 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft Manifest number: 02BE Signing time: Sat 06 Dec 2025 03:32:15 +0000 Manifest this update: Sat 06 Dec 2025 03:27:15 +0000 Manifest next update: Sun 07 Dec 2025 04:47:15 +0000 Files and hashes: 1: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: AZx/UVE+HIPQZaAtVHDtlxJLeLpRspcdswxpKVozuRw=) 2: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: If21jOcvMUFkh16cxpcGthCoNkKvfyC5oUDpgsyZRvQ=) 3: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: Knl+wwRgdmDvowjQ9JACRJfXXqw4YrTkY1L1JgQ1SZk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:58:e8:1c:a5:d9:2c:45:ee:d0:79:30:88:f4:27:0e:cb:c8:22:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Validity Not Before: Dec 6 03:27:15 2025 GMT Not After : Dec 7 04:47:15 2025 GMT Subject: CN=51E780E502D73B7913F75F0CF3C5FA7C9FC17296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:60:9f:d8:a6:01:b7:56:c2:d3:95:aa:2c: ce:6f:33:6f:78:df:a9:39:f4:88:8b:96:c7:77:60: 17:49:84:90:f6:0e:89:cc:8b:d1:53:23:95:78:58: 79:e9:17:59:6e:d6:f4:0e:a6:a7:0f:dd:43:7a:06: 21:11:4c:9a:27:95:12:b7:c3:c5:d9:d1:e5:6e:15: d0:a2:47:f4:16:ac:f2:1f:b6:4c:91:93:6e:d8:1f: bd:e7:a2:dc:52:40:59:23:7e:b2:a1:f3:93:21:0b: fc:a3:65:d6:a1:d7:c2:22:f5:ca:a4:94:d7:a6:f0: e3:90:10:e1:4b:5a:c2:01:e6:ad:e3:c5:aa:60:1e: 8d:2a:73:5c:c4:37:4b:53:b2:9a:1c:c7:af:d5:91: a4:31:59:d4:cd:e6:93:03:15:5e:06:5c:5d:83:cc: 9a:0a:51:5b:13:20:40:fc:cb:49:fe:08:36:97:da: f7:d8:fa:2e:bc:c0:a8:64:52:df:c5:7e:90:be:9a: c3:40:b9:3d:a5:a2:ca:61:dc:e1:01:30:54:fb:7c: 4c:f1:87:d6:10:64:a1:e6:bb:92:f9:9c:9d:f9:0c: b2:36:e3:52:13:60:a9:35:a3:ce:7f:7a:23:07:a8: 0b:15:e9:4b:11:60:84:f2:12:6d:e1:d8:34:5a:50: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E7:80:E5:02:D7:3B:79:13:F7:5F:0C:F3:C5:FA:7C:9F:C1:72:96 X509v3 Authority Key Identifier: keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:29:05:b5:ca:0e:2f:ec:14:3b:eb:e4:b3:50:11:b1:a8:97: 01:22:68:61:58:d3:0b:31:1a:e9:69:85:af:78:56:4f:87:96: 57:e3:66:c9:e5:88:b1:64:2c:ae:32:9e:07:73:85:0a:75:a2: 47:ab:9b:df:6d:b1:2e:3b:72:53:59:02:ff:88:5d:52:13:ea: 69:c1:81:a6:d5:67:6f:33:cc:73:07:07:c4:d4:10:6b:c5:80: d0:e4:18:d2:4e:85:75:ee:ff:15:b2:21:c8:3d:37:61:9d:1f: d3:b1:16:e0:51:ef:91:dd:c3:22:07:fa:32:ce:e3:d9:66:fb: 77:73:cf:4f:72:4e:8c:d7:45:e6:5f:d0:20:ca:ca:58:19:0b: f6:ad:14:df:24:d6:3f:9d:64:fa:9c:38:7e:98:dd:25:d8:21: 65:04:84:36:f3:1c:dd:72:1e:66:89:b9:ee:d6:f3:86:d4:a3: e6:85:87:3e:3e:07:49:0e:0b:8c:61:6d:35:b2:27:80:97:aa: bc:3c:f3:14:15:16:6f:ae:e5:1e:b7:f6:91:56:1e:a6:33:bc: a9:69:0a:92:a9:fa:6a:72:30:2b:8c:ec:7b:25:7d:63:d3:47: 85:a5:d5:83:53:7e:de:24:5b:8f:ce:07:38:7d:6d:59:8a:4b: 0b:e3:0f:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeFjoHKXZLEXu0HkwiPQnDsvIIggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1QjlEMzY0QkQ3NkE4MUREMzRBQTVENUM5NjVCQjFG QzI3QTUyMDAeFw0yNTEyMDYwMzI3MTVaFw0yNTEyMDcwNDQ3MTVaMDMxMTAvBgNV BAMTKDUxRTc4MEU1MDJENzNCNzkxM0Y3NUYwQ0YzQzVGQTdDOUZDMTcyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC032Cf2KYBt1bC05WqLM5vM294 36k59IiLlsd3YBdJhJD2DonMi9FTI5V4WHnpF1lu1vQOpqcP3UN6BiERTJonlRK3 w8XZ0eVuFdCiR/QWrPIftkyRk27YH73notxSQFkjfrKh85MhC/yjZdah18Ii9cqk lNem8OOQEOFLWsIB5q3jxapgHo0qc1zEN0tTspocx6/VkaQxWdTN5pMDFV4GXF2D zJoKUVsTIED8y0n+CDaX2vfY+i68wKhkUt/FfpC+msNAuT2losph3OEBMFT7fEzx h9YQZKHmu5L5nJ35DLI241ITYKk1o85/eiMHqAsV6UsRYITyEm3h2DRaULkTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUeeA5QLXO3kT918M88X6fJ/BcpYwHwYDVR0j BBgwFoAUKVudNkvXaoHdNKpdXJZbsfwnpSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1 OVEvMS8yOTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NUI5RDM2NEJENzZBODFE RDM0QUE1RDVDOTY1QkIxRkMyN0E1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1OVEvMS8y OTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwSkFtcoOL+wUO+vks1ARsaiXASJoYVjTCzEa6WmFr3hWT4eWV+NmyeWIsWQs rjKeB3OFCnWiR6ub322xLjtyU1kC/4hdUhPqacGBptVnbzPMcwcHxNQQa8WA0OQY 0k6Fde7/FbIhyD03YZ0f07EW4FHvkd3DIgf6Ms7j2Wb7d3PPT3JOjNdF5l/QIMrK WBkL9q0U3yTWP51k+pw4fpjdJdghZQSENvMc3XIeZom57tbzhtSj5oWHPj4HSQ4L jGFtNbIngJeqvDzzFBUWb67lHrf2kVYepjO8qWkKkqn6anIwK4zseyV9Y9NHhaXV g1N+3iRbj84HOH1tWYpLC+MPeA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:50 2025 by rpki-client