This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
File: BA84972F94DED1627363CADBFA872D5EA75BBC41.mft (raw, json)
Hash identifier: rpJbVuAQbuUatd8sFmsK3Cs0uXAas2XxntoBdZOKf9A=
Subject key identifier: 72:6E:C8:7E:4E:B5:51:7C:FD:50:44:74:44:73:BC:96:F4:ED:BC:9C
Authority key identifier: BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
Certificate issuer: /CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
Certificate serial: 5C115EF38E692E671F86FB76736DBC6D6A33A073
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
Manifest number: 0333
Signing time: Sat 06 Dec 2025 08:20:00 +0000
Manifest this update: Sat 06 Dec 2025 08:15:00 +0000
Manifest next update: Sun 07 Dec 2025 09:24:00 +0000
Files and hashes: 1: 3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa (hash: J75ECnCGWT3/QlstX8KFpRGVD+pIEpadI6pQTJRH+bU=)
2: BA84972F94DED1627363CADBFA872D5EA75BBC41.crl (hash: MIdZxKpKYnR7QeMU+h+78EUxNAg9uMrSTnc+CZfUTDs=)
3: 323830343a343265303a3a2f33322d3430203d3e20323637353333.roa (hash: DwVRyItCXzF1NtVNIos708VR3IDVRGGvieLyPzQ1SNM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl
rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 09:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:11:5e:f3:8e:69:2e:67:1f:86:fb:76:73:6d:bc:6d:6a:33:a0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
Validity
Not Before: Dec 6 08:15:00 2025 GMT
Not After : Dec 7 09:24:00 2025 GMT
Subject: CN=726EC87E4EB5517CFD5044744473BC96F4EDBC9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:64:a8:a7:5f:95:41:97:f4:58:ec:b2:e8:
4a:4d:0e:db:85:f2:96:c1:94:52:1e:b2:8c:7a:cd:
ce:4d:63:22:82:02:9c:47:20:b8:d4:68:de:41:84:
82:17:88:f7:9a:ec:8b:60:db:f8:e2:d9:79:43:97:
d0:4b:e9:5c:10:03:ce:a1:69:79:6a:b3:1c:36:fb:
5d:8d:dc:01:78:fa:6a:2b:c0:c9:31:56:1d:8f:6a:
ce:c7:57:2e:43:95:05:82:b9:c1:ef:90:a5:53:5f:
3e:0d:7f:12:24:72:5d:93:fa:5f:17:d1:d7:66:31:
32:b4:93:a1:8c:37:b5:ce:e1:72:01:e2:38:fa:73:
f6:4c:c6:ae:c9:c7:c2:c5:11:30:87:2b:d2:73:16:
06:c9:30:13:0a:4b:9b:31:cf:1d:59:35:f0:1a:d0:
37:34:25:96:15:29:e5:b6:70:76:8c:ca:a9:f4:68:
8e:2a:36:1f:29:f1:90:8f:79:c6:45:17:bc:dc:8f:
1f:85:fc:b8:e7:c9:b5:15:1c:73:6f:a9:b4:1f:cb:
94:a8:01:fd:83:8b:5b:eb:e9:97:c5:eb:0f:5f:69:
45:47:77:8e:1f:00:e4:69:14:59:43:15:92:c1:0f:
88:6b:6a:68:84:2f:e2:9e:7e:fd:86:5e:79:a0:58:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:C8:7E:4E:B5:51:7C:FD:50:44:74:44:73:BC:96:F4:ED:BC:9C
X509v3 Authority Key Identifier:
keyid:BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a2:bb:51:b7:c3:06:bb:65:80:44:e0:81:3e:c1:4f:21:aa:
8f:73:d1:8b:f7:1c:22:68:db:b9:d7:ae:5c:10:33:42:02:83:
8f:7a:0b:b0:98:08:02:f8:fd:af:de:95:47:93:c3:65:db:14:
00:ab:7f:ab:d5:44:63:0c:82:28:32:06:46:5e:b3:79:61:ef:
31:65:5e:99:4d:84:d3:6b:df:59:1a:ed:ff:21:03:d8:96:e1:
75:6b:a6:ba:c8:a9:27:c6:d1:41:77:04:af:20:ab:d0:e1:c2:
ad:37:f4:86:9a:98:ce:4e:c1:d7:9a:fd:30:80:9b:42:c7:80:
69:ed:59:5d:1d:ca:ab:1c:61:1f:bf:df:49:26:aa:23:93:9f:
c1:55:49:50:a8:ed:a6:27:d1:ec:f1:4f:c2:f6:0e:f5:c2:b2:
f1:fe:b4:44:1b:62:7d:13:1b:17:a6:3c:46:3d:a9:5d:f9:f7:
65:2e:a8:2e:60:a2:7f:d8:52:63:c4:ec:4e:73:67:bc:81:f6:
08:bc:2e:2b:48:31:0b:12:e8:08:ee:25:1b:e4:33:83:fd:83:
aa:82:e9:ac:a9:65:18:ee:ac:2f:1d:fc:9a:9a:d1:4c:5f:db:
93:2c:42:04:62:16:b1:a0:2f:51:f5:3b:e3:9d:b6:d8:a1:4e:
35:64:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:24 2025 by rpki-client