This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft File: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft (raw, json) Hash identifier: L3+USPjUa/SqjVvt6LVyaHOMZx6vxT6syEYJh7ne7ac= Subject key identifier: 59:EA:AD:51:9D:9F:7D:02:DD:D0:08:E8:80:3B:BD:CF:94:6A:E7:EF Authority key identifier: 1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 Certificate issuer: /CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5 Certificate serial: 4F3B4FA680630C01E8AA66597650586301D1765D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft Manifest number: 2C Signing time: Sat 06 Dec 2025 11:18:40 +0000 Manifest this update: Sat 06 Dec 2025 11:13:40 +0000 Manifest next update: Sun 07 Dec 2025 13:36:40 +0000 Files and hashes: 1: 323830343a363738303a3a2f33322d3430203d3e20323639363332.roa (hash: SX2dU0cds+iLnyJtcs06QjqpHxXnJw1YEktYayh/TlE=) 2: 34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (hash: aQLIYYVoiILAmoQD4DtX+QNXyDT1k5rL+bEaFnakAss=) 3: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl (hash: Ym9fYvBTdIvuaDLE3CJltceFcM7DinxHyqDSu9qC30k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 11:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3b:4f:a6:80:63:0c:01:e8:aa:66:59:76:50:58:63:01:d1:76:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5 Validity Not Before: Dec 6 11:13:40 2025 GMT Not After : Dec 7 13:36:40 2025 GMT Subject: CN=59EAAD519D9F7D02DDD008E8803BBDCF946AE7EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:cf:90:7b:0f:ea:ac:00:bc:cf:41:15:c2: de:d1:de:23:99:6d:ab:32:d5:80:49:fe:81:e5:8f: a8:50:21:b0:e3:fd:23:5d:55:3d:33:71:f7:65:54: ed:3a:2d:ae:e5:f9:a0:77:60:f8:f0:74:97:76:40: 1f:b5:6b:f8:73:d9:84:df:3d:33:ed:84:98:2a:20: 0b:39:da:c1:99:61:1d:ea:30:a7:4c:48:aa:ca:53: 49:43:1d:b8:4c:be:c4:ec:1b:d5:07:59:5d:88:20: 40:9f:6d:22:16:1a:90:88:1e:9d:ac:8d:7a:b8:40: c8:f5:8b:5a:60:3c:bc:b4:44:9d:f2:e4:a8:6d:7e: b6:a2:86:af:dc:aa:5b:02:60:ca:66:ae:5c:63:56: c8:8b:ee:82:50:cd:99:dd:c7:1f:65:ed:d7:ac:6a: 02:8e:a1:cb:d2:dc:7d:e7:d0:5c:d0:58:e5:d9:f2: 8f:40:af:f5:c0:cc:70:94:10:98:74:6a:9a:a9:3e: 16:85:82:8e:8e:b9:21:ba:d1:e5:83:7c:f2:d0:c9: 51:f6:d5:80:79:55:bb:e9:7b:e0:9c:79:c8:d7:3a: 9d:8a:76:d2:e8:5a:92:b1:a4:88:e7:bd:3b:ca:a9: ae:d9:6b:33:b3:e3:ce:25:a0:80:87:89:6c:22:d8: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EA:AD:51:9D:9F:7D:02:DD:D0:08:E8:80:3B:BD:CF:94:6A:E7:EF X509v3 Authority Key Identifier: keyid:1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:a5:38:bf:63:e3:cb:47:51:9f:9d:83:89:de:10:82:9d:dd: 4b:ba:d3:37:77:48:d1:51:40:5a:ca:f1:94:32:dc:8f:f0:0c: 08:2d:57:00:95:5e:3e:f4:ca:0d:45:89:56:f6:11:40:bf:48: 65:8a:43:44:1a:c1:01:a0:16:1a:27:2b:52:9b:21:a0:fd:79: b1:e2:cb:5e:34:a3:81:e9:f9:a3:41:4a:58:2a:5c:a4:f7:b0: e5:b7:5b:95:64:12:83:b4:d3:2a:11:8c:79:ea:74:69:45:09: 0a:d2:d0:20:d7:04:88:51:82:13:5e:5b:f7:32:6a:c8:4a:e1: ea:11:64:6b:0d:43:65:cb:01:88:42:ff:de:9b:85:60:1e:23: da:da:c2:a2:7d:bb:7e:01:df:3f:4b:be:b3:31:79:ce:87:3c: 1d:3c:a5:80:ee:e8:de:43:98:2f:f3:21:bc:81:ab:20:1c:33: 80:19:3e:30:de:b7:59:f1:8c:9c:1c:b0:17:56:61:9c:c7:4b: 57:39:65:0b:f3:8a:fd:09:73:e8:80:42:db:cc:53:67:16:4c: ab:65:63:5b:42:bc:91:34:a0:a3:d6:70:f2:23:1e:bb:dd:e6: 28:09:2d:a0:bf:75:0d:a9:8b:a3:af:48:a7:45:45:87:f3:d3: b6:2f:d5:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTztPpoBjDAHoqmZZdlBYYwHRdl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGQTcwQzNCRjk5QUZDQThFMUM5Njk5RDVGNjQ4REYy Q0I0NDFBNTAeFw0yNTEyMDYxMTEzNDBaFw0yNTEyMDcxMzM2NDBaMDMxMTAvBgNV BAMTKDU5RUFBRDUxOUQ5RjdEMDJEREQwMDhFODgwM0JCRENGOTQ2QUU3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNN8+Qew/qrAC8z0EVwt7R3iOZ basy1YBJ/oHlj6hQIbDj/SNdVT0zcfdlVO06La7l+aB3YPjwdJd2QB+1a/hz2YTf PTPthJgqIAs52sGZYR3qMKdMSKrKU0lDHbhMvsTsG9UHWV2IIECfbSIWGpCIHp2s jXq4QMj1i1pgPLy0RJ3y5Khtfraihq/cqlsCYMpmrlxjVsiL7oJQzZndxx9l7des agKOocvS3H3n0FzQWOXZ8o9Ar/XAzHCUEJh0apqpPhaFgo6OuSG60eWDfPLQyVH2 1YB5Vbvpe+CcecjXOp2KdtLoWpKxpIjnvTvKqa7ZazOz484loICHiWwi2A2jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWeqtUZ2ffQLd0AjogDu9z5Rq5+8wHwYDVR0j BBgwFoAUG/pww7+Zr8qOHJaZ1fZI3yy0QaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1 TDgvMC8xQkZBNzBDM0JGOTlBRkNBOEUxQzk2OTlENUY2NDhERjJDQjQ0MUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRkE3MEMzQkY5OUFGQ0E4 RTFDOTY5OUQ1RjY0OERGMkNCNDQxQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1TDgvMC8x QkZBNzBDM0JGOTlBRkNBOEUxQzk2OTlENUY2NDhERjJDQjQ0MUE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtKU4v2Pjy0dRn52Did4Qgp3dS7rTN3dI0VFAWsrxlDLcj/AMCC1XAJVePvTK DUWJVvYRQL9IZYpDRBrBAaAWGicrUpshoP15seLLXjSjgen5o0FKWCpcpPew5bdb lWQSg7TTKhGMeep0aUUJCtLQINcEiFGCE15b9zJqyErh6hFkaw1DZcsBiEL/3puF YB4j2trCon27fgHfP0u+szF5zoc8HTylgO7o3kOYL/MhvIGrIBwzgBk+MN63WfGM nBywF1ZhnMdLVzllC/OK/Qlz6IBC28xTZxZMq2VjW0K8kTSgo9Zw8iMeu93mKAkt oL91DamLo69Ip0VFh/PTti/VAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:56 2025 by rpki-client