This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.mft File: 277291CE6BB70D225E05FDD81FAE9528A8DC83AC.mft (raw, json) Hash identifier: oaKqV8ltyo6Bh/irQhyudtLtQx0B1K3QncHMtDH0IXU= Subject key identifier: 47:20:D4:70:72:2C:A6:6A:65:81:C5:B7:69:A8:D1:1B:9D:B4:23:78 Authority key identifier: 27:72:91:CE:6B:B7:0D:22:5E:05:FD:D8:1F:AE:95:28:A8:DC:83:AC Certificate issuer: /CN=277291CE6BB70D225E05FDD81FAE9528A8DC83AC Certificate serial: 12701BD5FB401708B9F62A3FC28D6D95C1172883 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.mft Manifest number: 34 Signing time: Fri 05 Dec 2025 16:00:24 +0000 Manifest this update: Fri 05 Dec 2025 15:55:24 +0000 Manifest next update: Sat 06 Dec 2025 19:53:24 +0000 Files and hashes: 1: 277291CE6BB70D225E05FDD81FAE9528A8DC83AC.crl (hash: +RIqs16QtkGoOzCl4WP3klpY//NPbPX7qS5dkpRUxy8=) 2: 323830343a383162303a3a2f33322d3438203d3e20323732343730.roa (hash: 7xbozKp3nYZyTH8L6+FcwL8MsrtnGvxbNcdF1QjVJWU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.crl rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 19:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:70:1b:d5:fb:40:17:08:b9:f6:2a:3f:c2:8d:6d:95:c1:17:28:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277291CE6BB70D225E05FDD81FAE9528A8DC83AC Validity Not Before: Dec 5 15:55:24 2025 GMT Not After : Dec 6 19:53:24 2025 GMT Subject: CN=4720D470722CA66A6581C5B769A8D11B9DB42378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:df:df:47:d2:ad:75:5c:66:12:a3:cd:e3: 4a:f6:db:64:18:cc:08:05:0a:86:49:b3:c2:3c:ca: e8:0c:ea:f9:9d:d8:a4:11:48:d4:38:2d:1b:e7:6e: dd:b9:d0:7c:40:0c:2d:5d:09:4e:02:fa:88:2f:d0: 0e:4a:46:0c:c7:6a:0a:c2:5b:74:bb:59:76:38:76: a4:56:08:3b:e2:71:25:c4:c4:b1:32:40:cb:60:ee: bb:3d:91:f7:57:cf:4f:a4:c5:9d:47:84:c9:ef:12: 3a:13:13:d4:ba:98:b6:42:14:e4:96:6d:ae:d5:b3: c5:59:35:a1:be:7e:a7:4a:de:2b:47:f4:e1:73:9b: 20:d3:05:c1:bd:99:be:ef:76:63:05:db:05:aa:05: ac:a8:0a:20:46:1c:5a:a3:0c:ca:0d:71:1f:63:74: 82:72:51:ac:81:a2:1b:df:21:bc:58:42:b9:b3:9f: 05:5f:07:7e:72:89:c0:dd:d9:03:a3:c8:14:fc:cf: 35:ab:1a:9d:c8:c6:e7:a9:85:8f:d7:d4:90:cf:74: e3:fb:fc:70:ec:1f:07:eb:4d:f8:8d:95:77:5d:89: aa:08:cb:90:7b:bc:16:18:f5:7d:4b:b0:e4:08:c4: a5:26:9e:65:32:bb:05:96:f0:a4:a3:43:f3:1f:32: 19:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:20:D4:70:72:2C:A6:6A:65:81:C5:B7:69:A8:D1:1B:9D:B4:23:78 X509v3 Authority Key Identifier: keyid:27:72:91:CE:6B:B7:0D:22:5E:05:FD:D8:1F:AE:95:28:A8:DC:83:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/277291CE6BB70D225E05FDD81FAE9528A8DC83AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a0:4b:4b:09:fd:1b:d8:44:37:99:ca:aa:9d:16:6d:63:7c: 26:2a:d9:ba:96:33:28:07:1c:5d:30:09:c4:da:85:6e:e5:70: ee:fa:e6:de:36:c3:58:18:3b:8b:73:92:39:19:64:ae:79:bc: 42:83:d1:7f:42:2d:a4:f5:9d:b2:9a:f8:1c:99:db:06:1a:8b: 82:e5:29:65:60:de:24:10:a0:c4:fe:e8:2c:b7:9b:96:2a:31: 6c:1f:9d:6d:fa:8a:64:b7:d7:98:0e:06:34:f9:e9:fa:5f:11: cb:ad:a6:83:00:05:18:62:2a:fa:25:cd:56:12:21:d4:04:1e: 3e:ec:8d:d5:85:52:56:b7:32:4b:8b:5b:25:63:24:c8:24:4d: ff:06:f5:26:26:77:39:f4:9f:1e:b8:ef:b6:d1:d8:bf:3e:09: c7:ee:10:be:e1:1c:ba:e4:a0:d7:04:8e:48:a9:5e:f1:3f:48: f6:d0:4d:70:dc:2f:6d:b4:b5:ad:06:5f:f7:36:e1:16:fb:84: a8:47:a6:54:cb:1d:9c:66:9a:53:35:22:c9:bd:32:40:e2:bd: a4:61:9c:45:89:e7:e2:ae:6e:c4:11:bd:bd:1d:b6:6b:8e:25: 25:cb:21:23:24:50:ee:ba:f9:bb:cd:69:ea:7a:54:36:f4:63: a0:52:0d:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEnAb1ftAFwi59io/wo1tlcEXKIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3MjkxQ0U2QkI3MEQyMjVFMDVGREQ4MUZBRTk1MjhB OERDODNBQzAeFw0yNTEyMDUxNTU1MjRaFw0yNTEyMDYxOTUzMjRaMDMxMTAvBgNV BAMTKDQ3MjBENDcwNzIyQ0E2NkE2NTgxQzVCNzY5QThEMTFCOURCNDIzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ht/fR9KtdVxmEqPN40r222QY zAgFCoZJs8I8yugM6vmd2KQRSNQ4LRvnbt250HxADC1dCU4C+ogv0A5KRgzHagrC W3S7WXY4dqRWCDvicSXExLEyQMtg7rs9kfdXz0+kxZ1HhMnvEjoTE9S6mLZCFOSW ba7Vs8VZNaG+fqdK3itH9OFzmyDTBcG9mb7vdmMF2wWqBayoCiBGHFqjDMoNcR9j dIJyUayBohvfIbxYQrmznwVfB35yicDd2QOjyBT8zzWrGp3IxuephY/X1JDPdOP7 /HDsHwfrTfiNlXddiaoIy5B7vBYY9X1LsOQIxKUmnmUyuwWW8KSjQ/MfMhlDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURyDUcHIspmplgcW3aajRG520I3gwHwYDVR0j BBgwFoAUJ3KRzmu3DSJeBf3YH66VKKjcg6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWFGNUxBSHM4bTFFV3Bza2ZmcEh3bmlDWTZkY1BIOUtLUzZjWUtjblRw SEIvMC8yNzcyOTFDRTZCQjcwRDIyNUUwNUZERDgxRkFFOTUyOEE4REM4M0FDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NzI5MUNFNkJCNzBEMjI1 RTA1RkREODFGQUU5NTI4QThEQzgzQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWFGNUxBSHM4bTFFV3Bza2ZmcEh3bmlDWTZkY1BIOUtLUzZjWUtjblRwSEIvMC8y NzcyOTFDRTZCQjcwRDIyNUUwNUZERDgxRkFFOTUyOEE4REM4M0FDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQqBLSwn9G9hEN5nKqp0WbWN8JirZupYzKAccXTAJxNqFbuVw7vrm3jbDWBg7 i3OSORlkrnm8QoPRf0ItpPWdspr4HJnbBhqLguUpZWDeJBCgxP7oLLeblioxbB+d bfqKZLfXmA4GNPnp+l8Ry62mgwAFGGIq+iXNVhIh1AQePuyN1YVSVrcyS4tbJWMk yCRN/wb1JiZ3OfSfHrjvttHYvz4Jx+4QvuEcuuSg1wSOSKle8T9I9tBNcNwvbbS1 rQZf9zbhFvuEqEemVMsdnGaaUzUiyb0yQOK9pGGcRYnn4q5uxBG9vR22a44lJcsh IyRQ7rr5u81p6npUNvRjoFINFg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:07 2025 by rpki-client