This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: 3klL/EqWD5fKh+nhgMW0qvveikPeOXM6xfPv7prwXto= Subject key identifier: D0:1F:DE:57:3D:9F:52:A9:33:D7:95:0D:7D:8C:86:EB:38:72:6A:57 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 7C7E66D59B664E147A15B7B053F0A4E354401710 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0206 Signing time: Sat 06 Dec 2025 13:59:51 +0000 Manifest this update: Sat 06 Dec 2025 13:54:51 +0000 Manifest next update: Sun 07 Dec 2025 16:52:51 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: 5+QNhPgKrQscZtwYcUilvGqWml8Za+J5hF7nLSYZ17Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 16:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7e:66:d5:9b:66:4e:14:7a:15:b7:b0:53:f0:a4:e3:54:40:17:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Dec 6 13:54:51 2025 GMT Not After : Dec 7 16:52:51 2025 GMT Subject: CN=D01FDE573D9F52A933D7950D7D8C86EB38726A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:c4:9b:9e:92:99:74:17:7b:94:27:be:9d: cc:d8:10:78:20:9e:98:c0:20:d2:46:cd:d4:b5:5b: ce:dc:ab:de:38:32:c9:2f:a7:74:3c:45:82:e9:60: c1:ca:6b:6e:fa:67:1c:f6:7a:5c:9a:b3:f8:0d:e0: 9d:85:25:1c:f9:6b:3e:c8:fb:c9:88:ec:a3:a4:f8: a4:66:ab:64:8c:81:75:4c:34:b4:a6:84:87:31:a8: 20:1b:91:53:03:7f:9f:13:fe:b4:0b:24:61:23:e7: 67:32:d5:e5:93:68:c1:7e:b7:ae:e1:83:35:f2:5b: 3a:7c:2f:ff:be:81:00:ee:46:6f:e0:ed:d9:b9:f9: e6:3d:7a:ad:1f:00:e5:e9:c7:2e:b4:9d:c2:6f:e2: ba:6b:22:50:33:e2:1c:3b:5c:c7:2a:ff:a2:c0:fd: 4d:af:71:67:07:06:69:95:a7:99:b7:7c:6c:af:33: f6:28:e0:82:1e:02:4a:28:b2:0b:1b:18:58:41:c2: 41:33:aa:a0:48:40:23:09:07:15:77:c2:49:15:dc: ed:f4:6e:c2:ca:fb:72:fc:6c:63:93:39:75:68:39: 97:be:7f:4e:27:5b:13:46:fb:6d:9b:4c:5a:6f:7a: 08:74:9f:8a:2c:75:77:5a:7e:5e:9a:ae:c5:1d:2b: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1F:DE:57:3D:9F:52:A9:33:D7:95:0D:7D:8C:86:EB:38:72:6A:57 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ae:84:ad:1b:c5:ac:5d:6a:52:47:bb:65:12:e2:26:aa:e6: 1f:51:c3:07:81:d2:e9:91:be:ed:9d:bb:ab:39:3b:2f:77:90: a1:2a:de:0b:64:0a:45:6e:93:72:70:19:87:9d:a9:85:73:dc: e6:6c:2e:5f:39:e0:31:c4:e9:17:43:bf:aa:3c:ec:4a:0a:fe: 85:1f:ba:43:80:a7:39:8c:42:c2:63:bd:d2:35:f8:ca:36:37: 86:2b:03:5a:f2:89:82:d4:b2:43:cd:c9:d1:bd:5c:e0:7b:cc: 0e:31:c6:61:69:f6:14:e8:bc:21:1b:d5:22:4e:0e:da:0e:5b: a3:4b:a5:8c:e6:13:0b:85:4f:87:cd:8a:08:1d:28:98:05:88: 10:30:e9:fc:3c:6f:a4:42:24:1a:e3:e2:c2:64:f8:ab:d2:05: 41:5c:d9:34:d6:8c:b1:ec:44:8b:c1:91:c6:b8:45:76:d5:28: c9:70:9e:78:a5:70:70:03:51:78:3e:96:a9:f9:01:02:5a:c8: 58:2e:0f:b2:16:32:02:f5:ed:9c:80:11:81:60:67:16:54:22: 88:e1:85:6b:16:a4:4e:42:1f:28:44:bd:13:c8:2b:2f:4d:2e: 16:8c:e4:3b:fe:b7:50:0c:0d:6a:be:5c:5c:d7:0a:a0:21:41: 67:08:29:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfH5m1ZtmThR6FbewU/Ck41RAFxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTEyMDYxMzU0NTFaFw0yNTEyMDcxNjUyNTFaMDMxMTAvBgNV BAMTKEQwMUZERTU3M0Q5RjUyQTkzM0Q3OTUwRDdEOEM4NkVCMzg3MjZBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHMSbnpKZdBd7lCe+nczYEHgg npjAINJGzdS1W87cq944Mskvp3Q8RYLpYMHKa276Zxz2elyas/gN4J2FJRz5az7I +8mI7KOk+KRmq2SMgXVMNLSmhIcxqCAbkVMDf58T/rQLJGEj52cy1eWTaMF+t67h gzXyWzp8L/++gQDuRm/g7dm5+eY9eq0fAOXpxy60ncJv4rprIlAz4hw7XMcq/6LA /U2vcWcHBmmVp5m3fGyvM/Yo4IIeAkoosgsbGFhBwkEzqqBIQCMJBxV3wkkV3O30 bsLK+3L8bGOTOXVoOZe+f04nWxNG+22bTFpvegh0n4osdXdafl6arsUdK35BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0B/eVz2fUqkz15UNfYyG6zhyalcwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAda6ErRvFrF1qUke7ZRLiJqrmH1HDB4HS6ZG+7Z27qzk7L3eQoSreC2QKRW6T cnAZh52phXPc5mwuXzngMcTpF0O/qjzsSgr+hR+6Q4CnOYxCwmO90jX4yjY3hisD WvKJgtSyQ83J0b1c4HvMDjHGYWn2FOi8IRvVIk4O2g5bo0uljOYTC4VPh82KCB0o mAWIEDDp/DxvpEIkGuPiwmT4q9IFQVzZNNaMsexEi8GRxrhFdtUoyXCeeKVwcANR eD6WqfkBAlrIWC4PshYyAvXtnIARgWBnFlQiiOGFaxakTkIfKES9E8grL00uFozk O/63UAwNar5cXNcKoCFBZwgp0A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:11:58 2025 by rpki-client