This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft File: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json) Hash identifier: mKMUWNI2w7Dqv5e5Mg9mIMzTrRjSdp2wq9n9v1FefPA= Subject key identifier: 32:68:AA:CE:ED:F2:E5:CD:B2:09:85:A5:9B:91:7D:7E:3F:DF:78:7E Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C Certificate issuer: /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Certificate serial: 29509ACBA0DFDB4E0FACB098057E8EC87791C0B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft Manifest number: 0331 Signing time: Fri 05 Dec 2025 21:18:22 +0000 Manifest this update: Fri 05 Dec 2025 21:13:22 +0000 Manifest next update: Sat 06 Dec 2025 23:47:22 +0000 Files and hashes: 1: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=) 2: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: PNgbeTkpNhtMHVlysUgmLosAhjIW1LGPImaz2rK4Bgs=) 3: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=) 4: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=) 5: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=) 6: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=) 7: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=) 8: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=) 9: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:50:9a:cb:a0:df:db:4e:0f:ac:b0:98:05:7e:8e:c8:77:91:c0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Validity Not Before: Dec 5 21:13:22 2025 GMT Not After : Dec 6 23:47:22 2025 GMT Subject: CN=3268AACEEDF2E5CDB20985A59B917D7E3FDF787E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:68:95:cf:91:f7:fc:e7:e2:fe:03:54:fc: 08:bd:3e:fb:22:f3:d8:b8:ef:0c:2f:0a:18:c9:08: 3f:ff:d0:83:64:85:41:84:95:47:b0:4f:65:84:86: ac:df:3e:50:e1:4d:c8:96:e5:1d:71:00:d1:dc:ed: 9b:bd:8d:43:88:d0:b4:21:d4:18:00:d4:1d:59:07: a8:f5:50:86:55:2c:18:37:30:68:b0:86:bc:28:62: 7f:f0:85:56:4f:87:17:7f:42:dc:21:b7:ea:f8:45: 19:ed:8f:ef:a6:fd:9f:0d:78:d1:3c:74:98:ee:62: 39:70:fe:0d:60:31:43:b6:2a:b2:f1:03:1b:8b:eb: 7d:2c:d2:82:1e:a4:d1:8e:a7:50:d1:f1:b7:f2:d0: cc:d4:41:90:5c:39:db:61:69:c4:5e:9b:9e:a1:0f: 6d:5f:1b:02:6e:69:37:f2:98:7d:e5:03:bc:9f:55: 8a:a3:a8:67:5c:2d:2e:c1:00:f5:c4:ae:d7:f4:7b: d8:95:dc:98:f4:9e:c9:57:82:40:4e:19:1e:a3:fd: d2:b9:5b:ef:7f:e1:45:85:60:02:9b:ac:b7:0c:7d: 5b:5c:7f:20:77:81:5d:3d:c9:1e:68:8c:6d:20:6b: 45:22:1f:2a:e9:9d:04:5f:73:76:07:7c:b5:28:76: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:68:AA:CE:ED:F2:E5:CD:B2:09:85:A5:9B:91:7D:7E:3F:DF:78:7E X509v3 Authority Key Identifier: keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d4:0d:d0:ee:00:d4:b8:09:17:4d:8b:6b:35:e6:dc:45:15: c7:b0:5f:5a:58:0b:21:0d:46:f1:58:16:e0:cc:36:5f:c1:95: 7c:c1:a5:14:d0:2c:05:cf:c1:a9:58:c5:51:6c:cb:55:f4:72: 29:e3:2b:81:b0:86:53:ce:81:99:82:62:c2:14:61:01:e6:85: 74:23:72:95:d7:14:3f:aa:13:6d:5b:77:4c:57:23:f1:cc:c8: c9:07:3d:08:29:25:b8:45:07:2c:92:12:c7:3a:6f:04:66:5b: 87:64:01:72:ee:04:8c:28:c6:05:ef:d5:97:6d:96:4d:f8:5c: 89:17:6d:e3:f3:91:2a:3e:08:74:8b:74:3c:ba:5c:ec:00:53: fe:e2:6e:a8:c7:e6:9b:54:2b:91:69:c1:e8:8d:4e:a7:3e:00: 1c:a5:80:e5:9f:66:6e:d7:75:0f:e2:1c:3b:1f:0c:5e:0c:d0: 2c:45:3c:3f:ab:c9:5f:7f:33:55:d7:2f:bc:4f:0a:35:0c:19: 03:48:17:6f:8e:a5:2c:a7:d7:3d:c9:47:88:9e:e3:a1:38:9b: 99:02:9e:7b:ff:1f:ff:ae:cc:fa:b2:03:ea:7d:94:95:f4:88: d1:46:34:fe:b4:3e:93:fd:4a:f1:90:5d:c3:26:7f:ac:a8:fc: df:78:03:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKVCay6Df204PrLCYBX6OyHeRwLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy QjUxQ0IxQzAeFw0yNTEyMDUyMTEzMjJaFw0yNTEyMDYyMzQ3MjJaMDMxMTAvBgNV BAMTKDMyNjhBQUNFRURGMkU1Q0RCMjA5ODVBNTlCOTE3RDdFM0ZERjc4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCty2iVz5H3/Ofi/gNU/Ai9Pvsi 89i47wwvChjJCD//0INkhUGElUewT2WEhqzfPlDhTciW5R1xANHc7Zu9jUOI0LQh 1BgA1B1ZB6j1UIZVLBg3MGiwhrwoYn/whVZPhxd/Qtwht+r4RRntj++m/Z8NeNE8 dJjuYjlw/g1gMUO2KrLxAxuL630s0oIepNGOp1DR8bfy0MzUQZBcOdthacRem56h D21fGwJuaTfymH3lA7yfVYqjqGdcLS7BAPXErtf0e9iV3Jj0nslXgkBOGR6j/dK5 W+9/4UWFYAKbrLcMfVtcfyB3gV09yR5ojG0ga0UiHyrpnQRfc3YHfLUodtMNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMmiqzu3y5c2yCYWlm5F9fj/feH4wHwYDVR0j BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0 S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0S1IvMS9C QjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADtQN0O4A1LgJF02LazXm3EUVx7BfWlgLIQ1G8VgW4Mw2X8GVfMGlFNAsBc/B qVjFUWzLVfRyKeMrgbCGU86BmYJiwhRhAeaFdCNyldcUP6oTbVt3TFcj8czIyQc9 CCkluEUHLJISxzpvBGZbh2QBcu4EjCjGBe/Vl22WTfhciRdt4/ORKj4IdIt0PLpc 7ABT/uJuqMfmm1QrkWnB6I1Opz4AHKWA5Z9mbtd1D+IcOx8MXgzQLEU8P6vJX38z VdcvvE8KNQwZA0gXb46lLKfXPclHiJ7joTibmQKee/8f/67M+rID6n2UlfSI0UY0 /rQ+k/1K8ZBdwyZ/rKj833gDUg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:23 2025 by rpki-client