This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft File: BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft (raw, json) Hash identifier: 8Wr835lrIHcFqrraH78wXKzQ9YN6CoygR4M0XHEmZd0= Subject key identifier: C3:43:E7:30:94:19:25:98:9B:6B:83:49:F6:57:F5:BD:34:C7:19:24 Authority key identifier: BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA Certificate issuer: /CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA Certificate serial: 619A27C3FF9EE29FBDAD59680F0211345E8E882F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft Manifest number: 2F Signing time: Fri 05 Dec 2025 17:37:49 +0000 Manifest this update: Fri 05 Dec 2025 17:32:49 +0000 Manifest next update: Sat 06 Dec 2025 21:24:49 +0000 Files and hashes: 1: 323830343a383736633a3a2f33322d313238203d3e20323732373038.roa (hash: YWHryjSdFBEBKqKmB1KLsmWcfwbalA7VAy9fcp5yQ3o=) 2: BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl (hash: 4MeebsDYX0DP4t5svdei6IWX3v2bqJjKzjH85AjX2dM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9a:27:c3:ff:9e:e2:9f:bd:ad:59:68:0f:02:11:34:5e:8e:88:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA Validity Not Before: Dec 5 17:32:49 2025 GMT Not After : Dec 6 21:24:49 2025 GMT Subject: CN=C343E730941925989B6B8349F657F5BD34C71924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:55:74:c8:8a:70:2f:27:05:d9:ae:a2:85: 58:1e:67:a3:b1:f0:aa:1d:70:6f:5d:53:9d:5c:1b: c7:a2:ce:ec:b7:01:58:8d:e8:7a:da:6c:43:cf:f3: 5f:03:4d:e1:88:2d:e7:68:a9:ba:ee:70:67:a6:44: 63:b5:d2:78:89:0d:e2:e6:79:d9:c4:46:fa:2c:0d: 5c:5f:5b:cf:d2:f8:ee:d6:fe:fe:db:be:1e:5a:43: 45:b5:59:a7:ed:69:e9:cc:76:53:a0:4a:ad:44:ef: 41:b8:c5:e5:d6:52:d2:2c:09:c5:f2:49:b7:d5:86: 9c:22:a5:c7:00:48:49:d1:10:19:19:f2:ff:f5:6d: 74:f1:92:b5:83:39:5c:b2:8e:98:f7:77:39:3c:79: b1:73:37:81:a5:24:10:61:e8:24:49:6c:d4:e9:34: bc:57:03:88:e8:36:57:65:89:17:48:d4:b7:a4:c2: 52:71:36:4f:0c:7b:e7:94:39:df:00:8e:75:10:68: f6:80:bf:cb:1f:9b:84:0e:1c:33:67:7c:af:79:87: e9:54:d3:ee:d4:b3:25:84:f7:d8:c2:b2:5e:2f:f8: 75:21:9c:ae:4f:c8:cc:12:f6:23:5d:46:e4:04:c7: ba:60:4a:79:b9:b6:9b:95:cb:77:0b:7c:21:5d:c6: fe:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:43:E7:30:94:19:25:98:9B:6B:83:49:F6:57:F5:BD:34:C7:19:24 X509v3 Authority Key Identifier: keyid:BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:8a:d2:94:72:7a:b9:f9:87:bb:de:62:a0:57:2f:a8:2e: a5:a2:94:e9:29:27:6b:e9:48:1e:af:fc:2c:8a:32:f6:22:33: 1a:73:5a:2a:2f:01:5e:53:f7:e8:63:0a:e8:47:1b:ab:5a:24: aa:a0:22:d6:81:da:c6:3e:89:d4:68:6d:9a:5c:cb:2b:18:16: 3c:50:23:ed:49:ab:eb:07:26:95:5a:ba:79:66:0b:cf:1c:13: 95:65:c1:e9:74:71:24:08:c4:89:f7:13:ff:7a:01:db:b1:38: a8:e0:f1:fa:21:37:90:76:f5:d0:06:0c:f6:79:62:2e:af:2d: 07:16:e9:51:0d:07:62:10:2e:2e:31:bd:9b:80:4c:e8:fd:1c: 84:07:e3:2a:07:6b:7e:e0:af:cb:94:c8:b1:29:3d:67:2c:9b: b4:d0:cc:ac:de:4e:c2:8d:da:4b:69:d8:92:0e:2a:a8:ec:74: e3:bf:8c:40:f3:59:79:92:8c:d3:1f:5d:50:62:8a:af:c8:fc: 95:5f:10:58:d1:82:35:62:a6:04:d5:e1:76:c2:28:b5:9c:a0: 6e:18:87:0d:47:65:dc:f6:4d:92:12:09:52:a1:2e:17:3e:42: 6f:07:ab:92:f3:4b:c0:f9:32:cc:73:6c:7d:83:92:4d:79:5d: 06:5e:df:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYZonw/+e4p+9rVloDwIRNF6OiC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBNDhDMkNDMTA2NEJGM0U2MDUzQzE1REQyODE2RkU1 Nzc0QjNDQTAeFw0yNTEyMDUxNzMyNDlaFw0yNTEyMDYyMTI0NDlaMDMxMTAvBgNV BAMTKEMzNDNFNzMwOTQxOTI1OTg5QjZCODM0OUY2NTdGNUJEMzRDNzE5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oVV0yIpwLycF2a6ihVgeZ6Ox 8KodcG9dU51cG8eizuy3AViN6HrabEPP818DTeGILedoqbrucGemRGO10niJDeLm ednERvosDVxfW8/S+O7W/v7bvh5aQ0W1WaftaenMdlOgSq1E70G4xeXWUtIsCcXy SbfVhpwipccASEnREBkZ8v/1bXTxkrWDOVyyjpj3dzk8ebFzN4GlJBBh6CRJbNTp NLxXA4joNldliRdI1LekwlJxNk8Me+eUOd8AjnUQaPaAv8sfm4QOHDNnfK95h+lU 0+7UsyWE99jCsl4v+HUhnK5PyMwS9iNdRuQEx7pgSnm5tpuVy3cLfCFdxv6FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw0PnMJQZJZiba4NJ9lf1vTTHGSQwHwYDVR0j BBgwFoAUvaSMLMEGS/PmBTwV3SgW/ld0s8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR24zWWhSZWtRZ0M0ellwUmtYeHdYdzlxeUhuR25MWjRDcThnQVR2cENT ZkIvMC9CREE0OEMyQ0MxMDY0QkYzRTYwNTNDMTVERDI4MTZGRTU3NzRCM0NBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQTQ4QzJDQzEwNjRCRjNF NjA1M0MxNUREMjgxNkZFNTc3NEIzQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R24zWWhSZWtRZ0M0ellwUmtYeHdYdzlxeUhuR25MWjRDcThnQVR2cENTZkIvMC9C REE0OEMyQ0MxMDY0QkYzRTYwNTNDMTVERDI4MTZGRTU3NzRCM0NBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUUiK0pRyern5h7veYqBXL6gupaKU6Skna+lIHq/8LIoy9iIzGnNaKi8BXlP3 6GMK6Ecbq1okqqAi1oHaxj6J1GhtmlzLKxgWPFAj7Umr6wcmlVq6eWYLzxwTlWXB 6XRxJAjEifcT/3oB27E4qODx+iE3kHb10AYM9nliLq8tBxbpUQ0HYhAuLjG9m4BM 6P0chAfjKgdrfuCvy5TIsSk9ZyybtNDMrN5Owo3aS2nYkg4qqOx047+MQPNZeZKM 0x9dUGKKr8j8lV8QWNGCNWKmBNXhdsIotZygbhiHDUdl3PZNkhIJUqEuFz5Cbwer kvNLwPkyzHNsfYOSTXldBl7fYg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:59 2025 by rpki-client