This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json) Hash identifier: qu+THrZaiCzyYbD2Qde7j/+VeO/I10EU5qY6YcoCpmY= Subject key identifier: 16:D9:2C:8F:F8:AA:CA:33:6A:71:FF:80:B2:2F:54:33:B9:0C:FA:E4 Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Certificate serial: 4734125C95F35C04DC3AD61E01BC9DF0FF9C3E1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft Manifest number: 54 Signing time: Sat 06 Dec 2025 13:34:34 +0000 Manifest this update: Sat 06 Dec 2025 13:29:34 +0000 Manifest next update: Sun 07 Dec 2025 17:27:34 +0000 Files and hashes: 1: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: GTuyip9hCm0elVP41LNTBU5YGx+u9OcrBFnEgwpF37Q=) 2: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: EnVrqikntd7A1Bz91+rs35WZHGXU+F0ky/G5NKesST0=) 3: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: N/r2yO1grPmFYrot/b8Z2t8HJmu36/wfhzCgmbzJ5jg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:34:12:5c:95:f3:5c:04:dc:3a:d6:1e:01:bc:9d:f0:ff:9c:3e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080 Validity Not Before: Dec 6 13:29:34 2025 GMT Not After : Dec 7 17:27:34 2025 GMT Subject: CN=16D92C8FF8AACA336A71FF80B22F5433B90CFAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:4e:bb:bb:e0:b1:52:ab:fe:58:92:39:7e: 72:03:2a:38:30:94:1b:54:19:19:ee:6e:8c:18:2f: 58:d5:06:38:3f:a1:0b:e1:b5:3f:9d:15:fc:03:ac: 50:92:5a:ea:10:c8:ff:59:bc:a4:c2:47:69:b6:4c: 2b:c9:ad:1e:8e:0a:9a:4f:74:68:2d:e8:ec:02:d5: c0:4e:42:4e:a1:9c:a7:33:02:8a:56:b4:ec:48:3b: 3d:1c:25:37:1f:5f:3c:c9:84:87:1c:10:17:1e:89: 4c:ce:79:85:f8:cd:98:2c:c1:e6:57:a1:c4:1f:6d: a0:c0:be:ab:02:c8:63:5a:61:e3:9d:4a:a1:81:7c: 65:05:ff:1e:cd:f3:b3:ee:27:c7:71:24:75:98:b8: 52:d8:6b:b8:9a:c3:09:89:c4:17:04:1d:27:8d:06: 76:1b:65:6f:56:b1:94:cf:f0:f5:7c:d6:d6:0f:85: 68:4d:ff:2d:c7:b1:f2:e2:8d:3b:ed:1a:59:72:09: 7a:7f:69:5e:f3:4a:b0:a3:7a:b1:3e:fa:14:b9:0d: 4e:c7:ca:b4:19:a5:c1:dc:41:cb:40:27:90:c8:02: da:d5:bf:7e:1a:c3:31:c4:15:ec:73:a4:9e:5b:db: e4:22:b6:89:d5:09:63:35:ff:dc:e8:a4:8b:ad:5b: fd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D9:2C:8F:F8:AA:CA:33:6A:71:FF:80:B2:2F:54:33:B9:0C:FA:E4 X509v3 Authority Key Identifier: keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5e:84:32:b6:bd:7e:bb:85:a0:82:52:45:ed:d1:59:b3:e3: 45:fb:da:66:b3:d5:1c:89:eb:29:57:1c:90:58:92:23:88:ea: e8:71:68:a7:c4:15:d1:89:49:d8:5c:07:30:02:0a:f4:45:de: 13:00:56:02:80:38:64:69:c8:25:76:6e:09:b8:6b:50:eb:cd: 57:35:d1:c1:fb:cc:9e:bf:de:fd:53:90:2f:1e:68:2d:e9:36: 18:9e:a8:9f:5b:3e:4d:68:46:45:9c:1e:f5:ee:86:17:ae:40: 8d:26:05:25:5b:8e:25:25:4d:d5:c5:4a:4b:1a:cd:2f:00:f8: 07:60:47:a2:3d:5e:a7:97:9e:df:ea:1f:01:a1:a4:5a:31:86: 23:7b:c8:8b:33:67:80:ac:cd:b6:c8:fb:81:f2:7b:e7:05:d1: a9:22:18:aa:73:fb:9d:b2:09:49:6c:18:6e:c4:7d:f2:d2:df: ab:f0:2a:00:98:93:ba:d0:41:3f:52:df:f7:fa:18:41:9c:46: 9c:57:6a:28:48:c9:f4:9a:92:cc:17:e9:34:a3:15:03:ee:51: c0:00:dc:00:81:2b:18:57:4e:1b:a2:05:2e:e5:8c:d4:55:f6: 41:ab:1d:cc:4e:c5:fc:51:7e:dd:3c:e7:d0:3e:0f:cb:e4:7e: d4:30:48:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURzQSXJXzXATcOtYeAbyd8P+cPhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNEU5QzAxRTk3RjRFODkxMDJBQ0U0QTdFQkI5Q0VF NTNCRDA4MDAeFw0yNTEyMDYxMzI5MzRaFw0yNTEyMDcxNzI3MzRaMDMxMTAvBgNV BAMTKDE2RDkyQzhGRjhBQUNBMzM2QTcxRkY4MEIyMkY1NDMzQjkwQ0ZBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzd067u+CxUqv+WJI5fnIDKjgw lBtUGRnubowYL1jVBjg/oQvhtT+dFfwDrFCSWuoQyP9ZvKTCR2m2TCvJrR6OCppP dGgt6OwC1cBOQk6hnKczAopWtOxIOz0cJTcfXzzJhIccEBceiUzOeYX4zZgsweZX ocQfbaDAvqsCyGNaYeOdSqGBfGUF/x7N87PuJ8dxJHWYuFLYa7iawwmJxBcEHSeN BnYbZW9WsZTP8PV81tYPhWhN/y3HsfLijTvtGllyCXp/aV7zSrCjerE++hS5DU7H yrQZpcHcQctAJ5DIAtrVv34awzHEFexzpJ5b2+QitonVCWM1/9zopIutW/0TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFtksj/iqyjNqcf+Asi9UM7kM+uQwHwYDVR0j BBgwFoAUJcTpwB6X9OiRAqzkp+u5zuU70IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2 WXcvMC8yNUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzRFOUMwMUU5N0Y0RTg5 MTAyQUNFNEE3RUJCOUNFRTUzQkQwODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEJab2hBQzZ6RjhmbU5QNDhhcWJWUk00TUw1Z0JSdUFrWUZ2ZERZR0J2WXcvMC8y NUM0RTlDMDFFOTdGNEU4OTEwMkFDRTRBN0VCQjlDRUU1M0JEMDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlV6EMra9fruFoIJSRe3RWbPjRfvaZrPVHInrKVcckFiSI4jq6HFop8QV0YlJ 2FwHMAIK9EXeEwBWAoA4ZGnIJXZuCbhrUOvNVzXRwfvMnr/e/VOQLx5oLek2GJ6o n1s+TWhGRZwe9e6GF65AjSYFJVuOJSVN1cVKSxrNLwD4B2BHoj1ep5ee3+ofAaGk WjGGI3vIizNngKzNtsj7gfJ75wXRqSIYqnP7nbIJSWwYbsR98tLfq/AqAJiTutBB P1Lf9/oYQZxGnFdqKEjJ9JqSzBfpNKMVA+5RwADcAIErGFdOG6IFLuWM1FX2Qasd zE7F/FF+3Tzn0D4Py+R+1DBI+g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:23 2025 by rpki-client