This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft File: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json) Hash identifier: +uRfBcjJWdrNgVZkwmu8np7E+CXsnuP9GfuY6O0Xn/M= Subject key identifier: 91:B1:E2:4A:DC:28:93:5A:F9:BA:FC:6E:67:67:28:48:DB:8A:AB:0A Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E Certificate issuer: /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Certificate serial: 4DD24784CC601BE1AE67129278210733DD9066A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft Manifest number: 3E Signing time: Fri 05 Dec 2025 17:58:38 +0000 Manifest this update: Fri 05 Dec 2025 17:53:38 +0000 Manifest next update: Sat 06 Dec 2025 21:35:38 +0000 Files and hashes: 1: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: ecyVkf84nasbGWJnUyO+YnQuGvbie56ZqVp8I/6rudY=) 2: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=) 3: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d2:47:84:cc:60:1b:e1:ae:67:12:92:78:21:07:33:dd:90:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Validity Not Before: Dec 5 17:53:38 2025 GMT Not After : Dec 6 21:35:38 2025 GMT Subject: CN=91B1E24ADC28935AF9BAFC6E67672848DB8AAB0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f4:c5:4b:a8:b7:b2:80:e2:df:82:76:4f:1c: d6:dd:7c:f3:63:d5:8a:bb:85:4b:4b:0f:a7:45:ea: ed:3b:9b:08:48:52:56:51:71:9b:9b:f4:15:1e:6e: 08:bf:4b:a8:5c:9e:10:48:52:93:c8:c4:ff:f4:72: 22:70:c3:e2:34:a3:45:72:85:12:1b:4f:bb:8e:c9: 13:c5:9a:72:32:a8:53:8e:c8:9f:70:33:52:01:88: 15:0a:eb:63:49:81:d2:6b:d2:0b:24:bf:ae:0d:ff: 35:42:2a:68:e4:9d:a5:04:f7:cd:9a:fa:b5:30:f0: e2:7b:b8:0f:ab:ec:8b:b6:20:e2:7b:43:09:e3:1a: 0b:d7:f6:51:91:97:af:cd:d8:b0:99:55:d6:15:06: a9:dd:b6:b7:a3:75:31:d6:46:46:52:a7:42:82:29: ca:e9:c2:1f:1b:fc:04:48:b8:32:96:ed:80:9c:d7: 60:e3:59:f7:95:a5:a2:67:23:e2:50:89:9f:bf:18: d8:89:3e:70:e8:e6:24:c4:f0:2a:81:81:9a:b4:42: c2:c1:d4:1d:c1:39:a0:f9:de:3e:d7:93:eb:94:62: 2f:83:7b:37:87:e7:91:87:3f:d5:6b:97:5f:9a:83: c0:48:74:a8:5e:46:da:8e:60:cf:73:cb:27:d8:e1: c3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B1:E2:4A:DC:28:93:5A:F9:BA:FC:6E:67:67:28:48:DB:8A:AB:0A X509v3 Authority Key Identifier: keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:30:ea:25:10:d8:80:a4:bc:47:56:86:c4:2f:02:75:a8:38: 4a:70:f2:0e:95:01:60:cb:68:d2:f2:35:84:05:be:dd:01:34: fd:82:d1:3b:d2:59:a9:46:0f:1c:70:56:14:42:5b:7c:56:86: a3:8a:ce:06:77:4d:a3:e3:21:4e:cc:55:90:53:a3:22:d0:6f: 34:11:75:ba:36:be:f3:a3:d6:84:82:fa:85:85:98:48:e3:35: b3:70:5b:72:c1:f9:4e:55:20:18:ef:8f:5c:6e:2c:6e:f2:49: 95:83:5c:70:1a:25:fa:e6:71:10:ca:a7:f1:c9:5a:42:54:6e: ae:f6:d2:91:b0:ab:92:fa:d9:3a:5c:42:5f:c4:f5:e2:57:8e: 47:b1:c1:04:17:d8:13:52:42:af:19:42:cb:44:fa:fa:c2:dd: bc:35:e5:26:56:02:5a:7c:07:0c:3d:71:e1:d8:73:dc:74:f9: d1:2d:2d:8e:e2:95:d6:46:37:f3:21:75:4a:bd:12:b4:a7:68: 37:78:6c:79:46:62:a9:c4:99:44:d7:bb:e6:3f:cc:5b:c8:df: e7:02:26:8f:b1:0d:ca:48:f1:10:7e:93:c1:e4:0c:29:b8:36: 8c:e1:49:3d:2e:96:0c:4b:d7:98:5e:7d:b2:94:b9:64:76:7b: 42:c1:32:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTdJHhMxgG+GuZxKSeCEHM92QZqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyNUMxNTJCQUNGRDJERDk4OEUyM0U5Qzk3QUExQUVC NEJBNUIzRTAeFw0yNTEyMDUxNzUzMzhaFw0yNTEyMDYyMTM1MzhaMDMxMTAvBgNV BAMTKDkxQjFFMjRBREMyODkzNUFGOUJBRkM2RTY3NjcyODQ4REI4QUFCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz9MVLqLeygOLfgnZPHNbdfPNj 1Yq7hUtLD6dF6u07mwhIUlZRcZub9BUebgi/S6hcnhBIUpPIxP/0ciJww+I0o0Vy hRIbT7uOyRPFmnIyqFOOyJ9wM1IBiBUK62NJgdJr0gskv64N/zVCKmjknaUE982a +rUw8OJ7uA+r7Iu2IOJ7QwnjGgvX9lGRl6/N2LCZVdYVBqndtrejdTHWRkZSp0KC Kcrpwh8b/ARIuDKW7YCc12DjWfeVpaJnI+JQiZ+/GNiJPnDo5iTE8CqBgZq0QsLB 1B3BOaD53j7Xk+uUYi+DezeH55GHP9Vrl1+ag8BIdKheRtqOYM9zyyfY4cOtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkbHiStwok1r5uvxuZ2coSNuKqwowHwYDVR0j BBgwFoAUviXBUrrP0t2YjiPpyXqhrrS6Wz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdo cHYvMC9CRTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMjVDMTUyQkFDRkQyREQ5 ODhFMjNFOUM5N0FBMUFFQjRCQTVCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdocHYvMC9C RTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAezDqJRDYgKS8R1aGxC8Cdag4SnDyDpUBYMto0vI1hAW+3QE0/YLRO9JZqUYP HHBWFEJbfFaGo4rOBndNo+MhTsxVkFOjItBvNBF1uja+86PWhIL6hYWYSOM1s3Bb csH5TlUgGO+PXG4sbvJJlYNccBol+uZxEMqn8claQlRurvbSkbCrkvrZOlxCX8T1 4leOR7HBBBfYE1JCrxlCy0T6+sLdvDXlJlYCWnwHDD1x4dhz3HT50S0tjuKV1kY3 8yF1Sr0StKdoN3hseUZiqcSZRNe75j/MW8jf5wImj7ENykjxEH6TweQMKbg2jOFJ PS6WDEvXmF59spS5ZHZ7QsEyVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:04 2025 by rpki-client