This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: 4FjXkQ2ukZ0UUxU/psplCqOsaaWw5RmLudqopp3yBHo= Subject key identifier: 38:D0:D3:BC:07:E7:43:B3:DE:3A:56:26:B8:4B:93:07:25:A3:3B:9F Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 655AF2F0D2B3E257A8C35E4188322FC36D703EF9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 02B4 Signing time: Sun 21 Dec 2025 13:30:38 +0000 Manifest this update: Sun 21 Dec 2025 13:25:38 +0000 Manifest next update: Mon 22 Dec 2025 15:50:38 +0000 Files and hashes: 1: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) 2: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: 7Uuh1cmAtqse80OhPwlA23PrXWNrGJctPZTS0o0Nt2M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 15:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5a:f2:f0:d2:b3:e2:57:a8:c3:5e:41:88:32:2f:c3:6d:70:3e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Dec 21 13:25:38 2025 GMT Not After : Dec 22 15:50:38 2025 GMT Subject: CN=38D0D3BC07E743B3DE3A5626B84B930725A33B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:c2:3e:dc:61:48:9f:a9:83:0e:4a:ab:fa: de:59:6d:2a:b0:9e:16:3f:b6:83:40:11:19:16:df: c3:c4:ea:af:80:d8:19:3b:ac:26:a2:1b:5d:6f:43: 1e:31:41:6e:87:45:b4:b3:e0:d5:a9:18:71:0c:42: ec:63:05:a0:4c:5a:d5:6a:d6:02:54:e4:86:dd:9e: 12:32:84:9d:61:86:31:4b:a7:b6:65:7e:68:e1:71: a3:69:ee:2f:37:8c:da:39:76:c8:0e:19:e0:e0:b9: fb:0d:e4:47:b7:a4:18:b7:1d:c2:ea:bb:df:c9:7f: 43:3b:ef:42:48:68:80:6f:3c:d3:45:06:57:88:d4: 8e:00:e7:07:5c:a4:d0:6a:37:63:1b:78:64:75:a7: 69:df:99:05:75:70:e0:62:61:31:71:b7:f4:b4:0d: 30:c1:38:26:93:04:fc:d8:3e:ce:4e:d7:c1:ef:d0: f7:33:f9:0e:e0:60:7c:f6:e6:d7:0e:ca:74:1d:c1: 06:03:4c:f0:48:28:b6:c7:d2:14:f4:73:b3:cc:49: ab:a9:f2:f8:79:06:23:b7:3d:77:dd:81:d9:39:00: b9:b3:19:13:84:d1:fe:b0:00:88:95:2b:2d:bf:45: 61:fd:4c:ac:60:ce:71:8b:f3:7d:dd:3b:8e:47:28: ea:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:D3:BC:07:E7:43:B3:DE:3A:56:26:B8:4B:93:07:25:A3:3B:9F X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2d:db:7c:a7:f6:02:59:4d:61:45:e4:15:ad:bc:e1:13:c6: 38:c9:58:f9:48:a6:33:ea:09:51:e6:61:5b:41:f1:22:39:c5: d8:b1:fd:4a:a3:ec:a3:cc:7d:6d:9c:9b:04:5c:62:26:7f:9b: 2e:3a:70:15:f0:8b:54:fa:46:bd:19:f3:80:c9:f8:ca:8d:ca: 5c:a9:62:1f:e4:c9:ae:28:4b:79:3c:6b:ec:0c:d5:e8:02:56: d0:4b:3f:fc:7c:4d:e8:94:19:e6:4f:a7:37:2f:8a:c5:8b:f5: 1f:f4:26:98:9b:18:17:f6:c8:c2:cf:e6:b3:d8:5e:29:f0:db: a6:ae:48:d8:e4:7a:a5:6e:37:e6:fa:23:a1:0f:c9:00:45:1d: 60:8a:54:eb:bb:99:04:55:12:f4:1c:c2:17:d7:5f:26:33:ec: ce:42:a2:e9:a4:98:53:56:ee:3a:07:18:6b:ff:85:5b:3d:ec: ba:b8:e7:14:e4:10:d9:dc:56:67:d2:42:60:44:8e:ef:f3:0b: 5a:c2:7e:6e:34:e9:83:38:7d:92:b1:6f:66:1b:fd:98:7f:19: 50:b0:ae:07:5f:1d:1b:e6:40:91:1e:99:38:1f:39:f0:89:5a: ed:8e:04:15:09:53:a1:fd:20:c0:fb:27:83:e2:c0:91:b2:04: 83:62:5e:ff -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUZVry8NKz4leow15BiDIvw21wPvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTEyMjExMzI1MzhaFw0yNTEyMjIxNTUwMzhaMDMxMTAvBgNV BAMTKDM4RDBEM0JDMDdFNzQzQjNERTNBNTYyNkI4NEI5MzA3MjVBMzNCOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+8I+3GFIn6mDDkqr+t5ZbSqw nhY/toNAERkW38PE6q+A2Bk7rCaiG11vQx4xQW6HRbSz4NWpGHEMQuxjBaBMWtVq 1gJU5IbdnhIyhJ1hhjFLp7ZlfmjhcaNp7i83jNo5dsgOGeDgufsN5Ee3pBi3HcLq u9/Jf0M770JIaIBvPNNFBleI1I4A5wdcpNBqN2MbeGR1p2nfmQV1cOBiYTFxt/S0 DTDBOCaTBPzYPs5O18Hv0Pcz+Q7gYHz25tcOynQdwQYDTPBIKLbH0hT0c7PMSaup 8vh5BiO3PXfdgdk5ALmzGROE0f6wAIiVKy2/RWH9TKxgznGL833dO45HKOqnAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUONDTvAfnQ7PeOlYmuEuTByWjO58wHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Ki3bfKf2AllNYUXkFa284RPGOMlY+UimM+oJUeZhW0HxIjnF2LH9SqPso8x9bZyb BFxiJn+bLjpwFfCLVPpGvRnzgMn4yo3KXKliH+TJrihLeTxr7AzV6AJW0Es//HxN 6JQZ5k+nNy+KxYv1H/QmmJsYF/bIws/ms9heKfDbpq5I2OR6pW435vojoQ/JAEUd YIpU67uZBFUS9BzCF9dfJjPszkKi6aSYU1buOgcYa/+FWz3surjnFOQQ2dxWZ9JC YESO7/MLWsJ+bjTpgzh9krFvZhv9mH8ZULCuB18dG+ZAkR6ZOB858Ila7Y4EFQlT of0gwPsng+LAkbIEg2Je/w== -----END CERTIFICATE-----Generated at Sun Dec 21 21:47:30 2025 by rpki-client