This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: OyYCjOuNWVNsRQhkpnQXfO3Rm8Ekecd+VTvj4wxRUoc= Subject key identifier: 10:4F:1B:8B:A8:36:20:BC:6B:6D:60:56:28:67:CF:1F:20:F1:9E:C9 Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 684D86EF1C2E092BAB78BF21E83D36C2404868DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 029F Signing time: Sat 06 Dec 2025 02:20:38 +0000 Manifest this update: Sat 06 Dec 2025 02:15:38 +0000 Manifest next update: Sun 07 Dec 2025 04:56:38 +0000 Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: ec5tWYaxN+QxjRxdMl6cSJnbmCrbVR5jnAVBoOvqDDE=) 2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 04:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4d:86:ef:1c:2e:09:2b:ab:78:bf:21:e8:3d:36:c2:40:48:68:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Dec 6 02:15:38 2025 GMT Not After : Dec 7 04:56:38 2025 GMT Subject: CN=104F1B8BA83620BC6B6D60562867CF1F20F19EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6f:98:c5:1d:c1:10:a4:ba:0f:9f:48:e5:c2: 33:86:27:66:93:70:b8:36:4f:3b:01:a4:ee:12:63: 3d:00:dc:05:f9:aa:d2:77:a0:26:1c:d3:bd:c4:5d: e4:d5:d9:ec:4b:89:63:dd:47:d9:3d:74:ca:a8:23: d9:54:b9:d5:e0:96:93:28:3a:2e:7d:a7:5c:79:0b: 19:4f:ef:d0:a9:ba:09:20:cd:d9:6c:bf:df:34:be: 11:e6:97:3f:3c:75:b4:4a:b0:a7:ba:9a:b7:dc:01: 8b:1c:b3:b9:9a:cc:ce:bb:0c:f1:d6:1a:ad:36:7b: 0e:2a:01:fd:42:24:dc:b5:88:f9:d6:80:8a:6d:a4: 53:f8:26:1c:56:66:df:25:e8:ca:6c:dd:b4:b8:8b: 94:a1:19:e1:04:aa:64:3d:f0:5b:47:4e:b7:5e:82: e3:bd:46:73:c7:83:64:03:2a:43:5d:1f:20:47:30: 91:a2:b9:c9:7c:0d:5c:51:22:33:93:08:fa:38:c9: 59:34:17:f3:67:fc:1d:38:0e:13:d5:85:eb:04:e0: 86:95:3c:ca:20:c9:c0:28:23:6a:14:12:59:4b:29: 47:44:3a:41:6a:f4:de:b3:ac:17:2f:d4:5c:1c:37: de:7b:8b:e8:34:fb:82:ce:96:ca:a9:30:16:24:88: 61:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4F:1B:8B:A8:36:20:BC:6B:6D:60:56:28:67:CF:1F:20:F1:9E:C9 X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7c:9b:c9:93:cd:ec:ca:e1:f2:e5:05:93:2c:79:9e:eb:92: 24:91:21:fa:61:79:4e:27:5a:d0:7f:76:10:4e:51:8c:af:b8: f6:32:ba:89:dc:a9:ad:32:d9:23:e4:7a:78:c6:5c:40:2d:4c: 53:70:3c:b7:ce:84:ce:3b:61:e8:10:45:f2:08:8a:e2:34:ff: 2d:99:91:42:e0:af:5e:b4:08:79:74:d4:15:b2:6c:47:03:c8: 0d:1c:a7:0f:46:36:fc:a6:6f:63:b5:62:85:71:c1:a2:b3:e0: a9:d7:18:a5:16:10:39:30:6b:34:a6:f5:94:f1:fa:8c:e4:1d: f2:18:07:92:67:4e:ab:65:78:89:6a:90:5e:43:08:5c:b5:66: 49:b4:e8:53:99:ac:6a:69:a6:64:1c:43:7a:6a:2c:e0:d1:38: 8e:84:d0:c3:5a:92:c4:15:bd:5b:4e:7f:f3:70:7d:86:90:37: c2:fc:4b:f2:7a:88:f0:4e:63:4d:81:8d:0c:f4:f8:72:ce:ad: 2f:59:83:99:f0:5d:3a:71:25:3b:26:c3:4b:d0:19:62:32:c8: 73:b0:87:de:b6:3f:76:f7:c8:60:e8:41:ba:9c:02:c0:4e:fe: 3c:fa:bc:e2:aa:6c:70:df:30:b3:e8:1e:e9:a0:87:df:9e:10: 6e:51:19:d4 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaE2G7xwuCSureL8h6D02wkBIaNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTEyMDYwMjE1MzhaFw0yNTEyMDcwNDU2MzhaMDMxMTAvBgNV BAMTKDEwNEYxQjhCQTgzNjIwQkM2QjZENjA1NjI4NjdDRjFGMjBGMTlFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2b5jFHcEQpLoPn0jlwjOGJ2aT cLg2TzsBpO4SYz0A3AX5qtJ3oCYc073EXeTV2exLiWPdR9k9dMqoI9lUudXglpMo Oi59p1x5CxlP79Cpugkgzdlsv980vhHmlz88dbRKsKe6mrfcAYscs7mazM67DPHW Gq02ew4qAf1CJNy1iPnWgIptpFP4JhxWZt8l6Mps3bS4i5ShGeEEqmQ98FtHTrde guO9RnPHg2QDKkNdHyBHMJGiucl8DVxRIjOTCPo4yVk0F/Nn/B04DhPVhesE4IaV PMogycAoI2oUEllLKUdEOkFq9N6zrBcv1FwcN957i+g0+4LOlsqpMBYkiGGhAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUEE8bi6g2ILxrbWBWKGfPHyDxnskwHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA LHybyZPN7Mrh8uUFkyx5nuuSJJEh+mF5Tida0H92EE5RjK+49jK6idyprTLZI+R6 eMZcQC1MU3A8t86Ezjth6BBF8giK4jT/LZmRQuCvXrQIeXTUFbJsRwPIDRynD0Y2 /KZvY7VihXHBorPgqdcYpRYQOTBrNKb1lPH6jOQd8hgHkmdOq2V4iWqQXkMIXLVm SbToU5msammmZBxDemos4NE4joTQw1qSxBW9W05/83B9hpA3wvxL8nqI8E5jTYGN DPT4cs6tL1mDmfBdOnElOybDS9AZYjLIc7CH3rY/dvfIYOhBupwCwE7+PPq84qps cN8ws+ge6aCH354QblEZ1A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:09 2025 by rpki-client