This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft File: B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft (raw, json) Hash identifier: 5khVu0CZ0xMZdJGyGnm5lUrdgC9rFPSqfWeejDrmZRk= Subject key identifier: F3:2F:9A:33:9D:80:9C:54:79:C6:78:36:48:E9:0C:1B:22:BB:E4:3A Authority key identifier: B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8 Certificate issuer: /CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8 Certificate serial: 282740C2F5CF53CF5AF8B3FD388432D2D58F107B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft Manifest number: AF Signing time: Mon 22 Dec 2025 12:01:58 +0000 Manifest this update: Mon 22 Dec 2025 11:56:58 +0000 Manifest next update: Tue 23 Dec 2025 15:06:58 +0000 Files and hashes: 1: B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl (hash: 8Sn1xC3zjpu+oScaYMNw7HQqXRepHuljoC5zuGHyIRc=) 2: 34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (hash: k2yKuPlTrNYzg5JJTdJ8QcLnAn8AweZiAh2YLdu4w1Y=) 3: 323830343a356166343a3a2f33322d3438203d3e20323638383039.roa (hash: QBAUeqgtTN14lo+kiykhmV7DkBLft8F9Tpy/C+uXIoU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 12:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:27:40:c2:f5:cf:53:cf:5a:f8:b3:fd:38:84:32:d2:d5:8f:10:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8 Validity Not Before: Dec 22 11:56:58 2025 GMT Not After : Dec 23 15:06:58 2025 GMT Subject: CN=F32F9A339D809C5479C6783648E90C1B22BBE43A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:6b:a7:f3:ea:66:73:0f:d2:7b:58:44:0a: c5:f4:10:97:0e:90:9a:62:b3:41:30:04:c5:05:cb: 86:73:80:45:4e:24:99:53:ad:b5:87:3d:11:ac:46: a5:4c:6e:84:9b:c1:f8:50:f3:2c:bc:00:d5:76:aa: d7:0e:4b:d1:ff:a2:d1:93:01:3d:b5:8f:e4:cc:d5: ef:98:2f:05:9e:3b:5d:de:73:90:19:aa:37:e7:38: cd:00:41:5b:bd:c6:a0:1a:ce:43:18:65:78:db:bd: e3:d7:a5:df:8f:3a:5f:fa:7f:e2:b8:6e:15:f6:0d: 3c:0b:71:a8:9d:ac:69:1d:c4:04:99:fd:92:0f:bc: fc:45:08:66:e2:34:5f:6c:8f:8e:60:f6:8e:5b:59: 42:d9:e5:bf:a8:d0:86:b6:20:93:22:c7:e0:5b:93: 48:cc:e2:52:c3:9c:e2:af:a9:de:c2:65:c2:1a:ba: 0a:a9:1d:c8:25:b2:d9:0e:e4:79:a4:10:59:d3:5f: e4:1d:0b:ed:8f:95:4d:6b:94:9c:e4:54:91:33:c0: a3:8d:e1:53:1a:04:55:c9:e3:27:bb:1b:6e:45:56: 8d:bf:45:c8:6a:c4:72:96:f3:61:95:e0:71:e1:fd: 99:29:8b:18:5b:26:d5:c9:83:2d:77:c3:ed:fd:30: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2F:9A:33:9D:80:9C:54:79:C6:78:36:48:E9:0C:1B:22:BB:E4:3A X509v3 Authority Key Identifier: keyid:B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5b:21:7f:bd:ff:a4:ce:78:54:47:76:1a:ee:15:f0:b9:f2: d4:ac:18:ec:0a:86:8b:92:39:b3:fe:5c:21:e6:6f:99:14:f9: 72:29:25:a4:10:86:48:d1:35:22:6e:22:a0:58:de:f4:48:ae: 5c:22:b1:68:2d:1a:14:53:87:26:3b:7f:c0:4e:f9:16:b0:ba: 37:9e:f5:8d:21:25:10:d6:1d:4b:54:8e:45:a9:47:37:3d:1c: 1e:c7:06:71:06:41:7e:b9:9b:2f:d4:e9:8a:f4:89:c6:c3:b6: 5a:4a:47:7e:6e:98:18:a9:4d:67:67:e9:7d:32:a1:fb:d3:9e: 37:e0:e3:d8:1b:e4:85:66:49:56:31:b2:09:32:07:7c:20:a8: 25:0e:8d:0f:a4:c2:7b:57:ed:42:be:d7:21:a0:ea:2c:8c:93: 80:5c:a4:3c:da:a6:45:e1:38:6a:a2:d6:d7:bd:97:aa:4d:31: cb:fd:d3:1d:af:0c:2a:d8:7c:40:0d:b1:72:5c:d0:f3:6e:ca: 5c:24:a2:b5:77:3b:c3:25:73:3e:0b:61:b7:88:ba:8c:7a:e9: 78:2b:f2:0e:86:73:61:2a:44:5b:bc:ea:22:75:2a:3c:50:7d: f6:94:a9:58:ae:9d:6e:d9:76:d4:cc:33:e4:e1:2e:c8:cb:ba: 8e:ea:72:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKCdAwvXPU89a+LP9OIQy0tWPEHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIzNThCQkVGRkY4MTBFNjBCRTA0MDRBRjZFQ0ZFN0Q5 RkEwMzJDODAeFw0yNTEyMjIxMTU2NThaFw0yNTEyMjMxNTA2NThaMDMxMTAvBgNV BAMTKEYzMkY5QTMzOUQ4MDlDNTQ3OUM2NzgzNjQ4RTkwQzFCMjJCQkU0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6Gun8+pmcw/Se1hECsX0EJcO kJpis0EwBMUFy4ZzgEVOJJlTrbWHPRGsRqVMboSbwfhQ8yy8ANV2qtcOS9H/otGT AT21j+TM1e+YLwWeO13ec5AZqjfnOM0AQVu9xqAazkMYZXjbvePXpd+POl/6f+K4 bhX2DTwLcaidrGkdxASZ/ZIPvPxFCGbiNF9sj45g9o5bWULZ5b+o0Ia2IJMix+Bb k0jM4lLDnOKvqd7CZcIaugqpHcglstkO5HmkEFnTX+QdC+2PlU1rlJzkVJEzwKON 4VMaBFXJ4ye7G25FVo2/RchqxHKW82GV4HHh/ZkpixhbJtXJgy13w+39MHWJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8y+aM52AnFR5xng2SOkMGyK75DowHwYDVR0j BBgwFoAUsjWLvv/4EOYL4EBK9uz+fZ+gMsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1m TW0vMC9CMjM1OEJCRUZGRjgxMEU2MEJFMDQwNEFGNkVDRkU3RDlGQTAzMkM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMzU4QkJFRkZGODEwRTYw QkUwNDA0QUY2RUNGRTdEOUZBMDMyQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1mTW0vMC9C MjM1OEJCRUZGRjgxMEU2MEJFMDQwNEFGNkVDRkU3RDlGQTAzMkM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXVshf73/pM54VEd2Gu4V8Lny1KwY7AqGi5I5s/5cIeZvmRT5ciklpBCGSNE1 Im4ioFje9EiuXCKxaC0aFFOHJjt/wE75FrC6N571jSElENYdS1SORalHNz0cHscG cQZBfrmbL9TpivSJxsO2WkpHfm6YGKlNZ2fpfTKh+9OeN+Dj2BvkhWZJVjGyCTIH fCCoJQ6ND6TCe1ftQr7XIaDqLIyTgFykPNqmReE4aqLW172Xqk0xy/3THa8MKth8 QA2xclzQ827KXCSitXc7wyVzPgtht4i6jHrpeCvyDoZzYSpEW7zqInUqPFB99pSp WK6dbtl21Mwz5OEuyMu6jupyCQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:39 2025 by rpki-client