This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft File: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft (raw, json) Hash identifier: q6vDVBHrPOF7d52Dsru+N/tzxYlbnn2bHCmYF/qC5JM= Subject key identifier: 60:60:0B:EC:91:F7:46:BC:F9:D3:47:4C:12:C3:80:B2:5E:02:5F:2F Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD Certificate issuer: /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Certificate serial: 0B1239D7A601448B4A5EFD2B578A4E61C7D68A25 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft Manifest number: 01AB Signing time: Tue 23 Dec 2025 02:49:31 +0000 Manifest this update: Tue 23 Dec 2025 02:44:31 +0000 Manifest next update: Wed 24 Dec 2025 02:59:31 +0000 Files and hashes: 1: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl (hash: 3tiXlZdlntEPc/KRSloGEczb6WIAvNSTtGBj0WeBszY=) 2: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (hash: P5vMjk9xZLUcu/EuN4M9DYWvTIbHxAsWjggzhrTxV18=) 3: 3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (hash: H03Vu8Bfe520dv1rMV0OcFZWYxUrvxZVo6HkfaDNrN0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 02:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:12:39:d7:a6:01:44:8b:4a:5e:fd:2b:57:8a:4e:61:c7:d6:8a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Validity Not Before: Dec 23 02:44:31 2025 GMT Not After : Dec 24 02:59:31 2025 GMT Subject: CN=60600BEC91F746BCF9D3474C12C380B25E025F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:5c:0c:8e:3a:82:2b:35:24:dc:c0:24:a3: 25:56:bc:50:9c:8c:6f:4f:1d:b4:7b:26:de:d7:96: 42:79:c2:0f:3f:dd:a1:ae:6f:a1:28:92:1c:db:42: 34:61:ed:c1:3d:c6:56:4d:b5:68:04:85:08:52:6b: ba:89:42:65:6e:f7:0c:7f:8e:a2:8c:1e:d4:20:1a: c8:08:a4:d8:2e:a1:6a:6a:0d:9d:68:9e:c3:35:1e: e5:e2:2c:71:be:e7:e6:23:13:39:af:2e:37:b4:87: 59:5c:69:39:f4:11:d5:86:c6:42:80:6c:fe:8c:f4: 3b:11:e5:8e:dd:6c:e4:10:1f:d7:ba:e4:e2:7c:44: 66:31:b6:32:68:b2:2c:42:c3:56:9c:d6:b8:55:74: 40:be:b8:22:7f:df:77:5c:0b:c0:14:83:d5:0c:6f: 1f:21:2e:d3:35:32:08:4e:20:fe:eb:32:f5:fb:de: 1f:a8:f2:68:26:90:52:12:c1:ce:9a:17:dd:93:0b: dd:86:f3:07:9e:8e:ed:cd:c6:c7:92:d3:4d:97:3b: 9b:25:f9:c5:63:f1:47:68:60:25:4e:ea:fc:1a:f3: e5:26:6d:91:db:41:e0:9e:a6:08:6b:be:1a:49:c9: 82:0f:6e:e3:23:b5:9d:ac:85:59:53:15:e0:c7:17: 3a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:60:0B:EC:91:F7:46:BC:F9:D3:47:4C:12:C3:80:B2:5E:02:5F:2F X509v3 Authority Key Identifier: keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:10:76:5b:01:0a:50:d2:9b:19:3b:a8:d0:76:b1:82:a8:df: 2a:38:e7:3e:54:12:e3:fd:88:bf:71:c0:d8:89:64:62:cc:a8: 91:83:b4:53:c3:1b:37:c9:b2:0b:20:93:79:75:75:59:e8:cb: b8:31:27:79:e4:51:2b:bb:46:b7:e2:bf:a7:40:c2:42:5d:1a: 23:b4:48:70:5e:cd:49:54:bf:1a:9b:a2:1f:60:13:f3:4c:c4: 11:d7:4c:e2:31:23:b9:ca:57:93:38:8e:ff:5c:82:dc:10:b0: f9:fa:0b:75:33:94:17:92:0c:79:49:b2:5f:e9:d9:8f:36:d2: 5f:99:02:c4:f1:cf:4b:03:8c:23:48:2a:e3:18:b3:63:e5:b4: 67:f3:c0:11:09:23:06:c9:da:72:d9:fc:a0:9a:6f:96:fe:1e: 50:a6:2c:7a:50:ae:24:fd:38:24:83:65:f2:15:4e:6c:30:5c: 68:b7:e2:22:ca:8a:44:ba:41:8f:d4:7f:4a:07:0f:85:a1:22: 77:03:6b:43:ee:df:8a:21:dc:39:8f:27:29:3a:28:30:f0:7e: 7c:a5:fd:41:0a:10:3a:cd:41:48:27:ad:dd:f9:81:c2:66:67: bb:c0:92:9b:cf:59:71:60:86:d6:b1:62:84:52:d3:9c:63:42: 89:70:3a:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCxI516YBRItKXv0rV4pOYcfWiiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBNEREQkJFOTc0RTVDMkEyNUE5NTJCRjQ0MzExNDdG MUQxOTVCRDAeFw0yNTEyMjMwMjQ0MzFaFw0yNTEyMjQwMjU5MzFaMDMxMTAvBgNV BAMTKDYwNjAwQkVDOTFGNzQ2QkNGOUQzNDc0QzEyQzM4MEIyNUUwMjVGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOH1wMjjqCKzUk3MAkoyVWvFCc jG9PHbR7Jt7XlkJ5wg8/3aGub6EokhzbQjRh7cE9xlZNtWgEhQhSa7qJQmVu9wx/ jqKMHtQgGsgIpNguoWpqDZ1onsM1HuXiLHG+5+YjEzmvLje0h1lcaTn0EdWGxkKA bP6M9DsR5Y7dbOQQH9e65OJ8RGYxtjJosixCw1ac1rhVdEC+uCJ/33dcC8AUg9UM bx8hLtM1MghOIP7rMvX73h+o8mgmkFISwc6aF92TC92G8weeju3NxseS002XO5sl +cVj8UdoYCVO6vwa8+UmbZHbQeCepghrvhpJyYIPbuMjtZ2shVlTFeDHFzpPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYGAL7JH3Rrz500dMEsOAsl4CXy8wHwYDVR0j BBgwFoAUW6Tdu+l05cKiWpUr9EMRR/HRlb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9W dEgvMC81QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTREREJCRTk3NEU1QzJB MjVBOTUyQkY0NDMxMTQ3RjFEMTk1QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9WdEgvMC81 QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsBB2WwEKUNKbGTuo0HaxgqjfKjjnPlQS4/2Iv3HA2IlkYsyokYO0U8MbN8my CyCTeXV1WejLuDEneeRRK7tGt+K/p0DCQl0aI7RIcF7NSVS/GpuiH2AT80zEEddM 4jEjucpXkziO/1yC3BCw+foLdTOUF5IMeUmyX+nZjzbSX5kCxPHPSwOMI0gq4xiz Y+W0Z/PAEQkjBsnactn8oJpvlv4eUKYselCuJP04JINl8hVObDBcaLfiIsqKRLpB j9R/SgcPhaEidwNrQ+7fiiHcOY8nKTooMPB+fKX9QQoQOs1BSCet3fmBwmZnu8CS m89ZcWCG1rFihFLTnGNCiXA65Q== -----END CERTIFICATE-----Generated at Tue Dec 23 10:26:43 2025 by rpki-client