This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft File: 2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft (raw, json) Hash identifier: ljwiNCYduS0sQw/mAtxl0I1LK8AuhPbAWDk++QSSMKQ= Subject key identifier: C2:5E:EA:28:F4:07:93:3E:18:D1:54:53:F0:26:F8:BF:1F:E4:C1:47 Authority key identifier: 2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D Certificate issuer: /CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D Certificate serial: 3F89F6EBFB693CC92F0D62D880909FC1DC67BABC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft Manifest number: DE Signing time: Sun 21 Dec 2025 06:48:25 +0000 Manifest this update: Sun 21 Dec 2025 06:43:25 +0000 Manifest next update: Mon 22 Dec 2025 09:30:25 +0000 Files and hashes: 1: 2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl (hash: C1Gn+NHTlzXm9U6Z98STmArwmQAKhu4RYL1VzhPtk00=) 2: 323830343a366633633a3a2f33322d3438203d3e20323730363437.roa (hash: Yy9a80hxuGkv47p1WxAV8/8jNtLNtfdf0ZtuB0b65RU=) 3: 3138392e33362e3133362e302f32322d3234203d3e20323730363437.roa (hash: T3KgvBQtkMn3/bW19ncfX5h/srF6Jaox8KLTXT0VPkE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 09:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:89:f6:eb:fb:69:3c:c9:2f:0d:62:d8:80:90:9f:c1:dc:67:ba:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D Validity Not Before: Dec 21 06:43:25 2025 GMT Not After : Dec 22 09:30:25 2025 GMT Subject: CN=C25EEA28F407933E18D15453F026F8BF1FE4C147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:97:08:da:d3:a2:1d:00:17:db:64:16:00: 52:f7:c2:4d:65:84:0c:d9:6d:79:00:d2:91:56:4e: ff:21:7f:67:4f:8d:92:fa:50:f5:a2:b1:cd:12:07: 6d:14:56:c7:a6:9f:a1:71:98:8b:7b:57:ea:b0:e1: e5:85:d5:fa:25:ec:36:80:38:bd:46:15:bf:cf:69: 3b:a2:fc:6d:1c:ac:11:d4:6d:b1:29:c4:c5:20:c7: ee:19:34:da:7f:cd:bc:ed:63:ca:eb:18:3c:80:df: 15:30:a2:af:28:53:5d:b1:8b:97:eb:44:88:89:7a: 84:27:d3:8b:91:2c:67:c0:34:18:38:bf:cb:f7:1d: 47:75:2a:b2:b8:a4:63:be:e7:62:67:b6:a8:b0:15: 00:87:4f:10:6b:74:f5:92:79:fa:6e:c1:77:f7:69: 1f:df:07:a2:c2:2d:ae:78:4e:f2:da:23:5d:2d:aa: a0:fb:f3:17:a2:d6:17:a3:64:bb:0e:86:b0:97:54: 98:eb:93:10:f7:e5:d0:e8:52:59:b8:49:b3:0a:cf: d7:34:64:b9:7e:a7:cf:df:58:31:69:d2:2c:20:16: 4b:69:b6:27:d9:55:93:24:89:49:2d:8e:32:ea:ec: 29:74:95:b9:e7:85:85:89:56:7a:b9:2d:61:6a:a3: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5E:EA:28:F4:07:93:3E:18:D1:54:53:F0:26:F8:BF:1F:E4:C1:47 X509v3 Authority Key Identifier: keyid:2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:05:cf:09:26:72:c1:32:69:eb:1c:02:b9:c0:36:a1:4f:51: 6d:fb:35:17:34:49:bd:d7:99:e5:70:6a:6e:09:47:55:af:f4: 9f:e0:1d:98:f3:7e:e8:12:53:05:a1:85:72:17:d4:79:19:4e: 72:2e:e3:60:0e:fe:40:22:67:41:36:b0:8f:32:68:5b:10:82: 4b:0f:06:30:24:1a:fd:cd:0c:ac:7a:bd:6f:3d:95:3c:c9:7b: 54:6a:0c:c3:a4:df:09:2f:50:38:11:25:21:75:eb:7d:92:f0: dd:55:34:99:ac:ba:71:d4:4d:b4:53:8b:6f:5b:24:96:88:c4: 3a:ab:9f:dc:05:f9:56:92:76:74:cc:00:dc:2e:ae:c3:7f:ad: eb:09:b6:e3:0b:91:aa:ab:63:0a:d9:08:a7:db:3b:61:0f:01: c2:a2:81:ae:ee:a6:a5:4a:8f:ab:6b:8d:15:9a:48:75:89:91: 85:df:b6:6a:be:95:43:4f:50:50:7c:b9:3e:fc:e9:70:44:58: 2c:cc:17:84:e5:d3:29:84:6e:62:c5:a0:85:67:37:56:7d:e7: 60:bf:13:33:4c:80:40:95:c6:43:85:86:a3:f1:ee:77:93:82: 0c:72:a4:d9:0f:5d:fd:5f:2d:59:86:10:ff:9d:42:a8:a7:e4: c6:09:99:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP4n26/tpPMkvDWLYgJCfwdxnurwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDU1NkJEMTZEQzIzMDRCOTJEODhENERFOEE3NDlF MjJERkExRDAeFw0yNTEyMjEwNjQzMjVaFw0yNTEyMjIwOTMwMjVaMDMxMTAvBgNV BAMTKEMyNUVFQTI4RjQwNzkzM0UxOEQxNTQ1M0YwMjZGOEJGMUZFNEMxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eJcI2tOiHQAX22QWAFL3wk1l hAzZbXkA0pFWTv8hf2dPjZL6UPWisc0SB20UVsemn6FxmIt7V+qw4eWF1fol7DaA OL1GFb/PaTui/G0crBHUbbEpxMUgx+4ZNNp/zbztY8rrGDyA3xUwoq8oU12xi5fr RIiJeoQn04uRLGfANBg4v8v3HUd1KrK4pGO+52JntqiwFQCHTxBrdPWSefpuwXf3 aR/fB6LCLa54TvLaI10tqqD78xei1hejZLsOhrCXVJjrkxD35dDoUlm4SbMKz9c0 ZLl+p8/fWDFp0iwgFktptifZVZMkiUktjjLq7Cl0lbnnhYWJVnq5LWFqoykfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwl7qKPQHkz4Y0VRT8Cb4vx/kwUcwHwYDVR0j BBgwFoAUKw1Va9FtwjBLktiNTeinSeIt+h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWtYUnJzVWpaUzRMZWNpNzRjSzM4aXA0WG5pdnFVS2Nmd1I2Mmp0QUxt TWIvMC8yQjBENTU2QkQxNkRDMjMwNEI5MkQ4OEQ0REU4QTc0OUUyMkRGQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMEQ1NTZCRDE2REMyMzA0 QjkyRDg4RDRERThBNzQ5RTIyREZBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWtYUnJzVWpaUzRMZWNpNzRjSzM4aXA0WG5pdnFVS2Nmd1I2Mmp0QUxtTWIvMC8y QjBENTU2QkQxNkRDMjMwNEI5MkQ4OEQ0REU4QTc0OUUyMkRGQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgwXPCSZywTJp6xwCucA2oU9Rbfs1FzRJvdeZ5XBqbglHVa/0n+AdmPN+6BJT BaGFchfUeRlOci7jYA7+QCJnQTawjzJoWxCCSw8GMCQa/c0MrHq9bz2VPMl7VGoM w6TfCS9QOBElIXXrfZLw3VU0may6cdRNtFOLb1sklojEOquf3AX5VpJ2dMwA3C6u w3+t6wm24wuRqqtjCtkIp9s7YQ8BwqKBru6mpUqPq2uNFZpIdYmRhd+2ar6VQ09Q UHy5PvzpcERYLMwXhOXTKYRuYsWghWc3Vn3nYL8TM0yAQJXGQ4WGo/Hud5OCDHKk 2Q9d/V8tWYYQ/51CqKfkxgmZTw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:58:39 2025 by rpki-client