This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft File: BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft (raw, json) Hash identifier: tVawjiyKT0u7Xj9ODpLpoQydvtkOjonLcFBFDzFvcaI= Subject key identifier: 95:8B:5B:29:11:0C:21:5B:BB:FE:4E:4D:B5:AF:83:DD:7C:16:D5:81 Authority key identifier: BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A Certificate issuer: /CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A Certificate serial: 0523D5C383A99A0FE48AEFA8FF512F8448612650 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft Manifest number: 0344 Signing time: Thu 18 Dec 2025 09:58:52 +0000 Manifest this update: Thu 18 Dec 2025 09:53:52 +0000 Manifest next update: Fri 19 Dec 2025 12:12:52 +0000 Files and hashes: 1: 3138372e36332e3134342e302f32322d3233203d3e20323731343137.roa (hash: VRdy8v/hOdehpnfYJjwOQWAIt+UC7d+3XsL+xNyroGk=) 2: BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl (hash: oYsMEqAKs8gOnEnasqfCLqRJZAGjHK1pAa0AXSx9KiU=) 3: 323830343a376233343a3a2f33322d3431203d3e20323731343137.roa (hash: VT4Z49w1dwlx47MpGYVbKRf/xzx+TAmla3NRfHg1SwU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 12:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:23:d5:c3:83:a9:9a:0f:e4:8a:ef:a8:ff:51:2f:84:48:61:26:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A Validity Not Before: Dec 18 09:53:52 2025 GMT Not After : Dec 19 12:12:52 2025 GMT Subject: CN=958B5B29110C215BBBFE4E4DB5AF83DD7C16D581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:4c:de:85:ca:0f:1d:f7:d1:85:2e:50:3b: 2a:e1:9b:1e:46:17:1e:0b:4c:fd:ec:c0:b2:2e:9a: 15:0f:36:bd:0d:fb:90:4c:72:e3:70:9a:89:06:f1: d0:f6:f4:13:eb:ab:00:31:f9:b1:c9:3b:f6:c6:87: 19:b3:ea:33:a3:73:1d:23:92:93:bc:d5:95:9a:c5: a0:e5:d1:46:19:c6:1f:1c:bc:ae:08:e4:df:3c:80: d7:32:e2:ec:49:c7:88:04:4f:f2:db:f0:63:47:c1: 2c:ae:ef:f9:1e:33:9a:26:de:5b:9a:a3:7b:8d:c6: 8b:f1:9f:62:30:e6:a9:58:66:6c:37:e3:7a:f4:b2: 42:b2:17:4d:03:b8:1b:06:81:ba:d3:d3:f4:f2:05: 3b:2b:6c:c5:25:ab:20:ef:bb:4d:1d:17:51:e3:a3: 5d:e6:77:32:8e:15:ca:c6:4b:8f:fa:2f:84:42:ab: 5e:c5:cd:5f:a2:66:c9:df:d1:9a:0f:50:eb:4a:af: 4d:91:ab:60:df:11:e3:b5:f2:a0:70:37:6c:d0:9f: 2f:9e:21:cc:3b:e8:b9:d0:d4:6e:49:62:59:7d:32: d8:fd:02:e0:69:22:dd:51:6a:43:a0:d9:28:d2:57: 15:d1:c6:ef:37:38:d6:72:b9:98:24:36:9c:10:18: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:5B:29:11:0C:21:5B:BB:FE:4E:4D:B5:AF:83:DD:7C:16:D5:81 X509v3 Authority Key Identifier: keyid:BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:46:83:fd:99:65:cd:9c:67:d5:10:0b:79:1c:98:77:d9:a0: 70:d7:da:c2:6d:b7:c4:28:85:35:0a:f2:36:6f:e5:b0:c1:f5: f4:47:07:8d:82:54:23:f6:b6:6c:80:ec:2e:fb:35:83:21:38: 3c:03:d6:0f:1a:2c:28:25:9c:58:4e:e7:17:4a:3b:6e:9c:91: 49:25:cb:7f:29:78:6d:c5:fc:ff:55:38:8b:62:67:30:bd:cb: 32:96:b4:47:6b:65:e6:10:b3:d4:4a:98:3f:60:57:17:3b:62: 66:8b:0f:45:fa:de:c2:65:ae:00:f4:c5:8b:17:eb:fc:c2:38: c7:4a:74:67:eb:3b:72:fd:42:24:d7:1e:29:a7:64:09:37:6d: 01:84:c8:9e:20:5d:d5:b7:b7:08:82:97:81:10:7f:a3:71:ec: b1:69:98:6c:b1:87:d4:24:42:34:08:58:cc:57:6b:6e:74:52: 35:11:f8:01:b9:03:c3:3b:ef:d5:5e:0a:a7:f4:cc:f5:37:d4: 55:f2:65:1f:14:cc:b6:22:fd:77:92:ca:ba:81:3a:77:e0:5b: 30:11:2b:81:08:17:ff:c3:6e:f9:1a:dc:25:64:44:02:4f:99: fa:d9:2d:d8:34:03:e8:87:d4:08:6b:9c:96:42:b3:e5:62:f2: 20:1c:fc:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBSPVw4Opmg/kiu+o/1EvhEhhJlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQzMzNUI4RkFFNjQ5NzMyRUJGMTFDQzBGRUM2NEZD NzAxNzk4QTAeFw0yNTEyMTgwOTUzNTJaFw0yNTEyMTkxMjEyNTJaMDMxMTAvBgNV BAMTKDk1OEI1QjI5MTEwQzIxNUJCQkZFNEU0REI1QUY4M0REN0MxNkQ1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCem0zehcoPHffRhS5QOyrhmx5G Fx4LTP3swLIumhUPNr0N+5BMcuNwmokG8dD29BPrqwAx+bHJO/bGhxmz6jOjcx0j kpO81ZWaxaDl0UYZxh8cvK4I5N88gNcy4uxJx4gET/Lb8GNHwSyu7/keM5om3lua o3uNxovxn2Iw5qlYZmw343r0skKyF00DuBsGgbrT0/TyBTsrbMUlqyDvu00dF1Hj o13mdzKOFcrGS4/6L4RCq17FzV+iZsnf0ZoPUOtKr02Rq2DfEeO18qBwN2zQny+e Icw76LnQ1G5JYll9Mtj9AuBpIt1RakOg2SjSVxXRxu83ONZyuZgkNpwQGJQTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlYtbKREMIVu7/k5Nta+D3XwW1YEwHwYDVR0j BBgwFoAUuwwzW4+uZJcy6/EcwP7GT8cBeYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXVSdlVjMTlyTmgxaHFZZmNwNTExQzRBU1k2QjlrRGJiYUpaUzhFUmVT cFMvMS9CQjBDMzM1QjhGQUU2NDk3MzJFQkYxMUNDMEZFQzY0RkM3MDE3OThBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMEMzMzVCOEZBRTY0OTcz MkVCRjExQ0MwRkVDNjRGQzcwMTc5OEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXVSdlVjMTlyTmgxaHFZZmNwNTExQzRBU1k2QjlrRGJiYUpaUzhFUmVTcFMvMS9C QjBDMzM1QjhGQUU2NDk3MzJFQkYxMUNDMEZFQzY0RkM3MDE3OThBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAukaD/ZllzZxn1RALeRyYd9mgcNfawm23xCiFNQryNm/lsMH19EcHjYJUI/a2 bIDsLvs1gyE4PAPWDxosKCWcWE7nF0o7bpyRSSXLfyl4bcX8/1U4i2JnML3LMpa0 R2tl5hCz1EqYP2BXFztiZosPRfrewmWuAPTFixfr/MI4x0p0Z+s7cv1CJNceKadk CTdtAYTIniBd1be3CIKXgRB/o3HssWmYbLGH1CRCNAhYzFdrbnRSNRH4AbkDwzvv 1V4Kp/TM9TfUVfJlHxTMtiL9d5LKuoE6d+BbMBErgQgX/8Nu+RrcJWREAk+Z+tkt 2DQD6IfUCGuclkKz5WLyIBz82Q== -----END CERTIFICATE-----Generated at Thu Dec 18 18:54:43 2025 by rpki-client