This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft File: 2B70CD0507DEB57B92FF796531C932DEF83009A2.mft (raw, json) Hash identifier: DrgdbPzRUuz+N4Jpif5W4vdnokf/TvbvNvbL8q3K/os= Subject key identifier: B4:EE:5B:A3:B3:AA:FD:F0:8E:EB:D1:4C:EE:5F:79:64:FD:4B:9D:0B Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 Certificate issuer: /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Certificate serial: 3E4E9784D6F2754971400FA942AB2830CEEB76E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft Manifest number: 0290 Signing time: Wed 24 Dec 2025 11:21:04 +0000 Manifest this update: Wed 24 Dec 2025 11:16:04 +0000 Manifest next update: Thu 25 Dec 2025 13:12:04 +0000 Files and hashes: 1: 3138392e3132362e31322e302f32322d3234203d3e20323730333136.roa (hash: usN4Sn/tOM9yn1kyODhJ/9CSDKsJBo6S6EP+tHpD0AQ=) 2: 2B70CD0507DEB57B92FF796531C932DEF83009A2.crl (hash: U6FrDpREZ4vfTwAmkdjH+egO5tCusefKE+Ppw/Ndals=) 3: 323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (hash: uM7t3CdpbFI7OeW+ScOEPFx4SBbDqHNlaGrAPMxg5UE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 13:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4e:97:84:d6:f2:75:49:71:40:0f:a9:42:ab:28:30:ce:eb:76:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Validity Not Before: Dec 24 11:16:04 2025 GMT Not After : Dec 25 13:12:04 2025 GMT Subject: CN=B4EE5BA3B3AAFDF08EEBD14CEE5F7964FD4B9D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:02:6c:62:f6:e7:49:ac:b2:3d:53:fc:44: db:db:15:25:37:82:aa:eb:52:aa:93:ec:5d:fb:a4: fd:ba:38:37:ee:9d:c9:7b:94:d1:4a:34:59:94:26: d5:b6:e9:35:91:c0:c6:3e:51:de:43:fc:88:70:dc: 47:92:ac:4b:d3:0d:fd:0d:8c:28:89:9d:ea:2d:67: 45:dc:92:98:ba:8d:50:d8:7d:5d:f7:f6:10:39:4a: dc:ef:73:bb:72:1a:ca:50:2a:fd:45:cd:74:14:aa: 54:ca:a6:18:6d:da:f8:af:32:73:8d:a7:c0:16:a2: f3:c1:fd:0d:63:33:a9:9e:54:77:64:d4:21:09:c3: 81:e3:a0:62:b1:8d:9d:9a:2c:84:15:aa:26:90:3a: 9d:ea:e7:01:1f:f3:51:a3:37:4a:a7:48:ad:54:1e: 0d:0f:63:c2:e9:9a:4e:bc:2e:0c:5e:32:b8:1a:f9: 45:8c:ea:4b:d7:bf:60:d2:19:92:52:32:1c:6c:7d: aa:5c:63:46:4b:3a:ca:5c:e0:c8:0e:1d:09:a5:79: b9:04:03:85:a2:b9:7a:65:1c:fc:65:8d:e0:a8:22: 96:f4:73:a8:68:dd:98:3e:88:36:c7:2c:34:33:e3: 14:6c:8e:e5:17:e1:72:0c:72:e9:2d:41:88:70:34: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EE:5B:A3:B3:AA:FD:F0:8E:EB:D1:4C:EE:5F:79:64:FD:4B:9D:0B X509v3 Authority Key Identifier: keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:45:f5:a0:1e:e5:cd:d6:19:27:6f:3c:8f:36:1a:15:dd:19: fb:61:24:d7:99:08:37:30:d7:55:e9:90:a6:dc:46:ff:90:d2: 73:6f:48:2e:a3:98:fd:27:27:9a:fa:ec:7e:ac:70:ec:d8:2d: 47:1b:1a:55:40:58:4a:9e:63:92:0a:71:50:ed:a2:a1:00:6b: 80:84:06:c9:69:40:fa:0b:f8:58:73:57:21:91:21:c8:50:98: fe:c0:34:de:e8:eb:19:6d:4d:82:52:b8:86:66:f5:33:7e:ef: 8d:c3:9f:04:17:11:7e:1f:10:f0:b5:52:c6:5a:33:12:c3:2f: 42:6a:58:e0:41:81:ce:6a:a3:84:3e:dd:28:90:34:05:f6:7e: 55:4e:26:6c:ae:7b:e5:fe:91:d2:86:a2:f3:87:d8:59:4f:38: f7:36:38:0c:99:2c:10:d0:01:ee:d0:0a:e1:11:da:e0:2d:99: 35:9d:a5:44:20:66:ae:e7:3b:68:48:cd:05:34:81:df:36:ef: 35:dd:ba:36:ab:78:67:43:97:45:9e:23:d8:82:ae:c4:e9:9b: ef:99:43:2a:0a:69:82:05:1c:21:b3:5f:0a:0f:71:1d:f9:24: 97:77:51:06:f4:3a:ee:e0:d0:7d:8b:09:42:7c:7d:12:24:a5: 8b:6c:33:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPk6XhNbydUlxQA+pQqsoMM7rdukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3MENEMDUwN0RFQjU3QjkyRkY3OTY1MzFDOTMyREVG ODMwMDlBMjAeFw0yNTEyMjQxMTE2MDRaFw0yNTEyMjUxMzEyMDRaMDMxMTAvBgNV BAMTKEI0RUU1QkEzQjNBQUZERjA4RUVCRDE0Q0VFNUY3OTY0RkQ0QjlEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BQJsYvbnSayyPVP8RNvbFSU3 gqrrUqqT7F37pP26ODfuncl7lNFKNFmUJtW26TWRwMY+Ud5D/Ihw3EeSrEvTDf0N jCiJneotZ0Xckpi6jVDYfV339hA5Stzvc7tyGspQKv1FzXQUqlTKphht2vivMnON p8AWovPB/Q1jM6meVHdk1CEJw4HjoGKxjZ2aLIQVqiaQOp3q5wEf81GjN0qnSK1U Hg0PY8Lpmk68LgxeMrga+UWM6kvXv2DSGZJSMhxsfapcY0ZLOspc4MgOHQmlebkE A4WiuXplHPxljeCoIpb0c6ho3Zg+iDbHLDQz4xRsjuUX4XIMcuktQYhwNMQNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtO5bo7Oq/fCO69FM7l95ZP1LnQswHwYDVR0j BBgwFoAUK3DNBQfetXuS/3llMcky3vgwCaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFk SmQvMC8yQjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzBDRDA1MDdERUI1N0I5 MkZGNzk2NTMxQzkzMkRFRjgzMDA5QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFkSmQvMC8y QjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk0X1oB7lzdYZJ288jzYaFd0Z+2Ek15kINzDXVemQptxG/5DSc29ILqOY/Scn mvrsfqxw7NgtRxsaVUBYSp5jkgpxUO2ioQBrgIQGyWlA+gv4WHNXIZEhyFCY/sA0 3ujrGW1NglK4hmb1M37vjcOfBBcRfh8Q8LVSxlozEsMvQmpY4EGBzmqjhD7dKJA0 BfZ+VU4mbK575f6R0oai84fYWU849zY4DJksENAB7tAK4RHa4C2ZNZ2lRCBmruc7 aEjNBTSB3zbvNd26Nqt4Z0OXRZ4j2IKuxOmb75lDKgppggUcIbNfCg9xHfkkl3dR BvQ67uDQfYsJQnx9EiSli2wzhg== -----END CERTIFICATE-----Generated at Wed Dec 24 14:20:25 2025 by rpki-client