This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft File: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json) Hash identifier: tWutdLdmIB5qBAmuZw9C3HoRTFpJ5CZxz+RGSTGZK/g= Subject key identifier: 0F:C3:6E:44:58:32:56:40:2E:D6:D2:7A:F9:DA:6A:3C:FE:6B:A5:19 Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E Certificate issuer: /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Certificate serial: 0FB9A0C9461F0D64E7933412AA4D041D122FB22C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft Manifest number: 54 Signing time: Wed 24 Dec 2025 02:38:57 +0000 Manifest this update: Wed 24 Dec 2025 02:33:57 +0000 Manifest next update: Thu 25 Dec 2025 05:01:57 +0000 Files and hashes: 1: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=) 2: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=) 3: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: thf+hqn2nAQMeXueXhGXl1bBb8rrFJ49Jb7m2AT+FB4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 05:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b9:a0:c9:46:1f:0d:64:e7:93:34:12:aa:4d:04:1d:12:2f:b2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Validity Not Before: Dec 24 02:33:57 2025 GMT Not After : Dec 25 05:01:57 2025 GMT Subject: CN=0FC36E44583256402ED6D27AF9DA6A3CFE6BA519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c3:c6:be:4b:fd:aa:80:16:f6:fb:2a:72:8a: b6:9f:5e:cd:ce:85:40:c6:59:6c:1c:ea:c8:c4:98: 94:c9:5b:2f:1a:a4:16:00:29:af:e8:ad:e4:82:88: 2b:05:92:8e:10:50:06:95:af:80:ea:51:c9:aa:fc: 0e:b8:1c:df:87:50:7c:ba:50:78:b6:dc:bd:b5:90: 03:38:58:33:da:a8:02:e1:0d:31:5f:da:54:d4:f5: 69:00:6e:7c:25:6a:ad:7e:15:f8:db:19:fc:bc:70: 6f:cd:94:39:9e:df:f6:a9:a8:80:69:8d:d0:97:52: 1f:92:8a:a0:1a:5e:33:16:b1:39:11:bb:24:21:52: 6b:8b:df:fa:9d:bf:1f:4d:a1:81:fd:14:39:5a:de: 73:b6:1d:13:1b:37:d7:7e:6b:12:9d:1d:32:41:52: a3:a9:21:c9:4d:31:1e:c5:5a:73:b8:bb:a8:63:8a: f2:aa:8a:60:af:03:40:c9:d9:c6:e7:cb:1a:1b:cb: 29:12:28:ee:0c:2a:96:76:18:85:8b:72:e9:49:dd: ea:ab:58:f1:b7:a0:f2:04:d7:35:fa:06:0d:c1:38: bc:81:a6:64:59:4c:83:22:8d:c9:9c:33:dd:84:e6: 37:d5:32:3c:f3:2b:86:bf:31:51:3d:3d:50:7b:e2: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C3:6E:44:58:32:56:40:2E:D6:D2:7A:F9:DA:6A:3C:FE:6B:A5:19 X509v3 Authority Key Identifier: keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:67:cc:ca:44:a4:7d:56:5a:ac:8b:af:d0:1e:d4:1b:dc:5c: ef:d6:4a:2e:bf:e8:da:e5:b5:87:bb:fb:8c:f5:1c:d4:fa:ba: a7:46:e8:57:f7:40:37:37:30:74:d7:fc:5d:96:39:19:95:fd: 3f:c4:c4:e2:d3:f1:9b:ad:14:bc:b0:27:e7:12:6c:7d:28:de: f6:ec:0c:5d:a0:f3:a4:0d:38:3b:2c:57:0d:28:61:4d:5a:6e: 65:6a:0c:cb:29:94:a8:80:08:6c:8b:42:b4:9d:18:1d:45:7a: 8d:db:54:8c:fd:3f:36:6e:61:e6:a5:cd:b4:16:69:e5:62:51: 47:34:e3:9a:15:30:9d:b4:0d:e5:9d:85:51:29:2f:82:62:d5: b9:33:67:8a:c6:10:43:5b:fe:58:66:65:f4:93:6a:b5:5a:c6: 74:5d:97:bd:96:fd:82:76:f0:82:cb:39:a9:ab:b8:31:b7:c9: 10:f3:12:e4:26:26:5f:f6:93:b3:df:bf:70:7e:ff:79:8c:04: ab:00:2b:b1:6e:1c:0c:ed:f9:60:d2:7b:b5:06:c5:8f:52:e5: 87:2b:37:1d:73:cb:6b:a1:7b:23:dd:68:f0:e4:bb:dd:24:98: b1:c2:60:3b:4c:6c:f3:40:f5:c5:6b:4a:dd:5d:99:4d:a4:6f: ee:d7:da:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD7mgyUYfDWTnkzQSqk0EHRIvsiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyNUMxNTJCQUNGRDJERDk4OEUyM0U5Qzk3QUExQUVC NEJBNUIzRTAeFw0yNTEyMjQwMjMzNTdaFw0yNTEyMjUwNTAxNTdaMDMxMTAvBgNV BAMTKDBGQzM2RTQ0NTgzMjU2NDAyRUQ2RDI3QUY5REE2QTNDRkU2QkE1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7w8a+S/2qgBb2+ypyirafXs3O hUDGWWwc6sjEmJTJWy8apBYAKa/oreSCiCsFko4QUAaVr4DqUcmq/A64HN+HUHy6 UHi23L21kAM4WDPaqALhDTFf2lTU9WkAbnwlaq1+FfjbGfy8cG/NlDme3/apqIBp jdCXUh+SiqAaXjMWsTkRuyQhUmuL3/qdvx9NoYH9FDla3nO2HRMbN9d+axKdHTJB UqOpIclNMR7FWnO4u6hjivKqimCvA0DJ2cbnyxobyykSKO4MKpZ2GIWLculJ3eqr WPG3oPIE1zX6Bg3BOLyBpmRZTIMijcmcM92E5jfVMjzzK4a/MVE9PVB74t3hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD8NuRFgyVkAu1tJ6+dpqPP5rpRkwHwYDVR0j BBgwFoAUviXBUrrP0t2YjiPpyXqhrrS6Wz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdo cHYvMC9CRTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMjVDMTUyQkFDRkQyREQ5 ODhFMjNFOUM5N0FBMUFFQjRCQTVCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdocHYvMC9C RTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlGfMykSkfVZarIuv0B7UG9xc79ZKLr/o2uW1h7v7jPUc1Pq6p0boV/dANzcw dNf8XZY5GZX9P8TE4tPxm60UvLAn5xJsfSje9uwMXaDzpA04OyxXDShhTVpuZWoM yymUqIAIbItCtJ0YHUV6jdtUjP0/Nm5h5qXNtBZp5WJRRzTjmhUwnbQN5Z2FUSkv gmLVuTNnisYQQ1v+WGZl9JNqtVrGdF2XvZb9gnbwgss5qau4MbfJEPMS5CYmX/aT s9+/cH7/eYwEqwArsW4cDO35YNJ7tQbFj1Llhys3HXPLa6F7I91o8OS73SSYscJg O0xs80D1xWtK3V2ZTaRv7tfaPw== -----END CERTIFICATE-----Generated at Wed Dec 24 14:27:39 2025 by rpki-client