This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: c7pTCyPwDkEB3unAVZVQpXS7IWkoIJ550aCkGawz2Vo= Subject key identifier: 05:AC:6D:A9:50:7D:EC:D4:21:CE:9C:40:DE:DA:E7:5B:03:AA:9B:E2 Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 21CBF97387DD7515FA158051D832346CF31D3F19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 02B6 Signing time: Tue 23 Dec 2025 02:10:38 +0000 Manifest this update: Tue 23 Dec 2025 02:05:38 +0000 Manifest next update: Wed 24 Dec 2025 02:21:38 +0000 Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: DyzPzNH8rpre6lFrNcxgjpRqufMxrhc/9gZFQ+P1VB4=) 2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 02:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cb:f9:73:87:dd:75:15:fa:15:80:51:d8:32:34:6c:f3:1d:3f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Dec 23 02:05:38 2025 GMT Not After : Dec 24 02:21:38 2025 GMT Subject: CN=05AC6DA9507DECD421CE9C40DEDAE75B03AA9BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a5:5d:92:a8:16:44:cf:50:c4:d1:b8:49:54: f4:81:d2:b4:86:63:35:ae:ec:67:38:0b:60:2c:c0: 77:f7:71:5d:ce:75:e2:1d:3c:5f:de:f3:7f:6a:70: 38:3c:4b:3f:f8:dd:12:ef:28:10:4b:ef:a8:c9:3a: e7:26:87:1b:55:ea:9c:e1:32:bc:0f:93:15:b7:53: 45:ab:4e:f9:f8:57:08:5e:50:07:e1:ed:36:f3:4f: 42:41:61:ff:7f:c2:70:8b:dd:31:67:11:88:6a:1c: b5:9d:cf:a5:cf:50:39:7f:64:a4:bb:59:3a:25:76: f1:31:f4:69:a4:5d:0f:c5:cc:70:2e:d2:b3:8b:d7: 02:11:47:08:51:29:10:e9:e3:4c:ec:9f:c0:40:69: d4:c0:e9:ef:f9:10:67:d1:2e:9b:82:28:32:e3:f0: 2b:24:e2:c8:58:1b:fc:11:7e:e0:73:86:25:c5:ba: e6:e1:5d:66:c9:e6:2f:b2:df:7f:9a:fa:9b:a3:9a: ae:b4:9e:8e:64:e0:03:6c:60:c5:03:8c:91:39:4b: e6:c2:19:3e:9a:36:66:9a:5c:ae:8a:f2:6f:b6:c2: 34:4c:04:c9:d9:0c:00:d2:3b:d9:43:38:57:d2:0a: 43:97:b1:c4:4d:fb:fa:32:dd:e8:1d:97:56:cf:de: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:6D:A9:50:7D:EC:D4:21:CE:9C:40:DE:DA:E7:5B:03:AA:9B:E2 X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:21:a1:10:04:b4:66:30:95:36:19:1e:ed:7e:37:24:8b:c9: f0:f4:a2:40:bd:bd:75:1f:cd:07:9e:2a:b5:67:51:c2:47:10: 12:c8:9c:8d:7d:fb:44:0e:1d:95:3e:3a:e1:d1:28:e4:2b:bf: d9:b6:ae:00:7d:54:fa:1b:9d:81:5c:48:ca:08:4a:9d:a5:33: 0e:36:e8:30:96:b9:87:df:83:79:f1:6c:dc:e6:3d:09:1d:f9: 08:6f:fb:e3:7a:38:f1:0d:49:47:39:63:70:e5:f7:a2:a5:6f: 01:bb:46:99:a5:cb:04:82:fc:bd:7f:60:e2:bb:7b:81:87:b9: 9f:42:32:0b:dc:04:6b:82:22:05:4d:02:47:f2:7b:a5:d9:df: 13:26:f3:5d:48:99:1f:d1:82:6d:c3:24:c2:24:5f:7c:6e:d4: 10:62:e8:59:f8:96:de:ad:34:d8:64:a2:e7:d9:dd:dd:87:e0: ba:f0:a4:88:b7:e6:2f:92:f4:65:0c:d1:08:d1:eb:85:e8:f3: a5:4a:b4:56:b0:ce:9c:dc:e1:3a:cd:c3:59:2f:83:5b:92:50: f9:ae:76:50:41:11:e2:e6:02:9f:43:e7:f1:49:eb:04:23:3e: ef:69:f3:08:27:e3:7a:e4:7a:1a:64:dd:7e:ec:cd:eb:89:5c: 4f:19:20:e2 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUIcv5c4fddRX6FYBR2DI0bPMdPxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTEyMjMwMjA1MzhaFw0yNTEyMjQwMjIxMzhaMDMxMTAvBgNV BAMTKDA1QUM2REE5NTA3REVDRDQyMUNFOUM0MERFREFFNzVCMDNBQTlCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpV2SqBZEz1DE0bhJVPSB0rSG YzWu7Gc4C2AswHf3cV3OdeIdPF/e839qcDg8Sz/43RLvKBBL76jJOucmhxtV6pzh MrwPkxW3U0WrTvn4VwheUAfh7TbzT0JBYf9/wnCL3TFnEYhqHLWdz6XPUDl/ZKS7 WToldvEx9GmkXQ/FzHAu0rOL1wIRRwhRKRDp40zsn8BAadTA6e/5EGfRLpuCKDLj 8Csk4shYG/wRfuBzhiXFuubhXWbJ5i+y33+a+pujmq60no5k4ANsYMUDjJE5S+bC GT6aNmaaXK6K8m+2wjRMBMnZDADSO9lDOFfSCkOXscRN+/oy3egdl1bP3qa5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUBaxtqVB97NQhzpxA3trnWwOqm+IwHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA QiGhEAS0ZjCVNhke7X43JIvJ8PSiQL29dR/NB54qtWdRwkcQEsicjX37RA4dlT46 4dEo5Cu/2bauAH1U+hudgVxIyghKnaUzDjboMJa5h9+DefFs3OY9CR35CG/743o4 8Q1JRzljcOX3oqVvAbtGmaXLBIL8vX9g4rt7gYe5n0IyC9wEa4IiBU0CR/J7pdnf EybzXUiZH9GCbcMkwiRffG7UEGLoWfiW3q002GSi59nd3YfguvCkiLfmL5L0ZQzR CNHrhejzpUq0VrDOnNzhOs3DWS+DW5JQ+a52UEER4uYCn0Pn8UnrBCM+72nzCCfj euR6GmTdfuzN64lcTxkg4g== -----END CERTIFICATE-----Generated at Tue Dec 23 08:24:20 2025 by rpki-client