This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft File: 99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft (raw, json) Hash identifier: Ncxdwto9292dOF4nbQm7kkX8g1c//hUeP7vnCHIImVs= Subject key identifier: 56:CA:B0:5E:32:BF:5D:E0:B5:34:8A:AB:68:FC:47:E3:3F:75:3A:C2 Authority key identifier: 99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4 Certificate issuer: /CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4 Certificate serial: 0F5580017EDF45F964C1A07939FD412337A90B05 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft Manifest number: 23 Signing time: Sat 20 Dec 2025 02:50:40 +0000 Manifest this update: Sat 20 Dec 2025 02:45:40 +0000 Manifest next update: Sun 21 Dec 2025 04:32:40 +0000 Files and hashes: 1: 99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl (hash: xDyLm++LJ2N2oJzvwyOJ+wz1kSEyaTxHsToPcBGf5wE=) 2: 323830343a333239303a3a2f33322d3336203d3e20323635303835.roa (hash: KJyfgod/ZleOhEaweWjlo8twk6C7fqY8aR2Fia737G0=) 3: 3137302e3233332e32342e302f32322d3234203d3e20323635303835.roa (hash: w5KF48LzSxj1SU9RmOZxJF6shrtOckACqZh0qTPx15s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 04:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:55:80:01:7e:df:45:f9:64:c1:a0:79:39:fd:41:23:37:a9:0b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4 Validity Not Before: Dec 20 02:45:40 2025 GMT Not After : Dec 21 04:32:40 2025 GMT Subject: CN=56CAB05E32BF5DE0B5348AAB68FC47E33F753AC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:90:3d:d9:01:b2:c5:d8:64:bb:23:b5:2e: e9:60:a8:f9:74:30:61:b8:7e:55:66:a3:d9:69:35: 9d:26:de:cb:07:51:2f:7b:26:df:7c:b7:5a:a6:56: 31:5a:a9:29:c5:39:9c:8c:d2:70:c8:da:47:fc:d8: 39:76:b6:cb:7c:49:40:a6:fa:f2:a8:68:0c:78:1c: db:33:49:be:6a:a9:b0:75:00:78:d0:38:a6:f3:76: a4:18:04:e4:06:a3:73:ff:8c:85:bc:95:7f:e2:85: ca:d6:a4:e0:df:41:c9:c0:d8:12:a7:ed:7b:1b:60: d2:3e:2d:3b:74:8b:34:21:2f:55:2a:98:5b:33:af: 66:8d:b3:d5:9f:f0:41:ed:96:e0:55:44:c2:e5:c2: dd:b3:df:2b:f9:4c:43:6a:64:b2:ea:e2:c3:4d:c3: ab:50:4d:b2:25:92:c3:54:26:38:39:13:89:00:59: 05:1e:6a:70:05:06:06:c7:0d:79:07:df:a5:7d:59: 08:04:ad:0c:df:63:86:cb:07:6f:d6:fb:48:c4:65: 91:14:82:36:ae:d0:53:dd:eb:89:9a:eb:af:4e:d2: 73:b5:b7:96:f5:31:d3:70:64:67:32:c9:9b:d5:59: 68:33:90:b7:b9:4a:52:5f:52:9e:8d:93:98:36:1e: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CA:B0:5E:32:BF:5D:E0:B5:34:8A:AB:68:FC:47:E3:3F:75:3A:C2 X509v3 Authority Key Identifier: keyid:99:42:8C:53:7B:0E:E9:F6:8F:FC:A1:5D:AB:1F:9D:FC:26:5D:A8:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/99428C537B0EE9F68FFCA15DAB1F9DFC265DA8D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c1:ad:4f:a6:35:7e:e3:54:8e:ec:1e:29:3d:b4:58:be:fa: 46:5e:fd:bb:cb:bc:03:aa:f4:62:06:79:e7:ad:2b:e3:67:9e: 24:51:69:d1:43:e7:09:77:97:39:9f:26:0b:27:26:76:d2:86: c9:2a:70:ea:d7:11:5e:72:b1:18:71:d2:67:42:4b:fc:22:41: 59:2d:d2:b7:11:23:ce:df:b7:5a:78:09:0f:80:f6:e6:2d:a2: dc:fe:0a:95:cf:66:2f:75:15:41:6f:87:5a:f0:85:34:c3:71: a0:be:a2:8a:cb:13:8c:e5:06:47:aa:f6:a0:db:ea:29:fb:ca: 4e:24:cf:97:56:72:c3:a6:eb:2f:d1:df:8d:9f:a5:c1:8d:83: 1a:87:90:b3:b8:1a:d4:94:c0:c7:ab:da:01:b8:1e:c9:e8:05: b1:4c:b7:de:43:ca:73:24:fe:33:03:b8:da:7f:2c:a3:ed:5f: 58:db:e3:b6:31:27:33:87:33:2c:ab:68:ba:51:69:57:ec:0b: 77:bb:a8:93:b8:97:23:37:b6:05:0d:e1:38:70:0e:80:87:1c: 44:2f:4e:ea:3b:25:ef:5f:f2:9e:30:dc:50:26:97:2f:53:9e: ab:c5:4c:54:31:91:f6:fd:29:11:ac:b7:4a:21:51:6a:8e:80: cf:c6:93:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD1WAAX7fRflkwaB5Of1BIzepCwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0MjhDNTM3QjBFRTlGNjhGRkNBMTVEQUIxRjlERkMy NjVEQThENDAeFw0yNTEyMjAwMjQ1NDBaFw0yNTEyMjEwNDMyNDBaMDMxMTAvBgNV BAMTKDU2Q0FCMDVFMzJCRjVERTBCNTM0OEFBQjY4RkM0N0UzM0Y3NTNBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxZA92QGyxdhkuyO1LulgqPl0 MGG4flVmo9lpNZ0m3ssHUS97Jt98t1qmVjFaqSnFOZyM0nDI2kf82Dl2tst8SUCm +vKoaAx4HNszSb5qqbB1AHjQOKbzdqQYBOQGo3P/jIW8lX/ihcrWpODfQcnA2BKn 7XsbYNI+LTt0izQhL1UqmFszr2aNs9Wf8EHtluBVRMLlwt2z3yv5TENqZLLq4sNN w6tQTbIlksNUJjg5E4kAWQUeanAFBgbHDXkH36V9WQgErQzfY4bLB2/W+0jEZZEU gjau0FPd64ma669O0nO1t5b1MdNwZGcyyZvVWWgzkLe5SlJfUp6Nk5g2HmPzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVsqwXjK/XeC1NIqraPxH4z91OsIwHwYDVR0j BBgwFoAUmUKMU3sO6faP/KFdqx+d/CZdqNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXpr QlIvMC85OTQyOEM1MzdCMEVFOUY2OEZGQ0ExNURBQjFGOURGQzI2NURBOEQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NDI4QzUzN0IwRUU5RjY4 RkZDQTE1REFCMUY5REZDMjY1REE4RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pXc1hHcUFwWjJkQTRGWE1RTU1VTlNkQ1p2OUpLbUdmQ0pjSFh0ZXprQlIvMC85 OTQyOEM1MzdCMEVFOUY2OEZGQ0ExNURBQjFGOURGQzI2NURBOEQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUcGtT6Y1fuNUjuweKT20WL76Rl79u8u8A6r0YgZ5560r42eeJFFp0UPnCXeX OZ8mCycmdtKGySpw6tcRXnKxGHHSZ0JL/CJBWS3StxEjzt+3WngJD4D25i2i3P4K lc9mL3UVQW+HWvCFNMNxoL6iissTjOUGR6r2oNvqKfvKTiTPl1Zyw6brL9HfjZ+l wY2DGoeQs7ga1JTAx6vaAbgeyegFsUy33kPKcyT+MwO42n8so+1fWNvjtjEnM4cz LKtoulFpV+wLd7uok7iXIze2BQ3hOHAOgIccRC9O6jsl71/ynjDcUCaXL1Oeq8VM VDGR9v0pEay3SiFRao6Az8aT8A== -----END CERTIFICATE-----Generated at Sat Dec 20 07:44:03 2025 by rpki-client