This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft File: 289C0FA8F74E8A496A1CF040353916504C4E789F.mft (raw, json) Hash identifier: Z7KkeniB8ZV4SRyxwO1oRQfWzFHM7KiNLTHvqb7BXC8= Subject key identifier: F8:65:D7:9A:B7:6E:A6:AA:F2:70:A7:A8:69:5B:6A:87:B1:CB:05:12 Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F Certificate issuer: /CN=289C0FA8F74E8A496A1CF040353916504C4E789F Certificate serial: 709B57912DFCDC9D40991C17F0411F5FC0B203D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject info access: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft Manifest number: 032B Signing time: Sun 21 Dec 2025 08:55:53 +0000 Manifest this update: Sun 21 Dec 2025 08:50:53 +0000 Manifest next update: Mon 22 Dec 2025 10:44:53 +0000 Files and hashes: 1: 289C0FA8F74E8A496A1CF040353916504C4E789F.crl (hash: 0o1A6mD9FSbV2WQXVtaAjx7sd8fnGvOpWqkuWjvkPq4=) 2: 34352e3232382e3134382e302f32322d3234203d3e20323637303738.roa (hash: v1wrjfYs/XN4AL+meICElKQP9scnXquXOc/B2Xkm9JI=) 3: 323830343a343764303a3a2f33322d313238203d3e20323637303738.roa (hash: +gP3s6w113DB3ZyjXxmKKAlbxghpSVPSj8Lqa0WGlnI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 10:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9b:57:91:2d:fc:dc:9d:40:99:1c:17:f0:41:1f:5f:c0:b2:03:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F Validity Not Before: Dec 21 08:50:53 2025 GMT Not After : Dec 22 10:44:53 2025 GMT Subject: CN=F865D79AB76EA6AAF270A7A8695B6A87B1CB0512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:0d:04:f6:35:97:f1:13:91:04:53:96:96: 01:68:55:ef:a2:7a:49:e3:ac:da:b2:96:a5:36:0e: c6:96:da:fc:3b:49:22:a9:9e:6b:38:35:90:9d:35: a8:4c:c0:96:54:5e:de:8a:db:6c:f8:da:1b:62:f6: bc:d9:cd:86:01:6b:79:10:87:8f:e5:dc:c1:a5:e9: 3e:12:cf:fc:15:39:8b:8b:d7:44:d8:f6:69:68:78: 49:ff:38:e5:bb:73:af:cc:7e:d8:3c:b7:09:93:0c: 6d:3e:51:8a:09:5a:0b:04:fa:7d:4d:87:bd:a0:71: ba:1b:c2:53:1c:ae:c7:ca:98:a5:76:ef:15:24:33: c7:c2:93:3a:fe:f8:12:eb:2d:44:1b:c6:af:ff:07: e7:e2:34:07:9a:96:6a:bc:7b:31:14:1b:9e:d3:14: e1:1f:83:fd:a9:d4:93:ec:32:e5:6a:bc:43:34:91: 9b:94:0e:11:82:ab:c5:7d:8c:0c:04:7d:d3:52:5e: b8:df:23:1b:5a:fb:54:3f:87:df:96:bc:92:4f:ee: a5:bd:c9:69:88:bd:75:0c:2e:40:9c:c4:1d:e8:b9: db:74:eb:29:86:c7:07:3e:ce:9e:e7:88:1b:05:15: 96:0a:7c:84:17:57:0a:ef:37:a7:fb:a8:e2:34:b3: 14:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:D7:9A:B7:6E:A6:AA:F2:70:A7:A8:69:5B:6A:87:B1:CB:05:12 X509v3 Authority Key Identifier: keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:48:0c:12:53:2e:54:b6:ff:a7:2f:a6:3c:ef:b6:e6:d9:5b: 36:5d:5a:4e:91:46:d2:da:fc:10:a5:df:b5:07:95:c5:32:33: a1:72:73:8d:79:22:f0:1b:cc:4a:82:e8:43:9e:d3:7c:90:10: e1:a1:4d:b0:cc:7a:b7:e9:ba:d3:03:64:08:5a:43:50:45:47: c9:cf:00:18:53:35:fa:98:5d:47:cb:c9:16:fd:6b:51:81:5b: 11:68:55:72:94:db:4b:1e:84:4e:cf:e0:9e:6d:95:eb:34:ee: 21:51:c3:94:17:a5:85:ce:ed:e1:1a:a4:24:a8:16:94:27:c0: 92:16:82:5d:45:f4:d8:6c:9b:90:7f:19:63:c3:06:6e:6b:72: c5:c9:be:8b:04:37:d4:4a:0d:1f:bc:54:2c:04:35:a7:a6:df: 5c:df:9f:bb:97:6a:62:d8:2a:4b:37:c5:85:76:e6:f4:da:db: df:2b:e9:b1:6e:eb:17:0b:77:bd:0e:08:34:ab:28:17:86:02: ea:8c:0f:ca:d4:11:62:83:f4:97:7a:c1:31:3b:a6:8b:8b:9f: 78:60:32:c1:af:89:f4:f8:77:91:aa:f2:f7:04:47:c5:67:b1: fc:37:a3:6a:5a:a9:de:fd:03:db:9a:e2:20:33:4d:6f:bb:77: df:3d:90:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcJtXkS383J1AmRwX8EEfX8CyA9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QzBGQThGNzRFOEE0OTZBMUNGMDQwMzUzOTE2NTA0 QzRFNzg5RjAeFw0yNTEyMjEwODUwNTNaFw0yNTEyMjIxMDQ0NTNaMDMxMTAvBgNV BAMTKEY4NjVENzlBQjc2RUE2QUFGMjcwQTdBODY5NUI2QTg3QjFDQjA1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlw0E9jWX8RORBFOWlgFoVe+i eknjrNqylqU2DsaW2vw7SSKpnms4NZCdNahMwJZUXt6K22z42hti9rzZzYYBa3kQ h4/l3MGl6T4Sz/wVOYuL10TY9mloeEn/OOW7c6/Mftg8twmTDG0+UYoJWgsE+n1N h72gcbobwlMcrsfKmKV27xUkM8fCkzr++BLrLUQbxq//B+fiNAealmq8ezEUG57T FOEfg/2p1JPsMuVqvEM0kZuUDhGCq8V9jAwEfdNSXrjfIxta+1Q/h9+WvJJP7qW9 yWmIvXUMLkCcxB3oudt06ymGxwc+zp7niBsFFZYKfIQXVwrvN6f7qOI0sxRxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+GXXmrdupqrycKeoaVtqh7HLBRIwHwYDVR0j BBgwFoAUKJwPqPdOiklqHPBANTkWUExOeJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJq YWMvMC8yODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4OUMwRkE4Rjc0RThBNDk2 QTFDRjA0MDM1MzkxNjUwNEM0RTc4OUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJqYWMvMC8y ODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakgMElMuVLb/py+mPO+25tlbNl1aTpFG0tr8EKXftQeVxTIzoXJzjXki8BvM SoLoQ57TfJAQ4aFNsMx6t+m60wNkCFpDUEVHyc8AGFM1+phdR8vJFv1rUYFbEWhV cpTbSx6ETs/gnm2V6zTuIVHDlBelhc7t4RqkJKgWlCfAkhaCXUX02GybkH8ZY8MG bmtyxcm+iwQ31EoNH7xULAQ1p6bfXN+fu5dqYtgqSzfFhXbm9Nrb3yvpsW7rFwt3 vQ4INKsoF4YC6owPytQRYoP0l3rBMTumi4ufeGAywa+J9Ph3kary9wRHxWex/Dej alqp3v0D25riIDNNb7t33z2QEg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:55:40 2025 by rpki-client