This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft File: 59705EC4540FCB5C4C3398C5820B274B6548892F.mft (raw, json) Hash identifier: E8FenqxiHyJf8z70fpicy8zlIYgCzX2O7StoVYkPEZ0= Subject key identifier: 3C:9D:05:3A:5E:98:57:6F:A8:06:28:DC:1B:BF:11:27:8A:57:0C:91 Authority key identifier: 59:70:5E:C4:54:0F:CB:5C:4C:33:98:C5:82:0B:27:4B:65:48:89:2F Certificate issuer: /CN=59705EC4540FCB5C4C3398C5820B274B6548892F Certificate serial: 52CFDFB248571265AC91B5123D1217DD336DFA9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft Manifest number: 0321 Signing time: Wed 24 Dec 2025 15:07:59 +0000 Manifest this update: Wed 24 Dec 2025 15:02:59 +0000 Manifest next update: Thu 25 Dec 2025 15:40:59 +0000 Files and hashes: 1: 59705EC4540FCB5C4C3398C5820B274B6548892F.crl (hash: Gaw3EeT1zCc0a1I0hGauVjFYKnCjeWIXrzjEPn3TYng=) 2: 3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa (hash: 3MJCXDMlQziliFmjm8tJJkEeFgQR7EMT9AEb8K8oStk=) 3: 323830343a373937303a3a2f33322d3333203d3e20323731333035.roa (hash: pTm8JTJu+Lyc+/56cVolVaf2YmrHTJoac4oEivOc25U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.crl rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 15:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cf:df:b2:48:57:12:65:ac:91:b5:12:3d:12:17:dd:33:6d:fa:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59705EC4540FCB5C4C3398C5820B274B6548892F Validity Not Before: Dec 24 15:02:59 2025 GMT Not After : Dec 25 15:40:59 2025 GMT Subject: CN=3C9D053A5E98576FA80628DC1BBF11278A570C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:6f:9f:a5:22:c9:67:f1:2b:95:78:66:f6: 34:f7:28:51:a0:11:5a:04:ee:dd:d3:80:dd:84:42: d3:d3:6d:48:e2:86:73:42:60:ee:24:88:5f:46:a7: b3:21:6d:86:5f:e7:d1:aa:61:3c:8d:84:da:b9:64: d1:ff:e5:5f:d9:54:a0:6a:07:5f:79:c3:04:2f:a9: db:86:10:50:1a:81:4d:61:6a:72:a6:18:27:8c:8c: 00:22:78:52:0f:93:86:83:ec:d9:78:c7:00:6b:61: 4e:e1:ac:58:ba:74:c3:b2:da:5d:4d:51:8a:9e:62: dd:3b:b1:0f:3f:83:81:7a:77:fd:e6:9b:b5:82:4b: 67:30:55:49:cf:16:62:8d:2a:29:53:3c:26:4f:e2: c8:6f:dd:f7:a2:ba:1f:2b:35:68:a6:ba:54:4d:41: e3:25:9e:18:7d:86:95:c5:5d:21:c0:60:0f:d6:aa: 71:9f:1f:62:45:d2:1c:b0:36:bf:83:bf:96:0f:ac: b6:a6:00:94:42:95:d9:d8:4e:1e:7f:92:23:82:d4: cb:eb:33:8a:8b:7b:dc:c3:b7:69:2b:f7:51:ed:22: 18:52:ef:04:c7:52:66:21:fc:70:4a:87:9c:99:e4: b6:a8:7d:19:f6:1c:63:bd:7f:a3:e9:de:05:57:22: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:05:3A:5E:98:57:6F:A8:06:28:DC:1B:BF:11:27:8A:57:0C:91 X509v3 Authority Key Identifier: keyid:59:70:5E:C4:54:0F:CB:5C:4C:33:98:C5:82:0B:27:4B:65:48:89:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59705EC4540FCB5C4C3398C5820B274B6548892F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/59705EC4540FCB5C4C3398C5820B274B6548892F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:df:d7:da:ec:ac:3d:55:f4:af:4e:98:71:93:84:47:4f:b8: 5c:49:ef:60:df:5d:1b:13:14:8e:90:9b:5b:07:0c:2f:43:a6: 24:a7:11:db:5c:c5:64:78:2b:da:f2:ab:bd:8c:ec:bb:ff:4b: f9:73:a4:be:1d:b0:10:f6:8c:d0:6b:10:26:1e:86:6b:8d:ad: 71:06:5b:09:ab:c0:a7:ba:e7:85:bd:4d:52:2b:d6:be:42:2a: 38:79:ea:1b:80:75:32:7e:39:20:46:ce:c0:9c:37:0b:e8:5d: 55:f3:57:30:aa:55:15:2b:c0:fb:40:24:58:31:5a:e6:fd:e2: 97:ee:eb:f2:a4:64:de:87:e9:3a:f4:85:92:96:31:48:45:36: a8:28:19:89:aa:4a:fb:a1:24:18:fc:5b:14:d4:ff:94:53:9a: 1f:db:56:a4:11:a1:0b:5f:f3:f9:3f:e4:4c:1f:a1:40:fa:e5: bb:f5:01:a4:52:03:50:97:45:b4:cf:4c:a1:58:1a:16:8c:bc: 9e:7b:0a:97:09:a4:a9:d6:6b:67:c0:50:a2:85:ff:ef:39:be: 26:fb:81:59:81:95:34:88:68:57:ae:86:f1:41:06:93:c1:cf: 00:a7:12:a9:a4:e6:6f:8d:08:8a:13:c2:35:d8:fd:4f:3b:3f: 0d:21:ad:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUs/fskhXEmWskbUSPRIX3TNt+pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3MDVFQzQ1NDBGQ0I1QzRDMzM5OEM1ODIwQjI3NEI2 NTQ4ODkyRjAeFw0yNTEyMjQxNTAyNTlaFw0yNTEyMjUxNTQwNTlaMDMxMTAvBgNV BAMTKDNDOUQwNTNBNUU5ODU3NkZBODA2MjhEQzFCQkYxMTI3OEE1NzBDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirW+fpSLJZ/ErlXhm9jT3KFGg EVoE7t3TgN2EQtPTbUjihnNCYO4kiF9Gp7MhbYZf59GqYTyNhNq5ZNH/5V/ZVKBq B195wwQvqduGEFAagU1hanKmGCeMjAAieFIPk4aD7Nl4xwBrYU7hrFi6dMOy2l1N UYqeYt07sQ8/g4F6d/3mm7WCS2cwVUnPFmKNKilTPCZP4shv3feiuh8rNWimulRN QeMlnhh9hpXFXSHAYA/WqnGfH2JF0hywNr+Dv5YPrLamAJRCldnYTh5/kiOC1Mvr M4qLe9zDt2kr91HtIhhS7wTHUmYh/HBKh5yZ5LaofRn2HGO9f6Pp3gVXIrUvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPJ0FOl6YV2+oBijcG78RJ4pXDJEwHwYDVR0j BBgwFoAUWXBexFQPy1xMM5jFggsnS2VIiS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUF5dFhLcXo3QzdCTW8yNWtCcUN6Tmlhb0ZHTko4UmFKblQzY3BiZWFk MXcvMC81OTcwNUVDNDU0MEZDQjVDNEMzMzk4QzU4MjBCMjc0QjY1NDg4OTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5NzA1RUM0NTQwRkNCNUM0 QzMzOThDNTgyMEIyNzRCNjU0ODg5MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUF5dFhLcXo3QzdCTW8yNWtCcUN6Tmlhb0ZHTko4UmFKblQzY3BiZWFkMXcvMC81 OTcwNUVDNDU0MEZDQjVDNEMzMzk4QzU4MjBCMjc0QjY1NDg4OTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAid/X2uysPVX0r06YcZOER0+4XEnvYN9dGxMUjpCbWwcML0OmJKcR21zFZHgr 2vKrvYzsu/9L+XOkvh2wEPaM0GsQJh6Ga42tcQZbCavAp7rnhb1NUivWvkIqOHnq G4B1Mn45IEbOwJw3C+hdVfNXMKpVFSvA+0AkWDFa5v3il+7r8qRk3ofpOvSFkpYx SEU2qCgZiapK+6EkGPxbFNT/lFOaH9tWpBGhC1/z+T/kTB+hQPrlu/UBpFIDUJdF tM9MoVgaFoy8nnsKlwmkqdZrZ8BQooX/7zm+JvuBWYGVNIhoV66G8UEGk8HPAKcS qaTmb40IihPCNdj9Tzs/DSGtJA== -----END CERTIFICATE-----Generated at Wed Dec 24 22:46:19 2025 by rpki-client