This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft File: 89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft (raw, json) Hash identifier: ytJ2AuEM3hg1M+LOrSKJrERKpx/dSDpE4ti29dewPI8= Subject key identifier: DB:D3:04:E7:B6:33:4B:11:87:79:6C:40:27:E7:39:97:3D:27:5A:17 Authority key identifier: 89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63 Certificate issuer: /CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63 Certificate serial: 0F5B11B9194E6B4D10535B8A35F0CE747C6876B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft Manifest number: 7A Signing time: Sun 21 Dec 2025 23:06:13 +0000 Manifest this update: Sun 21 Dec 2025 23:01:13 +0000 Manifest next update: Tue 23 Dec 2025 01:50:13 +0000 Files and hashes: 1: 323830343a6330343a3a2f33322d3334203d3e203532363630.roa (hash: T/ISr6AnPghBbJBWVVD+iBDwfP9aFPIdZe1YY9Mqgrs=) 2: 3137372e36362e3234382e302f32312d3234203d3e203532363630.roa (hash: JidLuZ+zO4w45kPXHy+VvMd9bBjbo6MkVzByEneVpGI=) 3: 89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl (hash: /pF6bIp4JKZm2agK3oOCrAQPGj2GC2dIL7/J5rS+tyE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 01:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5b:11:b9:19:4e:6b:4d:10:53:5b:8a:35:f0:ce:74:7c:68:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63 Validity Not Before: Dec 21 23:01:13 2025 GMT Not After : Dec 23 01:50:13 2025 GMT Subject: CN=DBD304E7B6334B1187796C4027E739973D275A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:65:27:59:9a:f3:27:e5:d9:48:cd:0c:ab: e7:ca:b1:33:a7:e3:4b:f1:c2:74:63:49:e8:9c:24: d8:af:58:e6:d0:dd:4d:5f:05:d0:08:8d:5e:05:36: 9d:3d:26:95:ea:cb:41:06:15:02:1f:ac:c0:54:ce: 8a:ec:d5:d2:82:dd:dc:e1:43:37:03:07:93:36:d7: 36:3a:8f:02:d9:5e:2a:43:89:a0:10:9b:64:fb:9b: a0:60:40:d6:51:b0:2f:21:08:e2:0d:1f:df:27:a6: 11:41:5e:41:c6:60:25:d9:d6:7c:75:d8:48:02:c7: 34:b1:c8:18:fd:d7:d1:41:a9:12:34:fa:d5:ba:24: cf:69:79:54:4c:84:e4:02:ef:2f:46:5d:af:3b:2c: 0f:ad:0d:65:f5:d5:9a:de:03:cd:9c:68:d0:35:5d: 6c:bd:ff:9d:97:49:71:fa:fc:a4:a3:7c:6d:67:9a: 50:60:1e:05:57:37:83:ee:30:64:1e:70:14:af:50: db:14:b9:05:b8:8a:0f:8c:42:ae:6b:75:e9:16:14: db:d0:84:75:8e:e2:07:99:f6:f5:3b:60:dd:0b:34: bd:ea:e3:e4:07:db:0a:7c:19:3f:24:05:c8:15:50: 1c:d7:8b:04:cd:fc:7c:16:86:5d:ca:10:2b:14:a4: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D3:04:E7:B6:33:4B:11:87:79:6C:40:27:E7:39:97:3D:27:5A:17 X509v3 Authority Key Identifier: keyid:89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ce:03:b7:54:57:2d:12:47:10:d2:c9:e0:c5:5d:1b:e0:85: 25:27:6a:c8:32:0c:a3:6e:bb:d5:25:47:de:ef:33:07:70:f9: 68:99:3c:90:2d:a4:3f:bc:a5:a8:eb:01:b6:40:a7:dd:5f:ef: 2a:f7:0f:ae:29:87:56:71:9a:25:87:55:1b:89:a9:77:db:7c: 50:79:db:4b:2f:16:5c:4f:1c:d2:b3:71:9f:a0:c4:8d:19:af: 3e:01:ea:84:5d:87:30:12:1d:20:59:3e:36:4b:5e:bb:06:de: e6:c6:a5:ad:a2:b7:49:f6:f0:c2:5c:b2:89:69:62:00:2c:5c: 23:1a:5e:42:ff:05:91:84:f8:9f:60:2b:83:aa:65:fe:9d:79: 92:e1:d3:c7:52:6e:90:40:5e:3b:18:e4:35:28:96:ad:eb:00: 14:5b:dc:9a:c5:d9:bd:06:c7:f5:2c:3c:5d:e7:3f:f7:73:50: 40:a6:d2:98:3f:54:6c:2f:87:20:e1:7b:d0:5b:de:53:da:a9: f7:b2:52:3d:26:7a:4c:c6:d5:22:7b:ff:85:33:b6:97:71:ef: 0a:a1:e9:d1:d3:68:f4:59:93:68:76:d6:a1:8a:13:df:54:ab: b7:7f:fe:31:e9:7b:3c:11:a7:a6:2b:15:d3:ce:46:1c:27:52: e0:94:35:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD1sRuRlOa00QU1uKNfDOdHxodrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4MzBDQjlFMzk1MkVCQjg4RERFMUI2MzcwNzUyN0Q2 MkY3QUI2MzAeFw0yNTEyMjEyMzAxMTNaFw0yNTEyMjMwMTUwMTNaMDMxMTAvBgNV BAMTKERCRDMwNEU3QjYzMzRCMTE4Nzc5NkM0MDI3RTczOTk3M0QyNzVBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsWUnWZrzJ+XZSM0Mq+fKsTOn 40vxwnRjSeicJNivWObQ3U1fBdAIjV4FNp09JpXqy0EGFQIfrMBUzors1dKC3dzh QzcDB5M21zY6jwLZXipDiaAQm2T7m6BgQNZRsC8hCOINH98nphFBXkHGYCXZ1nx1 2EgCxzSxyBj919FBqRI0+tW6JM9peVRMhOQC7y9GXa87LA+tDWX11ZreA82caNA1 XWy9/52XSXH6/KSjfG1nmlBgHgVXN4PuMGQecBSvUNsUuQW4ig+MQq5rdekWFNvQ hHWO4geZ9vU7YN0LNL3q4+QH2wp8GT8kBcgVUBzXiwTN/HwWhl3KECsUpA3rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU29ME57YzSxGHeWxAJ+c5lz0nWhcwHwYDVR0j BBgwFoAUiYMMueOVLruI3eG2NwdSfWL3q2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNR MXEvMC84OTgzMENCOUUzOTUyRUJCODhEREUxQjYzNzA3NTI3RDYyRjdBQjYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5ODMwQ0I5RTM5NTJFQkI4 OERERTFCNjM3MDc1MjdENjJGN0FCNjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNRMXEvMC84 OTgzMENCOUUzOTUyRUJCODhEREUxQjYzNzA3NTI3RDYyRjdBQjYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJc4Dt1RXLRJHENLJ4MVdG+CFJSdqyDIMo2671SVH3u8zB3D5aJk8kC2kP7yl qOsBtkCn3V/vKvcPrimHVnGaJYdVG4mpd9t8UHnbSy8WXE8c0rNxn6DEjRmvPgHq hF2HMBIdIFk+Nkteuwbe5salraK3SfbwwlyyiWliACxcIxpeQv8FkYT4n2Arg6pl /p15kuHTx1JukEBeOxjkNSiWresAFFvcmsXZvQbH9Sw8Xec/93NQQKbSmD9UbC+H IOF70FveU9qp97JSPSZ6TMbVInv/hTO2l3HvCqHp0dNo9FmTaHbWoYoT31Srt3/+ Mel7PBGnpisV085GHCdS4JQ1Rg== -----END CERTIFICATE-----Generated at Mon Dec 22 14:31:25 2025 by rpki-client