This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: icjllXuJMAEtMxzHN7Wtlh+O8YqT7oC/jVoPSNz0kqE= Subject key identifier: 8A:3A:6F:95:6D:BE:79:E1:70:72:89:AC:D9:B4:16:8A:A8:CF:24:C1 Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 7D12935DCE60AE7CAB2CD0711F141593E100CCEF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 0340 Signing time: Fri 19 Dec 2025 20:50:32 +0000 Manifest this update: Fri 19 Dec 2025 20:45:32 +0000 Manifest next update: Sat 20 Dec 2025 20:51:32 +0000 Files and hashes: 1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=) 2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: Tj1JJx56GxVv0A0UoC4KwJq+LDGbVMaxbxk30OFJj2E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 20:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:12:93:5d:ce:60:ae:7c:ab:2c:d0:71:1f:14:15:93:e1:00:cc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: Dec 19 20:45:32 2025 GMT Not After : Dec 20 20:51:32 2025 GMT Subject: CN=8A3A6F956DBE79E1707289ACD9B4168AA8CF24C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:b8:45:d1:37:d9:2d:d8:ad:15:6a:91:46: 3a:18:7f:44:dd:7c:46:ea:33:ba:31:3c:9c:9a:21: e3:34:b5:b9:18:68:9e:9d:c5:63:7a:b2:65:bb:49: 60:94:c8:e6:a1:33:62:06:d8:eb:12:9a:b9:2d:af: 32:5a:47:42:3c:2f:3f:ce:2b:c1:97:e6:0c:0f:6c: 47:93:10:ff:50:4b:8c:0f:7c:0e:87:75:fd:9b:02: 18:24:62:b3:c7:8f:fe:38:96:25:88:05:fa:af:04: 1f:bb:ad:4b:5f:d3:46:70:7a:23:8d:11:48:d9:30: 10:ab:ef:aa:7d:7e:f4:53:db:02:62:74:4a:5e:d1: 6a:92:d8:c7:13:f0:39:ec:5d:09:bd:c1:e5:ad:c5: 3d:e5:be:88:5c:ce:2c:c5:e2:3c:f8:8f:9f:ed:7a: 68:17:d4:a2:77:29:14:ba:94:21:3c:2a:82:9d:e4: 49:f0:86:06:cc:0f:4f:84:ae:cc:2a:f7:08:de:1e: 98:b0:e2:40:47:2b:5f:d8:c8:c1:cb:01:c0:33:a6: ca:6b:4e:d7:20:32:87:88:25:3e:a6:f1:62:53:cd: 72:ab:6e:c2:e6:a0:0e:7b:b9:45:26:40:06:33:30: 67:4b:98:d1:a2:d0:4d:91:e1:46:db:8f:b5:a4:09: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3A:6F:95:6D:BE:79:E1:70:72:89:AC:D9:B4:16:8A:A8:CF:24:C1 X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a0:19:de:9f:c1:b2:b5:7e:41:2f:e1:01:e8:21:fc:68:7f: 72:ed:3c:81:fb:b6:89:53:54:96:5c:a2:1c:18:14:3b:0c:d2: 51:65:de:4b:61:9f:de:64:cc:ac:52:7f:40:b9:4f:f1:70:18: cc:e0:a8:ff:f2:e5:24:ab:53:5d:95:f8:41:cf:cc:54:b7:d8: 85:32:f5:f2:a0:f4:ba:3f:45:96:2f:00:48:f7:f6:84:6a:81: 78:c6:20:ba:e6:ec:78:ea:8a:29:90:95:50:c5:ce:bd:2a:30: a4:b7:a3:7f:d3:b7:f5:46:45:20:31:f6:2d:10:c2:9c:b9:e7: c1:e8:ad:75:f7:2f:ab:8f:39:0c:1d:90:70:02:16:b0:86:4e: ef:b7:d9:3b:de:62:87:fd:df:70:0b:93:fa:a6:49:40:31:f9: 17:81:9a:6f:f5:35:77:b1:2c:75:e9:53:26:80:f2:d4:9d:ee: 93:4e:5c:db:43:ff:7d:97:1d:41:00:b8:b4:c0:d2:80:ed:1a: 4f:cd:b0:44:7d:51:7b:7d:1d:cb:59:ed:c4:cf:12:ee:a6:03: 06:4c:06:77:57:19:1c:77:41:66:4c:b0:61:d7:b8:e3:ed:db: 2f:cb:f1:e4:1b:c2:3e:94:26:22:9e:20:2d:ee:d4:24:be:59: 65:ab:51:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfRKTXc5grnyrLNBxHxQVk+EAzO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNTEyMTkyMDQ1MzJaFw0yNTEyMjAyMDUxMzJaMDMxMTAvBgNV BAMTKDhBM0E2Rjk1NkRCRTc5RTE3MDcyODlBQ0Q5QjQxNjhBQThDRjI0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZUrhF0TfZLditFWqRRjoYf0Td fEbqM7oxPJyaIeM0tbkYaJ6dxWN6smW7SWCUyOahM2IG2OsSmrktrzJaR0I8Lz/O K8GX5gwPbEeTEP9QS4wPfA6Hdf2bAhgkYrPHj/44liWIBfqvBB+7rUtf00ZweiON EUjZMBCr76p9fvRT2wJidEpe0WqS2McT8DnsXQm9weWtxT3lvohczizF4jz4j5/t emgX1KJ3KRS6lCE8KoKd5EnwhgbMD0+Erswq9wjeHpiw4kBHK1/YyMHLAcAzpspr TtcgMoeIJT6m8WJTzXKrbsLmoA57uUUmQAYzMGdLmNGi0E2R4Ubbj7WkCRg9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUijpvlW2+eeFwcoms2bQWiqjPJMEwHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJaAZ3p/BsrV+QS/hAegh/Gh/cu08gfu2iVNUllyiHBgUOwzSUWXeS2Gf3mTM rFJ/QLlP8XAYzOCo//LlJKtTXZX4Qc/MVLfYhTL18qD0uj9Fli8ASPf2hGqBeMYg uubseOqKKZCVUMXOvSowpLejf9O39UZFIDH2LRDCnLnnweitdfcvq485DB2QcAIW sIZO77fZO95ih/3fcAuT+qZJQDH5F4Gab/U1d7EsdelTJoDy1J3uk05c20P/fZcd QQC4tMDSgO0aT82wRH1Re30dy1ntxM8S7qYDBkwGd1cZHHdBZkywYde44+3bL8vx 5BvCPpQmIp4gLe7UJL5ZZatRlA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:05:53 2025 by rpki-client