This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft File: 143298B08D8709A1286FF347632874F903802FF3.mft (raw, json) Hash identifier: KAAGyrGwHc2CmMzuERk7K3vNPXeXU6XDTMvXyWMId2Q= Subject key identifier: 91:E5:8A:2F:0D:B0:F4:8C:D2:E0:F6:A6:1A:14:5F:61:10:29:6F:93 Authority key identifier: 14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3 Certificate issuer: /CN=143298B08D8709A1286FF347632874F903802FF3 Certificate serial: 76CDCF2ECE1CDE7C5D49E24D532EDF0D87C3A395 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft Manifest number: 032C Signing time: Mon 29 Dec 2025 20:21:46 +0000 Manifest this update: Mon 29 Dec 2025 20:16:46 +0000 Manifest next update: Tue 30 Dec 2025 21:24:46 +0000 Files and hashes: 1: 34352e3138372e34302e302f32322d3332203d3e20323639343834.roa (hash: TFwYW1eAsH2Z0vBz8oMNJ7Db7Yr0FHwQfa7Oj5EHfT4=) 2: 143298B08D8709A1286FF347632874F903802FF3.crl (hash: LkwnaZSPjBo/kAe3Odf+gaP43jec8fAubVrfwuMIRKM=) 3: 323830343a363535383a3a2f33322d313238203d3e20323639343834.roa (hash: jP4bu1S6ue8/LKf2QuMYQPtFiGxoh7tBsl6jagN2ek8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.crl rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 30 Dec 2025 21:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:cd:cf:2e:ce:1c:de:7c:5d:49:e2:4d:53:2e:df:0d:87:c3:a3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143298B08D8709A1286FF347632874F903802FF3 Validity Not Before: Dec 29 20:16:46 2025 GMT Not After : Dec 30 21:24:46 2025 GMT Subject: CN=91E58A2F0DB0F48CD2E0F6A61A145F6110296F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c0:e8:a9:76:9a:6a:a2:b6:2a:23:88:2d:33: 04:a4:08:ec:5c:8f:7f:ba:a5:2e:b7:af:45:23:55: e8:23:87:24:8c:71:72:03:5c:d8:22:96:e6:f5:15: e4:e7:85:33:0b:f0:bb:d8:09:4a:55:8c:14:44:55: e7:13:9e:92:b9:45:30:4b:df:e0:53:98:f9:13:3e: 08:76:d4:4c:75:b2:90:82:14:e3:fd:a5:8f:15:c0: 83:5d:5d:8e:bf:86:e5:c6:fc:29:db:0c:70:d6:e3: f6:a6:e4:5c:8b:a6:a7:b6:e8:47:64:89:08:9f:c4: df:48:ba:15:31:bb:57:5e:44:83:90:6a:80:86:b3: 84:ab:0a:4c:e5:7d:f2:f2:f1:5c:8d:9d:3d:7e:7e: 0b:36:58:56:96:65:23:89:6a:56:53:cd:b0:56:ef: f0:0e:4c:37:4f:03:01:59:3d:07:fd:60:1d:c4:01: 55:ef:20:68:f4:94:f5:ca:c9:59:1a:d9:bf:60:28: 0e:a1:af:89:bf:73:c7:51:e6:8f:93:ec:32:c2:94: c0:19:c4:cc:ee:5f:90:a2:25:64:02:19:72:86:02: 54:e2:d2:e3:05:06:88:e0:63:5c:86:90:cc:70:36: 15:08:a4:35:4a:c6:7a:46:be:ff:e9:ad:9b:37:88: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E5:8A:2F:0D:B0:F4:8C:D2:E0:F6:A6:1A:14:5F:61:10:29:6F:93 X509v3 Authority Key Identifier: keyid:14:32:98:B0:8D:87:09:A1:28:6F:F3:47:63:28:74:F9:03:80:2F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/143298B08D8709A1286FF347632874F903802FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/143298B08D8709A1286FF347632874F903802FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8a:be:cb:70:08:2d:47:77:63:2d:ca:22:8b:25:a6:12:8b: d2:15:ff:7e:31:32:c8:f5:cc:8c:bd:99:26:ac:36:76:94:ff: db:ec:ec:01:c9:db:24:72:2b:ed:ac:b6:49:d8:08:fb:cc:74: f3:c1:9a:8d:62:2f:a7:4e:ef:dd:54:a0:be:33:8e:88:ee:43: 98:14:66:f6:74:91:fc:a9:f4:3c:e5:a6:e7:69:c2:35:5b:49: 7c:6c:6b:81:e6:9b:cc:cf:ca:e4:f3:2c:ab:3b:62:da:82:15: 7a:73:a8:68:6a:c5:0a:59:d2:2a:24:7e:0c:c8:b9:f3:4e:ce: f4:1f:9d:61:0e:5e:57:a0:70:91:ef:d5:e9:11:85:ee:d9:19: 64:27:b6:77:0f:7d:0a:52:d1:44:46:ae:e6:48:11:b4:3c:59: 6a:a9:bd:f2:54:f0:c4:fa:cd:f4:db:fd:3f:e6:8f:ff:82:e3: c7:dc:a0:e5:61:90:f9:29:4a:48:02:bc:5c:33:03:db:3c:91: e7:d6:8d:27:9c:35:1b:9d:58:39:06:6b:96:ae:c3:34:89:e1: 36:61:e5:9b:5c:6c:0e:93:db:93:72:14:a9:62:dc:60:96:77: 8e:5c:46:07:1f:dc:91:17:bd:f1:ca:2e:5d:b9:dc:34:04:e5: 4d:60:29:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUds3PLs4c3nxdSeJNUy7fDYfDo5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQzMjk4QjA4RDg3MDlBMTI4NkZGMzQ3NjMyODc0Rjkw MzgwMkZGMzAeFw0yNTEyMjkyMDE2NDZaFw0yNTEyMzAyMTI0NDZaMDMxMTAvBgNV BAMTKDkxRTU4QTJGMERCMEY0OENEMkUwRjZBNjFBMTQ1RjYxMTAyOTZGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwOipdppqorYqI4gtMwSkCOxc j3+6pS63r0UjVegjhySMcXIDXNgilub1FeTnhTML8LvYCUpVjBREVecTnpK5RTBL 3+BTmPkTPgh21Ex1spCCFOP9pY8VwINdXY6/huXG/CnbDHDW4/am5FyLpqe26Edk iQifxN9IuhUxu1deRIOQaoCGs4SrCkzlffLy8VyNnT1+fgs2WFaWZSOJalZTzbBW 7/AOTDdPAwFZPQf9YB3EAVXvIGj0lPXKyVka2b9gKA6hr4m/c8dR5o+T7DLClMAZ xMzuX5CiJWQCGXKGAlTi0uMFBojgY1yGkMxwNhUIpDVKxnpGvv/prZs3iKN3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkeWKLw2w9IzS4PamGhRfYRApb5MwHwYDVR0j BBgwFoAUFDKYsI2HCaEob/NHYyh0+QOAL/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2 VWIvMC8xNDMyOThCMDhEODcwOUExMjg2RkYzNDc2MzI4NzRGOTAzODAyRkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MzI5OEIwOEQ4NzA5QTEy ODZGRjM0NzYzMjg3NEY5MDM4MDJGRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2VWIvMC8x NDMyOThCMDhEODcwOUExMjg2RkYzNDc2MzI4NzRGOTAzODAyRkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiYq+y3AILUd3Yy3KIoslphKL0hX/fjEyyPXMjL2ZJqw2dpT/2+zsAcnbJHIr 7ay2SdgI+8x088GajWIvp07v3VSgvjOOiO5DmBRm9nSR/Kn0POWm52nCNVtJfGxr geabzM/K5PMsqzti2oIVenOoaGrFClnSKiR+DMi5807O9B+dYQ5eV6Bwke/V6RGF 7tkZZCe2dw99ClLRREau5kgRtDxZaqm98lTwxPrN9Nv9P+aP/4Ljx9yg5WGQ+SlK SAK8XDMD2zyR59aNJ5w1G51YOQZrlq7DNInhNmHlm1xsDpPbk3IUqWLcYJZ3jlxG Bx/ckRe98couXbncNATlTWApKA== -----END CERTIFICATE-----Generated at Tue Dec 30 06:26:05 2025 by rpki-client