This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json) Hash identifier: Ffi25as7Zv99LTbo872t1jlySEnzuS2Cv8/lNi8+2u4= Subject key identifier: AE:5A:8D:2D:2A:D8:6F:5F:BF:94:B6:B6:43:CB:A4:EA:97:AA:0A:00 Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Certificate serial: 4643EF0C2DC730CA1A124B65DCC3B7DC13C44E78 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft Manifest number: 90 Signing time: Fri 19 Dec 2025 21:18:30 +0000 Manifest this update: Fri 19 Dec 2025 21:13:30 +0000 Manifest next update: Sat 20 Dec 2025 22:11:30 +0000 Files and hashes: 1: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: yW2r4OO6HaNkgVRp4DgS6hG9uXe1ZHHYqm4FwQdhoJM=) 2: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: ftRoesKFKds6Be/kBZJyVwaqm83zyv3oFf2fBISC6Gw=) 3: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: Ig81MhyTMTsUKsO5gGo6rZkt1/dg0JFL7Qqb0kCwnZc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 22:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:43:ef:0c:2d:c7:30:ca:1a:12:4b:65:dc:c3:b7:dc:13:c4:4e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Validity Not Before: Dec 19 21:13:30 2025 GMT Not After : Dec 20 22:11:30 2025 GMT Subject: CN=AE5A8D2D2AD86F5FBF94B6B643CBA4EA97AA0A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:eb:99:25:6d:8e:60:be:99:98:eb:e8:c5: ff:84:38:5c:a5:4a:9c:9b:7a:7c:77:3e:66:a9:ba: 5f:11:47:b9:77:9c:8a:a6:83:10:cd:00:1e:e1:b7: 25:16:2d:23:f5:43:f2:e4:40:8a:0d:a6:50:a3:2a: e1:01:9e:3e:7e:0b:66:20:3b:67:88:55:57:d7:30: 26:02:6d:95:a8:6e:18:39:62:9b:6d:61:07:82:59: 80:76:41:8a:6f:fe:3f:ed:ea:49:ba:17:2d:61:55: 01:63:42:97:4c:4a:a7:cb:2e:76:cc:4f:cc:78:84: 03:0c:95:4c:e9:ea:a1:15:24:28:64:9f:ab:0c:98: 5d:fa:56:4f:54:39:4e:bd:84:be:4e:bf:ab:b5:69: 2e:e4:1e:15:3e:a1:1f:78:0f:0f:59:87:b0:b8:69: 0f:99:ca:dd:01:87:05:9c:80:c6:7c:0e:6b:8d:2d: cc:3d:23:6d:55:b1:0c:04:9b:d7:4e:0e:3b:83:4f: 84:82:d7:83:38:60:83:bb:d7:7a:9f:00:e8:24:a8: 73:5a:aa:9c:aa:68:f5:53:6c:26:f7:1e:c5:67:be: 9e:6f:8a:46:44:56:45:73:45:d9:61:f7:ed:15:0a: bf:24:54:d6:e3:03:cd:33:4b:90:86:07:6f:56:3f: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5A:8D:2D:2A:D8:6F:5F:BF:94:B6:B6:43:CB:A4:EA:97:AA:0A:00 X509v3 Authority Key Identifier: keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b0:0b:c0:ee:5b:a6:26:16:fb:b6:be:10:c6:96:24:4a:3b: e3:db:64:20:a5:99:56:22:ae:98:a2:6c:9e:89:c5:f5:83:4f: 00:ba:86:d3:43:36:8d:bb:27:db:40:90:7c:f4:00:40:67:c5: 35:49:30:c9:1a:11:e6:47:cb:30:bc:01:3a:27:69:67:cd:0a: eb:94:2f:84:36:e2:13:61:fe:e0:1d:ce:66:ed:70:6b:a2:3e: 8f:85:2f:20:3c:36:a5:9b:85:bf:78:66:4a:f5:51:41:c3:0f: b4:ec:11:96:f0:c8:89:24:14:90:87:a8:34:09:f6:4a:e9:fa: 64:fe:12:4b:16:4c:18:39:af:a5:31:0a:76:6d:a2:e7:7c:ad: a4:05:28:71:19:49:c0:55:68:2e:d8:a8:85:5e:47:13:40:c0: 6d:83:c8:66:f3:42:98:2c:4c:a0:f0:3d:81:07:cb:9a:6d:e9: 06:7a:eb:c6:13:33:02:19:24:b6:78:d1:60:4a:18:49:9b:a3: d9:a6:47:df:c8:6f:4f:da:18:d0:43:45:ba:a2:1f:d9:07:cc: bd:05:73:89:e3:3a:d1:f3:3e:dd:ba:fc:12:ae:22:4f:41:f4: 4b:fe:c4:bb:c0:58:e4:dd:70:3d:75:db:4e:57:d7:02:2a:5a: 36:d9:31:79 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIURkPvDC3HMMoaEktl3MO33BPETngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5 NUFGMzM5MDAeFw0yNTEyMTkyMTEzMzBaFw0yNTEyMjAyMjExMzBaMDMxMTAvBgNV BAMTKEFFNUE4RDJEMkFEODZGNUZCRjk0QjZCNjQzQ0JBNEVBOTdBQTBBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVeuZJW2OYL6ZmOvoxf+EOFyl Spybenx3Pmapul8RR7l3nIqmgxDNAB7htyUWLSP1Q/LkQIoNplCjKuEBnj5+C2Yg O2eIVVfXMCYCbZWobhg5YpttYQeCWYB2QYpv/j/t6km6Fy1hVQFjQpdMSqfLLnbM T8x4hAMMlUzp6qEVJChkn6sMmF36Vk9UOU69hL5Ov6u1aS7kHhU+oR94Dw9Zh7C4 aQ+Zyt0BhwWcgMZ8DmuNLcw9I21VsQwEm9dODjuDT4SC14M4YIO713qfAOgkqHNa qpyqaPVTbCb3HsVnvp5vikZEVkVzRdlh9+0VCr8kVNbjA80zS5CGB29WPyUrAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUrlqNLSrYb1+/lLa2Q8uk6peqCgAwHwYDVR0j BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N4 eFRCa3pKQlpTNkx1RXgyWkQxNTlxcVdNcHNuWEw4WGV4R0tzcW44NEEvMC8yOEI0 QUJCQUZCN0M3Njg1NENGQkYzQTQ0NjQ3MERBQTk1QUYzMzkwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA lbALwO5bpiYW+7a+EMaWJEo749tkIKWZViKumKJsnonF9YNPALqG00M2jbsn20CQ fPQAQGfFNUkwyRoR5kfLMLwBOidpZ80K65QvhDbiE2H+4B3OZu1wa6I+j4UvIDw2 pZuFv3hmSvVRQcMPtOwRlvDIiSQUkIeoNAn2Sun6ZP4SSxZMGDmvpTEKdm2i53yt pAUocRlJwFVoLtiohV5HE0DAbYPIZvNCmCxMoPA9gQfLmm3pBnrrxhMzAhkktnjR YEoYSZuj2aZH38hvT9oY0ENFuqIf2QfMvQVzieM60fM+3br8Eq4iT0H0S/7Eu8BY 5N1wPXXbTlfXAipaNtkxeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:33:55 2025 by rpki-client