This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft File: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json) Hash identifier: kakutHEF3S6aNT0P+Ft5Wyr43Or/snh0f+eZsUpwL+Y= Subject key identifier: 5F:2C:0A:45:14:AA:67:82:40:1E:28:3D:8E:FD:B4:38:C9:3E:9A:7B Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Certificate serial: 13BD3A46E98DBF65433F21C9CCD4C3479B15D01B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft Manifest number: 0348 Signing time: Tue 23 Dec 2025 19:20:47 +0000 Manifest this update: Tue 23 Dec 2025 19:15:47 +0000 Manifest next update: Wed 24 Dec 2025 19:20:47 +0000 Files and hashes: 1: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=) 2: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: hEeVWxTVZvPVqHqcLFALInUIyhbQJJ2EjB0tZPjBFHU=) 3: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 19:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:3a:46:e9:8d:bf:65:43:3f:21:c9:cc:d4:c3:47:9b:15:d0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Validity Not Before: Dec 23 19:15:47 2025 GMT Not After : Dec 24 19:20:47 2025 GMT Subject: CN=5F2C0A4514AA6782401E283D8EFDB438C93E9A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:aa:82:60:d0:ab:8e:13:4a:4a:4a:65:7c: cb:e7:07:6a:42:dd:4e:49:4e:12:27:02:b1:c5:54: 1b:af:38:a8:88:55:8b:58:49:bc:6b:58:14:2a:00: f5:84:b4:4e:d4:e6:b7:63:50:86:70:c7:e2:be:d5: 8c:f9:93:77:32:06:b0:44:e4:ab:00:11:12:02:4c: ac:0a:f1:0f:cd:4c:c3:e1:23:da:17:e8:f0:85:89: 6b:5e:1a:46:89:68:2b:80:5f:9e:f0:98:dd:5b:e0: 87:72:ea:bc:22:8f:70:3b:ea:a5:7c:ff:aa:2e:0e: dd:c6:cc:be:4e:e7:87:64:82:72:fc:1d:b9:8b:0c: a8:7c:db:75:0f:de:bf:b4:a9:f3:43:2d:8c:ac:ac: 39:37:2c:1f:f4:74:6b:c7:f5:d1:cd:08:ce:33:58: e4:ec:79:e9:4b:58:c1:5f:5c:51:b1:45:83:9e:41: 5c:e0:b6:23:82:d9:23:2e:e6:74:99:e4:0a:4d:be: 97:4f:1d:76:fe:47:ef:79:80:4c:5a:8e:85:59:28: 85:af:00:7d:f1:69:e0:ff:55:2f:dd:36:e1:17:6c: 46:71:9b:9b:12:fe:3f:48:49:7d:00:7d:0e:8b:94: 8b:15:81:38:37:38:28:62:29:b7:16:72:67:5f:dc: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:0A:45:14:AA:67:82:40:1E:28:3D:8E:FD:B4:38:C9:3E:9A:7B X509v3 Authority Key Identifier: keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:21:cf:f6:f8:a0:a6:58:e2:da:bc:48:a4:84:7e:0a:35:ce: 7d:2a:d1:04:05:77:cc:da:f0:60:a4:e5:f1:b8:46:d8:e1:15: 0f:e6:d2:00:8e:d9:1a:44:26:89:96:38:86:e3:58:85:ea:ea: af:3f:27:33:67:3f:47:f1:ab:29:33:75:de:e4:50:8e:ae:59: 16:d9:4b:23:f5:e5:b5:be:09:b8:29:86:46:a7:cc:21:bc:e9: 55:f1:42:e4:59:cc:8b:e8:7e:d4:04:a7:80:4c:a1:a1:e1:ed: fe:43:b6:39:e1:d3:d7:21:cf:32:e7:b0:93:ea:74:34:3c:4c: 85:97:c0:a8:e5:91:6c:79:54:d3:86:0f:9d:45:14:ad:b8:e1: 69:a3:d7:eb:94:43:99:27:72:11:eb:cf:6b:9a:ca:94:31:3c: b8:2b:51:24:cd:0d:f5:ab:f9:77:5e:e0:df:4a:2b:3d:9a:21: f3:ac:be:e5:fc:33:34:95:2e:bc:bd:e3:ac:75:93:40:b5:2b: 48:2b:da:ac:3a:7e:88:f4:23:bf:aa:c6:9e:78:c0:25:69:10: 04:57:29:14:0a:b7:53:99:0b:b1:ac:8b:96:16:4d:c4:86:c5: 5e:b0:ff:b4:3f:36:b6:67:e6:1e:9c:d4:58:4b:ed:e4:ff:d0: 39:45:1c:10 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUE706RumNv2VDPyHJzNTDR5sV0BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy RkYwRjYyOTAeFw0yNTEyMjMxOTE1NDdaFw0yNTEyMjQxOTIwNDdaMDMxMTAvBgNV BAMTKDVGMkMwQTQ1MTRBQTY3ODI0MDFFMjgzRDhFRkRCNDM4QzkzRTlBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZaqCYNCrjhNKSkplfMvnB2pC 3U5JThInArHFVBuvOKiIVYtYSbxrWBQqAPWEtE7U5rdjUIZwx+K+1Yz5k3cyBrBE 5KsAERICTKwK8Q/NTMPhI9oX6PCFiWteGkaJaCuAX57wmN1b4Idy6rwij3A76qV8 /6ouDt3GzL5O54dkgnL8HbmLDKh823UP3r+0qfNDLYysrDk3LB/0dGvH9dHNCM4z WOTseelLWMFfXFGxRYOeQVzgtiOC2SMu5nSZ5ApNvpdPHXb+R+95gExajoVZKIWv AH3xaeD/VS/dNuEXbEZxm5sS/j9ISX0AfQ6LlIsVgTg3OChiKbcWcmdf3DEPAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUXywKRRSqZ4JAHig9jv20OMk+mnswHwYDVR0j BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lE enp6VVc2OUZuZTJSR1p6Ym1YWkpwbUdqOXdDZGpHQ2F0S0RQMk1hUFUvMS84OTBB RDU4NEM4M0Q0NEZGQjJERkZGOTU1RDFCRDFDNzJGRjBGNjI5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA myHP9vigplji2rxIpIR+CjXOfSrRBAV3zNrwYKTl8bhG2OEVD+bSAI7ZGkQmiZY4 huNYherqrz8nM2c/R/GrKTN13uRQjq5ZFtlLI/Xltb4JuCmGRqfMIbzpVfFC5FnM i+h+1ASngEyhoeHt/kO2OeHT1yHPMuewk+p0NDxMhZfAqOWRbHlU04YPnUUUrbjh aaPX65RDmSdyEevPa5rKlDE8uCtRJM0N9av5d17g30orPZoh86y+5fwzNJUuvL3j rHWTQLUrSCvarDp+iPQjv6rGnnjAJWkQBFcpFAq3U5kLsayLlhZNxIbFXrD/tD82 tmfmHpzUWEvt5P/QOUUcEA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:45 2025 by rpki-client