This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json) Hash identifier: gpJEhJmUzgEtL+q4Gm5B7gw2a4STk7rb80zpA/aG+tk= Subject key identifier: E3:39:B4:A0:77:13:EF:EF:65:5B:FE:F7:2E:9E:18:BB:1B:C0:44:49 Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 2BF6B201BF38B4120D6A81357B26EEEA622E6F97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft Manifest number: A3 Signing time: Fri 19 Dec 2025 15:38:19 +0000 Manifest this update: Fri 19 Dec 2025 15:33:19 +0000 Manifest next update: Sat 20 Dec 2025 17:57:19 +0000 Files and hashes: 1: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=) 2: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: 6hBWc0dxqpu45fboP17WCm8tz0QNcEdqzUvFP2HH+K8=) 3: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f6:b2:01:bf:38:b4:12:0d:6a:81:35:7b:26:ee:ea:62:2e:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Dec 19 15:33:19 2025 GMT Not After : Dec 20 17:57:19 2025 GMT Subject: CN=E339B4A07713EFEF655BFEF72E9E18BB1BC04449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:bc:85:fa:da:be:4b:18:a8:32:df:4b:50: 26:ac:f9:f8:2b:90:a2:da:f2:cf:78:a8:8c:c8:22: 20:c0:b2:be:51:dc:b7:f6:b9:f2:73:36:3b:fb:e0: 2b:08:e2:cd:84:eb:14:31:57:19:7e:01:8d:18:24: c0:43:1f:8b:a6:e7:0d:15:15:d9:a2:d2:f6:01:db: ef:d5:c5:bb:4f:a2:d0:21:58:41:12:a4:fe:59:83: 48:34:94:3c:95:f3:c4:47:1f:63:30:29:4d:09:78: 41:76:cf:73:7f:39:bd:f6:3b:08:2d:6c:96:fc:96: 41:83:24:12:22:29:c9:5b:38:ad:12:98:88:54:f7: 28:89:63:73:87:3b:28:85:38:e0:ef:97:ce:be:7a: 95:b5:b3:7e:fb:d9:fd:70:25:db:c2:9e:c0:e5:9f: 5c:31:22:fe:d6:2a:d2:23:1d:a4:79:07:9e:b0:e7: e4:6a:b5:69:62:ab:19:5c:8c:ea:eb:ba:d1:a7:cf: 8b:60:c1:b0:1f:56:78:a1:08:35:11:fb:6c:f5:a8: f0:54:fd:7c:b1:84:c3:86:09:5f:84:a7:76:d9:96: d0:78:ed:d6:33:4e:42:dd:90:23:7f:42:d4:40:5a: 82:9c:5d:d9:93:7b:3d:f2:b1:41:18:3d:64:f7:60: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:B4:A0:77:13:EF:EF:65:5B:FE:F7:2E:9E:18:BB:1B:C0:44:49 X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9d:ab:50:00:59:99:61:fd:a4:2d:6b:1c:90:5b:7f:6b:52: 46:9c:fc:c1:15:67:8e:03:c8:2f:36:87:d2:b2:67:e8:81:b1: 76:70:35:c4:a1:29:76:b1:31:c6:44:a3:43:75:06:b1:52:f2: 32:49:4e:af:1d:35:80:16:7b:0e:92:5b:29:3b:bf:fa:47:ff: 1a:b9:8a:8c:28:73:c5:5c:46:62:1c:8d:fa:e6:96:58:b9:67: e3:4c:83:f0:14:f8:62:83:e8:23:d3:12:a8:4a:36:78:0b:13: 4b:1b:89:3b:86:40:ab:60:b9:95:43:90:6d:f1:8c:db:9a:d4: fc:d0:e0:80:33:cf:41:78:f5:69:53:28:5b:09:53:cb:03:7f: 29:d7:97:a7:c7:f4:30:43:ed:e6:ff:c8:86:92:6a:00:dc:5e: 68:eb:81:4c:ce:c8:55:0a:c9:42:8f:79:c3:0e:21:b4:14:36: 1c:0a:77:a6:fb:c0:c4:f1:a7:c2:70:36:bb:14:19:9e:41:aa: cc:52:b3:dc:f1:10:14:eb:0e:e2:33:31:e5:d5:7b:e4:84:58: ac:31:2b:c5:2f:62:f9:00:d3:2b:dd:97:20:81:5d:4d:4b:43: 44:4b:d0:25:71:3e:8e:df:5c:c4:02:9a:4b:80:56:3b:1b:46: da:32:4b:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK/ayAb84tBINaoE1eybu6mIub5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNTEyMTkxNTMzMTlaFw0yNTEyMjAxNzU3MTlaMDMxMTAvBgNV BAMTKEUzMzlCNEEwNzcxM0VGRUY2NTVCRkVGNzJFOUUxOEJCMUJDMDQ0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRRLyF+tq+SxioMt9LUCas+fgr kKLa8s94qIzIIiDAsr5R3Lf2ufJzNjv74CsI4s2E6xQxVxl+AY0YJMBDH4um5w0V Fdmi0vYB2+/VxbtPotAhWEESpP5Zg0g0lDyV88RHH2MwKU0JeEF2z3N/Ob32Owgt bJb8lkGDJBIiKclbOK0SmIhU9yiJY3OHOyiFOODvl86+epW1s3772f1wJdvCnsDl n1wxIv7WKtIjHaR5B56w5+RqtWliqxlcjOrrutGnz4tgwbAfVnihCDUR+2z1qPBU /XyxhMOGCV+Ep3bZltB47dYzTkLdkCN/QtRAWoKcXdmTez3ysUEYPWT3YHaJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4zm0oHcT7+9lW/73Lp4YuxvAREkwHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlp2rUABZmWH9pC1rHJBbf2tSRpz8wRVnjgPILzaH0rJn6IGxdnA1xKEpdrEx xkSjQ3UGsVLyMklOrx01gBZ7DpJbKTu/+kf/GrmKjChzxVxGYhyN+uaWWLln40yD 8BT4YoPoI9MSqEo2eAsTSxuJO4ZAq2C5lUOQbfGM25rU/NDggDPPQXj1aVMoWwlT ywN/KdeXp8f0MEPt5v/IhpJqANxeaOuBTM7IVQrJQo95ww4htBQ2HAp3pvvAxPGn wnA2uxQZnkGqzFKz3PEQFOsO4jMx5dV75IRYrDErxS9i+QDTK92XIIFdTUtDREvQ JXE+jt9cxAKaS4BWOxtG2jJLlA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:14:37 2025 by rpki-client