This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft File: 28C222B8380EDA26588BC99D18AE110A348BF3D6.mft (raw, json) Hash identifier: tmoTgCI2W1ZCxZ3wYxsdBz/QPrr0mKyMjwqAL7h057E= Subject key identifier: 1D:E4:5A:3B:78:9B:57:4B:D8:29:91:5E:08:CA:78:EC:E6:40:6B:00 Authority key identifier: 28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6 Certificate issuer: /CN=28C222B8380EDA26588BC99D18AE110A348BF3D6 Certificate serial: 6418178458095A503F2AAB0C7481389F0850BF9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer Subject info access: rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft Manifest number: 09 Signing time: Wed 24 Dec 2025 08:09:21 +0000 Manifest this update: Wed 24 Dec 2025 08:04:21 +0000 Manifest next update: Thu 25 Dec 2025 10:12:21 +0000 Files and hashes: 1: 3230302e392e31362e302f32322d3234203d3e20323636323234.roa (hash: Z9fAIVDzwVC9lx9x1+YO7yTiPOnKszI+BQGCLE+rMDc=) 2: 323830343a336339633a3a2f33322d3438203d3e20323636323234.roa (hash: lROs3DH7Kbjm+zdA3pXcyqpBhe9buHxTAgOKDxnRtkw=) 3: 28C222B8380EDA26588BC99D18AE110A348BF3D6.crl (hash: Dz6tzl9sb2mFeD2F8xtu1Xw/lcgdbl6oxhVHsQ7oqZw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.crl rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 10:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:18:17:84:58:09:5a:50:3f:2a:ab:0c:74:81:38:9f:08:50:bf:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28C222B8380EDA26588BC99D18AE110A348BF3D6 Validity Not Before: Dec 24 08:04:21 2025 GMT Not After : Dec 25 10:12:21 2025 GMT Subject: CN=1DE45A3B789B574BD829915E08CA78ECE6406B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:9f:37:1f:84:18:24:0e:d6:4e:36:ba:74: 9e:39:e1:0e:d4:37:ec:56:e2:20:f7:9f:f6:7d:49: e7:1a:c1:11:1d:ee:c2:c2:cc:ea:ae:8a:22:b8:b9: 32:65:ce:72:85:e9:68:61:c3:76:d0:7c:69:68:95: ff:20:67:c2:00:99:e0:29:9a:23:2f:dd:38:03:c0: 35:78:90:0b:d4:cc:57:43:7c:1c:d2:93:5a:cd:92: ac:43:35:f1:81:36:d6:65:c7:5d:a6:6a:e2:48:90: 30:75:4b:24:70:32:0d:ca:5c:a5:d4:d0:ea:64:bb: 8a:a2:e6:ee:aa:1d:3d:48:e8:dc:f4:e4:af:33:aa: 47:a0:b3:3d:8c:75:3f:09:15:f6:cb:32:49:06:5f: e9:02:8c:ca:34:3d:e2:cd:1b:b7:a6:8e:bb:c1:95: 00:1f:fc:40:70:85:1c:f2:e1:4c:2b:8f:c0:53:42: 64:0c:7c:cf:8a:a1:2a:ad:0b:4e:c1:59:02:ec:19: 22:58:3c:ce:16:db:12:49:3e:d4:ad:ef:de:c2:03: 2d:db:4b:63:d0:5e:49:12:0b:aa:20:3a:76:c9:cb: 7b:1a:ff:03:05:f0:8d:b8:00:93:89:8f:26:c9:e0: 34:17:07:2b:30:52:a4:e0:7d:59:c5:4b:e3:e7:77: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E4:5A:3B:78:9B:57:4B:D8:29:91:5E:08:CA:78:EC:E6:40:6B:00 X509v3 Authority Key Identifier: keyid:28:C2:22:B8:38:0E:DA:26:58:8B:C9:9D:18:AE:11:0A:34:8B:F3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C222B8380EDA26588BC99D18AE110A348BF3D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2r9xwJhVpyjBT5fmCXnyxNCVPLexMtVWF4QqprDRkbZK/0/28C222B8380EDA26588BC99D18AE110A348BF3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d7:da:21:81:cd:0d:57:63:39:f7:83:3e:28:6e:e6:d2:3e: 2f:7e:85:7d:79:44:b5:a6:b0:cb:c1:9c:35:6a:d6:82:a6:c1: c9:c9:bc:65:96:65:4c:80:c8:c4:61:9c:ce:be:6e:aa:45:2d: b8:83:cc:c8:1f:44:52:98:e1:95:6b:08:bb:45:a8:db:1c:5a: 9b:ad:fe:60:53:67:59:4a:66:f9:35:3e:67:88:a4:89:9a:82: f7:91:13:19:54:f1:86:59:61:e2:d6:bb:ea:3c:c3:95:a2:a6: 26:17:77:93:2e:81:be:90:45:6f:67:e6:bd:59:24:7d:69:05: b9:d4:76:b5:39:60:57:12:d8:ec:26:84:fe:8f:d6:a0:5b:7d: c3:6c:fc:b9:22:90:87:c5:21:aa:5d:fa:fe:c7:27:e4:c2:85: 2b:10:0b:59:58:ab:0d:52:75:d9:97:e5:58:9b:10:0b:17:68: 4b:5d:52:f5:40:ac:1b:f5:eb:79:c0:1a:c8:0f:28:13:ea:10: 4e:f1:d8:69:c3:e1:b2:ea:28:3f:57:e2:9e:66:c2:e4:c7:47: 0b:34:6b:e4:10:d2:7c:79:e5:26:ae:c7:a8:38:15:b0:7c:fb: 32:63:d0:d9:82:da:91:35:c5:de:85:5d:42:96:95:af:34:20: 93:0e:6f:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZBgXhFgJWlA/KqsMdIE4nwhQv5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhDMjIyQjgzODBFREEyNjU4OEJDOTlEMThBRTExMEEz NDhCRjNENjAeFw0yNTEyMjQwODA0MjFaFw0yNTEyMjUxMDEyMjFaMDMxMTAvBgNV BAMTKDFERTQ1QTNCNzg5QjU3NEJEODI5OTE1RTA4Q0E3OEVDRTY0MDZCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQS583H4QYJA7WTja6dJ454Q7U N+xW4iD3n/Z9SecawREd7sLCzOquiiK4uTJlznKF6Whhw3bQfGlolf8gZ8IAmeAp miMv3TgDwDV4kAvUzFdDfBzSk1rNkqxDNfGBNtZlx12mauJIkDB1SyRwMg3KXKXU 0Opku4qi5u6qHT1I6Nz05K8zqkegsz2MdT8JFfbLMkkGX+kCjMo0PeLNG7emjrvB lQAf/EBwhRzy4Uwrj8BTQmQMfM+KoSqtC07BWQLsGSJYPM4W2xJJPtSt797CAy3b S2PQXkkSC6ogOnbJy3sa/wMF8I24AJOJjybJ4DQXByswUqTgfVnFS+Pnd1gZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHeRaO3ibV0vYKZFeCMp47OZAawAwHwYDVR0j BBgwFoAUKMIiuDgO2iZYi8mdGK4RCjSL89YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnI5eHdKaFZweWpCVDVmbUNYbnl4TkNWUExleE10VldGNFFxcHJEUmti WksvMC8yOEMyMjJCODM4MEVEQTI2NTg4QkM5OUQxOEFFMTEwQTM0OEJGM0Q2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzIyMkI4MzgwRURBMjY1 ODhCQzk5RDE4QUUxMTBBMzQ4QkYzRDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnI5eHdKaFZweWpCVDVmbUNYbnl4TkNWUExleE10VldGNFFxcHJEUmtiWksvMC8y OEMyMjJCODM4MEVEQTI2NTg4QkM5OUQxOEFFMTEwQTM0OEJGM0Q2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfdfaIYHNDVdjOfeDPihu5tI+L36FfXlEtaawy8GcNWrWgqbBycm8ZZZlTIDI xGGczr5uqkUtuIPMyB9EUpjhlWsIu0Wo2xxam63+YFNnWUpm+TU+Z4ikiZqC95ET GVTxhllh4ta76jzDlaKmJhd3ky6BvpBFb2fmvVkkfWkFudR2tTlgVxLY7CaE/o/W oFt9w2z8uSKQh8Uhql36/scn5MKFKxALWVirDVJ12ZflWJsQCxdoS11S9UCsG/Xr ecAayA8oE+oQTvHYacPhsuooP1finmbC5MdHCzRr5BDSfHnlJq7HqDgVsHz7MmPQ 2YLakTXF3oVdQpaVrzQgkw5vBA== -----END CERTIFICATE-----Generated at Wed Dec 24 19:23:41 2025 by rpki-client