This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft File: 2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft (raw, json) Hash identifier: 57V+g9YLKZRKgbWKfaOup0AKJNSQZHKm5Jzl6o9kguw= Subject key identifier: DA:78:21:6D:D1:53:76:7A:7F:85:7B:6D:D2:C0:0B:CD:15:E1:4D:94 Authority key identifier: 24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8 Certificate issuer: /CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8 Certificate serial: 288281F430A6B765ED0D8AF31BF91AB476A8490A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft Manifest number: 27 Signing time: Mon 22 Dec 2025 02:12:35 +0000 Manifest this update: Mon 22 Dec 2025 02:07:35 +0000 Manifest next update: Tue 23 Dec 2025 02:32:35 +0000 Files and hashes: 1: 3138372e34392e3131322e302f32302d3234203d3e203238313434.roa (hash: zOdwAvhCdUNMrj4YgUVXLCm1Z7FltcWf8NCwDo63FaQ=) 2: 323830343a3130633a3a2f33322d3332203d3e203238313434.roa (hash: vou9QmMUWVF+uz2a15z6yClPTe9mXQTjWIa5yxxl/5E=) 3: 2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl (hash: qdfAYt8MiMSn15Zvk42l/tabPQyO4fUQ2Pxjtr/Za4A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 02:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:82:81:f4:30:a6:b7:65:ed:0d:8a:f3:1b:f9:1a:b4:76:a8:49:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2488F2E669E201B4D98B6FA256DB443702F4FAC8 Validity Not Before: Dec 22 02:07:35 2025 GMT Not After : Dec 23 02:32:35 2025 GMT Subject: CN=DA78216DD153767A7F857B6DD2C00BCD15E14D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:c7:a0:b2:2d:5d:7d:31:92:fe:da:cf:4d: 64:80:ac:c1:74:a9:11:f3:2b:d0:27:4c:0c:5f:b8: b3:54:d4:6e:87:d3:7f:51:c6:67:8d:02:f0:14:19: 45:76:28:54:28:ee:28:fe:a8:78:1a:4b:64:50:a3: 73:48:f1:ed:68:06:5b:48:98:15:84:26:17:f5:c9: 1f:d2:43:9d:d4:b0:b3:2a:16:be:93:67:96:1c:c1: 51:b3:01:6d:e4:a9:1d:0d:cb:e2:b5:d4:ad:ec:16: 9c:ad:7b:cb:b8:50:e9:f3:6b:d8:f1:68:58:15:6f: d1:34:94:a8:1d:db:e0:51:81:6c:a4:0f:77:dd:5a: 86:b0:3f:0d:85:a4:66:7f:72:5f:b1:4e:ef:05:f7: 54:d0:d4:ce:33:7a:de:9b:a2:e8:ea:2d:ab:fe:cc: 9a:35:22:06:46:fb:ac:d5:3b:35:d2:f0:22:6e:63: a1:04:31:44:d9:01:b8:bf:cc:2d:aa:0e:bb:0e:f5: 4c:fa:fe:dd:70:13:b7:46:f1:80:c9:fa:13:d1:ec: 88:4a:e3:3b:5b:2a:b1:88:1f:82:43:1e:f0:c2:21: 65:1d:b8:54:c3:7c:7a:93:ab:e0:22:49:c5:e0:97: 15:79:06:db:f4:2c:6e:c6:c8:c6:57:30:b5:7e:24: 2d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:78:21:6D:D1:53:76:7A:7F:85:7B:6D:D2:C0:0B:CD:15:E1:4D:94 X509v3 Authority Key Identifier: keyid:24:88:F2:E6:69:E2:01:B4:D9:8B:6F:A2:56:DB:44:37:02:F4:FA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGx3NbQc6MpJWpAdTz1D9Hz85KFPeEndo7bYvDryCQLu/1/2488F2E669E201B4D98B6FA256DB443702F4FAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:44:bc:ca:5d:e1:60:47:be:c5:b5:99:86:73:e4:35:84:76: 1b:bb:f9:b8:09:1c:c7:03:ef:59:e4:30:ef:e0:6a:de:9c:21: ee:6f:39:ad:af:dc:0a:0e:aa:45:70:a4:53:9a:8f:94:3c:f4: fa:41:ea:cb:94:72:d7:8c:6e:c5:43:93:34:21:33:c8:f5:c4: 57:c0:03:84:70:ba:2b:82:1d:79:6d:7a:d2:69:ed:fd:82:cd: 66:52:76:01:58:0c:02:8c:a1:4d:65:12:92:8b:cc:13:33:3f: 68:48:71:70:99:fa:33:d9:a2:2d:1d:87:28:da:36:38:d4:97: a5:c8:56:c0:7c:d5:27:b0:64:c8:f0:d8:50:dd:ee:6c:5c:45: cf:d2:80:3f:ba:67:f5:cc:9e:cf:f7:b3:a2:56:11:c9:00:c3: c6:2d:47:ce:59:69:f5:47:04:25:be:d7:87:2d:55:9c:f5:3a: a7:6c:5c:1d:64:60:c9:aa:8a:5d:cb:9e:c3:7a:bb:34:40:47: d8:fd:1e:96:fd:01:d6:70:b8:1f:8e:fb:ef:d8:4d:73:91:02: d7:26:0a:64:1f:2a:b3:2d:e8:97:8d:23:30:f1:02:9f:62:77: e1:4e:ad:3c:8d:62:9a:e7:77:53:18:6d:22:d2:69:36:18:f3: 3f:1f:29:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKIKB9DCmt2XtDYrzG/katHaoSQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4OEYyRTY2OUUyMDFCNEQ5OEI2RkEyNTZEQjQ0Mzcw MkY0RkFDODAeFw0yNTEyMjIwMjA3MzVaFw0yNTEyMjMwMjMyMzVaMDMxMTAvBgNV BAMTKERBNzgyMTZERDE1Mzc2N0E3Rjg1N0I2REQyQzAwQkNEMTVFMTREOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMMsegsi1dfTGS/trPTWSArMF0 qRHzK9AnTAxfuLNU1G6H039RxmeNAvAUGUV2KFQo7ij+qHgaS2RQo3NI8e1oBltI mBWEJhf1yR/SQ53UsLMqFr6TZ5YcwVGzAW3kqR0Ny+K11K3sFpyte8u4UOnza9jx aFgVb9E0lKgd2+BRgWykD3fdWoawPw2FpGZ/cl+xTu8F91TQ1M4zet6boujqLav+ zJo1IgZG+6zVOzXS8CJuY6EEMUTZAbi/zC2qDrsO9Uz6/t1wE7dG8YDJ+hPR7IhK 4ztbKrGIH4JDHvDCIWUduFTDfHqTq+AiScXglxV5Btv0LG7GyMZXMLV+JC1dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2nghbdFTdnp/hXtt0sALzRXhTZQwHwYDVR0j BBgwFoAUJIjy5mniAbTZi2+iVttENwL0+sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUd4M05iUWM2TXBKV3BBZFR6MUQ5SHo4NUtGUGVFbmRvN2JZdkRyeUNR THUvMS8yNDg4RjJFNjY5RTIwMUI0RDk4QjZGQTI1NkRCNDQzNzAyRjRGQUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0ODhGMkU2NjlFMjAxQjRE OThCNkZBMjU2REI0NDM3MDJGNEZBQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUd4M05iUWM2TXBKV3BBZFR6MUQ5SHo4NUtGUGVFbmRvN2JZdkRyeUNRTHUvMS8y NDg4RjJFNjY5RTIwMUI0RDk4QjZGQTI1NkRCNDQzNzAyRjRGQUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYkS8yl3hYEe+xbWZhnPkNYR2G7v5uAkcxwPvWeQw7+Bq3pwh7m85ra/cCg6q RXCkU5qPlDz0+kHqy5Ry14xuxUOTNCEzyPXEV8ADhHC6K4IdeW160mnt/YLNZlJ2 AVgMAoyhTWUSkovMEzM/aEhxcJn6M9miLR2HKNo2ONSXpchWwHzVJ7BkyPDYUN3u bFxFz9KAP7pn9cyez/ezolYRyQDDxi1Hzllp9UcEJb7Xhy1VnPU6p2xcHWRgyaqK Xcuew3q7NEBH2P0elv0B1nC4H47779hNc5EC1yYKZB8qsy3ol40jMPECn2J34U6t PI1imud3UxhtItJpNhjzPx8pqQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:57:13 2025 by rpki-client