This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft File: 89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft (raw, json) Hash identifier: TZt94xPQPCbkldKae/6GZNaR1M1TInzsk9JRhRZH5aI= Subject key identifier: C4:F6:25:99:56:65:42:CC:7F:87:9E:3A:E8:23:78:7E:64:A5:B0:31 Authority key identifier: 89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63 Certificate issuer: /CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63 Certificate serial: 07B58C90DB946F941B880584E1A7E7E8E6D2D5CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer Subject info access: rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft Manifest number: 78 Signing time: Sat 20 Dec 2025 09:01:20 +0000 Manifest this update: Sat 20 Dec 2025 08:56:20 +0000 Manifest next update: Sun 21 Dec 2025 12:11:20 +0000 Files and hashes: 1: 89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl (hash: MGb7/QTwA+tKnvfbfG/XsyakkXyv+SJJ5LM+mXJXQNI=) 2: 323830343a6330343a3a2f33322d3334203d3e203532363630.roa (hash: T/ISr6AnPghBbJBWVVD+iBDwfP9aFPIdZe1YY9Mqgrs=) 3: 3137372e36362e3234382e302f32312d3234203d3e203532363630.roa (hash: JidLuZ+zO4w45kPXHy+VvMd9bBjbo6MkVzByEneVpGI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 12:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b5:8c:90:db:94:6f:94:1b:88:05:84:e1:a7:e7:e8:e6:d2:d5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63 Validity Not Before: Dec 20 08:56:20 2025 GMT Not After : Dec 21 12:11:20 2025 GMT Subject: CN=C4F62599566542CC7F879E3AE823787E64A5B031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:48:00:bc:86:ba:53:53:3f:76:6d:8f:2f: 63:74:72:a3:41:80:a0:ed:38:81:47:49:b8:51:a0: e9:f5:34:4c:80:b0:f4:b3:02:aa:96:c1:07:0f:04: 0a:4c:4c:5e:58:9b:74:be:00:31:39:e1:0f:cc:68: ec:be:d6:0a:34:57:a7:65:8d:aa:a4:0f:d6:41:94: b5:07:7b:25:b1:e3:e0:83:a2:1c:12:88:ce:87:9c: a3:49:05:24:6d:be:c6:75:75:6b:32:8e:3b:83:73: 0a:de:9d:1a:f8:49:25:aa:f3:fa:d3:cd:44:7c:a6: 0c:72:9f:dc:57:d7:8a:97:7f:00:bd:04:cf:5a:13: 67:df:bd:3e:6d:56:b8:d1:0a:04:1b:e7:1d:d3:8a: 84:8f:6e:2e:09:59:c0:2c:ed:8f:d3:39:9f:d6:05: 01:bc:e8:3b:53:6a:80:ea:7a:e4:21:29:d8:56:27: 38:fb:70:f3:fa:54:4b:2d:1c:49:5f:98:d9:58:74: 21:60:48:ab:48:cb:83:97:65:1b:4b:46:d2:08:bb: c5:5a:87:79:e3:3b:9a:e6:1d:7e:20:0e:9d:2c:76: 5f:d6:f3:7a:37:1b:e1:5d:59:78:33:ff:8b:48:3b: 02:72:6b:ea:01:35:e0:40:ad:06:30:a8:2c:96:6d: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F6:25:99:56:65:42:CC:7F:87:9E:3A:E8:23:78:7E:64:A5:B0:31 X509v3 Authority Key Identifier: keyid:89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:35:79:44:d4:ef:ae:97:80:be:e0:b3:e7:75:a2:71:b6:54: 99:e7:be:aa:ff:38:84:eb:39:60:25:40:f9:36:46:ef:7d:a1: 50:06:9e:33:9b:53:09:fc:63:51:ee:a1:9d:3e:3e:a5:96:1c: a4:95:c0:bd:32:48:86:5e:51:c2:1f:1a:42:c3:29:25:2b:aa: de:b0:1f:87:7a:c4:ef:d2:d5:88:0b:1e:25:4d:f9:1b:ba:62: 91:a6:40:cb:ac:01:c0:e2:55:97:b9:a2:f4:7b:0e:03:07:b1: 92:b4:f5:48:51:0b:83:df:09:09:63:2a:93:27:05:d7:b0:e0: 12:49:8b:60:9c:36:01:ea:1d:60:64:8f:f7:9d:71:6a:ad:00: 18:d6:bc:f8:4e:35:29:98:07:f3:32:a5:8d:c1:48:da:77:33: 65:08:f0:58:5d:8b:45:5b:41:b2:45:4e:13:49:e2:13:eb:41: 64:ad:51:37:e8:37:c7:fa:f1:a6:62:2f:5d:f2:b6:67:43:96: 80:47:13:ad:ea:93:f5:84:23:67:2a:74:48:63:85:45:1f:a8: 4c:b7:02:61:d8:40:39:23:ad:04:8e:35:fc:2a:48:48:45:a9: 9d:2c:b1:99:8d:6f:8a:80:bf:9a:c7:d1:0d:3a:9f:0a:8e:c2: cc:00:0b:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB7WMkNuUb5QbiAWE4afn6ObS1cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4MzBDQjlFMzk1MkVCQjg4RERFMUI2MzcwNzUyN0Q2 MkY3QUI2MzAeFw0yNTEyMjAwODU2MjBaFw0yNTEyMjExMjExMjBaMDMxMTAvBgNV BAMTKEM0RjYyNTk5NTY2NTQyQ0M3Rjg3OUUzQUU4MjM3ODdFNjRBNUIwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpEgAvIa6U1M/dm2PL2N0cqNB gKDtOIFHSbhRoOn1NEyAsPSzAqqWwQcPBApMTF5Ym3S+ADE54Q/MaOy+1go0V6dl jaqkD9ZBlLUHeyWx4+CDohwSiM6HnKNJBSRtvsZ1dWsyjjuDcwrenRr4SSWq8/rT zUR8pgxyn9xX14qXfwC9BM9aE2ffvT5tVrjRCgQb5x3TioSPbi4JWcAs7Y/TOZ/W BQG86DtTaoDqeuQhKdhWJzj7cPP6VEstHElfmNlYdCFgSKtIy4OXZRtLRtIIu8Va h3njO5rmHX4gDp0sdl/W83o3G+FdWXgz/4tIOwJya+oBNeBArQYwqCyWbb9/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxPYlmVZlQsx/h5466CN4fmSlsDEwHwYDVR0j BBgwFoAUiYMMueOVLruI3eG2NwdSfWL3q2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNR MXEvMC84OTgzMENCOUUzOTUyRUJCODhEREUxQjYzNzA3NTI3RDYyRjdBQjYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5ODMwQ0I5RTM5NTJFQkI4 OERERTFCNjM3MDc1MjdENjJGN0FCNjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNRMXEvMC84 OTgzMENCOUUzOTUyRUJCODhEREUxQjYzNzA3NTI3RDYyRjdBQjYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqjV5RNTvrpeAvuCz53WicbZUmee+qv84hOs5YCVA+TZG732hUAaeM5tTCfxj Ue6hnT4+pZYcpJXAvTJIhl5Rwh8aQsMpJSuq3rAfh3rE79LViAseJU35G7pikaZA y6wBwOJVl7mi9HsOAwexkrT1SFELg98JCWMqkycF17DgEkmLYJw2AeodYGSP951x aq0AGNa8+E41KZgH8zKljcFI2nczZQjwWF2LRVtBskVOE0niE+tBZK1RN+g3x/rx pmIvXfK2Z0OWgEcTreqT9YQjZyp0SGOFRR+oTLcCYdhAOSOtBI41/CpISEWpnSyx mY1vioC/msfRDTqfCo7CzAALAw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:42:30 2025 by rpki-client