This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft File: 988E922E2EBFFBA80468C170F0B053C90FD160E4.mft (raw, json) Hash identifier: aLSuM0ffqbfsZdA+TVXZbpPGLMyjwAna+lV3KHAl9Zw= Subject key identifier: 3D:8F:07:1C:E3:B2:21:A7:3D:95:84:5B:64:D5:CF:7C:E0:2C:97:BC Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Certificate serial: 552BAA6F3E39F59C95306FE7A9473B3A5AA64A18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft Manifest number: 0355 Signing time: Fri 19 Dec 2025 09:06:43 +0000 Manifest this update: Fri 19 Dec 2025 09:01:43 +0000 Manifest next update: Sat 20 Dec 2025 12:47:43 +0000 Files and hashes: 1: AS61946.roa (hash: MHezp5ABff3K9mAC3u37SxDxJqkpY3OCZMH5EO6JpvI=) 2: 988E922E2EBFFBA80468C170F0B053C90FD160E4.crl (hash: OdXbLAmjUanyhd2dLmQNu4frtMRwHA67AjnbH8zk3OE=) 3: AS28598.roa (hash: aeBM4tfnKcWK772WwabLmqs0j9ZDfnwSXCisKzcE2iY=) 4: AS268018.roa (hash: 1Pe5RUB4aLq32t+IW0sRw2bZ+6P8AQDCdJJ71jcbQ7o=) 5: AS61832.roa (hash: 62l4KOTmjEg8M47zpdsYhfdHL47gdpxpMnCw4h9ho5k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 12:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2b:aa:6f:3e:39:f5:9c:95:30:6f:e7:a9:47:3b:3a:5a:a6:4a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4 Validity Not Before: Dec 19 09:01:43 2025 GMT Not After : Dec 20 12:47:43 2025 GMT Subject: CN=3D8F071CE3B221A73D95845B64D5CF7CE02C97BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:83:63:c4:7c:72:4a:27:24:91:34:f0:39: 95:59:ea:b9:02:b3:53:bf:36:e6:fd:74:49:3f:b4: e1:92:92:79:35:2c:c9:44:16:97:73:3e:18:ed:60: f6:96:bd:e7:68:72:07:70:9d:bf:52:e0:13:d4:cd: 19:fe:3a:9e:fe:fe:c6:94:67:e7:3f:cd:cf:5d:88: 70:de:bb:8d:62:d1:ad:ec:e2:46:ed:9a:9b:65:6e: cc:56:8a:2e:75:77:5b:05:b9:ad:0b:be:af:16:5b: a3:44:6c:d4:7a:08:3d:b7:ab:8c:91:ce:55:5e:06: 78:a7:26:3e:2f:9b:2e:e9:e4:e2:6a:3d:24:16:27: d0:15:5d:d8:6c:5f:d3:3c:d0:8e:ed:04:23:a5:7e: 57:fc:d3:65:f3:6c:40:a5:d6:3e:29:d3:46:09:84: be:74:76:3d:e2:56:e5:3b:e3:4c:e8:31:fd:77:d8: a9:a2:40:ad:63:7e:2b:f9:f3:ca:91:6a:65:79:12: 92:4d:4f:92:a6:da:6e:ff:39:3d:43:5a:c9:c1:fa: 6e:d1:42:e9:05:9f:10:63:12:44:00:5d:4b:42:e5: d2:db:7a:10:7d:55:6c:4d:60:ec:0d:26:cf:25:f0: c8:d0:0d:5b:65:3b:23:28:4a:db:0b:f2:39:f8:4e: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8F:07:1C:E3:B2:21:A7:3D:95:84:5B:64:D5:CF:7C:E0:2C:97:BC X509v3 Authority Key Identifier: keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:30:29:8b:b0:75:6b:44:ab:85:78:f3:43:a2:b2:19:c0:c3: 05:77:28:3f:c0:85:3c:43:4d:a4:08:12:4b:f8:5a:fb:bd:fd: 1c:ea:b2:49:4f:eb:14:3c:e6:9a:b4:5b:db:60:f9:2e:17:5f: 21:fe:5c:ad:2e:dd:1e:a1:8d:74:c4:63:59:91:ab:8d:df:90: 82:40:e5:83:a9:d1:95:09:96:8a:5e:dd:84:57:1f:a7:3c:63: 47:b6:86:54:2c:2a:c2:09:09:3f:95:75:0d:bb:b3:a9:dd:7e: 63:0c:45:f2:11:e9:f0:bb:61:40:57:a2:ed:35:26:8c:a8:cd: 4a:1d:81:54:d7:40:d6:09:ce:74:93:ef:63:3b:d9:b1:da:33: 9d:c2:b7:2c:3e:6a:6c:36:7e:7b:40:90:56:9b:4c:31:39:8c: 91:4b:1d:0f:cb:d1:50:ae:3f:5a:ea:ac:a4:70:cf:8c:06:8d: ad:e1:3d:97:9d:de:0d:da:48:5f:b7:3f:46:c4:22:5f:07:ba: 41:d2:47:a4:54:99:66:0a:95:c2:ea:2d:a1:e9:a2:9e:c9:8a: c7:71:68:be:84:04:c9:92:39:76:6e:fe:c5:7e:ba:6b:9e:f0: 0b:dd:f4:dd:c1:b7:fd:e7:fe:68:20:90:9d:31:39:18:d2:47: c0:5a:fd:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVSuqbz459ZyVMG/nqUc7OlqmShgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTkyMkUyRUJGRkJBODA0NjhDMTcwRjBCMDUzQzkw RkQxNjBFNDAeFw0yNTEyMTkwOTAxNDNaFw0yNTEyMjAxMjQ3NDNaMDMxMTAvBgNV BAMTKDNEOEYwNzFDRTNCMjIxQTczRDk1ODQ1QjY0RDVDRjdDRTAyQzk3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWINjxHxySickkTTwOZVZ6rkC s1O/Nub9dEk/tOGSknk1LMlEFpdzPhjtYPaWvedocgdwnb9S4BPUzRn+Op7+/saU Z+c/zc9diHDeu41i0a3s4kbtmptlbsxWii51d1sFua0Lvq8WW6NEbNR6CD23q4yR zlVeBninJj4vmy7p5OJqPSQWJ9AVXdhsX9M80I7tBCOlflf802XzbECl1j4p00YJ hL50dj3iVuU740zoMf132KmiQK1jfiv588qRamV5EpJNT5Km2m7/OT1DWsnB+m7R QukFnxBjEkQAXUtC5dLbehB9VWxNYOwNJs8l8MjQDVtlOyMoStsL8jn4TomjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPY8HHOOyIac9lYRbZNXPfOAsl7wwHwYDVR0j BBgwFoAUmI6SLi6/+6gEaMFw8LBTyQ/RYOQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm dXEvMS85ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4OEU5MjJFMkVCRkZCQTgw NDY4QzE3MEYwQjA1M0M5MEZEMTYwRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFmdXEvMS85 ODhFOTIyRTJFQkZGQkE4MDQ2OEMxNzBGMEIwNTNDOTBGRDE2MEU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvDApi7B1a0SrhXjzQ6KyGcDDBXcoP8CFPENNpAgSS/ha+739HOqySU/rFDzm mrRb22D5LhdfIf5crS7dHqGNdMRjWZGrjd+QgkDlg6nRlQmWil7dhFcfpzxjR7aG VCwqwgkJP5V1Dbuzqd1+YwxF8hHp8LthQFei7TUmjKjNSh2BVNdA1gnOdJPvYzvZ sdozncK3LD5qbDZ+e0CQVptMMTmMkUsdD8vRUK4/WuqspHDPjAaNreE9l53eDdpI X7c/RsQiXwe6QdJHpFSZZgqVwuotoeminsmKx3FovoQEyZI5dm7+xX66a57wC930 3cG3/ef+aCCQnTE5GNJHwFr9kQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:53:10 2025 by rpki-client