This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft File: 28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft (raw, json) Hash identifier: uPcJKmMP0Oj2A0hZOn4xOfHy1hrHyA5OW/te4jOSQa4= Subject key identifier: 5B:0F:BA:06:C5:81:96:0B:C2:3E:99:78:2B:27:CE:9D:3A:09:75:83 Authority key identifier: 28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F Certificate issuer: /CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F Certificate serial: 43808A50EBA9E6641C9D8C8244D84231AB6749BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer Subject info access: rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft Manifest number: 0349 Signing time: Tue 23 Dec 2025 19:40:44 +0000 Manifest this update: Tue 23 Dec 2025 19:35:44 +0000 Manifest next update: Wed 24 Dec 2025 21:56:44 +0000 Files and hashes: 1: 28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl (hash: TrfTn/z6Z8oxvkGH3IhGre/9CR74snXKNBvBW3wQ06k=) 2: 3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa (hash: PHVv4PIlZsM6FmxSWZcGgOlUBhKlOEExQFtv/2NmXPE=) 3: 323830343a316331633a3a2f33322d313238203d3e203631363338.roa (hash: MW6D1TWTaqE5ugVGSDjlPBOjqpt8b8XpMBag0scWZ0M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 21:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:80:8a:50:eb:a9:e6:64:1c:9d:8c:82:44:d8:42:31:ab:67:49:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F Validity Not Before: Dec 23 19:35:44 2025 GMT Not After : Dec 24 21:56:44 2025 GMT Subject: CN=5B0FBA06C581960BC23E99782B27CE9D3A097583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:6c:47:a7:7e:8c:fb:d6:6d:53:13:3b:36: f6:96:fd:d8:c5:b3:52:be:04:49:78:e7:4d:44:54: 9b:1e:3b:f3:96:80:5b:35:e4:18:88:07:91:03:a6: 26:f6:d7:a9:f2:49:84:a2:b3:ea:a8:b6:82:e0:a7: 12:b6:cd:92:d3:0c:66:f5:66:5c:ee:72:d5:80:48: 96:97:d0:06:6c:bd:e0:db:e2:30:19:a7:e6:a7:3a: 55:a3:2d:59:a5:6d:4e:fd:3c:43:7a:f1:0f:5b:30: c7:76:93:f9:ee:6c:26:d4:02:71:52:68:22:d3:2f: de:4d:b1:7d:ca:c0:eb:86:7d:3b:56:dd:fa:d3:a4: 0e:0e:41:ec:89:90:57:9d:10:a9:69:0c:11:4d:71: 15:a5:ba:55:d4:62:6c:4a:6f:2f:74:72:02:0c:41: 4d:0c:3b:c7:e0:79:44:a7:35:9b:c1:5b:04:2c:66: 93:61:bd:20:98:a0:22:09:6f:58:d3:f0:07:03:cb: 8e:3e:1e:b9:b5:4f:f4:ef:4c:b4:26:64:17:87:55: 03:5f:d0:d0:a0:83:43:10:ca:9c:ca:6d:f0:59:1f: 92:7b:e9:43:23:5f:b6:f5:27:ef:c2:7c:c2:e1:e6: 5e:d3:8f:2b:cf:94:32:ef:5e:67:84:f3:60:ba:ef: 28:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:BA:06:C5:81:96:0B:C2:3E:99:78:2B:27:CE:9D:3A:09:75:83 X509v3 Authority Key Identifier: keyid:28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:cc:79:9a:fb:2d:5d:b7:53:86:4f:d3:d2:92:0e:52:06:53: 74:70:d7:da:54:00:d7:b2:aa:b7:28:dc:14:0f:89:ba:5f:f0: 51:f0:12:10:5b:7c:d7:e8:a8:73:0b:6b:0a:0b:59:2d:e4:86: 54:e9:c1:19:88:d2:53:22:9b:37:01:2b:b5:65:c8:b2:a3:44: 16:bd:19:05:66:f8:8d:c2:91:71:94:1d:78:65:9d:73:6d:c0: 3c:f8:d7:86:5c:e3:58:d1:52:8f:80:c0:40:9d:c2:b0:00:bb: 5f:a6:05:8b:e5:5b:a4:6f:3f:11:a7:68:11:7c:6e:43:85:65: a8:27:6a:6d:7b:24:57:96:e2:4f:0a:a5:33:af:ad:16:96:40: 15:c1:fd:8d:88:23:48:6e:e7:65:b6:4c:ec:ec:dd:ee:37:10: 8b:8e:4a:c6:17:7c:64:2b:18:64:81:c5:df:f2:c3:bc:e9:b5: c4:98:3f:5d:e2:e5:43:93:21:49:94:0e:02:e4:ff:55:19:d8: c9:52:ab:ab:9d:7e:12:da:7a:b2:5f:3c:ad:7a:f5:f5:9e:4d: 93:66:6f:25:06:46:e7:ab:fb:b5:d3:d6:bf:84:66:34:c6:a4: 4d:9f:70:fe:77:c1:9a:cc:b9:61:af:9f:fd:7d:fc:4b:17:cd: 37:f2:e5:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ4CKUOup5mQcnYyCRNhCMatnSb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCRDAxNzFDNTREMzQxMjFEMURCREM3N0I1MTJDQkMy NUJFRDY0RjAeFw0yNTEyMjMxOTM1NDRaFw0yNTEyMjQyMTU2NDRaMDMxMTAvBgNV BAMTKDVCMEZCQTA2QzU4MTk2MEJDMjNFOTk3ODJCMjdDRTlEM0EwOTc1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2WxHp36M+9ZtUxM7NvaW/djF s1K+BEl4501EVJseO/OWgFs15BiIB5EDpib216nySYSis+qotoLgpxK2zZLTDGb1 ZlzuctWASJaX0AZsveDb4jAZp+anOlWjLVmlbU79PEN68Q9bMMd2k/nubCbUAnFS aCLTL95NsX3KwOuGfTtW3frTpA4OQeyJkFedEKlpDBFNcRWlulXUYmxKby90cgIM QU0MO8fgeUSnNZvBWwQsZpNhvSCYoCIJb1jT8AcDy44+Hrm1T/TvTLQmZBeHVQNf 0NCgg0MQypzKbfBZH5J76UMjX7b1J+/CfMLh5l7TjyvPlDLvXmeE82C67ygdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWw+6BsWBlgvCPpl4KyfOnToJdYMwHwYDVR0j BBgwFoAUKL0BccVNNBIdHb3He1EsvCW+1k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFZ0NDJrdHF2MmduSjhMYW1jeWZ5R2lob3Npb2dqOW5td1VuU2QzU0g1 MjIvMS8yOEJEMDE3MUM1NEQzNDEyMUQxREJEQzc3QjUxMkNCQzI1QkVENjRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QkQwMTcxQzU0RDM0MTIx RDFEQkRDNzdCNTEyQ0JDMjVCRUQ2NEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFZ0NDJrdHF2MmduSjhMYW1jeWZ5R2lob3Npb2dqOW5td1VuU2QzU0g1MjIvMS8y OEJEMDE3MUM1NEQzNDEyMUQxREJEQzc3QjUxMkNCQzI1QkVENjRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACcx5mvstXbdThk/T0pIOUgZTdHDX2lQA17KqtyjcFA+Jul/wUfASEFt81+io cwtrCgtZLeSGVOnBGYjSUyKbNwErtWXIsqNEFr0ZBWb4jcKRcZQdeGWdc23APPjX hlzjWNFSj4DAQJ3CsAC7X6YFi+VbpG8/EadoEXxuQ4VlqCdqbXskV5biTwqlM6+t FpZAFcH9jYgjSG7nZbZM7Ozd7jcQi45Kxhd8ZCsYZIHF3/LDvOm1xJg/XeLlQ5Mh SZQOAuT/VRnYyVKrq51+Etp6sl88rXr19Z5Nk2ZvJQZG56v7tdPWv4RmNMakTZ9w /nfBmsy5Ya+f/X38SxfNN/Ll8A== -----END CERTIFICATE-----Generated at Wed Dec 24 00:18:29 2025 by rpki-client