This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: 0EEPth34CNNvqSmdY8f5jmdiJ1WtpSPdQ99xvyDaVVQ= Subject key identifier: C8:B0:2B:92:38:C9:4E:FA:B3:79:64:4D:B6:3E:DC:5A:91:A1:67:BB Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 5C45AD4F40A209C0F9319CBFDBB97BBB1599FE33 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 033A Signing time: Mon 15 Dec 2025 06:58:38 +0000 Manifest this update: Mon 15 Dec 2025 06:53:38 +0000 Manifest next update: Tue 16 Dec 2025 10:03:38 +0000 Files and hashes: 1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=) 2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: 98KMKJxpxtTrtRtT9ZSL9GMN1iwB89WcRZnkQVjTkMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Dec 2025 10:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:45:ad:4f:40:a2:09:c0:f9:31:9c:bf:db:b9:7b:bb:15:99:fe:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: Dec 15 06:53:38 2025 GMT Not After : Dec 16 10:03:38 2025 GMT Subject: CN=C8B02B9238C94EFAB379644DB63EDC5A91A167BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:36:96:75:8b:23:f4:36:7d:0c:72:ed:bd: 6f:0d:1c:a9:6a:8d:fa:2c:8c:e5:e7:7a:4d:fd:8b: 82:5b:30:a7:72:51:56:c8:91:cc:61:69:ae:f8:df: 8c:24:84:ca:25:b8:24:9f:3a:ef:e0:e0:fa:81:9b: c1:23:ab:5c:cc:b6:ac:2e:1b:43:37:3a:7c:ee:cf: e4:31:f8:90:dd:33:8c:06:49:89:62:f6:80:b5:1b: 7e:5a:31:b1:18:de:e3:3e:00:74:8c:d1:8d:f4:5e: d7:91:68:06:ae:e5:0e:60:a9:51:aa:bf:2c:99:4b: bc:a6:9c:90:59:35:5a:83:b8:2c:28:2a:ae:f7:90: 8a:ca:c3:42:b2:2d:d4:a9:b6:d7:e5:65:f1:65:da: dd:d3:18:fb:3c:90:14:2c:56:54:aa:90:38:0d:28: 55:c1:73:bf:95:ef:dc:b0:7d:ad:22:dc:d3:51:c0: 3d:f1:ba:e9:59:81:12:1d:ea:65:30:84:ae:5a:a0: c1:aa:c3:9c:56:37:2f:a9:72:06:e5:a0:4d:f0:aa: 63:c6:8a:25:bd:5a:ff:73:58:0c:f4:b0:9d:2f:1d: 95:07:c8:9b:b8:0b:ee:2b:8c:9c:f9:e5:de:60:36: e9:1c:87:76:81:b3:07:21:4c:87:14:e4:5b:37:f9: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:2B:92:38:C9:4E:FA:B3:79:64:4D:B6:3E:DC:5A:91:A1:67:BB X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ec:b1:34:a2:11:f9:2e:a8:ee:12:0a:37:05:80:70:16:41: 50:72:97:37:05:51:39:2b:9b:93:ab:cc:48:ec:bd:37:98:a6: 04:73:29:bb:32:c2:6b:02:1b:90:01:fa:d5:25:fe:f3:71:a4: 21:49:98:24:f6:26:d9:e9:46:52:68:ad:58:24:29:e4:68:a2: 77:ed:88:1a:49:a6:19:89:27:ab:9b:c5:ad:e8:c3:7a:49:de: 0f:26:6b:6e:39:e2:dd:2d:c0:13:16:e0:e2:04:90:37:42:97: 68:d3:54:69:3f:9d:98:a0:21:02:82:52:f1:68:a7:10:43:ec: 2d:e5:13:5c:7d:1a:4b:31:e2:69:6c:75:39:fc:f2:79:d6:99: 0e:ab:86:cc:ad:07:67:f0:8d:af:3d:f9:d0:0d:28:69:e6:b2: 3e:de:e1:c8:80:9b:21:30:65:35:01:97:f3:80:e4:11:08:ac: a8:45:61:03:f5:e0:e7:4a:32:16:ba:c8:6a:ad:89:07:f5:2e: c7:8d:0a:27:ee:e6:b0:33:68:5d:da:c7:b8:c0:b0:4f:b2:1e: 2c:27:b5:49:aa:43:0a:04:9d:a6:07:29:47:c0:3b:25:27:6f: f3:c6:59:6f:e4:43:1f:76:46:30:90:40:36:f2:20:7e:93:63: 40:81:0b:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXEWtT0CiCcD5MZy/27l7uxWZ/jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNTEyMTUwNjUzMzhaFw0yNTEyMTYxMDAzMzhaMDMxMTAvBgNV BAMTKEM4QjAyQjkyMzhDOTRFRkFCMzc5NjQ0REI2M0VEQzVBOTFBMTY3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HDaWdYsj9DZ9DHLtvW8NHKlq jfosjOXnek39i4JbMKdyUVbIkcxhaa7434wkhMoluCSfOu/g4PqBm8Ejq1zMtqwu G0M3Onzuz+Qx+JDdM4wGSYli9oC1G35aMbEY3uM+AHSM0Y30XteRaAau5Q5gqVGq vyyZS7ymnJBZNVqDuCwoKq73kIrKw0KyLdSpttflZfFl2t3TGPs8kBQsVlSqkDgN KFXBc7+V79ywfa0i3NNRwD3xuulZgRId6mUwhK5aoMGqw5xWNy+pcgbloE3wqmPG iiW9Wv9zWAz0sJ0vHZUHyJu4C+4rjJz55d5gNukch3aBswchTIcU5Fs3+QEtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyLArkjjJTvqzeWRNtj7cWpGhZ7swHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO+yxNKIR+S6o7hIKNwWAcBZBUHKXNwVROSubk6vMSOy9N5imBHMpuzLCawIb kAH61SX+83GkIUmYJPYm2elGUmitWCQp5Giid+2IGkmmGYknq5vFrejDekneDyZr bjni3S3AExbg4gSQN0KXaNNUaT+dmKAhAoJS8WinEEPsLeUTXH0aSzHiaWx1Ofzy edaZDquGzK0HZ/CNrz350A0oaeayPt7hyICbITBlNQGX84DkEQisqEVhA/Xg50oy FrrIaq2JB/Uux40KJ+7msDNoXdrHuMCwT7IeLCe1SapDCgSdpgcpR8A7JSdv88ZZ b+RDH3ZGMJBANvIgfpNjQIELQw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:04:33 2025 by rpki-client