This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft File: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json) Hash identifier: r7dvjFDeT0D7EM5z4h9tMNZkMecAcIFX4xKyHw9vSJo= Subject key identifier: FF:7F:B5:53:E3:74:6C:9F:A9:B6:CE:5A:94:F8:B3:9E:E3:5F:A0:97 Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 Certificate issuer: /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Certificate serial: 485E45DF3F5F2BC4E6029294CC67CFAE5B13E53F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft Manifest number: 0344 Signing time: Tue 23 Dec 2025 17:26:59 +0000 Manifest this update: Tue 23 Dec 2025 17:21:59 +0000 Manifest next update: Wed 24 Dec 2025 18:12:59 +0000 Files and hashes: 1: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: GP+Ba2PsH/DMi5ydJKdH4gE44adKqenfwmEAHN6LJIo=) 2: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: 2PI5RKymGmz8mUp+uI2zB9l9pOFqFN2mMalTTIpWkw4=) 3: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: 59L2ncly+4CTUTyhWleTXAijjeUxtcEeHxk7ZbQ1Y/o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 18:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5e:45:df:3f:5f:2b:c4:e6:02:92:94:cc:67:cf:ae:5b:13:e5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Validity Not Before: Dec 23 17:21:59 2025 GMT Not After : Dec 24 18:12:59 2025 GMT Subject: CN=FF7FB553E3746C9FA9B6CE5A94F8B39EE35FA097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:75:3e:af:48:4a:1e:44:19:66:99:66:d7: 52:76:21:0a:0b:77:a4:1f:3b:63:24:59:10:3c:ba: 6b:df:60:c7:40:1a:a0:a3:05:18:4b:c6:f7:b5:69: a8:24:69:3b:39:e7:3f:d2:ef:dc:0f:d3:91:cc:04: ba:a1:86:75:e4:5a:74:ed:f4:38:b6:4e:f3:49:5a: 44:3b:bc:a6:65:32:45:da:98:b9:95:95:fa:ad:d6: fb:b7:ad:46:4b:0c:97:d6:fb:ed:0e:ff:b8:02:65: 5c:23:c1:f3:f2:67:67:07:22:e3:11:80:01:dc:71: df:93:b4:0c:c3:d4:64:e4:63:37:7b:2a:54:92:4e: 50:54:60:9d:49:e1:fd:a5:86:3d:13:7e:a7:b2:2f: 3c:76:30:46:2d:a1:c9:db:4c:86:fc:83:2f:62:e8: f2:f5:35:33:d8:38:3d:f9:65:42:89:18:d8:57:15: 7b:1b:4d:af:91:27:3b:63:38:cf:60:73:18:0f:0b: 0e:47:83:fe:02:f1:45:83:40:72:f8:e7:60:7d:e4: cd:e0:a3:ab:78:2a:a1:75:00:89:ce:af:59:31:18: 1b:87:ba:d0:2a:00:87:3a:a2:67:94:bd:e5:44:52: 4a:e8:3c:b2:04:77:29:1a:c5:b0:38:c1:1e:e9:d4: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7F:B5:53:E3:74:6C:9F:A9:B6:CE:5A:94:F8:B3:9E:E3:5F:A0:97 X509v3 Authority Key Identifier: keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6b:a9:72:1f:88:be:ab:e5:5a:ed:3a:4a:f5:ad:46:89:74: 9a:5e:84:cd:1a:59:d3:cf:df:84:ca:f8:58:e1:95:36:24:3f: 5a:04:27:c1:97:ae:45:ee:d2:41:a4:0e:4d:01:c5:92:c9:96: d2:5c:0f:ce:a2:d5:b2:c3:8e:b6:e8:74:c7:96:04:91:f9:f2: 05:39:3f:8c:f7:e8:08:6f:ae:86:fc:59:c1:a1:67:ac:5f:3b: ed:a3:f0:ff:f4:59:4d:15:58:33:8d:a3:74:5a:92:98:c4:1a: 97:c3:33:eb:9c:50:a0:6f:b5:24:ff:1f:89:8c:44:1d:b8:0b: 14:e1:e3:72:c1:71:13:a7:20:22:79:0e:0e:08:9a:33:ef:e1: b1:2d:2c:18:f4:71:35:26:c9:05:8d:70:ee:75:07:51:14:c4: 64:b6:a6:aa:4e:e3:6f:81:27:3e:ee:bd:2c:1c:68:b2:be:e3: 3b:7d:8c:6c:44:ff:45:0e:57:5a:7f:2b:62:96:60:11:e0:83: 7e:b7:07:ff:1a:fd:74:0e:65:65:e5:94:3a:1c:e7:e0:28:04: e4:89:29:d5:94:6c:a4:6a:4a:f0:eb:c2:86:59:99:3f:24:4f: fb:5b:db:94:94:13:bf:49:cc:e3:6a:3c:f4:0a:21:da:b3:3f: 5e:f7:f6:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSF5F3z9fK8TmApKUzGfPrlsT5T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBOEY1M0YzNDI2Qzk4M0NBODdENUQ3QUNGNkFCNUUx NDM3MTU1NDAeFw0yNTEyMjMxNzIxNTlaFw0yNTEyMjQxODEyNTlaMDMxMTAvBgNV BAMTKEZGN0ZCNTUzRTM3NDZDOUZBOUI2Q0U1QTk0RjhCMzlFRTM1RkEwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsnU+r0hKHkQZZplm11J2IQoL d6QfO2MkWRA8umvfYMdAGqCjBRhLxve1aagkaTs55z/S79wP05HMBLqhhnXkWnTt 9Di2TvNJWkQ7vKZlMkXamLmVlfqt1vu3rUZLDJfW++0O/7gCZVwjwfPyZ2cHIuMR gAHccd+TtAzD1GTkYzd7KlSSTlBUYJ1J4f2lhj0TfqeyLzx2MEYtocnbTIb8gy9i 6PL1NTPYOD35ZUKJGNhXFXsbTa+RJztjOM9gcxgPCw5Hg/4C8UWDQHL452B95M3g o6t4KqF1AInOr1kxGBuHutAqAIc6omeUveVEUkroPLIEdykaxbA4wR7p1HQtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/3+1U+N0bJ+pts5alPiznuNfoJcwHwYDVR0j BBgwFoAUmaj1PzQmyYPKh9XXrParXhQ3FVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRG aXUvMS85OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QThGNTNGMzQyNkM5ODND QTg3RDVEN0FDRjZBQjVFMTQzNzE1NTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRGaXUvMS85 OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiWupch+IvqvlWu06SvWtRol0ml6EzRpZ08/fhMr4WOGVNiQ/WgQnwZeuRe7S QaQOTQHFksmW0lwPzqLVssOOtuh0x5YEkfnyBTk/jPfoCG+uhvxZwaFnrF877aPw //RZTRVYM42jdFqSmMQal8Mz65xQoG+1JP8fiYxEHbgLFOHjcsFxE6cgInkODgia M+/hsS0sGPRxNSbJBY1w7nUHURTEZLamqk7jb4EnPu69LBxosr7jO32MbET/RQ5X Wn8rYpZgEeCDfrcH/xr9dA5lZeWUOhzn4CgE5Ikp1ZRspGpK8OvChlmZPyRP+1vb lJQTv0nM42o89Aoh2rM/Xvf2iQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:15:16 2025 by rpki-client