This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft (raw, json) Hash identifier: Qi4u3bHRZYLtbS5OQ7jMjPPJD9SSBF3iVVqmDkVZcko= Subject key identifier: 01:74:E3:DF:D3:C6:BD:B4:9D:F9:D2:4F:A7:F9:6B:F2:BC:0A:83:6B Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Certificate serial: 3C27D1400A95E27FBC46080FFAFB1BF32BFD425C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft Manifest number: 027A Signing time: Tue 23 Dec 2025 01:30:49 +0000 Manifest this update: Tue 23 Dec 2025 01:25:49 +0000 Manifest next update: Wed 24 Dec 2025 04:09:49 +0000 Files and hashes: 1: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (hash: b80jboX82xcxSZ3qw2OCjnzPhzgnnFmqkZX9yjzY+cU=) 2: 34352e3232382e3136302e302f32322d3234203d3e20323637303733.roa (hash: 81YYVwts0/kXPr8fGXqDHUq4bgSQ+jGtgtMpTGK1R/E=) 3: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl (hash: yZVfZRjU4Cxho8PnxbCRy+x+3RzthXUX5oQALxFlbI8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 04:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:27:d1:40:0a:95:e2:7f:bc:46:08:0f:fa:fb:1b:f3:2b:fd:42:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Validity Not Before: Dec 23 01:25:49 2025 GMT Not After : Dec 24 04:09:49 2025 GMT Subject: CN=0174E3DFD3C6BDB49DF9D24FA7F96BF2BC0A836B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:56:23:b1:e3:16:be:f3:ee:ee:8f:7d:4b: 60:bf:d1:29:57:99:70:8d:40:40:23:a3:e9:02:73: 76:73:27:62:f6:f0:87:12:ce:69:bd:fe:31:18:07: e0:13:c1:ec:f6:79:71:49:d8:46:ac:5a:2c:6e:57: ff:af:3e:d2:3d:07:ba:f4:04:2a:a7:f9:ea:3d:70: ee:54:4d:6d:72:e6:e1:3b:3f:75:8b:01:a4:06:84: d3:67:5e:58:16:20:9b:4a:94:1c:aa:26:48:d9:e0: 39:fb:40:e5:13:07:69:39:33:90:0e:c7:f3:d5:1b: ee:82:14:ae:43:2b:01:ae:0b:1e:d3:a1:f6:b0:e2: 1c:d9:0a:93:0e:fa:3d:23:21:7f:f6:04:5e:fa:02: b4:57:a6:d3:53:a6:90:d3:0d:99:aa:a0:6b:13:c9: 01:01:e9:c3:0e:cc:f5:ec:69:13:5a:ed:dc:98:c4: 17:a7:50:fa:2f:f4:20:cb:3c:2d:e1:0b:c4:f3:73: ea:0f:80:0b:07:46:4c:5d:fd:10:bb:95:fb:29:e6: 3a:f1:09:f8:c8:91:7b:66:85:2c:a3:11:22:05:2e: 9b:9e:ec:2b:79:a2:57:73:e6:0e:92:63:fe:ca:12: 9e:4f:74:d9:7a:f4:a5:42:8d:1f:4f:74:25:94:d5: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:E3:DF:D3:C6:BD:B4:9D:F9:D2:4F:A7:F9:6B:F2:BC:0A:83:6B X509v3 Authority Key Identifier: keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a8:54:86:f3:6c:f3:59:42:66:25:ee:31:43:c7:c4:3f:8e: 90:94:39:cc:b0:4e:b4:bc:5d:f3:62:d3:28:4b:c7:c3:c6:f6: 37:7c:04:92:74:1a:7d:cb:66:7a:b9:41:63:09:a8:fa:1a:94: 6c:bf:3f:a7:d6:6a:ef:cb:03:c2:3b:12:aa:35:0c:2d:3d:65: 33:c6:11:38:c6:89:45:76:44:ea:08:70:c4:33:7c:c8:fc:a0: c5:2a:d8:97:21:2c:e8:a6:95:cf:d8:67:b5:29:3e:01:f6:46: 6c:c9:86:e6:6d:dc:d7:6d:86:cd:b6:8c:07:8a:ac:59:64:c0: e5:e2:4c:f4:f2:3e:8a:6a:72:d0:cb:86:b2:36:8c:68:7f:d2: 30:72:f1:30:9b:42:76:b8:7d:87:bd:b9:0f:36:2d:0f:82:3e: 53:b4:31:e5:f8:a6:9f:1f:0d:9f:23:95:05:28:96:f0:0a:cd: ac:65:40:ab:71:e1:35:45:e5:86:2b:68:99:de:da:df:54:95: 95:1f:f5:ab:04:d1:2f:29:ea:dd:9a:f7:9a:c6:b4:a2:64:ae: 8f:c7:b9:af:7f:82:ff:80:81:4e:54:b9:3e:6c:76:a7:89:bd: 25:fa:63:5c:b7:6a:5b:9d:23:1b:90:82:ae:a8:59:22:f1:63: 04:0a:17:55 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUPCfRQAqV4n+8RggP+vsb8yv9QlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkEx QTIyODZGMDAeFw0yNTEyMjMwMTI1NDlaFw0yNTEyMjQwNDA5NDlaMDMxMTAvBgNV BAMTKDAxNzRFM0RGRDNDNkJEQjQ5REY5RDI0RkE3Rjk2QkYyQkMwQTgzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bFYjseMWvvPu7o99S2C/0SlX mXCNQEAjo+kCc3ZzJ2L28IcSzmm9/jEYB+ATwez2eXFJ2EasWixuV/+vPtI9B7r0 BCqn+eo9cO5UTW1y5uE7P3WLAaQGhNNnXlgWIJtKlByqJkjZ4Dn7QOUTB2k5M5AO x/PVG+6CFK5DKwGuCx7Tofaw4hzZCpMO+j0jIX/2BF76ArRXptNTppDTDZmqoGsT yQEB6cMOzPXsaRNa7dyYxBenUPov9CDLPC3hC8Tzc+oPgAsHRkxd/RC7lfsp5jrx CfjIkXtmhSyjESIFLpue7Ct5oldz5g6SY/7KEp5PdNl69KVCjR9PdCWU1XmtAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAXTj39PGvbSd+dJPp/lr8rwKg2swHwYDVR0j BBgwFoAUKNduCTnwmbR7S4DqK5sHuhoihvAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9yRFluZTNpR295N3FHbmE2dlBnb3kydWk4QUZWY2N3SkxmRFJhc0RabjZl LzAvMjhENzZFMDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkExQTIyODZGMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEQ3NkUwOTM5RjA5OUI0N0I0 QjgwRUEyQjlCMDdCQTFBMjI4NkYwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3JE WW5lM2lHb3k3cUduYTZ2UGdveTJ1aThBRlZjY3dKTGZEUmFzRFpuNmUvMC8yOEQ3 NkUwOTM5RjA5OUI0N0I0QjgwRUEyQjlCMDdCQTFBMjI4NkYwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA bahUhvNs81lCZiXuMUPHxD+OkJQ5zLBOtLxd82LTKEvHw8b2N3wEknQafctmerlB Ywmo+hqUbL8/p9Zq78sDwjsSqjUMLT1lM8YROMaJRXZE6ghwxDN8yPygxSrYlyEs 6KaVz9hntSk+AfZGbMmG5m3c122GzbaMB4qsWWTA5eJM9PI+impy0MuGsjaMaH/S MHLxMJtCdrh9h725DzYtD4I+U7Qx5fimnx8NnyOVBSiW8ArNrGVAq3HhNUXlhito md7a31SVlR/1qwTRLynq3Zr3msa0omSuj8e5r3+C/4CBTlS5Pmx2p4m9JfpjXLdq W50jG5CCrqhZIvFjBAoXVQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:10:44 2025 by rpki-client