This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.mft File: 587B556A325EFD4FA17909D19F46DDB8079DD090.mft (raw, json) Hash identifier: WIzZFhJpsj+59o7LgRvZHbXEb6LobEFFV+pLE8ae1aU= Subject key identifier: 85:DE:F5:E7:86:FF:65:8E:07:CE:6C:81:BF:29:3B:98:CC:C1:6A:CE Authority key identifier: 58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90 Certificate issuer: /CN=587B556A325EFD4FA17909D19F46DDB8079DD090 Certificate serial: 5A58D4F2BC97D0B9BF6C420C11AAE1285E88F792 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.mft Manifest number: 0342 Signing time: Sun 21 Dec 2025 09:25:35 +0000 Manifest this update: Sun 21 Dec 2025 09:20:35 +0000 Manifest next update: Mon 22 Dec 2025 11:55:35 +0000 Files and hashes: 1: 34352e3232392e3233322e302f32322d3234203d3e20323637313336.roa (hash: As3WC/BCFkRHzAlhoyOFEqI4miWBvkLtqu1p6b24rZ4=) 2: 323830343a343861383a3a2f33322d3334203d3e20323637313336.roa (hash: mNDq/ByfGwTRVkrmU8AJVilBC9P+uFUn+UyAi5eEnRU=) 3: 587B556A325EFD4FA17909D19F46DDB8079DD090.crl (hash: 7ozKmxsipXw2ifxAi2ZCOUIyMysUxBbQQ6Nsdu4KcgE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.crl rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 11:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:58:d4:f2:bc:97:d0:b9:bf:6c:42:0c:11:aa:e1:28:5e:88:f7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587B556A325EFD4FA17909D19F46DDB8079DD090 Validity Not Before: Dec 21 09:20:35 2025 GMT Not After : Dec 22 11:55:35 2025 GMT Subject: CN=85DEF5E786FF658E07CE6C81BF293B98CCC16ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:dd:41:28:ce:48:1f:2c:ff:3a:29:7c:25: c0:a8:e4:b7:20:92:ac:49:ed:a1:e3:a3:cf:e1:29: 78:db:ab:31:3a:21:ee:0f:11:0f:4e:eb:b8:64:86: a3:98:da:72:e4:81:df:e5:4a:0a:46:87:cb:1e:9f: 5a:4f:d1:04:68:a9:45:9a:fd:55:e4:24:34:ab:4b: 70:3b:38:75:7e:05:d5:1c:f7:63:82:87:56:73:45: 31:85:cb:ff:d1:37:ec:f2:42:25:7d:93:b8:7e:07: 71:ca:38:a3:d2:f8:56:d5:c4:53:c2:5c:e3:8e:a0: 08:9d:bc:38:a1:34:6a:45:9b:6b:20:97:60:45:e1: 2e:56:04:a0:79:9f:5f:25:29:cd:ff:c4:f2:7b:af: a7:fa:15:52:2e:77:c0:a3:24:95:e4:aa:db:27:db: a6:8f:79:79:85:6d:70:fe:92:7d:34:50:bf:a7:3c: 77:a1:8f:44:41:12:74:64:05:ea:dc:dd:48:7d:f8: 83:4d:cf:28:0e:87:18:ac:c8:01:a5:e1:62:23:34: 50:1c:eb:22:c3:59:1c:e4:cd:70:80:a8:0c:73:45: 49:90:b1:f6:79:dd:3a:4f:1d:26:e4:85:ac:00:2e: 03:11:4d:be:4f:a8:f3:e7:86:57:8e:2d:62:3a:cd: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:F5:E7:86:FF:65:8E:07:CE:6C:81:BF:29:3B:98:CC:C1:6A:CE X509v3 Authority Key Identifier: keyid:58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:03:1d:e2:d3:aa:f0:24:51:18:1a:f9:aa:58:ab:40:13:22: 13:4f:af:a1:41:84:fb:f1:11:0a:85:e9:fa:4b:4b:3a:da:0b: 4e:a7:b8:e8:a5:9c:ae:45:5e:85:bd:3d:a2:ff:97:47:33:be: 35:8f:29:73:75:ce:43:c2:cd:90:c0:d1:f9:80:61:ef:a2:a2: f3:a0:0f:d6:b8:cb:d4:f9:2f:50:da:27:cf:11:68:3d:0e:d6: a2:0f:0e:e3:74:8c:80:4d:ce:f9:6a:71:9c:d5:53:73:ed:a9: b8:05:b4:45:8d:1e:e4:9d:93:60:b1:3e:64:fe:52:b7:ee:f5: e2:85:ca:24:f9:2f:42:9c:06:be:ca:cb:e7:14:b9:7b:d7:5d: 24:dc:14:aa:b5:23:88:52:a3:c6:e5:e8:ed:06:57:4d:75:2c: ee:3a:f1:7a:99:21:b5:bd:b5:41:c3:c4:9c:d6:83:6c:74:00: 6c:6d:9c:0b:a0:40:05:eb:dd:d2:6f:79:b4:8b:9f:1c:28:b4: dc:0e:db:61:71:2e:fc:71:2a:46:98:e8:66:0e:0b:ae:95:92: c4:dc:1c:a4:b5:69:6d:65:f6:48:33:59:97:d1:5a:22:0a:8c: 34:b3:d1:40:a9:2f:0f:48:2a:e4:02:15:a0:7f:21:b8:4e:c0: c2:ff:88:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWljU8ryX0Lm/bEIMEarhKF6I95IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3QjU1NkEzMjVFRkQ0RkExNzkwOUQxOUY0NkREQjgw NzlERDA5MDAeFw0yNTEyMjEwOTIwMzVaFw0yNTEyMjIxMTU1MzVaMDMxMTAvBgNV BAMTKDg1REVGNUU3ODZGRjY1OEUwN0NFNkM4MUJGMjkzQjk4Q0NDMTZBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZt1BKM5IHyz/Oil8JcCo5Lcg kqxJ7aHjo8/hKXjbqzE6Ie4PEQ9O67hkhqOY2nLkgd/lSgpGh8sen1pP0QRoqUWa /VXkJDSrS3A7OHV+BdUc92OCh1ZzRTGFy//RN+zyQiV9k7h+B3HKOKPS+FbVxFPC XOOOoAidvDihNGpFm2sgl2BF4S5WBKB5n18lKc3/xPJ7r6f6FVIud8CjJJXkqtsn 26aPeXmFbXD+kn00UL+nPHehj0RBEnRkBerc3Uh9+INNzygOhxisyAGl4WIjNFAc 6yLDWRzkzXCAqAxzRUmQsfZ53TpPHSbkhawALgMRTb5PqPPnhleOLWI6zYrdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhd7154b/ZY4HzmyBvyk7mMzBas4wHwYDVR0j BBgwFoAUWHtVajJe/U+heQnRn0bduAed0JAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0JqM0ZRZUQ3N3g2M29KTHpLaWl3dm9DU1h2UTVkakVLb1pMWnFUZ2Jp bzEvMS81ODdCNTU2QTMyNUVGRDRGQTE3OTA5RDE5RjQ2RERCODA3OUREMDkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4N0I1NTZBMzI1RUZENEZB MTc5MDlEMTlGNDZEREI4MDc5REQwOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0JqM0ZRZUQ3N3g2M29KTHpLaWl3dm9DU1h2UTVkakVLb1pMWnFUZ2JpbzEvMS81 ODdCNTU2QTMyNUVGRDRGQTE3OTA5RDE5RjQ2RERCODA3OUREMDkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuwMd4tOq8CRRGBr5qlirQBMiE0+voUGE+/ERCoXp+ktLOtoLTqe46KWcrkVe hb09ov+XRzO+NY8pc3XOQ8LNkMDR+YBh76Ki86AP1rjL1PkvUNonzxFoPQ7Wog8O 43SMgE3O+WpxnNVTc+2puAW0RY0e5J2TYLE+ZP5St+714oXKJPkvQpwGvsrL5xS5 e9ddJNwUqrUjiFKjxuXo7QZXTXUs7jrxepkhtb21QcPEnNaDbHQAbG2cC6BABevd 0m95tIufHCi03A7bYXEu/HEqRpjoZg4LrpWSxNwcpLVpbWX2SDNZl9FaIgqMNLPR QKkvD0gq5AIVoH8huE7Awv+Izw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:50:43 2025 by rpki-client