This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft File: 591A5E28538FC2E6A42ED311941B9D128D78D596.mft (raw, json) Hash identifier: 97EpHME6rputE2fuYxkOjBivKy8I/rv4fir0KfBiMgE= Subject key identifier: DB:B3:C0:BB:17:A5:8E:8C:0F:3A:B2:5D:0B:CC:C7:DC:DE:C3:D8:F7 Authority key identifier: 59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96 Certificate issuer: /CN=591A5E28538FC2E6A42ED311941B9D128D78D596 Certificate serial: 5EF12DD9CE5653EBAA3D723A054CD6977CA0A9C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft Manifest number: 032D Signing time: Sat 06 Dec 2025 00:26:22 +0000 Manifest this update: Sat 06 Dec 2025 00:21:22 +0000 Manifest next update: Sun 07 Dec 2025 01:08:22 +0000 Files and hashes: 1: 3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa (hash: JYnl1AgEzv6A3emKqsNV2wjxR3GaDMd7rmxFgZDBx14=) 2: 3230302e3139362e3230382e302f32342d3234203d3e20333936393832.roa (hash: KuzflKByXW6jk7sHruVqI9AbR/hv88nYz20xfmBco/E=) 3: 591A5E28538FC2E6A42ED311941B9D128D78D596.crl (hash: pFOFdpAK+KhO77d4GBg/ui9szWu8YznTARQUJZkD9qs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 01:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f1:2d:d9:ce:56:53:eb:aa:3d:72:3a:05:4c:d6:97:7c:a0:a9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591A5E28538FC2E6A42ED311941B9D128D78D596 Validity Not Before: Dec 6 00:21:22 2025 GMT Not After : Dec 7 01:08:22 2025 GMT Subject: CN=DBB3C0BB17A58E8C0F3AB25D0BCCC7DCDEC3D8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:a4:a0:f3:30:84:de:93:42:36:23:a4:fe: 97:39:53:1f:91:3a:46:0a:35:48:74:0d:d3:6c:d8: b0:42:ba:2e:85:07:22:26:7f:ec:08:0d:ea:1f:ed: c9:47:06:d1:77:f7:6f:69:8f:34:e6:8e:15:8d:b6: 4d:0d:a8:df:24:83:95:4e:bb:8d:5a:44:eb:cd:98: 16:b6:0c:ae:81:28:a2:4e:8d:93:f3:df:bf:5c:f0: f0:89:40:2d:65:f2:66:d6:d7:25:ea:7a:bd:6b:29: c9:93:bf:84:9e:55:86:a6:64:e7:4d:8e:76:93:36: 26:39:77:d2:1e:e5:df:42:a1:b2:9f:d4:c1:c9:df: 56:90:4f:95:3d:ec:e0:e2:00:d1:04:11:70:ff:f9: 28:32:73:4e:2c:84:52:0a:68:d6:66:78:fb:ba:c3: 9a:9d:07:5c:ce:91:bf:05:ae:00:94:06:cb:a7:dc: 11:80:b3:2d:01:41:40:0d:9a:13:5a:61:8f:03:4f: 4a:c2:7d:9d:20:f7:18:de:fa:6c:bc:ba:97:c1:33: fa:18:56:d4:f7:1c:07:3b:98:6e:9a:b0:76:04:e3: 6d:2f:78:3d:f9:90:5c:b6:bc:3e:13:49:7e:a9:53: 29:3a:91:42:5a:09:4b:4a:b9:e1:ea:72:9b:6d:e3: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B3:C0:BB:17:A5:8E:8C:0F:3A:B2:5D:0B:CC:C7:DC:DE:C3:D8:F7 X509v3 Authority Key Identifier: keyid:59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4b:4d:74:e7:7a:cb:87:39:ac:90:47:30:0c:a1:6d:70:fc: ef:ee:63:74:e8:cc:31:ed:b7:d7:be:97:29:10:63:a6:d0:2b: 0b:7f:28:b6:42:5f:47:f1:d5:ac:d7:35:10:c8:a4:57:fa:65: 7c:76:80:d2:fe:04:01:28:2d:fc:ea:69:4e:3c:88:0a:03:32: 24:2b:b9:b3:7c:41:bf:d6:c4:23:cd:51:ed:54:f7:e3:ac:27: b1:62:f0:14:e4:2e:2f:b5:50:9f:83:6d:23:a6:40:8e:c9:d2: 7d:ff:5e:97:ed:d9:bd:e4:6e:fd:af:44:ce:06:1a:cc:a6:2d: b0:f8:b1:78:48:cc:b7:7b:b8:9f:38:62:6f:e7:f9:e8:08:1c: bf:e8:62:47:e1:6c:c3:83:b0:bb:0a:b8:9e:18:ca:e9:ab:68: 91:48:f4:36:1e:2b:c4:a3:3a:05:96:ff:1f:0f:c4:d2:85:da: 28:86:f0:2d:9b:75:d8:c6:b9:bf:a4:b5:1a:64:6a:26:d3:ff: f5:db:8e:ab:e0:9b:dd:d2:2f:5d:e4:76:12:72:5f:9f:e7:06: a8:f8:65:71:a5:cc:a1:ed:e3:12:5e:18:91:84:a3:77:b5:d3: bb:39:8d:b8:f8:89:9b:89:f1:92:b8:cc:a4:85:e5:ec:c3:6b: f6:51:a6:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXvEt2c5WU+uqPXI6BUzWl3ygqccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTkxQTVFMjg1MzhGQzJFNkE0MkVEMzExOTQxQjlEMTI4 RDc4RDU5NjAeFw0yNTEyMDYwMDIxMjJaFw0yNTEyMDcwMTA4MjJaMDMxMTAvBgNV BAMTKERCQjNDMEJCMTdBNThFOEMwRjNBQjI1RDBCQ0NDN0RDREVDM0Q4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iaSg8zCE3pNCNiOk/pc5Ux+R OkYKNUh0DdNs2LBCui6FByImf+wIDeof7clHBtF3929pjzTmjhWNtk0NqN8kg5VO u41aROvNmBa2DK6BKKJOjZPz379c8PCJQC1l8mbW1yXqer1rKcmTv4SeVYamZOdN jnaTNiY5d9Ie5d9CobKf1MHJ31aQT5U97ODiANEEEXD/+Sgyc04shFIKaNZmePu6 w5qdB1zOkb8FrgCUBsun3BGAsy0BQUANmhNaYY8DT0rCfZ0g9xje+my8upfBM/oY VtT3HAc7mG6asHYE420veD35kFy2vD4TSX6pUyk6kUJaCUtKueHqcptt4zXnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU27PAuxeljowPOrJdC8zH3N7D2PcwHwYDVR0j BBgwFoAUWRpeKFOPwuakLtMRlBudEo141ZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGhnR0FkQ2JTM3U1VnRYZmhydjZvbVBMWHlyR1lBQTNha2V0a0wyWlpp eTQvMS81OTFBNUUyODUzOEZDMkU2QTQyRUQzMTE5NDFCOUQxMjhENzhENTk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5MUE1RTI4NTM4RkMyRTZB NDJFRDMxMTk0MUI5RDEyOEQ3OEQ1OTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGhnR0FkQ2JTM3U1VnRYZmhydjZvbVBMWHlyR1lBQTNha2V0a0wyWlppeTQvMS81 OTFBNUUyODUzOEZDMkU2QTQyRUQzMTE5NDFCOUQxMjhENzhENTk2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKEtNdOd6y4c5rJBHMAyhbXD87+5jdOjMMe23176XKRBjptArC38otkJfR/HV rNc1EMikV/plfHaA0v4EASgt/OppTjyICgMyJCu5s3xBv9bEI81R7VT346wnsWLw FOQuL7VQn4NtI6ZAjsnSff9el+3ZveRu/a9EzgYazKYtsPixeEjMt3u4nzhib+f5 6Agcv+hiR+Fsw4Owuwq4nhjK6atokUj0Nh4rxKM6BZb/Hw/E0oXaKIbwLZt12Ma5 v6S1GmRqJtP/9duOq+Cb3dIvXeR2EnJfn+cGqPhlcaXMoe3jEl4YkYSjd7XTuzmN uPiJm4nxkrjMpIXl7MNr9lGmyA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:36 2025 by rpki-client