This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
File: 988E922E2EBFFBA80468C170F0B053C90FD160E4.mft (raw, json)
Hash identifier: NQYi5UumD6Sgw2usvv566I8OyD3Z/uW+o6Oj13zvhMI=
Subject key identifier: 4B:BA:8B:B2:9F:8C:38:3E:69:1C:99:07:21:6E:3B:B4:FB:6F:C4:62
Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Certificate serial: 69532394A7733693CA150921BE31E395EB1C9E3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
Manifest number: 0344
Signing time: Sat 06 Dec 2025 16:25:41 +0000
Manifest this update: Sat 06 Dec 2025 16:20:41 +0000
Manifest next update: Sun 07 Dec 2025 17:34:41 +0000
Files and hashes: 1: AS61832.roa (hash: 62l4KOTmjEg8M47zpdsYhfdHL47gdpxpMnCw4h9ho5k=)
2: AS28598.roa (hash: aeBM4tfnKcWK772WwabLmqs0j9ZDfnwSXCisKzcE2iY=)
3: AS61946.roa (hash: MHezp5ABff3K9mAC3u37SxDxJqkpY3OCZMH5EO6JpvI=)
4: 988E922E2EBFFBA80468C170F0B053C90FD160E4.crl (hash: uHa1+NLiCfPjV3thqoA0NKr8BkmijUOypfNjy6Eir6g=)
5: AS268018.roa (hash: 1Pe5RUB4aLq32t+IW0sRw2bZ+6P8AQDCdJJ71jcbQ7o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 17:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:53:23:94:a7:73:36:93:ca:15:09:21:be:31:e3:95:eb:1c:9e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Validity
Not Before: Dec 6 16:20:41 2025 GMT
Not After : Dec 7 17:34:41 2025 GMT
Subject: CN=4BBA8BB29F8C383E691C9907216E3BB4FB6FC462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:b4:44:9c:5f:c6:3b:e9:7e:b6:e0:66:87:
4a:22:b5:5c:c5:94:14:d8:8f:b4:e3:8c:d9:f1:a0:
29:c6:65:b4:43:89:49:b9:1e:29:11:cb:6e:7c:fe:
e8:aa:88:12:c8:06:28:60:1c:a8:76:af:87:a6:4f:
ce:b2:dd:59:e1:76:5e:4f:88:31:e9:eb:1f:c8:f3:
af:fc:01:30:9f:e7:04:6e:4b:82:49:fa:d9:ae:26:
82:9f:b9:9e:2f:9f:a6:b0:4f:f9:50:33:66:c0:40:
41:a2:21:71:68:13:99:b7:ad:55:9e:44:f1:82:c1:
a6:ca:9d:4f:a4:14:c0:0a:41:7e:5c:25:51:ab:fc:
27:94:b9:a8:36:d0:ac:0f:62:04:8e:fb:70:b7:a2:
56:f4:69:a2:ba:aa:aa:4b:95:82:35:8e:d4:70:8d:
d8:4e:aa:be:fe:0b:87:37:3b:11:2d:1b:0e:2d:a3:
be:f4:18:c6:b3:a3:b5:12:f9:8d:c4:b6:41:ea:b4:
e7:cd:17:60:ea:6f:ec:ad:f6:9d:6d:86:35:8b:9b:
80:3f:93:40:6a:55:b5:ee:05:c1:ef:49:ee:79:1d:
ef:06:4b:d6:62:54:51:6c:3d:34:95:93:33:54:b8:
32:48:3a:db:de:c7:88:1b:b3:10:89:ff:b0:d3:3f:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:8B:B2:9F:8C:38:3E:69:1C:99:07:21:6E:3B:B4:FB:6F:C4:62
X509v3 Authority Key Identifier:
keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:45:88:78:30:6f:99:31:b8:e1:f8:f4:fb:3b:84:78:1d:64:
c1:9e:e1:12:f7:06:5c:ae:12:3c:1b:bb:e6:8e:f2:5e:01:0c:
36:8b:04:f4:fe:ba:b8:62:d2:ff:79:6b:ea:f8:3a:e9:1e:28:
bc:73:33:a7:f3:e2:f2:27:67:73:40:55:66:52:c3:fd:21:9e:
02:ab:8c:69:69:fd:07:d8:24:97:09:13:3b:db:76:2e:74:f5:
9e:ac:1a:c2:e2:1f:08:28:17:9c:a6:cc:e3:83:dd:84:a0:a3:
32:30:be:8f:76:9d:8b:94:bc:84:c0:a6:15:1e:b2:3f:2d:46:
86:2f:d4:d5:43:06:35:8b:a7:61:27:7c:63:7b:e5:52:f6:22:
a7:43:6b:70:81:9d:ed:71:42:42:4b:91:fb:a4:5b:8c:a3:ae:
65:0a:d7:ee:71:c8:d3:6e:71:6b:5e:0b:66:71:85:70:28:f8:
65:de:65:08:ab:00:53:5d:97:d5:99:69:ab:b5:7d:3b:1f:96:
ba:f6:17:f4:2b:26:3e:c3:51:42:9f:cc:05:06:38:4d:f0:b4:
70:5d:b0:5f:fe:96:b9:4c:9a:e7:64:33:9d:5b:c6:6d:53:d5:
1c:b4:db:01:cf:88:a5:eb:2a:26:05:54:2f:55:0e:b0:ca:09:
b7:55:93:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:34:39 2025 by rpki-client