This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: Ru7L5KpGmwRZCcaWcA9KRMz6cmeDjvZRLjbrcKtEKuI= Subject key identifier: E2:DE:BA:39:7F:A3:42:C8:C0:4E:C5:FE:65:F0:23:5C:67:C4:36:DA Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 23CDDB0C0261ED09743C105B1CB2A6E532FD6301 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 032E Signing time: Sat 06 Dec 2025 02:34:41 +0000 Manifest this update: Sat 06 Dec 2025 02:29:41 +0000 Manifest next update: Sun 07 Dec 2025 05:35:41 +0000 Files and hashes: 1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=) 2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: SdxlUuwC8TM4Jyoljk2Z857ukVucSmXzQwf50rBUgOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cd:db:0c:02:61:ed:09:74:3c:10:5b:1c:b2:a6:e5:32:fd:63:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: Dec 6 02:29:41 2025 GMT Not After : Dec 7 05:35:41 2025 GMT Subject: CN=E2DEBA397FA342C8C04EC5FE65F0235C67C436DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:55:e3:ca:0d:59:97:3f:6f:89:9c:47:0f:b9: 1f:9a:5f:09:4a:63:9a:ad:dc:24:e1:0f:8a:c9:66: ba:2d:1c:9f:27:40:96:b8:e9:45:0c:77:36:55:5d: da:c0:64:c5:07:29:4c:5b:39:0e:96:ce:2e:97:bf: 2b:ff:6f:53:30:c9:e1:4a:86:61:6b:ab:be:34:c8: 68:15:1b:27:8c:38:38:88:ef:48:b0:52:dd:53:3a: 70:63:52:16:b7:0f:12:6b:4d:d0:24:45:d9:e7:50: 0f:4a:92:f0:1e:31:b7:67:91:49:96:e9:2a:76:86: b6:05:4c:10:8d:bd:93:57:00:35:66:15:4a:6e:61: f4:76:f5:04:4b:fa:0f:de:4c:c4:f8:c3:12:4f:a5: 81:e2:ac:b9:b4:02:58:1e:1c:1b:0d:ff:07:61:63: a9:f0:6f:b7:18:71:6d:b6:ee:a9:cc:4c:99:8e:e3: ed:ea:fa:da:de:35:69:49:26:a4:31:9d:74:e7:52: e7:6e:a6:f6:84:53:ae:ed:37:e2:a4:11:4b:e4:11: fb:b0:14:f3:df:9d:0f:55:10:46:47:4b:99:61:2d: c6:57:ee:33:37:ca:07:11:00:aa:bb:ce:02:c3:3f: 7c:59:56:a0:3a:16:2e:c3:26:b6:cd:af:f9:7e:2b: f1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DE:BA:39:7F:A3:42:C8:C0:4E:C5:FE:65:F0:23:5C:67:C4:36:DA X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ed:69:1e:bd:d8:b7:8c:ca:f8:3b:e3:62:8d:4d:0c:c4:db: 64:64:3c:92:56:99:c6:f2:87:3e:bd:cd:ed:d7:aa:6e:f5:2b: 93:f8:df:61:65:24:2b:01:3c:a4:4b:24:11:fc:5f:a8:fc:84: f5:d0:7d:29:a2:15:61:52:9d:ba:85:34:f5:cb:be:a9:f2:6b: 77:04:42:b9:ae:b1:46:a0:ce:fc:98:5e:c1:0f:0a:c5:c8:02: 3c:f4:d5:53:b5:32:b5:ce:c8:ba:5f:f8:95:70:3b:ab:71:46: 0f:29:1a:d5:d0:f8:fc:57:13:33:79:0a:24:24:be:f1:70:78: 75:9f:a5:b5:cc:71:0a:99:8a:42:20:85:d4:e3:e5:ee:fa:1f: 3e:b3:7f:86:75:44:2f:ab:87:25:b3:5d:13:05:3e:21:94:22: 17:09:cf:3d:9b:bf:93:6e:86:99:de:42:6b:34:fd:cd:c3:57: e6:bf:81:8d:20:e2:8d:96:3c:bc:65:12:12:0a:5d:67:83:a2: e3:b7:e7:48:6a:b5:99:20:96:db:d4:c2:55:e0:bc:ba:c7:bd: 53:b3:67:cf:ee:78:07:58:bd:48:47:62:2c:16:0f:a7:26:10: 7b:b8:64:22:28:86:b2:12:08:7c:b5:4c:34:77:11:77:a7:5a: d2:67:b1:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI83bDAJh7Ql0PBBbHLKm5TL9YwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNTEyMDYwMjI5NDFaFw0yNTEyMDcwNTM1NDFaMDMxMTAvBgNV BAMTKEUyREVCQTM5N0ZBMzQyQzhDMDRFQzVGRTY1RjAyMzVDNjdDNDM2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyVePKDVmXP2+JnEcPuR+aXwlK Y5qt3CThD4rJZrotHJ8nQJa46UUMdzZVXdrAZMUHKUxbOQ6Wzi6Xvyv/b1MwyeFK hmFrq740yGgVGyeMODiI70iwUt1TOnBjUha3DxJrTdAkRdnnUA9KkvAeMbdnkUmW 6Sp2hrYFTBCNvZNXADVmFUpuYfR29QRL+g/eTMT4wxJPpYHirLm0AlgeHBsN/wdh Y6nwb7cYcW227qnMTJmO4+3q+treNWlJJqQxnXTnUudupvaEU67tN+KkEUvkEfuw FPPfnQ9VEEZHS5lhLcZX7jM3ygcRAKq7zgLDP3xZVqA6Fi7DJrbNr/l+K/F3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4t66OX+jQsjATsX+ZfAjXGfENtowHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp+1pHr3Yt4zK+DvjYo1NDMTbZGQ8klaZxvKHPr3N7deqbvUrk/jfYWUkKwE8 pEskEfxfqPyE9dB9KaIVYVKduoU09cu+qfJrdwRCua6xRqDO/JhewQ8KxcgCPPTV U7Uytc7Iul/4lXA7q3FGDyka1dD4/FcTM3kKJCS+8XB4dZ+ltcxxCpmKQiCF1OPl 7vofPrN/hnVEL6uHJbNdEwU+IZQiFwnPPZu/k26Gmd5CazT9zcNX5r+BjSDijZY8 vGUSEgpdZ4Oi47fnSGq1mSCW29TCVeC8use9U7Nnz+54B1i9SEdiLBYPpyYQe7hk IiiGshIIfLVMNHcRd6da0mexkA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:49 2025 by rpki-client