This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft File: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft (raw, json) Hash identifier: DPTJCGjBlzfL94lNZOH2xZosuMYqkg39lPFG+VhvcIg= Subject key identifier: D4:7A:9D:09:61:3A:2A:5D:5C:3C:2B:EB:CB:00:0D:00:79:95:C9:09 Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 Certificate issuer: /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Certificate serial: 1CD15C2907A962D8E5188609A9898BA892FBEB9B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject info access: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft Manifest number: 7E Signing time: Sat 06 Dec 2025 08:42:26 +0000 Manifest this update: Sat 06 Dec 2025 08:37:26 +0000 Manifest next update: Sun 07 Dec 2025 09:18:26 +0000 Files and hashes: 1: 323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (hash: yW2r4OO6HaNkgVRp4DgS6hG9uXe1ZHHYqm4FwQdhoJM=) 2: 28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl (hash: H+L1wt7hHstntPecZ1aQWU8IqeRajk7uxcULM2odgQU=) 3: 34352e3233342e32382e302f32322d3234203d3e20323637343135.roa (hash: ftRoesKFKds6Be/kBZJyVwaqm83zyv3oFf2fBISC6Gw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d1:5c:29:07:a9:62:d8:e5:18:86:09:a9:89:8b:a8:92:fb:eb:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390 Validity Not Before: Dec 6 08:37:26 2025 GMT Not After : Dec 7 09:18:26 2025 GMT Subject: CN=D47A9D09613A2A5D5C3C2BEBCB000D007995C909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:70:67:6d:b7:61:c1:cb:09:05:db:35:09: 4d:56:e9:54:23:11:d3:84:f1:7d:3d:ad:a3:c9:08: b3:bc:71:82:ff:4e:ee:0c:54:61:39:5c:63:88:de: 2a:3e:2f:e0:ac:24:a9:b6:34:2f:dd:96:7c:83:4b: bf:28:cb:71:5d:f0:c6:f1:68:37:57:1a:80:6f:a9: 20:e9:00:f5:b3:65:db:a5:12:28:9e:14:d3:a2:68: 82:31:99:cd:c4:f9:6f:36:ea:19:b3:8b:cd:a2:20: a3:ab:a7:1d:1d:de:2c:7a:51:67:21:e0:9d:fe:05: 20:c6:e9:4f:71:fd:51:1f:ec:7f:b0:4b:cf:26:d4: 1e:d4:33:ca:98:39:40:74:6d:27:6d:cb:e6:bb:69: 38:dd:81:1c:93:ba:90:ab:f5:f2:23:cd:32:ec:e8: 8a:da:a3:c6:45:b8:a4:dc:4d:95:50:0f:98:8b:ba: a5:8b:b9:f9:7c:22:ec:f9:79:45:9d:e7:72:f7:88: b3:7f:88:fa:8c:72:86:34:48:51:bc:cd:29:8e:40: 0e:5a:f1:4e:68:62:8f:85:5f:e0:8a:4c:cd:be:ba: ce:8d:db:9d:87:f6:21:6f:82:c0:00:4e:d7:6a:ae: 49:bf:da:bb:4a:bc:94:96:07:7e:68:63:aa:18:fa: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:9D:09:61:3A:2A:5D:5C:3C:2B:EB:CB:00:0D:00:79:95:C9:09 X509v3 Authority Key Identifier: keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6f:eb:eb:1d:28:b9:82:f5:ff:ba:b9:0e:b4:1b:01:a3:94: 5f:2e:10:da:54:51:24:f1:c8:d2:56:91:86:3a:14:27:f0:90: ef:fd:27:43:5c:fa:1d:88:ea:1f:39:9e:ce:75:4a:9e:d0:19: 11:56:ea:1f:c5:75:d8:55:17:6e:6a:03:bc:ba:a5:58:22:58: 25:aa:fe:12:01:38:25:57:2b:09:b4:da:01:ba:b0:d7:ec:d1: b8:37:99:77:4c:7e:ac:97:d4:ba:b0:c5:b4:af:78:15:8c:23: af:fe:fa:69:b6:81:e3:eb:f2:6d:d0:a1:7b:e8:82:68:44:2d: 5b:94:5d:fa:79:2c:e9:d1:3a:c9:01:7e:6a:3c:a5:12:1c:20: bc:79:18:d5:a1:6f:ed:c3:e9:ec:5e:a4:50:0d:f6:5d:77:1a: 2c:a1:bc:3a:05:04:46:38:a3:45:b2:e6:ac:16:0b:ba:5b:10: d3:ba:8e:8b:1c:8c:c2:10:f7:e6:18:82:27:33:d7:0e:a5:48: d3:68:b1:81:06:9f:7e:89:ba:2f:dd:8b:05:c4:d1:50:e1:7f: eb:64:b6:37:96:4d:02:76:c5:d3:47:94:24:12:bf:d6:53:30: d4:ad:a5:75:26:28:83:2b:4b:54:22:bc:62:cd:0d:c8:9b:49: 2d:fc:d6:82 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHNFcKQepYtjlGIYJqYmLqJL765swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5 NUFGMzM5MDAeFw0yNTEyMDYwODM3MjZaFw0yNTEyMDcwOTE4MjZaMDMxMTAvBgNV BAMTKEQ0N0E5RDA5NjEzQTJBNUQ1QzNDMkJFQkNCMDAwRDAwNzk5NUM5MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOHBnbbdhwcsJBds1CU1W6VQj EdOE8X09raPJCLO8cYL/Tu4MVGE5XGOI3io+L+CsJKm2NC/dlnyDS78oy3Fd8Mbx aDdXGoBvqSDpAPWzZdulEiieFNOiaIIxmc3E+W826hmzi82iIKOrpx0d3ix6UWch 4J3+BSDG6U9x/VEf7H+wS88m1B7UM8qYOUB0bSdty+a7aTjdgRyTupCr9fIjzTLs 6Irao8ZFuKTcTZVQD5iLuqWLufl8Iuz5eUWd53L3iLN/iPqMcoY0SFG8zSmOQA5a 8U5oYo+FX+CKTM2+us6N252H9iFvgsAATtdqrkm/2rtKvJSWB35oY6oY+nrlAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU1HqdCWE6Kl1cPCvrywANAHmVyQkwHwYDVR0j BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1N4 eFRCa3pKQlpTNkx1RXgyWkQxNTlxcVdNcHNuWEw4WGV4R0tzcW44NEEvMC8yOEI0 QUJCQUZCN0M3Njg1NENGQkYzQTQ0NjQ3MERBQTk1QUYzMzkwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA T2/r6x0ouYL1/7q5DrQbAaOUXy4Q2lRRJPHI0laRhjoUJ/CQ7/0nQ1z6HYjqHzme znVKntAZEVbqH8V12FUXbmoDvLqlWCJYJar+EgE4JVcrCbTaAbqw1+zRuDeZd0x+ rJfUurDFtK94FYwjr/76abaB4+vybdChe+iCaEQtW5Rd+nks6dE6yQF+ajylEhwg vHkY1aFv7cPp7F6kUA32XXcaLKG8OgUERjijRbLmrBYLulsQ07qOixyMwhD35hiC JzPXDqVI02ixgQaffom6L92LBcTRUOF/62S2N5ZNAnbF00eUJBK/1lMw1K2ldSYo gytLVCK8Ys0NyJtJLfzWgg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:43 2025 by rpki-client