This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft File: DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft (raw, json) Hash identifier: Ih15RwU/kt5/U0Hg1xnjkkrcPT4m0kpVB4JLRXLt6+c= Subject key identifier: 9B:67:23:3C:46:41:C2:16:1B:80:7E:67:88:C6:C1:CE:E6:78:10:45 Authority key identifier: DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88 Certificate issuer: /CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88 Certificate serial: 12AD10B984C073BC6BAB599C61328DC170D97F94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft Manifest number: 0154 Signing time: Fri 19 Dec 2025 19:49:39 +0000 Manifest this update: Fri 19 Dec 2025 19:44:39 +0000 Manifest next update: Sat 20 Dec 2025 22:36:39 +0000 Files and hashes: 1: DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl (hash: +uwG1LO4eP6fmD5z0IGVtXqwXf8qEzDBLmDrz3HEgi0=) 2: 323830343a366264343a3a2f33322d3438203d3e20323730343238.roa (hash: HcbDBo5vEhZDz22x2e4nDgT/2l3+LdsNneneCzQ9yYo=) 3: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: gEKEaIZuFtCa2m15vfxLEmbSM0J0ycpP6AHITuG0TkU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 22:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ad:10:b9:84:c0:73:bc:6b:ab:59:9c:61:32:8d:c1:70:d9:7f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88 Validity Not Before: Dec 19 19:44:39 2025 GMT Not After : Dec 20 22:36:39 2025 GMT Subject: CN=9B67233C4641C2161B807E6788C6C1CEE6781045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:40:81:fb:fc:80:4f:c5:81:2f:8a:cd:6a: 1a:f9:57:14:f2:1d:7c:20:30:d7:7e:1a:d5:20:02: be:95:f0:bd:22:dd:61:e7:2a:a3:a8:08:73:64:4f: 62:b9:01:68:ea:83:83:38:6b:e2:cc:3b:9a:42:28: dd:4a:f9:d0:13:33:d9:19:80:b1:07:5e:c9:d4:c1: 66:4b:d9:da:53:c4:61:95:84:8d:68:60:42:b7:f9: 00:60:34:4a:b4:f8:ba:4f:de:3c:07:90:ac:1a:93: 20:4f:1c:a3:77:ba:ee:78:95:61:5e:4d:7d:50:4f: bf:1b:be:07:c8:bb:04:97:15:91:22:4b:d3:68:0e: e5:88:1d:ed:9c:d2:bd:5f:60:42:4f:9c:f3:3f:6b: 9c:e9:9b:d5:f2:8d:2e:04:bd:d4:95:59:d6:94:42: 0d:e0:d0:c6:67:74:70:fc:a1:34:80:11:9c:31:9a: 54:68:0c:e9:48:75:29:b5:4c:bc:00:a2:51:20:6b: 02:01:65:9a:9e:c9:32:be:03:4d:a1:0f:0c:57:99: 84:43:f9:af:74:58:a1:0f:59:0c:35:2b:02:85:43: 8a:d2:42:bb:98:04:d6:47:38:25:7d:20:05:e2:85: 3b:f7:83:89:cd:48:7c:e4:e7:25:f6:d0:fb:cd:ae: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:67:23:3C:46:41:C2:16:1B:80:7E:67:88:C6:C1:CE:E6:78:10:45 X509v3 Authority Key Identifier: keyid:DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:78:d1:d2:f9:b5:b1:82:44:6c:85:b8:4a:66:3e:71:98: 7e:45:77:52:ce:5d:39:17:c4:0c:e9:f8:f9:64:74:b8:3f:71: 40:a2:75:52:5e:2d:37:8e:14:24:36:f9:f5:1d:95:2e:da:4e: f5:7a:ba:bd:9f:9a:4c:c0:a6:8d:4c:48:8f:29:19:70:42:23: 65:ce:44:af:0a:6f:07:72:fb:65:8d:aa:85:0c:21:e7:77:78: dd:c2:10:0f:e7:f9:c1:e6:d1:08:8f:ac:1f:23:13:d3:4f:28: a2:cb:f4:63:5a:ea:04:75:24:62:1f:c5:08:76:c4:54:f8:0b: 21:2b:46:f6:ac:0c:49:cc:c3:82:8b:2e:df:1d:e3:c0:b1:b2: 2a:85:71:fe:3d:47:c6:0f:5c:82:e8:6b:49:d0:66:89:0f:74: f6:91:fe:bf:83:5b:9c:84:79:f8:82:63:37:6f:1f:cf:6e:e2: b8:f4:15:84:da:ae:a2:cc:e8:55:9e:78:88:bf:3b:fa:a5:5e: f8:9b:3f:e8:00:d1:76:18:11:a2:a1:8e:75:98:53:2d:4b:9b: d1:7a:c8:ac:74:5d:d1:b4:98:39:a5:fd:33:51:de:e0:bc:64: f4:54:bb:af:fe:ee:9f:8f:57:31:15:0a:d6:93:63:08:d6:58: 8f:89:8f:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEq0QuYTAc7xrq1mcYTKNwXDZf5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM0MzJERTJCRDY0RUY5NzUwREJGMURGNjAzRDMwMEMx MTM1MUQ4ODAeFw0yNTEyMTkxOTQ0MzlaFw0yNTEyMjAyMjM2MzlaMDMxMTAvBgNV BAMTKDlCNjcyMzNDNDY0MUMyMTYxQjgwN0U2Nzg4QzZDMUNFRTY3ODEwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2kCB+/yAT8WBL4rNahr5VxTy HXwgMNd+GtUgAr6V8L0i3WHnKqOoCHNkT2K5AWjqg4M4a+LMO5pCKN1K+dATM9kZ gLEHXsnUwWZL2dpTxGGVhI1oYEK3+QBgNEq0+LpP3jwHkKwakyBPHKN3uu54lWFe TX1QT78bvgfIuwSXFZEiS9NoDuWIHe2c0r1fYEJPnPM/a5zpm9XyjS4EvdSVWdaU Qg3g0MZndHD8oTSAEZwxmlRoDOlIdSm1TLwAolEgawIBZZqeyTK+A02hDwxXmYRD +a90WKEPWQw1KwKFQ4rSQruYBNZHOCV9IAXihTv3g4nNSHzk5yX20PvNrmVlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm2cjPEZBwhYbgH5niMbBzuZ4EEUwHwYDVR0j BBgwFoAU3EMt4r1k75dQ2/HfYD0wDBE1HYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3F3NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpz dTcvMC9EQzQzMkRFMkJENjRFRjk3NTBEQkYxREY2MDNEMzAwQzExMzUxRDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNDMyREUyQkQ2NEVGOTc1 MERCRjFERjYwM0QzMDBDMTEzNTFEODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3F3NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpzdTcvMC9E QzQzMkRFMkJENjRFRjk3NTBEQkYxREY2MDNEMzAwQzExMzUxRDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg8t40dL5tbGCRGyFuEpmPnGYfkV3Us5dORfEDOn4+WR0uD9xQKJ1Ul4tN44U JDb59R2VLtpO9Xq6vZ+aTMCmjUxIjykZcEIjZc5ErwpvB3L7ZY2qhQwh53d43cIQ D+f5webRCI+sHyMT008oosv0Y1rqBHUkYh/FCHbEVPgLIStG9qwMSczDgosu3x3j wLGyKoVx/j1Hxg9cguhrSdBmiQ909pH+v4NbnIR5+IJjN28fz27iuPQVhNquoszo VZ54iL87+qVe+Js/6ADRdhgRoqGOdZhTLUub0XrIrHRd0bSYOaX9M1He4Lxk9FS7 r/7un49XMRUK1pNjCNZYj4mPXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:29:12 2025 by rpki-client