This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft File: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json) Hash identifier: nYyIvVmOZe0JrBwfmZdNRUyCur8kl0W9H8lcig8O+NE= Subject key identifier: F9:FF:4D:74:A1:35:ED:F5:6E:4E:6F:5D:B4:7B:7D:14:C0:37:9F:C0 Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Certificate serial: 2BC5C703F54CF2A025080C65CDD1F6F805AF0FA9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft Manifest number: 0314 Signing time: Wed 24 Dec 2025 10:19:14 +0000 Manifest this update: Wed 24 Dec 2025 10:14:14 +0000 Manifest next update: Thu 25 Dec 2025 11:05:14 +0000 Files and hashes: 1: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: eYQ11SVW387dKUnL0u3QC64/XONQK6E57jYO6fBHzJ0=) 2: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0=) 3: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: FG1wug4MqyLJsAReVjvXRe7puwgFUXpXXwbr9j3w0ZI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 11:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c5:c7:03:f5:4c:f2:a0:25:08:0c:65:cd:d1:f6:f8:05:af:0f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Validity Not Before: Dec 24 10:14:14 2025 GMT Not After : Dec 25 11:05:14 2025 GMT Subject: CN=F9FF4D74A135EDF56E4E6F5DB47B7D14C0379FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:63:b0:36:07:eb:61:43:55:27:cd:db:c6: fd:99:5a:04:97:bd:86:61:ba:3f:ce:10:dc:a1:55: 75:72:d3:db:3f:d5:06:27:0d:01:74:3f:ef:15:a3: 7d:bb:a3:ed:20:dd:7a:1d:9b:9a:98:bb:cd:f6:69: 1e:4a:ba:33:e7:07:29:ea:40:92:16:17:91:60:2a: 82:8d:ac:9a:ea:9e:44:dd:2e:b2:47:b7:64:1a:69: 3b:55:83:cf:23:53:44:34:c8:1b:25:e8:ec:a4:10: 9a:20:29:7a:88:f0:ff:20:2f:9f:23:21:2c:a5:fa: e5:6c:da:c8:a2:fb:de:27:c0:a2:38:72:bf:9f:a2: 61:93:39:12:bd:e1:62:4d:f8:0a:e2:8e:25:66:5c: 2f:3a:18:d5:9e:e0:45:b7:48:f5:fd:95:30:e0:7f: 7e:21:f3:d2:87:20:7b:f2:96:c6:fb:19:7e:38:0d: e5:ac:dc:eb:0a:7c:13:e8:b4:07:59:20:e6:e6:81: 5c:7f:ac:4c:b3:15:a5:4e:6c:b6:51:5a:5c:6c:c8: f8:93:b4:ff:92:18:98:3e:54:5a:a8:e1:b6:34:1a: 91:7f:4c:55:23:6a:c6:fd:4b:05:47:40:67:96:6d: 57:af:2d:96:9c:ea:ce:1b:6f:b9:83:83:31:fa:e3: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:4D:74:A1:35:ED:F5:6E:4E:6F:5D:B4:7B:7D:14:C0:37:9F:C0 X509v3 Authority Key Identifier: keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:16:0f:19:85:be:f7:b8:b7:d7:fe:c7:e1:f5:b8:0f:60:4f: ab:e8:48:79:31:b7:de:6d:b8:62:56:c2:12:5c:c6:d2:c9:ee: 4b:48:a2:23:b4:0b:1f:99:ef:aa:fd:8c:b0:de:57:22:aa:f9: 3e:d9:3a:a9:b5:b8:61:c1:9b:46:c7:bf:7d:2b:da:aa:f7:46: 4b:9b:2b:48:d6:98:23:e1:16:27:5a:32:16:8d:a6:c4:0a:4d: 0c:3b:1c:ec:e9:f4:69:08:6a:c7:af:c7:2b:4d:29:47:84:17: ee:13:07:0d:b7:3d:1e:05:84:68:41:31:c4:cc:5d:e7:04:e2: fa:7b:35:33:54:89:37:50:9f:75:89:09:fe:4d:7b:d9:40:ba: 7b:f8:14:e4:b9:75:13:9d:e5:df:74:d1:04:6f:1b:93:96:81: 33:f0:9f:93:81:01:e8:f0:ca:1c:38:50:d2:d3:41:10:69:f2: 88:d0:63:17:2c:d2:63:43:a2:25:a7:9a:33:ae:1b:18:df:e3: 46:20:58:db:5c:b7:c4:34:bf:9d:33:32:18:95:d6:18:69:3d: 5e:f2:dc:b4:dd:01:50:2c:ac:dd:c7:fe:38:7c:33:55:e8:16: a7:84:11:a4:25:45:ff:f1:3b:be:3e:96:d7:b1:37:e3:ff:7f: f3:12:f3:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK8XHA/VM8qAlCAxlzdH2+AWvD6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC NUY4RTU3MDAeFw0yNTEyMjQxMDE0MTRaFw0yNTEyMjUxMTA1MTRaMDMxMTAvBgNV BAMTKEY5RkY0RDc0QTEzNUVERjU2RTRFNkY1REI0N0I3RDE0QzAzNzlGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSGOwNgfrYUNVJ83bxv2ZWgSX vYZhuj/OENyhVXVy09s/1QYnDQF0P+8Vo327o+0g3Xodm5qYu832aR5KujPnBynq QJIWF5FgKoKNrJrqnkTdLrJHt2QaaTtVg88jU0Q0yBsl6OykEJogKXqI8P8gL58j ISyl+uVs2sii+94nwKI4cr+fomGTORK94WJN+ArijiVmXC86GNWe4EW3SPX9lTDg f34h89KHIHvylsb7GX44DeWs3OsKfBPotAdZIObmgVx/rEyzFaVObLZRWlxsyPiT tP+SGJg+VFqo4bY0GpF/TFUjasb9SwVHQGeWbVevLZac6s4bb7mDgzH645KTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+f9NdKE17fVuTm9dtHt9FMA3n8AwHwYDVR0j BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5 RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERqUksvMC9E REExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5hYPGYW+97i31/7H4fW4D2BPq+hIeTG33m24YlbCElzG0snuS0iiI7QLH5nv qv2MsN5XIqr5Ptk6qbW4YcGbRse/fSvaqvdGS5srSNaYI+EWJ1oyFo2mxApNDDsc 7On0aQhqx6/HK00pR4QX7hMHDbc9HgWEaEExxMxd5wTi+ns1M1SJN1CfdYkJ/k17 2UC6e/gU5Ll1E53l33TRBG8bk5aBM/Cfk4EB6PDKHDhQ0tNBEGnyiNBjFyzSY0Oi JaeaM64bGN/jRiBY21y3xDS/nTMyGJXWGGk9XvLctN0BUCys3cf+OHwzVegWp4QR pCVF//E7vj6W17E34/9/8xLzuQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:13:18 2025 by rpki-client