This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft File: DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json) Hash identifier: RXjyEx20maiZCqCetBwDWTzM+ZuhUJ+6/PaTL6tlPy4= Subject key identifier: B9:33:85:39:27:9B:7A:60:77:05:26:49:35:CC:81:7A:84:D1:CF:01 Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92 Certificate issuer: /CN=DD880B71129737798123EE9EDC1423C3E8280892 Certificate serial: 4553673631800E4F7A29730E90B155EC576359A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft Manifest number: 0386 Signing time: Wed 24 Dec 2025 03:00:00 +0000 Manifest this update: Wed 24 Dec 2025 02:55:00 +0000 Manifest next update: Thu 25 Dec 2025 03:00:00 +0000 Files and hashes: 1: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: 89jHLZD3KlsLbxmJ66oDvc/Ki2htQfHZrq6ky2CH/2Q=) 2: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: EiFbXmNwfUfEkSI4qCqsU5jU8ePYLs88ZEXUItBxJT0=) 3: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: i06R7ZftAjC7a/YY6upqVlOH5minL/+0Kvab9Pct10w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:53:67:36:31:80:0e:4f:7a:29:73:0e:90:b1:55:ec:57:63:59:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892 Validity Not Before: Dec 24 02:55:00 2025 GMT Not After : Dec 31 03:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:35:2d:cc:68:d9:74:5c:15:4c:a2:cb:72: 01:8f:0d:0b:3f:b8:d3:23:9a:7f:dd:89:ae:c9:eb: 89:eb:c9:04:4e:9c:25:32:d9:ae:5b:b0:fb:db:78: e5:76:86:f5:56:02:e0:c5:c5:4f:00:7d:e5:a4:23: 95:e0:de:32:da:f2:e7:4d:6e:66:cc:64:45:db:5e: 29:68:cf:60:f7:82:e3:e7:7f:5b:62:cc:73:b1:32: 68:d7:f6:33:79:aa:04:a2:b7:b6:a2:bd:36:a7:7d: 08:d1:04:ea:c5:6d:c3:fb:43:77:60:12:53:69:d5: 4f:05:1e:40:a7:84:94:e2:63:53:08:21:8e:fe:95: e4:1f:b2:34:99:a9:ed:e9:0f:43:4f:28:18:38:71: 4f:f5:34:fc:ff:4b:d1:39:b5:27:ed:dc:04:9f:e5: 95:78:61:7d:4f:1e:03:ad:3d:0e:17:83:12:29:27: 07:ae:d8:b8:f5:c5:e5:57:d8:61:64:4a:4a:48:4e: 36:90:10:e9:d9:d1:b6:23:88:3b:5d:6e:6c:8c:f9: 76:58:60:97:23:9b:0d:ac:6b:6c:5f:56:a6:ab:62: d1:98:ad:e3:1d:32:bc:9c:51:49:c7:43:69:04:b0: 48:f2:7f:04:7d:ec:b5:f9:c4:9e:66:7d:33:37:1a: 84:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:33:85:39:27:9B:7A:60:77:05:26:49:35:CC:81:7A:84:D1:CF:01 X509v3 Authority Key Identifier: keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:05:d8:8b:22:d5:70:05:0e:dc:ef:7c:b6:38:1c:ff:59:28: 43:92:6b:8a:18:5b:7c:db:35:1b:e9:8e:7e:ce:09:e5:5c:ae: 0f:8c:66:73:ee:63:59:e6:6c:03:36:e6:4b:4e:f7:c6:95:a6: 41:a5:83:83:d8:25:f4:85:3c:cf:46:ed:d2:1f:ae:43:4a:33: 6b:05:b7:72:d9:e4:f8:99:3c:6f:ac:cb:d5:67:32:1a:b7:78: 16:57:13:54:48:e0:d9:52:8e:c5:82:08:3c:a0:b5:34:e0:ee: 5b:46:ff:61:f5:e3:a6:d2:42:92:65:f3:04:78:1c:59:ed:9a: 8d:aa:08:8d:54:04:29:63:9a:73:8a:53:19:70:7d:cf:ae:f1: 7b:eb:a3:47:09:c2:e5:6e:d5:ed:46:41:e3:27:4a:7e:a1:33: 16:8e:a9:3b:46:c8:70:55:20:bf:68:0a:ef:34:0a:8d:33:cd: 08:af:06:c7:f7:d7:6b:98:b4:5c:2b:08:fd:96:27:f6:70:56: 2f:b0:9e:94:e4:a2:a3:14:a9:4a:b0:e7:9a:50:59:39:1b:49: 12:e9:21:16:be:5f:76:d9:67:76:d8:9b:90:f9:f5:07:cf:d0: ec:44:26:37:1b:57:f5:a9:ef:87:a2:61:05:9c:5d:14:69:11: 5c:16:39:25 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIURVNnNjGADk96KXMOkLFV7FdjWaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4ODBCNzExMjk3Mzc3OTgxMjNFRTlFREMxNDIzQzNF ODI4MDg5MjAeFw0yNTEyMjQwMjU1MDBaFw0yNTEyMzEwMzAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI2RDM1MkRDQzY4RDk3NDVD MTU0Q0EyQ0I3MjAxOEYwRDBCM0ZCOEQzMjM5QTdGREQ4OUFFQzlFQjg5RUJDOTA0 NEU5QzI1MzJEOUFFNUJCMEZCREI3OEU1NzY4NkY1NTYwMkUwQzVDNTRGMDA3REU1 QTQyMzk1RTBERTMyREFGMkU3NEQ2RTY2Q0M2NDQ1REI1RTI5NjhDRjYwRjc4MkUz RTc3RjVCNjJDQzczQjEzMjY4RDdGNjMzNzlBQTA0QTJCN0I2QTJCRDM2QTc3RDA4 RDEwNEVBQzU2REMzRkI0Mzc3NjAxMjUzNjlENTRGMDUxRTQwQTc4NDk0RTI2MzUz MDgyMThFRkU5NUU0MUZCMjM0OTlBOUVERTkwRjQzNEYyODE4Mzg3MTRGRjUzNEZD RkY0QkQxMzlCNTI3RUREQzA0OUZFNTk1Nzg2MTdENEYxRTAzQUQzRDBFMTc4MzEy MjkyNzA3QUVEOEI4RjVDNUU1NTdEODYxNjQ0QTRBNDg0RTM2OTAxMEU5RDlEMUI2 MjM4ODNCNUQ2RTZDOENGOTc2NTg2MDk3MjM5QjBEQUM2QjZDNUY1NkE2QUI2MkQx OThBREUzMUQzMkJDOUM1MTQ5Qzc0MzY5MDRCMDQ4RjI3RjA0N0RFQ0I1RjlDNDlF NjY3RDMzMzcxQTg0QjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAwm01Lcxo2XRcFUyiy3IBjw0LP7jTI5p/3YmuyeuJ68kETpwlMtmu W7D723jldob1VgLgxcVPAH3lpCOV4N4y2vLnTW5mzGRF214paM9g94Lj539bYsxz sTJo1/YzeaoEore2or02p30I0QTqxW3D+0N3YBJTadVPBR5Ap4SU4mNTCCGO/pXk H7I0mant6Q9DTygYOHFP9TT8/0vRObUn7dwEn+WVeGF9Tx4DrT0OF4MSKScHrti4 9cXlV9hhZEpKSE42kBDp2dG2I4g7XW5sjPl2WGCXI5sNrGtsX1amq2LRmK3jHTK8 nFFJx0NpBLBI8n8Efey1+cSeZn0zNxqEtQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FLkzhTknm3pgdwUmSTXMgXqE0c8BMB8GA1UdIwQYMBaAFN2IC3ESlzd5gSPuntwU I8PoKAiSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtO S3RMMWJwZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3 OTgxMjNFRTlFREMxNDIzQzNFODI4MDg5Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9ERDg4MEI3MTEyOTczNzc5ODEyM0VFOUVEQzE0MjNDM0U4Mjgw ODkyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtOS3RMMWJw ZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3OTgxMjNF RTlFREMxNDIzQzNFODI4MDg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAkF2Isi1XAFDtzvfLY4HP9Z KEOSa4oYW3zbNRvpjn7OCeVcrg+MZnPuY1nmbAM25ktO98aVpkGlg4PYJfSFPM9G 7dIfrkNKM2sFt3LZ5PiZPG+sy9VnMhq3eBZXE1RI4NlSjsWCCDygtTTg7ltG/2H1 46bSQpJl8wR4HFntmo2qCI1UBCljmnOKUxlwfc+u8Xvro0cJwuVu1e1GQeMnSn6h MxaOqTtGyHBVIL9oCu80Co0zzQivBsf312uYtFwrCP2WJ/ZwVi+wnpTkoqMUqUqw 55pQWTkbSRLpIRa+X3bZZ3bYm5D59QfP0OxEJjcbV/Wp74eiYQWcXRRpEVwWOSU= -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:49 2025 by rpki-client