This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: w9FRg5qIh83fEJkXTKHqT89jbLExKvVfkdvIDK9B3+o= Subject key identifier: BE:14:40:4E:DB:CF:5D:67:DC:6B:FC:0F:6C:9C:BE:F7:05:58:F6:5E Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 308E3B4C87A0DC5841F67EADD3D0BD122ED797D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 0336 Signing time: Sat 20 Dec 2025 10:00:34 +0000 Manifest this update: Sat 20 Dec 2025 09:55:34 +0000 Manifest next update: Sun 21 Dec 2025 11:25:34 +0000 Files and hashes: 1: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) 2: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) 3: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: lYuST5iqcwTrNi3/n/py7a+X0NPqZQ22P2qk1o0vPkU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 11:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8e:3b:4c:87:a0:dc:58:41:f6:7e:ad:d3:d0:bd:12:2e:d7:97:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Dec 20 09:55:34 2025 GMT Not After : Dec 21 11:25:34 2025 GMT Subject: CN=BE14404EDBCF5D67DC6BFC0F6C9CBEF70558F65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:38:34:10:a2:8e:dd:97:cb:b0:32:b1:a8: d6:74:39:91:28:12:d6:fc:13:34:3c:c5:22:1f:fd: 8d:88:2a:2c:82:18:0e:98:c0:d3:de:de:18:34:b6: 38:ef:38:51:4d:fe:de:d3:33:e1:5e:b7:a4:ff:7c: 5d:2f:45:a9:87:cb:b0:4e:d7:7c:d3:b2:9f:b6:d0: 4a:37:95:73:21:90:25:e5:7d:0f:9d:f7:09:c6:9f: 01:d8:06:ba:01:27:f8:14:3e:39:97:e9:4d:02:64: 62:b0:47:9b:18:b1:d7:fa:96:d3:ab:33:5a:e3:95: 53:9f:25:b7:df:dc:00:b8:ac:8e:5e:ef:7b:cd:fb: af:cd:38:81:bd:63:97:a7:ee:fc:4a:26:1d:22:a1: b2:f9:e5:cd:f6:60:5c:81:46:36:3e:c7:13:b1:1a: a7:70:de:76:81:ca:07:8f:b7:3f:ab:a7:96:59:c4: c6:bd:5e:b2:d7:cf:94:21:47:65:b1:b7:3a:e0:f4: 4e:34:29:7a:f9:43:28:98:13:c7:d7:af:ba:7f:8f: dd:32:9d:56:5c:1c:6d:58:db:54:4d:ed:8b:6e:5e: 63:78:25:8b:b8:be:99:5b:48:fe:98:42:83:a4:c6: 56:a4:16:bb:b5:76:19:75:12:bb:04:7d:7a:94:35: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:40:4E:DB:CF:5D:67:DC:6B:FC:0F:6C:9C:BE:F7:05:58:F6:5E X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a2:bc:61:8e:1e:eb:50:3a:ad:bf:e6:1c:49:8b:62:76:e5: 75:1b:1d:65:a7:34:a6:b7:9a:73:74:84:f8:25:f2:d5:23:c1: 1d:30:a6:7a:e4:87:f6:1b:f5:26:b7:3d:d6:45:81:01:68:c2: 86:6b:58:5d:d8:26:2d:f1:58:fc:f7:03:2c:1b:a0:f7:f7:e6: 89:9b:b5:ae:db:5c:ff:e8:4d:93:d0:ba:ea:b3:af:49:61:12: 33:8d:a5:76:c9:ad:39:31:35:0d:ff:ac:13:62:ac:1e:db:41: 0b:22:9f:4c:0c:83:53:7e:b5:e6:7b:3e:0e:78:a9:dc:94:b4: 39:f8:5f:eb:7c:66:22:55:fe:e0:17:ab:5e:e4:d7:b0:2d:83: d5:fc:b3:f3:41:bc:a7:4b:4e:b6:51:7b:2b:0a:cf:9e:8c:72: 69:51:40:6b:ce:91:18:c1:61:be:57:77:16:a9:cc:8f:a1:72: 30:22:bf:b0:b6:fa:49:89:42:65:b5:f5:d4:9f:75:77:b4:35: 9a:ec:0e:b1:3e:52:2e:f5:a9:fe:b3:56:4a:56:b8:03:97:85: 53:41:6c:cf:18:ae:37:5a:dd:19:8c:df:21:de:2a:8a:e3:8f: 25:9d:2c:77:ba:02:a2:32:7a:c4:2a:58:7e:f8:fc:0f:f2:ad: b0:bc:d7:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMI47TIeg3FhB9n6t09C9Ei7Xl9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNTEyMjAwOTU1MzRaFw0yNTEyMjExMTI1MzRaMDMxMTAvBgNV BAMTKEJFMTQ0MDRFREJDRjVENjdEQzZCRkMwRjZDOUNCRUY3MDU1OEY2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaTg0EKKO3ZfLsDKxqNZ0OZEo Etb8EzQ8xSIf/Y2IKiyCGA6YwNPe3hg0tjjvOFFN/t7TM+Fet6T/fF0vRamHy7BO 13zTsp+20Eo3lXMhkCXlfQ+d9wnGnwHYBroBJ/gUPjmX6U0CZGKwR5sYsdf6ltOr M1rjlVOfJbff3AC4rI5e73vN+6/NOIG9Y5en7vxKJh0iobL55c32YFyBRjY+xxOx Gqdw3naBygePtz+rp5ZZxMa9XrLXz5QhR2Wxtzrg9E40KXr5QyiYE8fXr7p/j90y nVZcHG1Y21RN7YtuXmN4JYu4vplbSP6YQoOkxlakFru1dhl1ErsEfXqUNbetAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvhRATtvPXWfca/wPbJy+9wVY9l4wHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcKK8YY4e61A6rb/mHEmLYnbldRsdZac0preac3SE+CXy1SPBHTCmeuSH9hv1 Jrc91kWBAWjChmtYXdgmLfFY/PcDLBug9/fmiZu1rttc/+hNk9C66rOvSWESM42l dsmtOTE1Df+sE2KsHttBCyKfTAyDU3615ns+Dnip3JS0Ofhf63xmIlX+4BerXuTX sC2D1fyz80G8p0tOtlF7KwrPnoxyaVFAa86RGMFhvld3FqnMj6FyMCK/sLb6SYlC ZbX11J91d7Q1muwOsT5SLvWp/rNWSla4A5eFU0FszxiuN1rdGYzfId4qiuOPJZ0s d7oCojJ6xCpYfvj8D/KtsLzXOA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:59:40 2025 by rpki-client