This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft File: D74EFE2D47A320A7B31005AF365FC275085C95CE.mft (raw, json) Hash identifier: ruRRiPqTlzYRWFguxUUHvfdZrUaDSh2kgTO6qD0Er0Q= Subject key identifier: CB:50:91:B4:E4:0E:51:A7:5E:4C:0C:02:66:65:2E:3F:89:19:BE:C2 Authority key identifier: D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE Certificate issuer: /CN=D74EFE2D47A320A7B31005AF365FC275085C95CE Certificate serial: 542E0EDEE7580569C1C9456DA323DB8AB4D5049B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft Manifest number: 0345 Signing time: Tue 23 Dec 2025 15:43:33 +0000 Manifest this update: Tue 23 Dec 2025 15:38:33 +0000 Manifest next update: Wed 24 Dec 2025 16:58:33 +0000 Files and hashes: 1: D74EFE2D47A320A7B31005AF365FC275085C95CE.crl (hash: SmYc9XnQCeOGnn0SBGmwECKm2llOUzHmSBoxZxgwjJs=) 2: 323830343a383132343a3a2f33322d3438203d3e20323732343335.roa (hash: cbf4PO3OBqGOnJbDUnRHTBHlU5wNzjzc1TuUDxP7Kak=) 3: 3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa (hash: amnmfn2/lMKCh7Kl+GlEk8dTLAe/ObrWGr1dPWGiiqg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 16:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2e:0e:de:e7:58:05:69:c1:c9:45:6d:a3:23:db:8a:b4:d5:04:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74EFE2D47A320A7B31005AF365FC275085C95CE Validity Not Before: Dec 23 15:38:33 2025 GMT Not After : Dec 24 16:58:33 2025 GMT Subject: CN=CB5091B4E40E51A75E4C0C0266652E3F8919BEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:7b:a3:42:69:a0:32:66:43:2b:01:d8:40: 74:70:f6:ff:c2:b7:98:c9:c3:b3:5d:be:9d:f7:c9: f1:ca:ad:2a:ff:c4:5b:b6:64:06:d9:db:71:57:02: ae:58:82:c4:9e:ee:f1:44:6f:9f:f1:57:0f:f4:3b: 62:23:d1:31:7d:1f:ef:f8:15:da:59:ce:3f:05:ef: 1f:67:cb:d7:ff:1c:ad:61:3a:c5:f1:51:43:e5:4c: 8b:93:4a:f3:98:5a:ce:a3:15:1a:7b:00:88:ce:3a: 4a:38:6a:2c:3f:ec:a7:24:c5:68:fd:06:d7:5e:4e: 8c:3d:99:20:d4:95:81:74:77:98:18:c2:e9:77:eb: 4c:1d:0b:fc:7a:a9:01:bd:2f:b5:fa:04:7c:6b:bd: 24:c0:dc:e2:21:36:ee:13:84:55:81:81:ec:b3:8d: 19:3a:65:53:b9:9f:a5:86:15:a6:6a:a8:5b:cd:c3: ec:68:6e:1d:0a:68:22:6e:db:2b:d5:5a:ba:f7:52: 24:53:a3:a4:ef:56:ee:ec:d4:7a:f9:5e:09:d3:8d: 40:37:f4:a3:db:09:12:4a:0f:43:4c:06:b4:06:80: 18:77:dc:66:42:e2:ce:00:cd:c0:13:55:5f:dd:dc: 01:13:ae:b8:1a:34:9d:a0:7e:b7:79:7e:c6:2e:95: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:50:91:B4:E4:0E:51:A7:5E:4C:0C:02:66:65:2E:3F:89:19:BE:C2 X509v3 Authority Key Identifier: keyid:D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c6:ab:dd:82:37:46:d0:52:14:31:4d:7a:bf:ba:58:cd:03: 90:1e:3e:2d:ba:9a:da:d5:28:01:3b:19:1a:0e:cf:67:75:80: 65:26:d9:79:e9:5a:45:fa:a7:81:b9:b5:28:c1:58:d7:fe:3b: 2f:46:21:67:a2:2b:53:a7:29:c6:5a:0c:f6:61:ac:2a:3f:d3: 31:41:8e:1e:26:b0:45:69:f2:95:f2:53:91:4d:83:98:fb:0a: 72:67:e4:c6:e9:77:66:d4:c1:b2:d1:b6:dd:2f:33:0a:61:9d: 87:fc:1c:8b:79:91:aa:62:41:58:e1:5e:04:6e:95:80:ce:73: 81:53:bf:17:d3:fc:6f:55:bb:64:61:6a:a3:cb:df:a2:5b:0f: 50:8a:07:15:d2:48:2b:1a:5d:b4:df:d9:4c:98:22:7f:41:90: fd:8b:e6:79:9a:22:30:8a:4a:1f:dd:6f:9a:97:8c:96:f9:39: 19:30:9a:69:ad:4e:88:45:9f:86:0e:f9:f2:31:32:ff:1e:a7: 64:56:2d:94:8c:36:61:81:7d:01:9b:22:fc:4a:31:5d:6d:75: a9:b1:a8:31:73:e2:36:81:35:a8:85:dc:1a:52:7a:46:56:b2: 98:3c:52:5c:8a:ce:bc:21:d6:e9:c4:4a:7b:4c:02:78:31:3e: 45:ad:50:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVC4O3udYBWnByUVtoyPbirTVBJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0RUZFMkQ0N0EzMjBBN0IzMTAwNUFGMzY1RkMyNzUw ODVDOTVDRTAeFw0yNTEyMjMxNTM4MzNaFw0yNTEyMjQxNjU4MzNaMDMxMTAvBgNV BAMTKENCNTA5MUI0RTQwRTUxQTc1RTRDMEMwMjY2NjUyRTNGODkxOUJFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OHujQmmgMmZDKwHYQHRw9v/C t5jJw7Ndvp33yfHKrSr/xFu2ZAbZ23FXAq5YgsSe7vFEb5/xVw/0O2Ij0TF9H+/4 FdpZzj8F7x9ny9f/HK1hOsXxUUPlTIuTSvOYWs6jFRp7AIjOOko4aiw/7KckxWj9 BtdeTow9mSDUlYF0d5gYwul360wdC/x6qQG9L7X6BHxrvSTA3OIhNu4ThFWBgeyz jRk6ZVO5n6WGFaZqqFvNw+xobh0KaCJu2yvVWrr3UiRTo6TvVu7s1Hr5XgnTjUA3 9KPbCRJKD0NMBrQGgBh33GZC4s4AzcATVV/d3AETrrgaNJ2gfrd5fsYulaZ1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy1CRtOQOUadeTAwCZmUuP4kZvsIwHwYDVR0j BBgwFoAU107+LUejIKezEAWvNl/CdQhclc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE03ZWNmUXU2bnV6YXppeHZVeVpEM2VXOXlQU1phTjFBdEhVTVZLVkd1 Z0svMi9ENzRFRkUyRDQ3QTMyMEE3QjMxMDA1QUYzNjVGQzI3NTA4NUM5NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3NEVGRTJENDdBMzIwQTdC MzEwMDVBRjM2NUZDMjc1MDg1Qzk1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RE03ZWNmUXU2bnV6YXppeHZVeVpEM2VXOXlQU1phTjFBdEhVTVZLVkd1Z0svMi9E NzRFRkUyRDQ3QTMyMEE3QjMxMDA1QUYzNjVGQzI3NTA4NUM5NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8ar3YI3RtBSFDFNer+6WM0DkB4+Lbqa2tUoATsZGg7PZ3WAZSbZeelaRfqn gbm1KMFY1/47L0YhZ6IrU6cpxloM9mGsKj/TMUGOHiawRWnylfJTkU2DmPsKcmfk xul3ZtTBstG23S8zCmGdh/wci3mRqmJBWOFeBG6VgM5zgVO/F9P8b1W7ZGFqo8vf olsPUIoHFdJIKxpdtN/ZTJgif0GQ/YvmeZoiMIpKH91vmpeMlvk5GTCaaa1OiEWf hg758jEy/x6nZFYtlIw2YYF9AZsi/EoxXW11qbGoMXPiNoE1qIXcGlJ6RlaymDxS XIrOvCHW6cRKe0wCeDE+Ra1Q0w== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:45 2025 by rpki-client