This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json) Hash identifier: QuC9AEJCdLWC7dA9TmAO37/FiBFcmXNUVPkgYNj8OyI= Subject key identifier: 5C:E2:20:4E:E6:40:20:6B:AB:48:63:38:79:C5:69:34:D0:1A:86:51 Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 5F32BBA49C7A908261ABEEE4C2D4BF9E8181E3C3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft Manifest number: 39 Signing time: Wed 17 Dec 2025 13:15:43 +0000 Manifest this update: Wed 17 Dec 2025 13:10:43 +0000 Manifest next update: Thu 18 Dec 2025 13:58:43 +0000 Files and hashes: 1: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: tfXcBng1Ji87b26mXsUh8hi0UNuyA7Td4+StYBJ4T7Q=) 2: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=) 3: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Dec 2025 13:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:32:bb:a4:9c:7a:90:82:61:ab:ee:e4:c2:d4:bf:9e:81:81:e3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: Dec 17 13:10:43 2025 GMT Not After : Dec 18 13:58:43 2025 GMT Subject: CN=5CE2204EE640206BAB48633879C56934D01A8651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:f3:06:d0:50:de:4b:3c:94:8c:0f:5e:a6: e6:68:7f:ff:72:b4:8d:80:21:7c:a0:81:23:71:15: 03:c2:b0:9d:f9:0b:5a:0c:bd:00:5a:f0:e2:40:0d: 22:f6:8f:ab:27:46:a1:96:8a:d3:a3:70:a1:19:8f: 9b:56:c1:6d:6a:c4:d0:98:20:3d:0f:ca:1b:34:72: ee:b7:fe:66:6d:6a:5e:bd:38:56:64:7f:4e:76:6e: 75:e1:67:3e:16:52:7b:b6:73:53:0a:2f:30:62:75: 2b:ad:02:1e:50:b6:9b:2d:d4:29:6f:ff:f1:13:1d: 13:5b:ff:3b:89:33:93:de:5f:76:65:f7:63:a8:22: 17:1a:08:f7:c2:f6:60:87:0a:80:72:a3:9e:9b:17: e2:52:56:16:cf:06:0e:1c:a6:02:bc:01:c0:c1:81: 2f:67:55:12:ef:20:a0:9b:d7:25:05:15:27:13:27: cf:ae:5e:60:0d:04:a0:fe:80:5b:69:e1:ac:32:f5: 1c:88:0b:c6:34:5f:b9:1e:7a:88:83:eb:66:e1:5c: 08:c9:dc:24:2e:2c:4b:ee:7a:a5:fa:69:a3:88:25: 88:47:9d:77:c0:94:7c:7f:4a:e5:eb:49:c6:e7:04: cb:0f:6b:bb:1e:10:62:82:0d:ac:a7:39:ee:8b:cb: c4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E2:20:4E:E6:40:20:6B:AB:48:63:38:79:C5:69:34:D0:1A:86:51 X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:82:83:06:10:ad:59:e3:e3:62:40:72:14:41:e7:3b:66:b5: fe:7e:27:b8:9e:6b:81:d8:0b:f3:91:99:e6:c9:a9:80:61:9b: 1b:c4:d6:5e:2c:ba:19:f8:1c:ca:85:c1:da:4d:bd:a1:c1:99: 95:d6:b0:9b:f4:56:97:b0:d4:04:f4:3a:59:04:d6:b8:ef:c6: 84:a5:19:09:d7:23:74:ae:6c:02:c8:e8:c3:ea:16:58:af:7c: 99:56:65:29:48:e3:c4:04:21:55:74:f0:23:df:c6:af:06:cb: 2d:e6:c1:df:a6:06:a9:d3:45:bb:ff:7a:bd:34:c8:da:ec:ef: ac:af:fc:a0:64:6e:be:d5:cb:bc:32:11:0a:4b:c6:20:bc:58: 6a:d4:bd:01:cd:5f:e3:5b:7b:66:e5:fa:49:96:db:39:79:81: 1c:cf:e3:6b:19:68:2e:a7:88:4d:64:2b:ed:74:d4:d2:04:35: b6:67:2b:1c:d1:22:c2:bf:b6:6d:35:a3:15:0a:88:90:86:30: 6b:69:60:e3:83:ed:7e:f2:3b:c1:34:f4:32:dc:25:fd:70:62: 7d:ef:25:42:f8:53:e8:fc:b5:24:2f:b1:71:48:e4:15:9c:9f: 78:9f:5f:9c:e1:65:fc:57:28:9a:04:3d:8b:e1:eb:16:b0:2d: 82:72:6c:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXzK7pJx6kIJhq+7kwtS/noGB48MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNTEyMTcxMzEwNDNaFw0yNTEyMTgxMzU4NDNaMDMxMTAvBgNV BAMTKDVDRTIyMDRFRTY0MDIwNkJBQjQ4NjMzODc5QzU2OTM0RDAxQTg2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOvMG0FDeSzyUjA9epuZof/9y tI2AIXyggSNxFQPCsJ35C1oMvQBa8OJADSL2j6snRqGWitOjcKEZj5tWwW1qxNCY ID0Pyhs0cu63/mZtal69OFZkf052bnXhZz4WUnu2c1MKLzBidSutAh5Qtpst1Clv //ETHRNb/zuJM5PeX3Zl92OoIhcaCPfC9mCHCoByo56bF+JSVhbPBg4cpgK8AcDB gS9nVRLvIKCb1yUFFScTJ8+uXmANBKD+gFtp4awy9RyIC8Y0X7keeoiD62bhXAjJ 3CQuLEvueqX6aaOIJYhHnXfAlHx/SuXrScbnBMsPa7seEGKCDaynOe6Ly8R5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXOIgTuZAIGurSGM4ecVpNNAahlEwHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA14KDBhCtWePjYkByFEHnO2a1/n4nuJ5rgdgL85GZ5smpgGGbG8TWXiy6Gfgc yoXB2k29ocGZldawm/RWl7DUBPQ6WQTWuO/GhKUZCdcjdK5sAsjow+oWWK98mVZl KUjjxAQhVXTwI9/GrwbLLebB36YGqdNFu/96vTTI2uzvrK/8oGRuvtXLvDIRCkvG ILxYatS9Ac1f41t7ZuX6SZbbOXmBHM/jaxloLqeITWQr7XTU0gQ1tmcrHNEiwr+2 bTWjFQqIkIYwa2lg44PtfvI7wTT0Mtwl/XBife8lQvhT6Py1JC+xcUjkFZyfeJ9f nOFl/FcomgQ9i+HrFrAtgnJs8g== -----END CERTIFICATE-----Generated at Thu Dec 18 00:07:37 2025 by rpki-client