This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft File: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft (raw, json) Hash identifier: uvjyFZXPTe8xb4SiQ4sMCMsERHZQtDbJ6njtWI1hWLU= Subject key identifier: B3:47:4C:45:F8:2D:B9:41:50:81:A3:48:55:8F:DD:65:7F:58:3E:96 Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC Certificate issuer: /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC Certificate serial: 5438232DD1A21FD6BC23F532E8CFB67C11F98B42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft Manifest number: CB Signing time: Tue 30 Dec 2025 14:37:20 +0000 Manifest this update: Tue 30 Dec 2025 14:32:20 +0000 Manifest next update: Wed 31 Dec 2025 16:17:20 +0000 Files and hashes: 1: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl (hash: Gp5YyVnpdBScUcqRkfZVOZdGaFc63tZC3qpAwtN8t6Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 31 Dec 2025 16:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:38:23:2d:d1:a2:1f:d6:bc:23:f5:32:e8:cf:b6:7c:11:f9:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC Validity Not Before: Dec 30 14:32:20 2025 GMT Not After : Dec 31 16:17:20 2025 GMT Subject: CN=B3474C45F82DB9415081A348558FDD657F583E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:49:47:29:b4:39:55:05:2b:a1:7c:e7:72: ab:eb:cb:54:8c:dc:5a:b5:01:5f:68:5e:f4:81:2c: 49:b9:dc:5d:36:5e:15:99:35:26:af:c1:00:25:bb: ca:66:9e:fb:9e:93:e1:6b:92:45:49:36:6d:b1:6b: e2:91:8a:10:c5:c4:9a:e0:2b:94:e8:9b:72:9b:c5: 98:87:6c:41:b9:28:fe:90:ed:3a:4c:c4:e2:9b:d9: 23:68:aa:44:bf:db:45:6c:b8:34:78:d9:06:00:d7: 7d:83:91:71:ba:ca:dc:96:08:58:75:d7:44:58:1d: 9c:29:81:15:dd:b0:e9:16:7b:1b:47:05:58:e8:f9: d6:b4:84:75:6e:42:fb:f8:dd:4f:eb:2a:9c:97:f5: f8:6f:90:45:85:08:0d:3e:1d:11:4f:4a:b0:94:24: ce:94:e9:22:80:65:39:f9:b6:df:95:4b:57:0b:3f: 98:8c:c3:dd:99:20:56:55:b2:7d:24:9f:81:ce:eb: dc:2f:7a:b6:75:18:9c:0c:4e:ee:ed:7e:e7:c8:63: 03:96:06:b0:d4:67:b2:9f:cf:6c:18:b2:ae:ed:ac: 85:bb:13:93:63:1c:55:50:2b:ec:64:29:c6:95:51: c8:d1:da:53:20:ac:9e:c7:f7:39:21:2d:71:ca:4e: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:47:4C:45:F8:2D:B9:41:50:81:A3:48:55:8F:DD:65:7F:58:3E:96 X509v3 Authority Key Identifier: keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:92:5c:d8:99:e3:b3:89:3c:96:71:77:75:ba:dc:f5:9f:9b: c5:1f:40:6a:07:3f:32:e7:91:c0:83:d9:c4:54:90:b3:fb:5c: 54:1b:f2:64:7f:c3:30:5f:b0:cd:2f:4e:dd:68:4f:59:17:aa: 84:4b:cb:78:3f:af:a5:77:20:3a:d4:60:2e:a4:22:b1:e5:51: 3d:78:84:3d:5d:3b:03:77:d8:51:a1:ee:6b:94:55:58:45:a9: 32:5d:45:c5:f3:cf:3f:8c:e6:21:eb:14:46:5b:93:d5:b5:9f: 58:d4:08:ba:90:81:3a:33:60:24:d1:93:59:9b:d7:2e:42:32: d0:a5:ad:95:ea:2d:9e:29:33:e0:20:4c:1d:d3:db:75:b8:d3: 7d:e2:8b:1b:7e:40:23:cc:7b:8b:0f:02:f1:1b:5f:a4:6b:65: dc:3c:8c:09:d5:16:26:cc:31:a4:8c:1c:9f:e2:68:bd:bc:8d: a2:67:d8:65:9b:d6:82:16:25:22:0c:0f:28:c8:03:f1:4f:bb: f1:93:37:e8:82:55:f3:26:33:e6:cb:a5:57:45:47:23:ab:4b: 3b:17:a9:44:3f:79:0e:48:6f:cb:82:3b:65:29:5e:f7:86:d8: a8:a2:5d:74:d5:a0:79:e5:1f:e7:bb:22:40:ec:f9:28:c2:54: e4:24:fe:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVDgjLdGiH9a8I/Uy6M+2fBH5i0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQkFBMUNEMTBENzZBOTc0MzNGMzc2Q0Q2Qjc0NzRD NTE3OTdDQzAeFw0yNTEyMzAxNDMyMjBaFw0yNTEyMzExNjE3MjBaMDMxMTAvBgNV BAMTKEIzNDc0QzQ1RjgyREI5NDE1MDgxQTM0ODU1OEZERDY1N0Y1ODNFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfM0lHKbQ5VQUroXzncqvry1SM 3Fq1AV9oXvSBLEm53F02XhWZNSavwQAlu8pmnvuek+FrkkVJNm2xa+KRihDFxJrg K5Tom3KbxZiHbEG5KP6Q7TpMxOKb2SNoqkS/20VsuDR42QYA132DkXG6ytyWCFh1 10RYHZwpgRXdsOkWextHBVjo+da0hHVuQvv43U/rKpyX9fhvkEWFCA0+HRFPSrCU JM6U6SKAZTn5tt+VS1cLP5iMw92ZIFZVsn0kn4HO69wverZ1GJwMTu7tfufIYwOW BrDUZ7Kfz2wYsq7trIW7E5NjHFVQK+xkKcaVUcjR2lMgrJ7H9zkhLXHKTjYfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs0dMRfgtuUFQgaNIVY/dZX9YPpYwHwYDVR0j BBgwFoAUKjuqHNENdql0M/N2zWt0dMUXl8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdl eWsvMC8yQTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBM0JBQTFDRDEwRDc2QTk3 NDMzRjM3NkNENkI3NDc0QzUxNzk3Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdleWsvMC8y QTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADpJc2Jnjs4k8lnF3dbrc9Z+bxR9Aagc/MueRwIPZxFSQs/tcVBvyZH/DMF+w zS9O3WhPWReqhEvLeD+vpXcgOtRgLqQiseVRPXiEPV07A3fYUaHua5RVWEWpMl1F xfPPP4zmIesURluT1bWfWNQIupCBOjNgJNGTWZvXLkIy0KWtleotnikz4CBMHdPb dbjTfeKLG35AI8x7iw8C8RtfpGtl3DyMCdUWJswxpIwcn+JovbyNomfYZZvWghYl IgwPKMgD8U+78ZM36IJV8yYz5sulV0VHI6tLOxepRD95Dkhvy4I7ZSle94bYqKJd dNWgeeUf57siQOz5KMJU5CT+ww== -----END CERTIFICATE-----Generated at Wed Dec 31 08:31:34 2025 by rpki-client