This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: eKgqfMhuT60QMd3FS4OgHAZPv6pUu/MllMY1wZap9GA= Subject key identifier: E9:FF:3A:33:C6:37:9F:C2:48:EE:22:C9:53:55:63:2D:19:CA:7A:5B Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 01B8114AC06B60215842EBCE29EB83FE5490F128 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 0347 Signing time: Sun 21 Dec 2025 04:00:30 +0000 Manifest this update: Sun 21 Dec 2025 03:55:30 +0000 Manifest next update: Mon 22 Dec 2025 07:49:30 +0000 Files and hashes: 1: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 2: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: zUIvx/7fDcjNU57noG8y1YGPnzIo1yXqpURE4Oj+L4o=) 3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 07:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b8:11:4a:c0:6b:60:21:58:42:eb:ce:29:eb:83:fe:54:90:f1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Dec 21 03:55:30 2025 GMT Not After : Dec 22 07:49:30 2025 GMT Subject: CN=E9FF3A33C6379FC248EE22C95355632D19CA7A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:77:97:7a:a9:03:d7:b9:22:d1:2f:f8:a2: d8:45:12:97:ae:3c:2a:c2:2d:ca:4b:d9:f8:98:10: 42:e1:65:c4:96:8b:0e:3d:8e:2f:cd:2c:da:b3:ca: a5:63:90:11:da:2e:b6:1a:b5:bc:6e:f3:81:8e:83: 9f:aa:d8:85:1d:8b:ef:dc:4c:2f:e8:7f:46:88:b3: 7b:a0:bd:00:0e:80:b5:39:c4:5b:33:c4:35:f6:9c: 2d:47:ef:1a:ba:a1:78:8b:fb:26:0f:01:e9:f8:ec: 1a:7b:1b:58:c9:ab:02:25:0a:40:dd:8d:ff:17:2d: dd:1a:ec:22:83:bf:00:90:1d:f1:46:2e:03:97:78: 87:af:a1:dd:e1:af:d1:7f:53:06:ff:0b:1f:e4:2d: 8d:de:8d:a1:38:72:5a:57:4e:e8:6b:cd:e5:a4:84: 21:71:5e:62:d9:cc:2f:d3:83:9c:da:72:96:20:98: 97:ef:7f:39:50:f1:bf:27:43:2c:af:35:40:bd:e2: ee:af:01:67:59:45:5e:f3:91:00:27:12:4e:ce:9d: 65:82:95:a1:c2:cb:f1:2f:2c:85:28:76:e0:11:0c: 9f:67:a7:92:35:36:c6:4d:a1:b8:82:63:3d:31:4f: 7e:c5:38:e6:4a:66:a2:ee:7f:0e:bc:a8:64:93:bc: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FF:3A:33:C6:37:9F:C2:48:EE:22:C9:53:55:63:2D:19:CA:7A:5B X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:04:f7:45:8f:54:29:14:62:8b:7b:62:ab:b2:cf:21:e7:1e: 98:15:c1:82:51:88:e6:07:d0:ee:1d:34:e0:b0:a5:f8:a6:50: cd:a9:f8:d1:45:3f:39:c8:d3:29:d3:f0:d4:6c:72:e9:c9:4f: 6f:c9:f6:df:26:f3:ac:67:0e:4e:7c:f9:0b:9d:5c:8e:f2:ae: 77:ee:c4:40:f0:bc:26:ef:88:b7:6c:ec:e1:29:fb:bd:c4:60: 1e:30:4a:78:5e:e1:8a:d1:ec:78:0a:02:d8:a1:91:c8:75:a8: 66:cc:60:3c:6c:27:ce:a4:b5:d0:aa:e1:2b:7a:05:97:2a:79: a9:78:6d:4e:a5:51:4d:a5:1e:bb:8e:ed:ac:c0:7f:40:82:15: 07:da:a4:e0:ae:94:e2:00:d7:05:e7:1a:a2:5b:4d:ce:92:6a: fc:60:4d:c9:b5:6d:92:7f:cc:96:52:40:f0:18:b6:55:1f:ab: 23:f9:22:4e:ea:19:bd:fd:92:49:23:c7:48:27:53:aa:4d:cf: f5:b2:2a:a8:d2:81:c1:15:18:f3:bc:89:03:a6:5c:78:3f:cb: b1:42:f4:c9:5c:f8:60:e1:9e:a4:4c:52:08:a0:5a:83:b1:95: 1a:98:c2:c4:e5:10:04:f3:fd:ac:1c:e4:a8:7c:46:ad:c1:54: 9c:5e:af:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAbgRSsBrYCFYQuvOKeuD/lSQ8SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTEyMjEwMzU1MzBaFw0yNTEyMjIwNzQ5MzBaMDMxMTAvBgNV BAMTKEU5RkYzQTMzQzYzNzlGQzI0OEVFMjJDOTUzNTU2MzJEMTlDQTdBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGXeXeqkD17ki0S/4othFEpeu PCrCLcpL2fiYEELhZcSWiw49ji/NLNqzyqVjkBHaLrYatbxu84GOg5+q2IUdi+/c TC/of0aIs3ugvQAOgLU5xFszxDX2nC1H7xq6oXiL+yYPAen47Bp7G1jJqwIlCkDd jf8XLd0a7CKDvwCQHfFGLgOXeIevod3hr9F/Uwb/Cx/kLY3ejaE4clpXTuhrzeWk hCFxXmLZzC/Tg5zacpYgmJfvfzlQ8b8nQyyvNUC94u6vAWdZRV7zkQAnEk7OnWWC laHCy/EvLIUoduARDJ9np5I1NsZNobiCYz0xT37FOOZKZqLufw68qGSTvPeHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6f86M8Y3n8JI7iLJU1VjLRnKelswHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApQT3RY9UKRRii3tiq7LPIecemBXBglGI5gfQ7h004LCl+KZQzan40UU/OcjT KdPw1Gxy6clPb8n23ybzrGcOTnz5C51cjvKud+7EQPC8Ju+It2zs4Sn7vcRgHjBK eF7hitHseAoC2KGRyHWoZsxgPGwnzqS10KrhK3oFlyp5qXhtTqVRTaUeu47trMB/ QIIVB9qk4K6U4gDXBecaoltNzpJq/GBNybVtkn/MllJA8Bi2VR+rI/kiTuoZvf2S SSPHSCdTqk3P9bIqqNKBwRUY87yJA6ZceD/LsUL0yVz4YOGepExSCKBag7GVGpjC xOUQBPP9rBzkqHxGrcFUnF6vWw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:01:05 2025 by rpki-client