This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft File: DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json) Hash identifier: AtCi3/3yUtEAQ5XCxVnF3dWeww3dZTlGItkAD/j4lNw= Subject key identifier: 4F:6E:88:4B:63:5B:AA:5E:67:ED:5A:7F:2B:13:DD:E8:B4:4D:22:71 Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D Certificate issuer: /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Certificate serial: 3733BF1114AD1E251D75EBC84DE71E0C94AFCC86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft Manifest number: 015D Signing time: Sat 20 Dec 2025 00:27:08 +0000 Manifest this update: Sat 20 Dec 2025 00:22:08 +0000 Manifest next update: Sun 21 Dec 2025 02:35:08 +0000 Files and hashes: 1: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: V86kNco5ZHxMjKrWgLTi/qoHVEZvpbWtFOyczBdYZAU=) 2: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: /+EovdsvtOOh0hTTpF4RKtt4INgI2aCokRPO37iVsfE=) 3: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: EBy3rQwQ+8YvV1n0NbcOpSkf6ZX3JhodQDIQP6f8oCY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 02:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:33:bf:11:14:ad:1e:25:1d:75:eb:c8:4d:e7:1e:0c:94:af:cc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Validity Not Before: Dec 20 00:22:08 2025 GMT Not After : Dec 21 02:35:08 2025 GMT Subject: CN=4F6E884B635BAA5E67ED5A7F2B13DDE8B44D2271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:08:c6:5c:3f:89:62:46:33:47:b1:9e:00: 02:23:bb:c4:65:43:40:9f:0a:fb:f0:93:22:18:d0: 33:49:d3:ab:c4:98:ea:73:fa:54:b8:da:dd:f2:e3: 8b:9a:18:b5:5f:f2:02:17:a9:b1:58:d3:bf:8f:a3: 26:e0:f1:bf:52:e6:26:75:27:94:4c:e1:db:f3:45: 4b:87:69:17:51:51:e5:62:4d:f7:42:7c:0d:41:26: 80:1b:38:79:10:04:8f:c9:2d:65:42:e0:6d:00:b2: 7b:05:6a:09:20:ad:a9:46:8d:82:b6:df:f8:a3:e5: 81:81:25:56:94:6f:14:7c:92:3c:30:0b:02:4c:4d: ce:40:53:c0:03:a5:89:39:4b:4f:aa:dd:34:da:3e: 83:3e:64:b8:2f:e8:36:7f:51:0f:c7:c0:2b:e1:18: 07:d3:3a:10:3a:63:87:23:01:95:7a:12:fb:55:4c: ba:6b:d2:b9:15:d6:d9:c1:82:34:d2:98:0a:d8:3a: 73:83:81:6e:8f:0d:8e:1b:92:cb:89:06:88:c2:2c: 0a:be:aa:c5:9e:7f:ec:f1:b7:07:f8:19:1e:00:c3: f1:47:09:ea:23:2f:24:41:85:1b:66:3a:19:a5:a3: 7c:e5:27:fa:83:e5:67:d6:39:95:86:67:68:37:d3: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6E:88:4B:63:5B:AA:5E:67:ED:5A:7F:2B:13:DD:E8:B4:4D:22:71 X509v3 Authority Key Identifier: keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:db:c8:cf:76:86:69:bb:1c:9e:a9:2a:a9:ca:3c:ef:40:57: 90:dd:76:06:f8:c7:28:d1:46:63:af:47:95:a7:c4:d1:46:fd: 5c:50:46:42:04:69:6c:b2:53:a3:36:de:90:6e:21:18:2a:fb: 99:df:75:40:25:2f:5f:3a:0b:41:40:18:f8:29:c2:47:64:3f: e9:56:1e:23:5e:26:0c:56:ff:f0:74:42:6c:f9:e2:e1:a3:8a: dd:0e:77:b7:fb:86:61:7d:c0:1e:2f:36:9c:e0:ea:e2:96:20: 95:5d:65:85:41:0e:37:45:cd:b9:40:08:34:63:2d:b8:97:b9: f0:e4:31:53:d0:5e:2d:37:29:0d:7a:62:ba:9a:c1:2a:68:63: bf:b3:01:35:8a:fa:50:33:65:ba:20:38:41:b2:9a:ec:82:26: 3d:56:14:0c:75:38:98:97:2d:7a:d5:bc:e3:90:db:7e:9d:49: 31:03:2d:13:bf:15:b7:f5:32:4a:94:ab:1a:c0:94:b4:a7:ad: 32:6f:fe:dc:12:15:05:79:c9:f8:75:89:c8:b8:90:a9:d0:96: 63:37:2f:02:af:45:83:02:fd:f1:a1:9c:e2:f3:08:1d:07:60: 19:f8:a2:40:10:d5:1e:92:f5:a1:9d:2e:66:08:17:d2:cf:cd: b1:e3:5a:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNzO/ERStHiUddevITeceDJSvzIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF QzREMEI3RDAeFw0yNTEyMjAwMDIyMDhaFw0yNTEyMjEwMjM1MDhaMDMxMTAvBgNV BAMTKDRGNkU4ODRCNjM1QkFBNUU2N0VENUE3RjJCMTNEREU4QjQ0RDIyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOAjGXD+JYkYzR7GeAAIju8Rl Q0CfCvvwkyIY0DNJ06vEmOpz+lS42t3y44uaGLVf8gIXqbFY07+Poybg8b9S5iZ1 J5RM4dvzRUuHaRdRUeViTfdCfA1BJoAbOHkQBI/JLWVC4G0AsnsFagkgralGjYK2 3/ij5YGBJVaUbxR8kjwwCwJMTc5AU8ADpYk5S0+q3TTaPoM+ZLgv6DZ/UQ/HwCvh GAfTOhA6Y4cjAZV6EvtVTLpr0rkV1tnBgjTSmArYOnODgW6PDY4bksuJBojCLAq+ qsWef+zxtwf4GR4Aw/FHCeojLyRBhRtmOhmlo3zlJ/qD5WfWOZWGZ2g305kFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT26IS2Nbql5n7Vp/KxPd6LRNInEwHwYDVR0j BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMC9E RDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVtvIz3aGabscnqkqqco870BXkN12BvjHKNFGY69HlafE0Ub9XFBGQgRpbLJT ozbekG4hGCr7md91QCUvXzoLQUAY+CnCR2Q/6VYeI14mDFb/8HRCbPni4aOK3Q53 t/uGYX3AHi82nODq4pYglV1lhUEON0XNuUAINGMtuJe58OQxU9BeLTcpDXpiuprB Kmhjv7MBNYr6UDNluiA4QbKa7IImPVYUDHU4mJctetW845Dbfp1JMQMtE78Vt/Uy SpSrGsCUtKetMm/+3BIVBXnJ+HWJyLiQqdCWYzcvAq9FgwL98aGc4vMIHQdgGfii QBDVHpL1oZ0uZggX0s/NseNayg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:42:53 2025 by rpki-client