This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft File: 3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft (raw, json) Hash identifier: 6XsHgwC8ZucLkG9BZ7K+UZqKQn8oGEt4u/wi6hoAQ2I= Subject key identifier: 57:AD:6A:F9:2D:D0:D7:18:4F:DB:ED:BF:8C:D5:7B:B3:9C:14:A6:D3 Authority key identifier: 3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42 Certificate issuer: /CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42 Certificate serial: 3DDEE873508334B97A9CEA1CE6B5FCE4D5B14B19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer Subject info access: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft Manifest number: 24 Signing time: Fri 19 Dec 2025 13:31:23 +0000 Manifest this update: Fri 19 Dec 2025 13:26:23 +0000 Manifest next update: Sat 20 Dec 2025 17:27:23 +0000 Files and hashes: 1: 3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl (hash: yz1571nD9BdorWvh7pxY2RILfQhCQX2KxtebZxkvJa8=) 2: 3137372e37322e3134382e302f32322d3332203d3e203532383138.roa (hash: lM7c6M0J2w/4EolNkFZOBJa9bRKzETvZb2ozBmYadl8=) 3: 323830343a313131633a3a2f33322d313238203d3e203532383138.roa (hash: 5KNPCFzdFdX6UAkOorFdPv5xlNbe8CBYvX2EE36DsPk=) 4: 3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa (hash: W3tGjY/+pdMldJKze6nq/gkdxOZlRwyERFcu3OEqvts=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:de:e8:73:50:83:34:b9:7a:9c:ea:1c:e6:b5:fc:e4:d5:b1:4b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42 Validity Not Before: Dec 19 13:26:23 2025 GMT Not After : Dec 20 17:27:23 2025 GMT Subject: CN=57AD6AF92DD0D7184FDBEDBF8CD57BB39C14A6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:77:17:b0:22:0c:05:35:38:5c:2b:af:d9: b4:19:c6:b6:57:96:e2:c5:f7:63:84:6d:e4:ae:40: 84:40:02:45:1e:88:3b:d6:fc:05:4d:6e:2f:d5:92: 88:7e:be:48:46:6b:3b:11:b5:9f:eb:78:83:c3:ca: 23:50:c6:f6:7e:a9:9c:76:f3:8a:37:3c:21:ac:68: 1f:61:78:6d:57:72:69:53:c1:f4:2b:bf:74:e9:7f: f1:78:c5:0f:57:25:f8:cc:5b:7a:d8:f1:4a:52:07: 75:03:88:46:a3:8e:f9:ea:14:f5:cd:e0:31:52:c5: 25:cd:df:33:99:3d:c2:84:66:07:3b:40:1f:9d:c7: f8:59:93:2b:6d:66:00:14:f8:00:65:97:a8:5f:10: a5:29:98:3a:da:41:39:b8:f4:33:18:f7:9d:09:de: 88:73:58:f5:bf:99:e1:23:f9:05:d5:86:a2:b6:35: 78:3f:85:14:9a:3f:50:46:e6:13:55:71:fc:e3:15: 25:1d:b6:a2:a6:9f:c1:e3:6e:e8:0d:4e:b0:27:a5: 68:ef:94:e1:b2:ef:4d:dd:f1:f4:34:4f:0f:b2:12: 53:78:d2:5d:1c:ae:6d:0b:2d:76:17:37:8d:31:cc: ae:2a:b6:98:6c:f5:62:32:ee:fe:22:af:fb:a8:dd: 00:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:6A:F9:2D:D0:D7:18:4F:DB:ED:BF:8C:D5:7B:B3:9C:14:A6:D3 X509v3 Authority Key Identifier: keyid:3E:28:7C:63:DB:B3:ED:0D:09:ED:B7:0A:34:93:B0:2D:6C:FD:FB:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/3E287C63DBB3ED0D09EDB70A3493B02D6CFDFB42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9f:ad:23:8b:e0:f0:93:17:78:f2:63:3d:f5:b6:9c:9e:24: 43:26:af:09:8c:ed:fb:f7:12:f6:40:1d:f5:9d:54:f2:04:ed: 2a:88:f0:df:32:66:15:03:8f:57:9a:a2:47:12:9e:f1:cd:a7: 6a:11:24:02:77:87:e9:eb:02:a4:9a:d9:42:e2:49:09:d3:5d: 17:aa:01:35:f8:ba:d6:84:4b:c1:36:4b:39:ed:84:69:ac:cf: 92:93:b6:09:6f:8d:54:b7:3a:8c:3c:e8:19:b7:05:51:2f:b6: bd:a7:6b:e0:a4:1c:90:ff:5d:1a:c2:3d:2a:f4:6a:5d:03:fb: 68:f5:26:a2:bc:84:0b:6b:08:b9:81:7b:7d:36:ee:8e:4e:ae: 5c:fa:ab:90:81:e6:82:d1:25:a9:67:70:2b:f7:7a:8f:56:fb: 05:12:84:71:b1:c5:c3:b6:23:89:07:c2:bb:f8:19:7e:1e:fb: 28:a9:41:fb:53:a4:51:72:fb:c7:1d:75:87:26:e2:2b:8f:d0: 7d:4b:77:57:d9:c3:5d:e0:89:38:43:97:a9:ee:8f:2f:b6:8d: a3:45:95:bc:18:94:b6:2f:d8:fe:35:1e:ba:0f:4f:02:31:0c: e1:48:f9:67:d4:2f:2a:d5:92:ee:51:19:07:28:dc:e5:a6:3c: 2c:5f:ba:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPd7oc1CDNLl6nOoc5rX85NWxSxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyODdDNjNEQkIzRUQwRDA5RURCNzBBMzQ5M0IwMkQ2 Q0ZERkI0MjAeFw0yNTEyMTkxMzI2MjNaFw0yNTEyMjAxNzI3MjNaMDMxMTAvBgNV BAMTKDU3QUQ2QUY5MkREMEQ3MTg0RkRCRURCRjhDRDU3QkIzOUMxNEE2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp33cXsCIMBTU4XCuv2bQZxrZX luLF92OEbeSuQIRAAkUeiDvW/AVNbi/Vkoh+vkhGazsRtZ/reIPDyiNQxvZ+qZx2 84o3PCGsaB9heG1XcmlTwfQrv3Tpf/F4xQ9XJfjMW3rY8UpSB3UDiEajjvnqFPXN 4DFSxSXN3zOZPcKEZgc7QB+dx/hZkyttZgAU+ABll6hfEKUpmDraQTm49DMY950J 3ohzWPW/meEj+QXVhqK2NXg/hRSaP1BG5hNVcfzjFSUdtqKmn8HjbugNTrAnpWjv lOGy703d8fQ0Tw+yElN40l0crm0LLXYXN40xzK4qtphs9WIy7v4ir/uo3QAnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV61q+S3Q1xhP2+2/jNV7s5wUptMwHwYDVR0j BBgwFoAUPih8Y9uz7Q0J7bcKNJOwLWz9+0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2Ey TXIvMC8zRTI4N0M2M0RCQjNFRDBEMDlFREI3MEEzNDkzQjAyRDZDRkRGQjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjg3QzYzREJCM0VEMEQw OUVEQjcwQTM0OTNCMDJENkNGREZCNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2EyTXIvMC8z RTI4N0M2M0RCQjNFRDBEMDlFREI3MEEzNDkzQjAyRDZDRkRGQjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY5+tI4vg8JMXePJjPfW2nJ4kQyavCYzt+/cS9kAd9Z1U8gTtKojw3zJmFQOP V5qiRxKe8c2nahEkAneH6esCpJrZQuJJCdNdF6oBNfi61oRLwTZLOe2EaazPkpO2 CW+NVLc6jDzoGbcFUS+2vadr4KQckP9dGsI9KvRqXQP7aPUmoryEC2sIuYF7fTbu jk6uXPqrkIHmgtElqWdwK/d6j1b7BRKEcbHFw7YjiQfCu/gZfh77KKlB+1OkUXL7 xx11hybiK4/QfUt3V9nDXeCJOEOXqe6PL7aNo0WVvBiUti/Y/jUeug9PAjEM4Uj5 Z9QvKtWS7lEZByjc5aY8LF+6lw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:33 2025 by rpki-client