This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft File: D2986464325E8FD5DF10CBFA8DD303EF12449774.mft (raw, json) Hash identifier: kzs0JLFyj1jQcSTX1OotQPdQF+dtdCaQyh2h9lqv7Uc= Subject key identifier: B7:B3:25:30:AC:B7:38:E0:26:93:0F:20:38:11:F0:1B:1E:CF:9F:85 Authority key identifier: D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74 Certificate issuer: /CN=D2986464325E8FD5DF10CBFA8DD303EF12449774 Certificate serial: 6A337E346391BD5BA3563BD6CD3C3627935FD872 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer Subject info access: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft Manifest number: 0331 Signing time: Fri 05 Dec 2025 19:08:12 +0000 Manifest this update: Fri 05 Dec 2025 19:03:12 +0000 Manifest next update: Sat 06 Dec 2025 21:21:12 +0000 Files and hashes: 1: 34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (hash: 9rfSn4F2icHY0qkDkAbvjL4I+Ay9NbaG0pVo2oS6Vuk=) 2: D2986464325E8FD5DF10CBFA8DD303EF12449774.crl (hash: zIVoPVjwJ1MKA2afDoEb5qtTjfsIaWumsEdTVzMOMKc=) 3: 323830343a343439343a3a2f33322d3438203d3e20323637363430.roa (hash: h4ltmqTQTgqgbL5osFBqlAp89sJTKhfTS18W1+8QvGw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:33:7e:34:63:91:bd:5b:a3:56:3b:d6:cd:3c:36:27:93:5f:d8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774 Validity Not Before: Dec 5 19:03:12 2025 GMT Not After : Dec 6 21:21:12 2025 GMT Subject: CN=B7B32530ACB738E026930F203811F01B1ECF9F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:95:37:1b:ba:bf:a0:3f:4c:29:dd:63:fb: 98:80:12:de:00:75:d0:1d:84:bd:fa:8c:a0:1d:02: 57:8e:a1:f3:e7:0a:c7:89:b8:90:d6:e9:da:23:de: f7:c4:03:9e:0a:95:6e:f3:fc:54:dc:0d:e6:17:b7: 0a:94:ac:58:04:eb:fa:5c:e1:e2:16:54:34:2f:2a: b9:70:3b:d0:0c:1f:87:7a:46:09:82:4b:79:ff:9e: 01:a8:59:a4:32:b3:c5:1b:39:39:bd:97:8c:6f:43: c4:50:91:d9:5f:d9:53:fa:78:50:14:81:60:d7:9a: 3d:af:55:2e:83:be:69:59:40:f4:83:78:d6:08:3c: f4:5b:f4:f1:6e:5e:8f:df:ef:7a:8f:2e:5b:a3:21: 2f:75:bf:ad:4d:5b:75:22:ae:0f:5e:78:d3:46:91: ed:e1:b1:6c:62:b1:4b:76:5c:18:6e:27:f6:14:39: 29:7f:b7:39:56:52:ca:3f:1f:96:c5:58:fe:09:8e: f9:ac:e7:2f:3c:32:65:e0:6a:a1:22:33:e8:18:3a: ea:dd:b2:77:5d:c0:54:81:79:1c:21:e1:39:d9:cd: df:b1:04:7f:7e:82:dc:c7:3f:5a:d2:42:c3:69:58: 69:76:ec:d0:34:dd:db:0b:c4:21:a3:7b:d6:d5:d5: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B3:25:30:AC:B7:38:E0:26:93:0F:20:38:11:F0:1B:1E:CF:9F:85 X509v3 Authority Key Identifier: keyid:D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e5:03:7b:ba:1e:0b:e3:b1:11:93:d3:f3:27:1b:7d:06:3b: 87:3c:1e:fc:34:05:72:a3:8c:59:a1:63:df:65:e9:32:d8:06: 5e:10:07:25:96:7f:84:8a:f1:09:3c:4b:b7:c8:aa:24:2b:33: 5a:37:6d:14:18:b9:90:74:da:65:40:c6:79:29:68:a7:65:c5: 54:66:26:3f:07:6b:b2:f2:97:e3:af:a1:5b:89:a0:dc:9a:95: b0:75:0b:77:ed:e3:e9:6f:c4:aa:a1:8f:c2:57:54:f7:61:c8: 6e:51:19:79:90:db:f8:54:d2:dc:8e:f5:00:59:62:ba:49:04: 71:94:be:22:f0:38:6d:5a:17:7a:25:8a:f7:d9:60:cc:87:fd: f5:fb:e7:7f:16:c7:de:c4:81:dd:41:e8:ff:11:cc:c9:61:de: d5:be:c7:d2:24:30:fe:59:dd:e7:ae:c3:82:0a:b8:33:f4:01: 43:53:3c:a0:fc:0a:54:4e:b9:3d:0a:68:92:9d:03:dd:10:f5: 1a:15:49:39:0d:61:31:36:ac:91:21:96:b2:2b:c3:5b:70:20: 57:f8:69:e7:91:bb:2e:c0:d7:02:be:6c:f3:76:e9:6a:9c:12: 85:9a:06:a7:d6:53:27:d7:27:92:0b:ae:94:cc:6d:18:df:06: 59:35:45:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUajN+NGORvVujVjvWzTw2J5Nf2HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5ODY0NjQzMjVFOEZENURGMTBDQkZBOEREMzAzRUYx MjQ0OTc3NDAeFw0yNTEyMDUxOTAzMTJaFw0yNTEyMDYyMTIxMTJaMDMxMTAvBgNV BAMTKEI3QjMyNTMwQUNCNzM4RTAyNjkzMEYyMDM4MTFGMDFCMUVDRjlGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGJU3G7q/oD9MKd1j+5iAEt4A ddAdhL36jKAdAleOofPnCseJuJDW6doj3vfEA54KlW7z/FTcDeYXtwqUrFgE6/pc 4eIWVDQvKrlwO9AMH4d6RgmCS3n/ngGoWaQys8UbOTm9l4xvQ8RQkdlf2VP6eFAU gWDXmj2vVS6DvmlZQPSDeNYIPPRb9PFuXo/f73qPLlujIS91v61NW3Uirg9eeNNG ke3hsWxisUt2XBhuJ/YUOSl/tzlWUso/H5bFWP4Jjvms5y88MmXgaqEiM+gYOurd snddwFSBeRwh4TnZzd+xBH9+gtzHP1rSQsNpWGl27NA03dsLxCGje9bV1fnBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUt7MlMKy3OOAmkw8gOBHwGx7Pn4UwHwYDVR0j BBgwFoAU0phkZDJej9XfEMv6jdMD7xJEl3QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmpyaUVYbmZZTmNSSkFNVkFNQXYxU0JyTkFuYWZDZWVUZWdqcmRTWk1u aHcvMS9EMjk4NjQ2NDMyNUU4RkQ1REYxMENCRkE4REQzMDNFRjEyNDQ5Nzc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTg2NDY0MzI1RThGRDVE RjEwQ0JGQThERDMwM0VGMTI0NDk3NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmpyaUVYbmZZTmNSSkFNVkFNQXYxU0JyTkFuYWZDZWVUZWdqcmRTWk1uaHcvMS9E Mjk4NjQ2NDMyNUU4RkQ1REYxMENCRkE4REQzMDNFRjEyNDQ5Nzc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR+UDe7oeC+OxEZPT8ycbfQY7hzwe/DQFcqOMWaFj32XpMtgGXhAHJZZ/hIrx CTxLt8iqJCszWjdtFBi5kHTaZUDGeSlop2XFVGYmPwdrsvKX46+hW4mg3JqVsHUL d+3j6W/EqqGPwldU92HIblEZeZDb+FTS3I71AFliukkEcZS+IvA4bVoXeiWK99lg zIf99fvnfxbH3sSB3UHo/xHMyWHe1b7H0iQw/lnd567Dggq4M/QBQ1M8oPwKVE65 PQpokp0D3RD1GhVJOQ1hMTaskSGWsivDW3AgV/hp55G7LsDXAr5s83bpapwShZoG p9ZTJ9cnkguulMxtGN8GWTVFpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:44 2025 by rpki-client