This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft File: DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft (raw, json) Hash identifier: BdoCcNTCe8aXnQw5S7DvIHLS06nM3HC3I67eI8WsAqo= Subject key identifier: 62:00:D9:0F:29:9D:55:41:35:AB:C6:E3:05:DB:17:3F:05:00:47:DE Authority key identifier: DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88 Certificate issuer: /CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88 Certificate serial: 7E76BD0CAF44B0266D8D2E6AF83907BC7DD39B4B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft Manifest number: 0141 Signing time: Fri 05 Dec 2025 18:12:08 +0000 Manifest this update: Fri 05 Dec 2025 18:07:08 +0000 Manifest next update: Sat 06 Dec 2025 21:31:08 +0000 Files and hashes: 1: 323830343a366264343a3a2f33322d3438203d3e20323730343238.roa (hash: HcbDBo5vEhZDz22x2e4nDgT/2l3+LdsNneneCzQ9yYo=) 2: 3139302e3131312e3138342e302f32322d3234203d3e20323730343238.roa (hash: gEKEaIZuFtCa2m15vfxLEmbSM0J0ycpP6AHITuG0TkU=) 3: DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl (hash: SR+03N2ZfLOpTIgD+7eS3kvGdpFYUdEIAxvst1sNtyA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:76:bd:0c:af:44:b0:26:6d:8d:2e:6a:f8:39:07:bc:7d:d3:9b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC432DE2BD64EF9750DBF1DF603D300C11351D88 Validity Not Before: Dec 5 18:07:08 2025 GMT Not After : Dec 6 21:31:08 2025 GMT Subject: CN=6200D90F299D554135ABC6E305DB173F050047DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:c2:2f:45:9b:14:ec:3c:d9:d2:10:91:35: 1c:aa:12:81:ec:4c:fc:51:6d:06:f4:79:db:6e:4b: 20:44:90:57:6c:b2:d9:3e:4c:fa:96:88:5a:35:bf: 98:4d:7a:86:7d:c4:5f:54:ab:a8:ac:e3:ca:62:c5: 20:3e:b1:ec:e7:f3:f7:4b:5e:79:11:c8:cd:4e:fa: 33:75:1f:a8:ff:c9:ae:db:f6:57:fd:4a:3f:d8:91: eb:a4:34:63:1d:b5:2f:03:5f:f8:36:c8:03:4d:79: 6a:7e:02:93:76:16:16:95:b6:f0:ac:7e:00:d5:bd: b2:af:9d:63:e4:f9:5b:29:16:ac:e1:23:01:e0:04: b3:bb:99:97:9a:06:bd:9e:bb:3b:6a:c8:f5:a8:57: 04:b9:fc:64:f1:88:6e:3c:42:28:61:f1:2f:a5:69: 32:41:7b:a0:dc:27:9a:77:fb:fa:e4:d7:11:ac:a8: 9f:34:a7:bf:da:86:55:39:b3:41:4b:21:59:12:cf: f5:3e:c0:50:2a:8a:3d:a3:76:a5:6f:20:e6:33:dd: 20:01:f2:e9:bd:f7:a1:e3:61:16:47:54:21:13:ee: 46:67:e7:87:16:f0:85:48:4b:bc:76:84:15:e9:9d: 1b:9a:40:a6:62:d8:0a:04:40:8b:44:a4:2c:d2:4a: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:00:D9:0F:29:9D:55:41:35:AB:C6:E3:05:DB:17:3F:05:00:47:DE X509v3 Authority Key Identifier: keyid:DC:43:2D:E2:BD:64:EF:97:50:DB:F1:DF:60:3D:30:0C:11:35:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC432DE2BD64EF9750DBF1DF603D300C11351D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/DC432DE2BD64EF9750DBF1DF603D300C11351D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5b:9f:32:ae:ba:a3:9a:f3:0c:bd:e4:fe:02:15:0e:a3:8e: 65:33:fd:0d:4a:34:81:ed:0f:9c:e2:c8:09:b6:cd:42:7a:e3: b0:1f:5e:b4:ce:a2:82:8d:04:32:3c:ef:4d:60:ef:da:60:10: 17:8d:af:d2:2c:b3:bf:0b:20:75:7a:81:b3:a5:44:53:c6:84: 9b:fb:48:70:a4:cf:44:04:d6:cf:39:d3:f0:c0:e1:f2:ad:22: 20:78:b3:7e:99:77:3d:88:16:d1:7d:d0:e5:ca:10:15:14:30: b3:c2:5b:54:5f:08:03:9e:e5:e9:f8:6f:58:a5:bd:a7:a5:b9: 7e:14:2e:91:fb:e2:98:96:a0:dd:75:0a:38:f5:d2:f5:6f:18: a7:d1:0e:8e:05:e7:b2:7b:26:ab:a4:29:cc:b5:94:bf:52:35: b6:00:b9:ea:46:f9:86:86:2f:04:38:19:52:c6:ff:a2:8c:66: 29:1a:fa:00:00:60:e3:76:fc:4e:93:84:61:1d:79:6b:c7:da: af:31:bf:1a:88:91:5c:50:70:80:71:d8:60:98:ef:56:62:42: 86:67:c0:ae:a4:ee:ac:05:77:91:c0:cb:c1:1b:63:60:f8:21: 6b:1d:a2:22:94:09:7a:41:74:9c:ae:c9:3a:51:f4:32:d4:64: 79:78:62:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfna9DK9EsCZtjS5q+DkHvH3Tm0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM0MzJERTJCRDY0RUY5NzUwREJGMURGNjAzRDMwMEMx MTM1MUQ4ODAeFw0yNTEyMDUxODA3MDhaFw0yNTEyMDYyMTMxMDhaMDMxMTAvBgNV BAMTKDYyMDBEOTBGMjk5RDU1NDEzNUFCQzZFMzA1REIxNzNGMDUwMDQ3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRd8IvRZsU7DzZ0hCRNRyqEoHs TPxRbQb0edtuSyBEkFdsstk+TPqWiFo1v5hNeoZ9xF9Uq6is48pixSA+sezn8/dL XnkRyM1O+jN1H6j/ya7b9lf9Sj/YkeukNGMdtS8DX/g2yANNeWp+ApN2FhaVtvCs fgDVvbKvnWPk+VspFqzhIwHgBLO7mZeaBr2euztqyPWoVwS5/GTxiG48Qihh8S+l aTJBe6DcJ5p3+/rk1xGsqJ80p7/ahlU5s0FLIVkSz/U+wFAqij2jdqVvIOYz3SAB 8um996HjYRZHVCET7kZn54cW8IVIS7x2hBXpnRuaQKZi2AoEQItEpCzSSuPBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYgDZDymdVUE1q8bjBdsXPwUAR94wHwYDVR0j BBgwFoAU3EMt4r1k75dQ2/HfYD0wDBE1HYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3F3NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpz dTcvMC9EQzQzMkRFMkJENjRFRjk3NTBEQkYxREY2MDNEMzAwQzExMzUxRDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNDMyREUyQkQ2NEVGOTc1 MERCRjFERjYwM0QzMDBDMTEzNTFEODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3F3NUtzYkZRYnB1YzVTbU14MjJoMkU3MVNnYXZGaURNYVAxRHgzcFpzdTcvMC9E QzQzMkRFMkJENjRFRjk3NTBEQkYxREY2MDNEMzAwQzExMzUxRDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKlufMq66o5rzDL3k/gIVDqOOZTP9DUo0ge0PnOLICbbNQnrjsB9etM6igo0E MjzvTWDv2mAQF42v0iyzvwsgdXqBs6VEU8aEm/tIcKTPRATWzznT8MDh8q0iIHiz fpl3PYgW0X3Q5coQFRQws8JbVF8IA57l6fhvWKW9p6W5fhQukfvimJag3XUKOPXS 9W8Yp9EOjgXnsnsmq6QpzLWUv1I1tgC56kb5hoYvBDgZUsb/ooxmKRr6AABg43b8 TpOEYR15a8farzG/GoiRXFBwgHHYYJjvVmJChmfArqTurAV3kcDLwRtjYPghax2i IpQJekF0nK7JOlH0MtRkeXhi6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:10 2025 by rpki-client