This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft File: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft (raw, json) Hash identifier: ViHcDIn+d6Ihs/+lucWDyUiREEDRFX9HzZW4w7pSTf4= Subject key identifier: 9F:5A:89:0A:D9:72:33:30:6C:66:45:4D:E8:94:85:B0:A4:08:26:4B Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 Certificate issuer: /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Certificate serial: 7BCDF54F8C2BC538A7D3F1A7BA4820FAF8BB0BE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft Manifest number: 01D7 Signing time: Fri 05 Dec 2025 16:52:00 +0000 Manifest this update: Fri 05 Dec 2025 16:47:00 +0000 Manifest next update: Sat 06 Dec 2025 20:30:00 +0000 Files and hashes: 1: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl (hash: KtABc/x85NlvmdUXLx+3YtOj8PtVYFkotZ3anwlalEc=) 2: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cd:f5:4f:8c:2b:c5:38:a7:d3:f1:a7:ba:48:20:fa:f8:bb:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Validity Not Before: Dec 5 16:47:00 2025 GMT Not After : Dec 6 20:30:00 2025 GMT Subject: CN=9F5A890AD97233306C66454DE89485B0A408264B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7d:37:6b:fe:2c:56:f5:46:9b:5e:6f:8f:36: 7f:40:20:50:52:3a:b2:cc:f3:d7:eb:0d:66:bd:d0: 0d:12:0f:93:37:39:57:63:3f:58:cb:fa:c6:b4:4b: 6e:40:fe:8f:28:a6:10:c8:2e:04:ab:97:de:c5:3f: 5a:90:72:2a:34:f6:a4:3d:86:03:f4:3a:37:23:33: 68:d0:3b:4e:2c:28:ca:5b:b5:58:ea:26:01:fa:2a: 52:6a:a1:5f:9e:f6:67:0e:08:e0:ca:97:a8:e1:56: 21:55:2c:7d:aa:ee:a9:8c:ce:49:6a:55:3c:33:f5: e5:75:1b:35:b1:5d:1e:11:20:e4:0a:10:d1:5e:6b: 43:3c:9d:1f:9e:ef:db:05:3b:85:97:33:8b:4e:99: e9:82:62:df:9c:ca:8b:d4:ab:88:af:12:5e:d3:9e: ba:15:f5:16:84:2d:97:3e:85:ea:09:e0:54:31:05: f8:07:4c:a2:1f:06:37:20:f3:e1:ee:11:6f:0c:e2: 13:b3:5b:b8:3e:13:11:1b:23:41:2c:4a:4a:54:a8: 3d:a1:05:19:60:6d:89:d0:5d:d6:79:61:d8:28:91: 5c:93:3c:8b:9a:cf:ac:6c:ac:e3:09:70:01:29:fe: 93:4e:6d:ed:9b:98:d5:3b:c2:2a:28:e8:7a:02:de: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:89:0A:D9:72:33:30:6C:66:45:4D:E8:94:85:B0:A4:08:26:4B X509v3 Authority Key Identifier: keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:45:4d:87:e5:cb:be:29:7a:6e:10:f8:eb:40:35:87:b4:79: 66:12:0b:5b:c4:40:18:7c:e7:cb:6b:ec:61:47:fd:58:ab:1b: c4:56:f9:b3:50:84:94:66:cc:39:ad:6e:b9:3c:2c:48:6f:96: 8e:ee:d7:9d:1e:90:6c:f4:f6:bd:6c:c0:d8:27:41:c3:ab:74: e5:c2:c1:f4:fb:14:8b:eb:58:2d:f4:18:d6:a1:24:95:d3:7b: 6d:9d:9a:09:d5:cd:40:98:65:3e:2c:76:99:93:de:1b:b0:15: f0:39:27:86:01:12:20:44:e2:c6:23:f5:fd:10:05:98:38:37: 72:59:5e:2d:8a:c0:b0:ba:d9:67:b8:0a:2d:a3:4a:f2:58:4c: 4b:61:b8:79:ea:91:38:62:62:df:50:2e:00:94:b4:4e:bb:6c: 94:47:ce:03:2a:ce:a3:ee:e2:d6:17:cb:76:c1:ab:a5:2c:52: 02:60:e0:32:76:cb:20:db:8c:e2:8c:a0:dc:aa:13:3f:4c:e8: 2f:ab:5d:0c:5f:57:91:32:d2:02:11:4e:98:c1:dd:36:6f:af: 5a:e8:91:01:75:ee:20:5f:c8:d8:4d:10:e4:5d:2d:12:ec:ca: 4f:93:08:97:1f:21:9c:26:1d:cb:3e:81:7e:f4:b7:0c:ae:3b: 89:a9:5e:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe831T4wrxTin0/Gnukgg+vi7C+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEVEOERFNTRCRDJGQUJFMDNBMjdBRThGRjc2NTk2 MDZCNjU0MjAeFw0yNTEyMDUxNjQ3MDBaFw0yNTEyMDYyMDMwMDBaMDMxMTAvBgNV BAMTKDlGNUE4OTBBRDk3MjMzMzA2QzY2NDU0REU4OTQ4NUIwQTQwODI2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDufTdr/ixW9UabXm+PNn9AIFBS OrLM89frDWa90A0SD5M3OVdjP1jL+sa0S25A/o8ophDILgSrl97FP1qQcio09qQ9 hgP0OjcjM2jQO04sKMpbtVjqJgH6KlJqoV+e9mcOCODKl6jhViFVLH2q7qmMzklq VTwz9eV1GzWxXR4RIOQKENFea0M8nR+e79sFO4WXM4tOmemCYt+cyovUq4ivEl7T nroV9RaELZc+heoJ4FQxBfgHTKIfBjcg8+HuEW8M4hOzW7g+ExEbI0EsSkpUqD2h BRlgbYnQXdZ5YdgokVyTPIuaz6xsrOMJcAEp/pNObe2bmNU7wioo6HoC3h7zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn1qJCtlyMzBsZkVN6JSFsKQIJkswHwYDVR0j BBgwFoAU3DTtjeVL0vq+A6J66P92WWBrZUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMS9EQzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzRFRDhERTU0QkQyRkFC RTAzQTI3QUU4RkY3NjU5NjA2QjY1NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMS9E QzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiEVNh+XLvil6bhD460A1h7R5ZhILW8RAGHzny2vsYUf9WKsbxFb5s1CElGbM Oa1uuTwsSG+Wju7XnR6QbPT2vWzA2CdBw6t05cLB9PsUi+tYLfQY1qEkldN7bZ2a CdXNQJhlPix2mZPeG7AV8DknhgESIETixiP1/RAFmDg3clleLYrAsLrZZ7gKLaNK 8lhMS2G4eeqROGJi31AuAJS0TrtslEfOAyrOo+7i1hfLdsGrpSxSAmDgMnbLINuM 4oyg3KoTP0zoL6tdDF9XkTLSAhFOmMHdNm+vWuiRAXXuIF/I2E0Q5F0tEuzKT5MI lx8hnCYdyz6BfvS3DK47ialepQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:10 2025 by rpki-client