This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft (raw, json) Hash identifier: JdGkwgTsarIvkkyH1HL1FZxHLWcuNEqAgmvTs+h8Fpw= Subject key identifier: CB:D9:84:81:31:32:08:B0:15:DB:A9:98:45:3F:8B:C2:02:FC:25:D9 Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Certificate serial: 5D3A7A1A98FC617C4F8808F8B424BE8C73F79B6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft Manifest number: 032B Signing time: Fri 05 Dec 2025 20:10:00 +0000 Manifest this update: Fri 05 Dec 2025 20:05:00 +0000 Manifest next update: Sat 06 Dec 2025 21:14:00 +0000 Files and hashes: 1: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl (hash: sI+BlezZ7LMdh3nxQx181fh6zzoK5m4H0UrEPx/Xw9s=) 2: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: pqL3pcOsDBWog4FTkOFYD2egq3espsDeFjP7vuhGzY8=) 3: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: 4cOfXyVHYsJDDR76i7+rDrxZZ+9x01vqjfGMjszNxxs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3a:7a:1a:98:fc:61:7c:4f:88:08:f8:b4:24:be:8c:73:f7:9b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Validity Not Before: Dec 5 20:05:00 2025 GMT Not After : Dec 6 21:14:00 2025 GMT Subject: CN=CBD98481313208B015DBA998453F8BC202FC25D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:ff:76:4b:d3:c4:98:75:4c:59:ff:18:92: 5a:40:c0:af:72:ba:09:a5:64:57:60:ea:76:93:ee: ff:ae:0e:01:5c:07:f7:dd:98:b5:59:0f:6f:b9:61: 78:78:9d:6d:26:fc:e1:02:50:b3:ee:ae:21:9e:10: 43:22:22:db:29:2d:7e:b1:75:5b:a4:05:01:aa:34: 8d:2c:4b:60:38:7d:95:ec:75:3e:97:2b:df:2d:73: b0:54:8e:65:2e:30:e4:02:dc:11:ef:f0:a4:4e:ec: 4e:47:00:c7:a4:74:21:50:d0:58:b5:87:9a:d8:9f: db:73:d7:01:9b:ed:1b:97:1a:a1:b9:1c:9a:d9:23: 80:91:72:90:27:b3:1c:a0:9d:2b:87:87:70:69:36: 86:78:b4:32:fe:c8:25:55:00:d1:ad:47:6c:d1:61: 08:ed:aa:3b:58:97:26:df:02:c3:69:87:f6:b3:13: 4d:20:80:4a:4d:8f:96:85:90:b5:8f:c3:0b:fb:9c: 1e:7b:1e:c9:f7:bc:bd:3e:ca:cc:4e:ab:8b:cc:07: 50:6d:b3:d1:e1:fb:82:e7:2a:5b:5a:2a:fc:97:30: 19:af:0a:24:08:60:17:3a:ab:02:dc:60:2c:a8:ca: a7:df:74:b5:73:c5:a6:1e:7d:45:3d:2e:2e:4c:38: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D9:84:81:31:32:08:B0:15:DB:A9:98:45:3F:8B:C2:02:FC:25:D9 X509v3 Authority Key Identifier: keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:46:6d:32:68:22:97:52:82:29:9b:c4:d5:bf:17:51:02:08: 46:c0:4d:cb:2f:57:5e:ab:1e:2a:04:e5:d1:df:85:8b:1b:c9: 0d:ea:03:ee:e3:9b:fd:b5:e6:f9:6b:a3:54:7f:92:02:e6:a8: c3:00:21:1e:43:a5:a2:2c:86:fe:6e:53:f5:0b:6d:51:10:cc: 95:fd:b2:69:fa:ba:a7:83:40:1b:e1:13:83:58:c3:82:29:1c: fe:5d:a3:66:4c:8e:e9:9c:b0:93:4c:02:62:be:f3:86:90:35: 19:3d:37:52:b6:3f:cc:0e:28:39:9e:91:cc:68:81:19:6e:c6: 5c:30:de:26:95:65:69:40:46:76:db:c0:ac:fd:9d:aa:00:09: 50:79:ed:15:9c:1b:0c:4d:dd:96:78:4a:ab:c5:96:98:29:46: a6:88:65:69:8a:73:01:43:65:97:9b:4e:0a:c5:ed:99:33:07: 6e:19:7b:c6:56:53:ca:3d:7d:89:2d:51:cc:16:1a:ed:34:5d: 31:47:8f:a9:fd:63:04:66:1a:39:83:06:ec:3d:fa:27:5c:d1: 1a:2b:ce:a3:66:23:da:04:69:ce:f4:5c:55:c1:c8:fe:5d:22: c1:73:89:3c:68:85:fe:b3:ea:9d:6f:f9:ad:05:b0:dc:9a:17: 80:ba:c2:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXTp6Gpj8YXxPiAj4tCS+jHP3m2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE MkFEMTAwRjAeFw0yNTEyMDUyMDA1MDBaFw0yNTEyMDYyMTE0MDBaMDMxMTAvBgNV BAMTKENCRDk4NDgxMzEzMjA4QjAxNURCQTk5ODQ1M0Y4QkMyMDJGQzI1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiv92S9PEmHVMWf8YklpAwK9y ugmlZFdg6naT7v+uDgFcB/fdmLVZD2+5YXh4nW0m/OECULPuriGeEEMiItspLX6x dVukBQGqNI0sS2A4fZXsdT6XK98tc7BUjmUuMOQC3BHv8KRO7E5HAMekdCFQ0Fi1 h5rYn9tz1wGb7RuXGqG5HJrZI4CRcpAnsxygnSuHh3BpNoZ4tDL+yCVVANGtR2zR YQjtqjtYlybfAsNph/azE00ggEpNj5aFkLWPwwv7nB57Hsn3vL0+ysxOq4vMB1Bt s9Hh+4LnKltaKvyXMBmvCiQIYBc6qwLcYCyoyqffdLVzxaYefUU9Li5MONYnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy9mEgTEyCLAV26mYRT+LwgL8JdkwHwYDVR0j BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9E Q0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUZtMmgil1KCKZvE1b8XUQIIRsBNyy9XXqseKgTl0d+FixvJDeoD7uOb/bXm +WujVH+SAuaowwAhHkOloiyG/m5T9QttURDMlf2yafq6p4NAG+ETg1jDgikc/l2j ZkyO6Zywk0wCYr7zhpA1GT03UrY/zA4oOZ6RzGiBGW7GXDDeJpVlaUBGdtvArP2d qgAJUHntFZwbDE3dlnhKq8WWmClGpohlaYpzAUNll5tOCsXtmTMHbhl7xlZTyj19 iS1RzBYa7TRdMUePqf1jBGYaOYMG7D36J1zRGivOo2Yj2gRpzvRcVcHI/l0iwXOJ PGiF/rPqnW/5rQWw3JoXgLrC6A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:22 2025 by rpki-client