This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft File: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json) Hash identifier: RuOxEJQk5gS9ZlCGcaHEaEahJS5ID5fKrcwwICdw0Aw= Subject key identifier: C1:A8:76:7A:40:34:A4:76:0C:5A:38:EE:64:2F:28:A6:30:3E:A9:25 Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Certificate serial: 3D399559EFB0C5AC67441652EE9A058A762A237E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft Manifest number: 0310 Signing time: Sun 21 Dec 2025 07:24:14 +0000 Manifest this update: Sun 21 Dec 2025 07:19:14 +0000 Manifest next update: Mon 22 Dec 2025 11:07:14 +0000 Files and hashes: 1: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: FG1wug4MqyLJsAReVjvXRe7puwgFUXpXXwbr9j3w0ZI=) 2: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: sJpLIcODdpt1zfuJi21n5kYL+iSyeic7lcFX7u3C4P8=) 3: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 11:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:39:95:59:ef:b0:c5:ac:67:44:16:52:ee:9a:05:8a:76:2a:23:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Validity Not Before: Dec 21 07:19:14 2025 GMT Not After : Dec 22 11:07:14 2025 GMT Subject: CN=C1A8767A4034A4760C5A38EE642F28A6303EA925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:47:42:a4:4e:f6:61:a1:0f:08:6d:80:80:22: 1d:a1:0d:27:55:a4:ca:69:7f:be:e2:90:ac:61:0a: 72:c6:51:1e:e3:5d:96:91:61:e7:02:59:dc:1a:d3: 02:b2:67:58:37:80:48:c6:66:0b:63:0a:e1:fc:83: 65:ac:7d:6e:56:7e:74:8e:0e:53:a9:36:21:a8:4f: 77:b3:b4:e4:8e:9a:12:10:f9:0c:60:ca:3d:28:a2: 96:b1:1c:3b:ea:74:48:69:87:cc:08:6c:35:e7:70: 48:77:32:6b:85:b7:08:4a:da:e2:bf:67:d8:cf:22: 2c:2f:eb:75:40:bd:86:d6:a1:77:23:54:98:f6:9a: a0:b2:3f:3d:85:f6:02:38:26:20:83:cd:94:3c:57: 4a:58:95:0c:87:31:f8:71:7c:46:38:99:f4:b2:23: bc:04:d9:e9:2d:ec:49:1f:e7:b9:58:26:4a:7f:78: 08:1d:1a:d7:3c:fa:01:27:42:39:97:81:99:9b:79: f7:da:9e:9b:32:ef:c7:bb:64:52:18:d9:77:ce:d6: f0:e3:bb:3c:3f:9d:fd:79:0b:80:87:1d:ee:a6:fe: 47:18:82:25:dc:cf:91:b2:92:89:3e:d8:b9:db:48: 9f:f9:81:44:5d:65:ef:81:a4:f8:9c:75:f2:8d:52: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:76:7A:40:34:A4:76:0C:5A:38:EE:64:2F:28:A6:30:3E:A9:25 X509v3 Authority Key Identifier: keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:e4:07:07:27:ec:f8:40:55:ac:e9:4d:ca:ee:84:3b:c8:1e: fd:88:d0:cc:85:99:f2:eb:ae:30:20:e4:48:57:5c:6a:75:5e: 52:e3:df:b1:8f:f6:27:52:13:a9:c5:70:1d:b2:d1:d1:29:2d: 89:dd:a6:69:a6:98:9e:a8:13:01:77:1a:9a:81:46:46:81:fe: 69:05:f2:e7:ec:14:af:4d:4c:92:ad:28:7e:38:42:d2:85:66: 9a:1e:47:12:9f:c6:f0:89:7b:76:34:27:e4:76:37:e7:d9:c2: a5:d4:4a:65:0c:aa:d8:5b:94:d0:6a:8e:84:e4:0b:5c:7e:43: 65:08:0f:cb:a2:18:f8:9a:37:3b:0d:ad:d1:fe:ba:26:30:f1: 3b:d2:df:b9:c0:49:7a:a0:b9:a1:45:be:98:ac:d6:ca:d6:fb: fe:72:3c:ff:de:c9:7e:13:a8:f2:10:43:4e:0a:b4:3a:29:4b: 8b:61:41:c3:2e:ec:c6:47:9f:25:9d:56:a2:6b:d8:9b:e2:0c: cf:fd:8b:f0:e8:c2:37:57:93:4b:b6:68:da:72:78:03:11:fe: 4f:06:ef:2e:ca:0d:e7:e8:21:37:5d:e8:66:3c:22:e0:28:b9: e4:ca:98:24:4c:87:90:c4:1f:a6:d0:de:0c:98:4b:43:05:75: 41:a4:f5:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPTmVWe+wxaxnRBZS7poFinYqI34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC NUY4RTU3MDAeFw0yNTEyMjEwNzE5MTRaFw0yNTEyMjIxMTA3MTRaMDMxMTAvBgNV BAMTKEMxQTg3NjdBNDAzNEE0NzYwQzVBMzhFRTY0MkYyOEE2MzAzRUE5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaR0KkTvZhoQ8IbYCAIh2hDSdV pMppf77ikKxhCnLGUR7jXZaRYecCWdwa0wKyZ1g3gEjGZgtjCuH8g2WsfW5WfnSO DlOpNiGoT3eztOSOmhIQ+Qxgyj0oopaxHDvqdEhph8wIbDXncEh3MmuFtwhK2uK/ Z9jPIiwv63VAvYbWoXcjVJj2mqCyPz2F9gI4JiCDzZQ8V0pYlQyHMfhxfEY4mfSy I7wE2ekt7Ekf57lYJkp/eAgdGtc8+gEnQjmXgZmbeffanpsy78e7ZFIY2XfO1vDj uzw/nf15C4CHHe6m/kcYgiXcz5Gykok+2LnbSJ/5gURdZe+BpPicdfKNUhDRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwah2ekA0pHYMWjjuZC8opjA+qSUwHwYDVR0j BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5 RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERqUksvMC9E REExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4eQHByfs+EBVrOlNyu6EO8ge/YjQzIWZ8uuuMCDkSFdcanVeUuPfsY/2J1IT qcVwHbLR0Sktid2maaaYnqgTAXcamoFGRoH+aQXy5+wUr01Mkq0ofjhC0oVmmh5H Ep/G8Il7djQn5HY359nCpdRKZQyq2FuU0GqOhOQLXH5DZQgPy6IY+Jo3Ow2t0f66 JjDxO9LfucBJeqC5oUW+mKzWytb7/nI8/97JfhOo8hBDTgq0OilLi2FBwy7sxkef JZ1WomvYm+IMz/2L8OjCN1eTS7Zo2nJ4AxH+TwbvLsoN5+ghN13oZjwi4Ci55MqY JEyHkMQfptDeDJhLQwV1QaT1Cw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:13:35 2025 by rpki-client