This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
File: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft (raw, json)
Hash identifier: Loescdb0iFf7qLlH6GI+9fUxZ9wxKZQ8DwB/JN5xwfU=
Subject key identifier: 81:1F:45:E7:D7:29:0F:70:84:60:D7:CF:40:69:DE:31:38:7A:C0:21
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Certificate issuer: /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial: 678EFACD64A35874E5F901441D3A591EFFC4D9AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
Manifest number: 032B
Signing time: Sat 06 Dec 2025 06:05:09 +0000
Manifest this update: Sat 06 Dec 2025 06:00:09 +0000
Manifest next update: Sun 07 Dec 2025 07:59:09 +0000
Files and hashes: 1: 323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (hash: /GemfBvArZtukG4Y6RFLcXF3f1tLbIJXVDgtbWncR/o=)
2: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl (hash: 3UUR1Xgs21fALH51LWEFWgfYUvyYEa7N1wxxMzjdaew=)
3: 34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (hash: c0ivNdsbn1PNL+sK8V9iDiQA1Mt4huXCPkc/G0mHMQ0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 07:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8e:fa:cd:64:a3:58:74:e5:f9:01:44:1d:3a:59:1e:ff:c4:d9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Validity
Not Before: Dec 6 06:00:09 2025 GMT
Not After : Dec 7 07:59:09 2025 GMT
Subject: CN=811F45E7D7290F708460D7CF4069DE31387AC021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:04:b1:cb:f3:b0:d1:d1:2d:68:33:d8:2e:
df:4d:45:c6:34:fc:bb:f5:0b:86:f8:45:01:13:86:
34:03:06:2b:dd:eb:6d:02:93:ec:03:d4:76:91:48:
5b:8c:3c:dd:1c:53:56:3d:5a:6c:bb:14:05:ed:9b:
1e:16:9e:74:22:21:51:6f:3d:ed:27:2d:8b:c3:e1:
1e:ae:67:e7:f7:de:e4:3a:1c:41:95:ee:96:e0:b1:
26:c2:8a:97:86:bc:dc:92:8a:5c:fb:7e:79:e6:58:
34:bd:ec:b3:00:a4:2c:4a:e6:92:bc:82:b5:65:38:
d0:8f:64:4b:8a:98:a4:08:28:99:27:c3:da:f3:b8:
63:6e:85:a5:d3:f1:57:8e:d7:ea:16:5a:f3:20:46:
47:6b:ed:a9:04:40:22:2c:9b:44:49:4f:5a:ed:fc:
05:1d:35:75:c7:53:bc:07:6e:6f:bd:cc:2f:d4:31:
6a:c1:dc:e4:8c:1d:e8:ec:da:8d:31:59:8f:14:93:
dc:97:4d:ff:7b:5c:35:cc:a8:84:82:f8:c4:b9:f9:
90:f1:26:88:89:30:75:57:e8:16:74:58:ad:9b:e3:
87:1d:33:0c:3d:03:53:3c:2d:0a:f9:c4:31:45:76:
b6:67:5e:8f:f9:3f:30:f3:21:36:e0:8c:6b:91:1f:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:45:E7:D7:29:0F:70:84:60:D7:CF:40:69:DE:31:38:7A:C0:21
X509v3 Authority Key Identifier:
keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:98:48:ac:e0:cc:83:32:c8:f2:09:a9:3d:29:64:1d:75:9b:
be:6a:b9:73:77:dc:ca:ee:21:a2:ae:19:ba:1f:39:ae:02:21:
fd:ac:dc:75:45:60:b4:fa:e8:c1:a1:fa:71:4d:b4:53:3e:79:
d6:c3:c2:d5:04:4e:a1:6f:d3:cb:b1:7f:fb:4f:77:78:26:cd:
81:e0:4c:3d:b3:a2:e7:9e:eb:b4:64:82:e9:04:2f:71:10:ab:
62:14:bf:bb:d2:6d:61:30:b4:4f:d3:26:c7:77:d2:09:2c:39:
55:13:fa:28:6c:75:25:26:f2:7c:5f:ba:cb:aa:30:bb:cb:67:
37:48:64:18:f1:0e:d6:c2:c0:ea:09:fd:a0:9d:84:ed:1f:95:
64:3e:cf:9c:76:f5:a0:0d:ea:6a:7f:5f:0c:78:3a:f3:14:51:
02:11:af:6a:00:4b:66:03:5f:38:f6:92:17:42:a6:4c:87:27:
13:b7:37:e5:66:9c:c4:42:26:28:ee:86:e9:cb:e0:80:57:16:
ff:ad:c8:e5:e6:06:32:45:6f:55:04:99:69:1d:ca:41:09:13:
c8:ed:cc:d9:fd:26:68:4a:19:cb:9c:0a:d9:3f:37:b9:8b:44:
02:85:6c:b1:ad:5c:03:4f:34:ea:3d:ec:b7:ef:ac:b3:f0:12:
32:25:1a:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ476zWSjWHTl+QFEHTpZHv/E2awwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFMjRENEU5RDRERTE3OUE5MzIzOUU1OTcyQTBBNDhD
QkUyNDExNzAeFw0yNTEyMDYwNjAwMDlaFw0yNTEyMDcwNzU5MDlaMDMxMTAvBgNV
BAMTKDgxMUY0NUU3RDcyOTBGNzA4NDYwRDdDRjQwNjlERTMxMzg3QUMwMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviQSxy/Ow0dEtaDPYLt9NRcY0
/Lv1C4b4RQEThjQDBivd620Ck+wD1HaRSFuMPN0cU1Y9Wmy7FAXtmx4WnnQiIVFv
Pe0nLYvD4R6uZ+f33uQ6HEGV7pbgsSbCipeGvNySilz7fnnmWDS97LMApCxK5pK8
grVlONCPZEuKmKQIKJknw9rzuGNuhaXT8VeO1+oWWvMgRkdr7akEQCIsm0RJT1rt
/AUdNXXHU7wHbm+9zC/UMWrB3OSMHejs2o0xWY8Uk9yXTf97XDXMqISC+MS5+ZDx
JoiJMHVX6BZ0WK2b44cdMww9A1M8LQr5xDFFdrZnXo/5PzDzITbgjGuRH4utAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgR9F59cpD3CEYNfPQGneMTh6wCEwHwYDVR0j
BBgwFoAU3OJNTp1N4XmpMjnllyoKSMviQRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFDZzVxeTZpMVk5S2EzZjRGUVFreEFWZ2Rpczk0d1JzV0hqd21FM1N0
akIvMS9EQ0UyNEQ0RTlENERFMTc5QTkzMjM5RTU5NzJBMEE0OENCRTI0MTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTI0RDRFOUQ0REUxNzlB
OTMyMzlFNTk3MkEwQTQ4Q0JFMjQxMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFFDZzVxeTZpMVk5S2EzZjRGUVFreEFWZ2Rpczk0d1JzV0hqd21FM1N0akIvMS9E
Q0UyNEQ0RTlENERFMTc5QTkzMjM5RTU5NzJBMEE0OENCRTI0MTE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJJhIrODMgzLI8gmpPSlkHXWbvmq5c3fcyu4hoq4Zuh85rgIh/azcdUVgtPro
waH6cU20Uz551sPC1QROoW/Ty7F/+093eCbNgeBMPbOi557rtGSC6QQvcRCrYhS/
u9JtYTC0T9Mmx3fSCSw5VRP6KGx1JSbyfF+6y6owu8tnN0hkGPEO1sLA6gn9oJ2E
7R+VZD7PnHb1oA3qan9fDHg68xRRAhGvagBLZgNfOPaSF0KmTIcnE7c35WacxEIm
KO6G6cvggFcW/63I5eYGMkVvVQSZaR3KQQkTyO3M2f0maEoZy5wK2T83uYtEAoVs
sa1cA0806j3st++ss/ASMiUa2A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:29:20 2025 by rpki-client