This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json) Hash identifier: KdlOHLivqoEZKWeSkqcx4QCCGlUKBW8z+moA8M9rZxI= Subject key identifier: EE:E1:9B:9C:A8:7E:4E:CB:8F:F1:18:00:CF:2C:8E:E2:A3:FA:EC:00 Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 140C1AB4F8205848B30BBBC3CE0617850755EB4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft Manifest number: 032C Signing time: Fri 05 Dec 2025 19:40:00 +0000 Manifest this update: Fri 05 Dec 2025 19:35:00 +0000 Manifest next update: Sat 06 Dec 2025 20:01:00 +0000 Files and hashes: 1: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: /UkhwqWZdTdeal6ugVixgVRqE4NRcTozr4bSrI9VJMk=) 2: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 7YvaZPSSnSfIpvWLSuz5hoPkexAX+X5gsJzDtlBMvas=) 3: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: EQq2sDYtG3Jm73MZwWXQaZDJz31oBISqmcWwCephPH4=) 4: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: enBvjYbf1meZakj7o/v5LLd98daGE67Ofpb1+DdLfkU=) 5: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: fMc8gzldryFUQ8IHHb0p6EJgGXlPn15thkQQ4FZHnmU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0c:1a:b4:f8:20:58:48:b3:0b:bb:c3:ce:06:17:85:07:55:eb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Dec 5 19:35:00 2025 GMT Not After : Dec 6 20:01:00 2025 GMT Subject: CN=EEE19B9CA87E4ECB8FF11800CF2C8EE2A3FAEC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:3e:2c:0f:e3:c7:5f:05:ae:1f:a1:92:7f: 34:66:81:ea:72:73:4d:39:81:cc:83:4f:32:be:b9: 32:87:51:cc:28:f6:3f:88:4d:86:e6:22:17:ca:8c: 14:f4:25:7d:e6:38:db:05:c0:cd:33:bf:e8:7c:64: 69:be:1b:04:23:38:8a:11:58:f8:b8:85:b1:19:61: a5:b0:30:56:58:b8:3e:9f:07:bb:30:a7:47:a6:c5: 52:52:09:5b:79:6f:55:12:3a:d3:a5:e5:d8:ce:35: cf:a5:17:49:46:1b:7d:ad:54:71:a9:a9:50:2d:95: 5f:68:e5:89:6a:74:90:ff:46:07:a9:8d:be:59:83: 02:8a:cd:8a:70:56:01:e5:d7:fa:d2:08:5d:38:aa: f6:eb:84:55:f5:17:51:e1:3a:ad:e6:4e:08:f0:f6: c8:f1:60:a3:5a:7e:19:e4:37:1a:11:fb:e0:3c:8d: 44:e0:43:a5:7f:61:69:fc:24:f0:cb:bd:16:65:39: fc:6a:1e:e1:cd:b0:23:e2:07:55:35:09:05:c1:e3: d3:e7:4a:02:67:d5:83:39:63:1b:7d:24:20:34:0e: e9:b1:11:97:9e:66:8e:63:77:d9:15:cb:44:53:71: c1:ab:0c:42:82:4e:09:b5:ae:13:bc:9b:3b:61:de: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E1:9B:9C:A8:7E:4E:CB:8F:F1:18:00:CF:2C:8E:E2:A3:FA:EC:00 X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:6b:e8:d4:ee:de:a5:6e:c9:87:f5:a8:5a:f0:7f:c1:f2:ec: c3:90:e8:50:63:03:ca:27:5a:d4:e6:ca:d9:5f:53:96:24:db: 1f:fe:0b:fa:f2:cd:5f:1f:ad:ea:61:4c:44:0a:7b:80:d8:3a: 4c:44:19:d8:dc:2b:7c:68:67:ce:36:6d:3f:0f:3b:2c:39:c1: b4:9e:ea:a1:71:35:a8:e7:f7:2a:b7:42:43:4d:a3:86:47:f6: 13:a4:de:07:7d:ef:67:b3:95:f6:03:da:1f:4e:d0:59:cc:06: 96:55:4a:15:58:d1:5a:0a:ad:e5:08:b3:66:76:1f:52:c3:d2: 86:a5:99:71:79:f7:3f:5a:45:fa:64:3b:38:ad:eb:c1:23:86: 66:e9:ea:2a:11:bf:6c:71:f4:3b:94:65:df:7e:0d:50:74:cb: bc:37:85:f1:17:e8:79:ae:78:d9:da:00:9c:03:23:f9:26:f4: d8:1c:19:eb:67:c2:5c:fe:b9:95:0e:04:63:19:dd:7e:a5:2a: ef:61:1b:e8:06:8f:a3:69:42:d4:f2:ff:a0:b4:e8:1d:35:53: 10:1b:ad:39:c6:bf:47:4e:62:b3:41:7b:86:d9:9e:66:53:44: 5a:26:7d:9f:e8:96:e9:7f:d1:e2:90:b4:01:ba:e4:96:da:34: d9:8b:17:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFAwatPggWEizC7vDzgYXhQdV60owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNTEyMDUxOTM1MDBaFw0yNTEyMDYyMDAxMDBaMDMxMTAvBgNV BAMTKEVFRTE5QjlDQTg3RTRFQ0I4RkYxMTgwMENGMkM4RUUyQTNGQUVDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/j4sD+PHXwWuH6GSfzRmgepy c005gcyDTzK+uTKHUcwo9j+ITYbmIhfKjBT0JX3mONsFwM0zv+h8ZGm+GwQjOIoR WPi4hbEZYaWwMFZYuD6fB7swp0emxVJSCVt5b1USOtOl5djONc+lF0lGG32tVHGp qVAtlV9o5YlqdJD/Rgepjb5ZgwKKzYpwVgHl1/rSCF04qvbrhFX1F1HhOq3mTgjw 9sjxYKNafhnkNxoR++A8jUTgQ6V/YWn8JPDLvRZlOfxqHuHNsCPiB1U1CQXB49Pn SgJn1YM5Yxt9JCA0DumxEZeeZo5jd9kVy0RTccGrDEKCTgm1rhO8mzth3vLzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7uGbnKh+TsuP8RgAzyyO4qP67AAwHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5dzgvMS9E RTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqmvo1O7epW7Jh/WoWvB/wfLsw5DoUGMDyida1ObK2V9TliTbH/4L+vLNXx+t 6mFMRAp7gNg6TEQZ2NwrfGhnzjZtPw87LDnBtJ7qoXE1qOf3KrdCQ02jhkf2E6Te B33vZ7OV9gPaH07QWcwGllVKFVjRWgqt5QizZnYfUsPShqWZcXn3P1pF+mQ7OK3r wSOGZunqKhG/bHH0O5Rl334NUHTLvDeF8Rfoea542doAnAMj+Sb02BwZ62fCXP65 lQ4EYxndfqUq72Eb6AaPo2lC1PL/oLToHTVTEButOca/R05is0F7htmeZlNEWiZ9 n+iW6X/R4pC0Abrklto02YsX9g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:15 2025 by rpki-client