This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft File: CDCD83F4405AFD2B52943F9838374A340858512F.mft (raw, json) Hash identifier: Xw3rtbjlQHjhtB9lGaN8UxYMVasQcYqG+vMNGq2TqUw= Subject key identifier: C2:3A:FF:F3:FF:DB:2C:74:A1:2C:47:AC:53:8D:90:28:7B:AD:72:0B Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F Certificate issuer: /CN=CDCD83F4405AFD2B52943F9838374A340858512F Certificate serial: 3B602DD67C2C0D341A4A4E65A683A749FE0603E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft Manifest number: 0333 Signing time: Fri 05 Dec 2025 17:56:29 +0000 Manifest this update: Fri 05 Dec 2025 17:51:29 +0000 Manifest next update: Sat 06 Dec 2025 20:12:29 +0000 Files and hashes: 1: 323830343a356534343a3a2f33322d3430203d3e20323639303232.roa (hash: o1wONqPOD2DiPspwJs9O0pk4Qff+Oqik6HEtMjHrJk0=) 2: 34352e3137382e3134342e302f32322d3234203d3e20323639303232.roa (hash: aJllC4bfN18sF7GVNwni9H6S3Ips8TngUuVzjDQk1mw=) 3: CDCD83F4405AFD2B52943F9838374A340858512F.crl (hash: b5ozvv8NU2M0z+mtcYhZ0FAz6sdeg9r3Tpq+/+ymDXA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:60:2d:d6:7c:2c:0d:34:1a:4a:4e:65:a6:83:a7:49:fe:06:03:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F Validity Not Before: Dec 5 17:51:29 2025 GMT Not After : Dec 6 20:12:29 2025 GMT Subject: CN=C23AFFF3FFDB2C74A12C47AC538D90287BAD720B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:39:32:50:17:26:87:b9:f9:19:9d:7e:93: e4:9e:9b:be:87:85:99:01:3d:c1:7c:8a:a1:5c:a7: 86:90:f6:97:b2:04:eb:57:b2:c0:59:b6:a9:3f:92: 26:f1:4c:cc:28:d5:20:24:ff:a6:0d:58:13:27:bf: 42:c2:2b:94:0c:78:f7:b9:6f:f9:00:93:2c:2c:6c: fe:bb:b5:b5:89:5d:86:32:44:9b:2e:ed:72:46:1d: f2:bf:ec:2e:76:f0:61:6e:d9:c4:3e:f2:ee:1b:29: bf:e1:96:81:d8:6a:c1:ce:aa:11:40:f7:1a:3e:16: 46:64:f9:d9:1a:72:cb:ad:35:49:2e:4b:78:ae:82: ca:b9:c5:b3:18:db:0b:74:fb:d7:23:cd:40:a1:3c: 78:79:3b:ab:dc:fc:3f:fe:27:1a:0f:9c:2c:4d:85: 82:d1:d1:ad:06:db:4a:1f:ee:00:fc:b7:86:f5:44: 27:69:21:39:70:e8:f7:40:fe:18:6e:ce:86:2f:c9: f5:5f:1d:e7:17:cc:9d:05:4b:c7:f8:79:fc:d3:c2: 09:6b:ac:15:59:4a:f7:48:05:d1:80:d7:0a:a1:95: 39:82:df:31:1d:f1:39:ac:78:c5:a5:ec:04:cd:04: 0e:22:b6:ad:32:e4:e4:01:e2:c3:31:4e:49:ca:bf: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:FF:F3:FF:DB:2C:74:A1:2C:47:AC:53:8D:90:28:7B:AD:72:0B X509v3 Authority Key Identifier: keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:10:28:e3:2d:a9:96:05:7f:4d:0f:00:1c:79:ba:54:3e:70: b7:b5:71:7d:ea:13:fe:46:28:e2:3d:42:80:0c:13:d2:ac:0e: 12:26:64:ae:08:fd:ab:f9:6d:ff:f0:e5:4d:82:b7:d5:e6:dc: d4:49:b3:da:d3:cf:6e:6e:b6:c9:0b:63:77:9c:d6:14:ed:cb: fc:ea:02:94:b2:79:63:73:61:1a:d3:8a:f2:97:31:08:23:75: b5:97:05:ed:cc:80:d0:62:03:e5:ea:4d:66:53:c9:42:4a:b5: 19:f1:65:e0:bc:ca:7b:25:bf:5d:4c:2e:ed:1a:4f:98:93:71: d0:64:77:d5:45:45:09:9f:21:9b:be:5c:08:f1:8d:c8:ef:5b: 76:74:56:74:eb:5f:d4:11:d3:6f:fa:a2:ee:61:24:90:17:4b: da:bb:fd:b6:51:8b:9d:4b:27:aa:3a:3e:c9:75:5d:7e:13:6d: da:cd:18:ed:5f:74:0f:7a:63:29:ed:46:cc:c3:5b:1e:22:36: 15:56:f5:a6:1d:d9:f1:9c:ef:a5:7b:02:95:09:15:7b:86:6c: 1a:f9:bf:56:d9:ba:71:03:47:ff:50:88:a7:18:13:c1:ac:f3: a1:86:49:83:4a:73:44:c6:3e:90:1d:ea:00:d4:f0:b7:aa:e8: 3e:79:f4:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO2At1nwsDTQaSk5lpoOnSf4GA+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDRDgzRjQ0MDVBRkQyQjUyOTQzRjk4MzgzNzRBMzQw ODU4NTEyRjAeFw0yNTEyMDUxNzUxMjlaFw0yNTEyMDYyMDEyMjlaMDMxMTAvBgNV BAMTKEMyM0FGRkYzRkZEQjJDNzRBMTJDNDdBQzUzOEQ5MDI4N0JBRDcyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhDkyUBcmh7n5GZ1+k+Sem76H hZkBPcF8iqFcp4aQ9peyBOtXssBZtqk/kibxTMwo1SAk/6YNWBMnv0LCK5QMePe5 b/kAkywsbP67tbWJXYYyRJsu7XJGHfK/7C528GFu2cQ+8u4bKb/hloHYasHOqhFA 9xo+FkZk+dkacsutNUkuS3iugsq5xbMY2wt0+9cjzUChPHh5O6vc/D/+JxoPnCxN hYLR0a0G20of7gD8t4b1RCdpITlw6PdA/hhuzoYvyfVfHecXzJ0FS8f4efzTwglr rBVZSvdIBdGA1wqhlTmC3zEd8TmseMWl7ATNBA4itq0y5OQB4sMxTknKv6hVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwjr/8//bLHShLEesU42QKHutcgswHwYDVR0j BBgwFoAUzc2D9EBa/StSlD+YODdKNAhYUS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHdWRUdIcFBzQnVHZndZMUQ5eFZCTkRDUjZ3UjZ3NmVpaHRhWjZORDND eDgvMi9DRENEODNGNDQwNUFGRDJCNTI5NDNGOTgzODM3NEEzNDA4NTg1MTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQ0Q4M0Y0NDA1QUZEMkI1 Mjk0M0Y5ODM4Mzc0QTM0MDg1ODUxMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHdWRUdIcFBzQnVHZndZMUQ5eFZCTkRDUjZ3UjZ3NmVpaHRhWjZORDNDeDgvMi9D RENEODNGNDQwNUFGRDJCNTI5NDNGOTgzODM3NEEzNDA4NTg1MTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnxAo4y2plgV/TQ8AHHm6VD5wt7VxfeoT/kYo4j1CgAwT0qwOEiZkrgj9q/lt //DlTYK31ebc1Emz2tPPbm62yQtjd5zWFO3L/OoClLJ5Y3NhGtOK8pcxCCN1tZcF 7cyA0GID5epNZlPJQkq1GfFl4LzKeyW/XUwu7RpPmJNx0GR31UVFCZ8hm75cCPGN yO9bdnRWdOtf1BHTb/qi7mEkkBdL2rv9tlGLnUsnqjo+yXVdfhNt2s0Y7V90D3pj Ke1GzMNbHiI2FVb1ph3Z8ZzvpXsClQkVe4ZsGvm/Vtm6cQNH/1CIpxgTwazzoYZJ g0pzRMY+kB3qANTwt6roPnn0Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:25:58 2025 by rpki-client