This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft File: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json) Hash identifier: 9n+jjq381E11O34fc5qobdZw3VTZZqqS/7BIfMzqGjU= Subject key identifier: C5:E4:58:EA:51:FE:D8:40:8F:7C:63:1A:EA:EF:03:BE:DD:64:C5:12 Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D Certificate issuer: /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D Certificate serial: 2D250A73793C06D313C8A742BBF33E39822139EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer Subject info access: rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft Manifest number: 0330 Signing time: Fri 05 Dec 2025 20:19:43 +0000 Manifest this update: Fri 05 Dec 2025 20:14:43 +0000 Manifest next update: Sat 06 Dec 2025 23:35:43 +0000 Files and hashes: 1: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: ZceXE7bx6TC6E4u3WA/Kq4z90tvEF2urS5jJnl6sVmI=) 2: 323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (hash: Mfi2YXsn4usozNTkApzXZOTp/npyplnvShsrNKnIPOg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 23:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:25:0a:73:79:3c:06:d3:13:c8:a7:42:bb:f3:3e:39:82:21:39:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D Validity Not Before: Dec 5 20:14:43 2025 GMT Not After : Dec 6 23:35:43 2025 GMT Subject: CN=C5E458EA51FED8408F7C631AEAEF03BEDD64C512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:b4:b2:fb:9c:de:40:47:29:3f:87:90:13: 17:ec:5f:d5:cc:bd:13:54:46:fd:b3:90:9e:36:9e: 27:88:38:f8:bd:7f:d3:29:00:6b:fe:44:36:3c:58: bd:d6:f7:27:4b:c1:48:00:b5:20:e8:55:87:24:4f: 8a:e3:5d:e4:9f:e7:23:71:4a:0c:8f:1e:1d:6f:8e: 5c:57:75:b2:92:7d:a7:68:bf:21:14:6e:a9:84:91: 98:81:dc:b4:e8:19:08:b2:54:68:92:23:c0:ae:50: bb:44:f9:fe:14:07:9b:3b:83:ff:27:52:8a:0f:e8: 0f:f5:69:dd:29:78:91:ca:15:fd:6e:5a:dc:09:af: 8c:7a:9b:68:4c:70:34:2e:a9:66:5b:8a:f1:64:6b: 0b:16:52:93:a0:86:a2:15:67:75:51:7c:57:e4:7e: 6f:1a:71:eb:a3:63:56:38:27:9b:ea:27:57:61:66: d0:0b:7a:9b:63:21:52:f9:03:f0:38:34:51:89:0e: 69:e8:c5:d2:03:14:01:f6:77:d9:eb:ee:97:7c:56: a1:e8:6d:e2:78:37:ec:a3:c8:66:fa:76:b8:01:f2: f1:ae:24:8e:bd:7e:83:2c:64:c1:38:6d:41:23:64: c9:12:5f:5f:55:a1:e7:64:e4:6b:ab:38:81:ca:d6: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:58:EA:51:FE:D8:40:8F:7C:63:1A:EA:EF:03:BE:DD:64:C5:12 X509v3 Authority Key Identifier: keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e9:a0:56:6a:99:ea:d0:7d:c7:4b:a3:5d:5d:27:ed:7e:cf: 31:39:9f:d1:00:47:3a:c8:0c:9a:ef:d7:85:2c:aa:a7:a0:a3: d5:19:8b:16:ff:b6:dd:07:b0:c6:0d:1c:6d:6a:ce:52:ae:98: 93:b9:5d:5a:77:45:67:4c:1e:a5:d6:74:52:55:37:46:d6:ee: ea:5c:5f:74:cf:10:a4:49:1f:7f:03:f5:4e:b9:a5:28:ea:0b: 0f:75:b7:7c:31:53:6f:6a:54:dc:65:ba:2c:51:9e:2d:3a:9a: 50:e7:dc:a2:70:ae:fa:fd:d1:9d:64:db:1f:d4:80:5d:3c:85: 27:c9:92:af:3a:b6:dc:95:90:4e:0a:fd:05:77:6c:03:b6:b5: b3:62:f5:36:0e:8e:39:73:21:32:8b:ee:3c:a9:3e:e1:31:0c: 8a:75:d6:60:f3:43:42:54:07:69:dd:c7:55:52:8f:a0:65:fd: 15:5c:eb:86:a8:a1:4b:67:ab:f8:db:6a:e7:25:0d:e4:7b:79: b6:47:18:56:81:22:82:64:b7:a8:69:fc:37:df:0d:19:67:34: 96:bc:62:41:a7:71:71:14:58:8c:8b:16:b4:d1:1b:a5:b0:b8: 1a:a4:43:ec:50:99:39:b9:0c:bb:1a:2f:79:ae:09:c8:6f:74: b4:f1:ba:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULSUKc3k8BtMTyKdCu/M+OYIhOe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZENDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1 RjcyM0IzRDAeFw0yNTEyMDUyMDE0NDNaFw0yNTEyMDYyMzM1NDNaMDMxMTAvBgNV BAMTKEM1RTQ1OEVBNTFGRUQ4NDA4RjdDNjMxQUVBRUYwM0JFREQ2NEM1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCes7Sy+5zeQEcpP4eQExfsX9XM vRNURv2zkJ42nieIOPi9f9MpAGv+RDY8WL3W9ydLwUgAtSDoVYckT4rjXeSf5yNx SgyPHh1vjlxXdbKSfadovyEUbqmEkZiB3LToGQiyVGiSI8CuULtE+f4UB5s7g/8n UooP6A/1ad0peJHKFf1uWtwJr4x6m2hMcDQuqWZbivFkawsWUpOghqIVZ3VRfFfk fm8aceujY1Y4J5vqJ1dhZtALeptjIVL5A/A4NFGJDmnoxdIDFAH2d9nr7pd8VqHo beJ4N+yjyGb6drgB8vGuJI69foMsZME4bUEjZMkSX19Voedk5GurOIHK1oajAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxeRY6lH+2ECPfGMa6u8Dvt1kxRIwHwYDVR0j BBgwFoAU39Qgvu6GZYxpv3vwJaves19yOz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0 V3YvMS9ERkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRDQyMEJFRUU4NjY1OEM2 OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS9E RkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEOmgVmqZ6tB9x0ujXV0n7X7PMTmf0QBHOsgMmu/XhSyqp6Cj1RmLFv+23Qew xg0cbWrOUq6Yk7ldWndFZ0wepdZ0UlU3Rtbu6lxfdM8QpEkffwP1TrmlKOoLD3W3 fDFTb2pU3GW6LFGeLTqaUOfconCu+v3RnWTbH9SAXTyFJ8mSrzq23JWQTgr9BXds A7a1s2L1Ng6OOXMhMovuPKk+4TEMinXWYPNDQlQHad3HVVKPoGX9FVzrhqihS2er +Ntq5yUN5Ht5tkcYVoEigmS3qGn8N98NGWc0lrxiQadxcRRYjIsWtNEbpbC4GqRD 7FCZObkMuxovea4JyG90tPG6Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:29 2025 by rpki-client