This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/DBD9D6D6D096332D541CA46ADD7385891ABF934D.mft File: DBD9D6D6D096332D541CA46ADD7385891ABF934D.mft (raw, json) Hash identifier: n1fLLEB+/I8E7YIGRa0lW/nqCouQEPvEDOTcRZ03Fj8= Subject key identifier: 21:CB:DB:48:D0:A1:B9:E8:83:3E:F9:1C:DA:E3:EF:C7:34:0D:A1:B7 Authority key identifier: DB:D9:D6:D6:D0:96:33:2D:54:1C:A4:6A:DD:73:85:89:1A:BF:93:4D Certificate issuer: /CN=DBD9D6D6D096332D541CA46ADD7385891ABF934D Certificate serial: 1AD608D99F9F971DDE6102DAF543C4644E352B00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD9D6D6D096332D541CA46ADD7385891ABF934D.cer Subject info access: rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/DBD9D6D6D096332D541CA46ADD7385891ABF934D.mft Manifest number: 030F Signing time: Sun 21 Dec 2025 08:03:10 +0000 Manifest this update: Sun 21 Dec 2025 07:58:10 +0000 Manifest next update: Mon 22 Dec 2025 11:26:10 +0000 Files and hashes: 1: 34352e3137382e31362e302f32322d3234203d3e20323639303537.roa (hash: /S61Ia35eoroambtbO/xqrgilHt0q4OeM7PFx6hDOm4=) 2: DBD9D6D6D096332D541CA46ADD7385891ABF934D.crl (hash: +aXEaxDGjeINhKKETczbZjUDe0en1AxJQWXg84Zzlp4=) 3: 323830343a356563633a3a2f33322d3334203d3e20323639303537.roa (hash: JpVofCM5ehL4trmZclTTmx9DmUZb6tlmL60yIT5A0vY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/DBD9D6D6D096332D541CA46ADD7385891ABF934D.crl rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/DBD9D6D6D096332D541CA46ADD7385891ABF934D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD9D6D6D096332D541CA46ADD7385891ABF934D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 11:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d6:08:d9:9f:9f:97:1d:de:61:02:da:f5:43:c4:64:4e:35:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBD9D6D6D096332D541CA46ADD7385891ABF934D Validity Not Before: Dec 21 07:58:10 2025 GMT Not After : Dec 22 11:26:10 2025 GMT Subject: CN=21CBDB48D0A1B9E8833EF91CDAE3EFC7340DA1B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:ac:80:6f:84:b5:cf:d7:da:96:ca:ec:9c: a6:56:df:75:ab:7e:52:fe:7b:d2:2d:ea:d1:69:07: c0:9b:32:e3:f9:d1:4c:82:87:41:87:98:07:46:62: d5:2b:c7:ed:1c:17:c5:db:47:71:65:4f:c7:4c:33: 40:a4:e7:a2:c8:d0:96:f2:a8:28:7d:08:41:51:42: 5c:a0:52:51:32:85:b7:7a:ab:aa:5c:c6:30:75:8f: 57:81:00:d2:4c:66:9d:b8:ab:2b:30:3f:2d:c8:8b: 51:4e:10:2b:dd:1b:fb:dc:0c:a9:82:84:c1:df:da: a9:db:a7:ed:87:ed:11:99:d3:36:a6:9f:39:7a:c7: 06:dc:a4:38:a9:aa:70:3a:7f:55:98:a7:89:34:22: 22:49:a1:22:8e:51:16:3d:33:8e:6c:d7:0e:af:35: 46:da:54:be:ef:be:27:b9:7e:7c:ad:a9:4a:14:f1: 38:fc:16:99:6b:6e:3d:60:a1:58:e7:fe:4c:04:b1: 5f:aa:dd:89:7d:34:4e:5b:93:bb:a8:12:e1:21:16: e0:1b:83:23:36:9b:01:11:fd:f9:63:6d:ab:2f:23: 44:c6:d5:3c:60:2d:21:1f:10:36:c5:39:c6:1b:ee: 4f:2d:be:05:2e:fb:ca:62:d6:92:da:be:43:43:97: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CB:DB:48:D0:A1:B9:E8:83:3E:F9:1C:DA:E3:EF:C7:34:0D:A1:B7 X509v3 Authority Key Identifier: keyid:DB:D9:D6:D6:D0:96:33:2D:54:1C:A4:6A:DD:73:85:89:1A:BF:93:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/DBD9D6D6D096332D541CA46ADD7385891ABF934D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD9D6D6D096332D541CA46ADD7385891ABF934D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/DBD9D6D6D096332D541CA46ADD7385891ABF934D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:25:04:18:00:3c:03:9a:e9:97:6e:14:17:3e:e0:15:06:dc: 9f:84:ec:f7:ae:ab:bb:82:d3:d4:f9:d9:3a:c1:65:c6:43:c5: 02:7e:10:37:07:6a:55:80:d8:ac:29:88:88:f0:8c:cd:40:45: 85:66:22:54:3b:5f:a3:d3:46:3e:66:43:6e:ce:7e:8f:d1:4b: 62:c0:ff:a7:31:c7:1d:bd:e7:a0:de:ed:f4:e3:2a:bc:cc:04: 0e:00:fb:5e:f1:8d:9d:15:ce:42:da:b6:1d:2a:40:37:84:2c: 63:39:d6:a9:2a:5c:4e:04:8c:79:ff:69:28:d7:8e:4e:55:88: 13:19:ab:83:75:34:3c:df:ca:99:32:b0:3c:26:74:57:9f:ce: 74:93:16:79:43:05:29:af:4e:8b:39:a3:ed:f7:b3:1c:45:97: 36:62:60:64:ab:4f:a1:47:e4:4c:2b:b0:85:44:d5:84:22:30: 41:de:71:13:4d:c5:2a:e4:8f:29:64:5b:7d:4b:d8:98:86:23: b3:10:c9:68:c4:62:ad:5b:a2:ef:43:79:14:b9:c7:04:56:df: 91:28:89:72:da:c0:a0:fa:6c:22:4d:4a:cf:38:2b:42:80:ca: 31:24:2b:a7:25:c4:d1:2c:4e:cc:09:e1:d6:a3:73:ba:9a:77: ba:2d:6a:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGtYI2Z+flx3eYQLa9UPEZE41KwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJEOUQ2RDZEMDk2MzMyRDU0MUNBNDZBREQ3Mzg1ODkx QUJGOTM0RDAeFw0yNTEyMjEwNzU4MTBaFw0yNTEyMjIxMTI2MTBaMDMxMTAvBgNV BAMTKDIxQ0JEQjQ4RDBBMUI5RTg4MzNFRjkxQ0RBRTNFRkM3MzQwREExQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIo6yAb4S1z9falsrsnKZW33Wr flL+e9It6tFpB8CbMuP50UyCh0GHmAdGYtUrx+0cF8XbR3FlT8dMM0Ck56LI0Jby qCh9CEFRQlygUlEyhbd6q6pcxjB1j1eBANJMZp24qyswPy3Ii1FOECvdG/vcDKmC hMHf2qnbp+2H7RGZ0zamnzl6xwbcpDipqnA6f1WYp4k0IiJJoSKOURY9M45s1w6v NUbaVL7vvie5fnytqUoU8Tj8Fplrbj1goVjn/kwEsV+q3Yl9NE5bk7uoEuEhFuAb gyM2mwER/fljbasvI0TG1TxgLSEfEDbFOcYb7k8tvgUu+8pi1pLavkNDl0ilAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIcvbSNChueiDPvkc2uPvxzQNobcwHwYDVR0j BBgwFoAU29nW1tCWMy1UHKRq3XOFiRq/k00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2haZGJUYmVMVThQZVpLcEREUjYydjRZYjk0R3VqRDlKWktueEJ5U2F6 amQvMC9EQkQ5RDZENkQwOTYzMzJENTQxQ0E0NkFERDczODU4OTFBQkY5MzRELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCRDlENkQ2RDA5NjMzMkQ1 NDFDQTQ2QURENzM4NTg5MUFCRjkzNEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2haZGJUYmVMVThQZVpLcEREUjYydjRZYjk0R3VqRDlKWktueEJ5U2F6amQvMC9E QkQ5RDZENkQwOTYzMzJENTQxQ0E0NkFERDczODU4OTFBQkY5MzRELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAyUEGAA8A5rpl24UFz7gFQbcn4Ts966ru4LT1PnZOsFlxkPFAn4QNwdqVYDY rCmIiPCMzUBFhWYiVDtfo9NGPmZDbs5+j9FLYsD/pzHHHb3noN7t9OMqvMwEDgD7 XvGNnRXOQtq2HSpAN4QsYznWqSpcTgSMef9pKNeOTlWIExmrg3U0PN/KmTKwPCZ0 V5/OdJMWeUMFKa9Oizmj7fezHEWXNmJgZKtPoUfkTCuwhUTVhCIwQd5xE03FKuSP KWRbfUvYmIYjsxDJaMRirVui70N5FLnHBFbfkSiJctrAoPpsIk1KzzgrQoDKMSQr pyXE0SxOzAnh1qNzupp3ui1q/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 11:02:46 2025 by rpki-client