This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: c7HNiNbJevlS7XZ7xo+dbqe6Q5OBrt13QtEv3fy/0iE= Subject key identifier: 35:A8:C0:EE:BD:AB:0B:4A:1E:30:08:37:47:39:53:EB:22:A6:F2:21 Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 4B4F8F39336BB66D039148BD42AEE1BB40C8ABAD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 6B Signing time: Fri 05 Dec 2025 23:58:37 +0000 Manifest this update: Fri 05 Dec 2025 23:53:37 +0000 Manifest next update: Sun 07 Dec 2025 01:29:37 +0000 Files and hashes: 1: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=) 2: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: UK0g1Z1ELXtobmvRkyj5BwcvZvEqFOKV4/rxtDTQrq0=) 3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=) 4: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 01:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4f:8f:39:33:6b:b6:6d:03:91:48:bd:42:ae:e1:bb:40:c8:ab:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Dec 5 23:53:37 2025 GMT Not After : Dec 7 01:29:37 2025 GMT Subject: CN=35A8C0EEBDAB0B4A1E300837473953EB22A6F221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:29:18:b6:35:39:39:f7:34:58:b8:53:7f: d5:ba:2f:20:1e:7c:1f:4b:18:cf:51:39:5c:d5:95: 03:e3:1b:40:16:38:bd:b2:15:cc:de:50:19:72:29: f2:4c:5e:16:e1:74:ad:b9:81:13:54:f1:3d:36:3c: 97:10:d3:f0:41:49:cb:07:c3:e8:9a:61:a3:c6:b5: 82:c7:95:6f:f9:9e:f9:8c:10:36:a1:18:e8:3b:f6: e8:4f:53:f2:f5:6e:59:78:1d:79:bf:59:62:04:a6: 5a:6a:be:7f:a7:72:51:19:65:14:33:21:6f:f8:b9: c1:f6:49:ed:3c:ec:77:90:7e:35:61:2e:67:c9:30: 47:52:83:14:79:fb:f2:14:0f:52:2f:ad:66:1a:cf: 76:e9:ae:0f:91:1b:c2:1d:29:6e:34:42:25:54:e2: cc:15:80:43:89:7b:55:44:17:fb:21:5f:ff:01:bf: 58:e0:b1:42:b7:48:9b:1c:ff:a2:00:fa:d6:c1:ec: 6c:50:a7:3a:e0:95:08:69:5f:a1:1c:2d:ac:ad:a8: a8:b5:63:c3:27:f2:5f:33:69:50:ec:70:10:b8:d1: 3e:42:9d:ec:8a:70:95:13:24:ce:1b:b3:1e:57:1b: d7:36:49:9f:63:71:cb:7a:aa:49:bb:53:eb:69:61: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:C0:EE:BD:AB:0B:4A:1E:30:08:37:47:39:53:EB:22:A6:F2:21 X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fb:af:7a:13:a6:6e:63:f0:c7:88:4f:e6:21:32:d9:9f:3b: a0:4d:6d:65:ad:aa:30:20:a3:68:e5:c1:5b:ee:6e:3a:47:3a: f6:10:1b:c5:31:0e:d2:77:d9:21:ed:7f:ca:d0:12:1c:cf:20: 79:06:77:db:92:c3:22:06:b0:93:62:3e:66:07:fd:c6:e9:f6: 0e:03:db:30:55:9a:1f:28:0b:7c:01:77:57:91:24:34:33:a4: bc:75:cc:d5:d6:12:37:ef:c2:df:4c:b6:72:92:28:5b:9a:fd: ba:ac:79:b0:1f:50:90:68:10:51:9f:02:a0:e9:a6:d9:56:a6: 95:1d:7a:50:98:ec:a9:c7:03:b1:d7:97:39:5f:aa:4b:a7:1d: 45:0f:41:10:47:74:0b:81:b8:67:d1:5b:1d:a6:b8:ec:86:d4: 95:15:63:6b:43:d0:82:bc:35:02:ed:76:31:26:50:7b:1b:f5: 4e:9b:62:1d:9e:5c:86:07:fb:e5:df:db:b3:07:9d:df:e7:4e: aa:d4:55:1e:b0:c7:87:2e:17:74:ad:4e:04:6d:56:72:f5:83: 62:ac:25:b7:d9:37:27:fb:be:14:9b:f2:6b:82:6f:bc:19:e0: e5:c3:dc:5b:39:8d:31:09:ca:f4:4e:b1:1d:9a:73:f4:19:25: 42:fd:1c:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS0+POTNrtm0DkUi9Qq7hu0DIq60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNTEyMDUyMzUzMzdaFw0yNTEyMDcwMTI5MzdaMDMxMTAvBgNV BAMTKDM1QThDMEVFQkRBQjBCNEExRTMwMDgzNzQ3Mzk1M0VCMjJBNkYyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QykYtjU5Ofc0WLhTf9W6LyAe fB9LGM9ROVzVlQPjG0AWOL2yFczeUBlyKfJMXhbhdK25gRNU8T02PJcQ0/BBScsH w+iaYaPGtYLHlW/5nvmMEDahGOg79uhPU/L1bll4HXm/WWIEplpqvn+nclEZZRQz IW/4ucH2Se087HeQfjVhLmfJMEdSgxR5+/IUD1IvrWYaz3bprg+RG8IdKW40QiVU 4swVgEOJe1VEF/shX/8Bv1jgsUK3SJsc/6IA+tbB7GxQpzrglQhpX6EcLaytqKi1 Y8Mn8l8zaVDscBC40T5CneyKcJUTJM4bsx5XG9c2SZ9jcct6qkm7U+tpYZ1hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNajA7r2rC0oeMAg3RzlT6yKm8iEwHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIfuvehOmbmPwx4hP5iEy2Z87oE1tZa2qMCCjaOXBW+5uOkc69hAbxTEO0nfZ Ie1/ytASHM8geQZ325LDIgawk2I+Zgf9xun2DgPbMFWaHygLfAF3V5EkNDOkvHXM 1dYSN+/C30y2cpIoW5r9uqx5sB9QkGgQUZ8CoOmm2VamlR16UJjsqccDsdeXOV+q S6cdRQ9BEEd0C4G4Z9FbHaa47IbUlRVja0PQgrw1Au12MSZQexv1TptiHZ5chgf7 5d/bswed3+dOqtRVHrDHhy4XdK1OBG1WcvWDYqwlt9k3J/u+FJvya4JvvBng5cPc WzmNMQnK9E6xHZpz9BklQv0cmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:15 2025 by rpki-client