This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft File: 3921558C04D37C64DA2CBC9D86CFF035672C152F.mft (raw, json) Hash identifier: krh9F+ADy/x+Z4AnR8cLC0Id1UyCicAHxRRG/J9AFzc= Subject key identifier: 07:3E:3B:BD:59:78:73:01:FD:78:02:55:30:40:DD:A3:7C:71:37:C8 Authority key identifier: 39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F Certificate issuer: /CN=3921558C04D37C64DA2CBC9D86CFF035672C152F Certificate serial: 2535D3E07379DB8A7E9B9A3F888DC6D0DACFDC3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer Subject info access: rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft Manifest number: 8E Signing time: Fri 05 Dec 2025 16:04:34 +0000 Manifest this update: Fri 05 Dec 2025 15:59:34 +0000 Manifest next update: Sat 06 Dec 2025 18:11:34 +0000 Files and hashes: 1: 3921558C04D37C64DA2CBC9D86CFF035672C152F.crl (hash: X7P1+7khq3vMzPHfhHRrUMhV9IcOq8HxcniXcrsG4P4=) 2: 323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (hash: dUDlHgNCuZ93aicUk/mH3Si/Q6dP4PtlITKr+tKS6Wc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 18:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:35:d3:e0:73:79:db:8a:7e:9b:9a:3f:88:8d:c6:d0:da:cf:dc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3921558C04D37C64DA2CBC9D86CFF035672C152F Validity Not Before: Dec 5 15:59:34 2025 GMT Not After : Dec 6 18:11:34 2025 GMT Subject: CN=073E3BBD59787301FD7802553040DDA37C7137C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e4:bf:5f:17:97:08:7c:e4:ed:fd:d9:93:e8: ef:31:17:32:86:22:96:aa:89:8a:de:00:41:92:de: f0:5a:35:8e:5c:a1:1e:ef:4c:7d:ee:c8:01:d2:b5: 28:79:16:c7:90:3f:57:ca:ba:56:e6:ae:91:d3:9e: 23:e1:ef:a5:4a:ea:07:6e:36:64:64:08:7d:03:97: 63:2a:ab:d9:1f:c9:79:10:68:f0:e0:49:77:51:c7: 76:9f:30:1f:f6:b3:6e:57:07:09:5e:0c:86:0d:29: c4:b0:54:2a:cd:f6:e2:d5:e2:36:fe:8d:c6:22:e1: 8a:22:1d:c8:a3:42:7b:a0:b7:80:1b:a3:37:3a:a1: 2c:2c:d3:66:6f:f7:53:26:04:83:63:2f:c2:ef:cb: 1a:64:4c:30:6e:a1:c0:09:41:b4:1e:80:53:62:30: 8d:0f:3a:a9:48:e4:80:37:71:45:4d:ea:da:e7:da: af:35:e6:c5:88:b0:4e:2f:3a:da:cf:14:77:93:50: 91:40:83:ee:dc:7d:04:d0:7b:f6:f8:56:a6:1f:25: b6:34:07:58:63:f0:6d:3f:15:a9:09:b7:36:91:a7: 57:82:ad:65:a3:47:33:ba:c7:30:27:2b:11:42:b4: 65:a1:95:de:3a:90:71:5e:08:1c:51:f4:43:d4:b7: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3E:3B:BD:59:78:73:01:FD:78:02:55:30:40:DD:A3:7C:71:37:C8 X509v3 Authority Key Identifier: keyid:39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4d:2c:2e:9b:e3:d6:2b:62:f0:66:ce:92:4b:d4:b3:f2:41: 0b:0d:4b:71:a5:34:81:86:29:46:fe:a5:a5:bd:64:b4:fb:61: 77:fa:63:ea:04:42:94:c5:96:83:71:e2:a1:38:52:5a:04:9e: fa:4c:71:b5:27:02:9f:1b:75:cb:9d:38:3b:94:66:7f:d3:ab: f0:30:8f:8a:10:6a:a4:07:69:14:74:a5:2d:bf:42:76:17:ae: dc:86:2f:b9:b5:5b:4e:1a:cb:b2:c2:69:05:d8:d1:1f:c8:fc: e4:80:98:e8:c0:7e:73:b9:3b:29:d7:15:56:af:09:79:7c:e5: 07:06:ca:6d:f1:ee:c8:8f:46:4d:20:4d:88:0f:3f:34:fc:35: d5:c2:bf:0b:37:07:57:e9:4c:d4:25:67:7a:f3:f8:25:45:88: ac:75:ad:5f:40:10:6b:d4:f7:90:6b:31:71:a4:46:6c:47:14: 67:12:85:67:da:8b:87:e9:43:ba:58:00:ff:b3:f9:73:27:88: 05:e3:39:13:de:48:4c:4c:1c:7f:ff:5b:d0:8f:0a:0c:e7:66: ad:62:78:74:7b:e1:9f:f1:f7:c2:04:b2:55:a4:f2:e3:68:cc: 4d:93:43:3a:3e:db:01:52:71:18:fc:f3:c8:05:c4:c9:a7:2b: da:33:7a:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJTXT4HN524p+m5o/iI3G0NrP3D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkyMTU1OEMwNEQzN0M2NERBMkNCQzlEODZDRkYwMzU2 NzJDMTUyRjAeFw0yNTEyMDUxNTU5MzRaFw0yNTEyMDYxODExMzRaMDMxMTAvBgNV BAMTKDA3M0UzQkJENTk3ODczMDFGRDc4MDI1NTMwNDBEREEzN0M3MTM3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt5L9fF5cIfOTt/dmT6O8xFzKG IpaqiYreAEGS3vBaNY5coR7vTH3uyAHStSh5FseQP1fKulbmrpHTniPh76VK6gdu NmRkCH0Dl2Mqq9kfyXkQaPDgSXdRx3afMB/2s25XBwleDIYNKcSwVCrN9uLV4jb+ jcYi4YoiHcijQnugt4Abozc6oSws02Zv91MmBINjL8LvyxpkTDBuocAJQbQegFNi MI0POqlI5IA3cUVN6trn2q815sWIsE4vOtrPFHeTUJFAg+7cfQTQe/b4VqYfJbY0 B1hj8G0/FakJtzaRp1eCrWWjRzO6xzAnKxFCtGWhld46kHFeCBxR9EPUt3JlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBz47vVl4cwH9eAJVMEDdo3xxN8gwHwYDVR0j BBgwFoAUOSFVjATTfGTaLLydhs/wNWcsFS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGFEcDdwcjk0R1dEWERIcFdHWkZQVDhHY1hMQWJidmFiWnBpV2lieVo2 UHUvMC8zOTIxNTU4QzA0RDM3QzY0REEyQ0JDOUQ4NkNGRjAzNTY3MkMxNTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MjE1NThDMDREMzdDNjRE QTJDQkM5RDg2Q0ZGMDM1NjcyQzE1MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGFEcDdwcjk0R1dEWERIcFdHWkZQVDhHY1hMQWJidmFiWnBpV2lieVo2UHUvMC8z OTIxNTU4QzA0RDM3QzY0REEyQ0JDOUQ4NkNGRjAzNTY3MkMxNTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsk0sLpvj1iti8GbOkkvUs/JBCw1LcaU0gYYpRv6lpb1ktPthd/pj6gRClMWW g3HioThSWgSe+kxxtScCnxt1y504O5Rmf9Or8DCPihBqpAdpFHSlLb9Cdheu3IYv ubVbThrLssJpBdjRH8j85ICY6MB+c7k7KdcVVq8JeXzlBwbKbfHuyI9GTSBNiA8/ NPw11cK/CzcHV+lM1CVnevP4JUWIrHWtX0AQa9T3kGsxcaRGbEcUZxKFZ9qLh+lD ulgA/7P5cyeIBeM5E95ITEwcf/9b0I8KDOdmrWJ4dHvhn/H3wgSyVaTy42jMTZND Oj7bAVJxGPzzyAXEyacr2jN6iw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:51 2025 by rpki-client