This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft File: DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json) Hash identifier: CTvWNwCnXyhE7Y6hnVyPiCK9+j8c0U8PVZeWmatJklQ= Subject key identifier: 2D:90:F9:72:3F:D0:48:9C:2B:E4:B5:07:04:92:12:5F:4F:56:45:78 Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D Certificate issuer: /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Certificate serial: 5B72FD94BB2617FA75B55996FEE3060169C1F1BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft Manifest number: 015C Signing time: Fri 19 Dec 2025 06:02:08 +0000 Manifest this update: Fri 19 Dec 2025 05:57:08 +0000 Manifest next update: Sat 20 Dec 2025 08:25:08 +0000 Files and hashes: 1: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: 3Qr3X4d8SSbvG8VMzLc9vdnFzS8y+bf/JcU3U/j3YOg=) 2: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: EBy3rQwQ+8YvV1n0NbcOpSkf6ZX3JhodQDIQP6f8oCY=) 3: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: V86kNco5ZHxMjKrWgLTi/qoHVEZvpbWtFOyczBdYZAU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 08:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:72:fd:94:bb:26:17:fa:75:b5:59:96:fe:e3:06:01:69:c1:f1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Validity Not Before: Dec 19 05:57:08 2025 GMT Not After : Dec 20 08:25:08 2025 GMT Subject: CN=2D90F9723FD0489C2BE4B5070492125F4F564578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:9f:7b:43:18:c1:22:8c:eb:9f:0f:e3:b7: 2b:27:41:28:e9:f7:9b:11:95:81:33:e5:73:f7:6a: 99:d3:1e:0b:56:a8:15:23:62:d2:8c:82:59:bc:e4: fc:73:4a:8e:1c:d7:f3:d8:cf:61:75:9c:ee:74:cf: d2:81:e4:3e:b5:46:b0:81:fc:ce:65:66:d5:f3:10: 01:3f:2e:28:9f:72:e0:3d:75:1a:f8:e8:8c:9c:95: 50:31:f9:a2:89:50:cc:84:c1:5e:22:3a:24:30:25: d9:f9:09:1e:46:cb:f1:08:2c:69:b4:cd:2c:6d:05: 79:c0:ab:c1:19:f7:88:a5:e4:44:57:0e:49:49:89: 28:0a:cf:5a:3c:c5:18:d0:8b:a2:ab:3a:cf:9a:16: 88:fa:9f:db:78:06:08:0f:43:cc:90:e6:fc:46:ff: e3:c2:94:df:c1:f9:09:ab:0b:5b:da:d6:66:82:08: 65:f3:a0:03:82:c5:63:d1:82:37:e8:58:e0:6e:01: d5:27:ec:3a:15:b4:d0:67:f0:54:52:de:78:23:d3: 4f:96:1f:8f:83:fe:52:b4:d7:6a:44:08:9a:73:52: c0:32:c4:9a:63:8e:94:3e:92:d0:51:60:47:d0:08: 77:13:20:67:3b:d2:52:fe:20:fe:cf:88:2a:b6:30: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:F9:72:3F:D0:48:9C:2B:E4:B5:07:04:92:12:5F:4F:56:45:78 X509v3 Authority Key Identifier: keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3e:64:08:b3:63:3d:a2:26:a9:76:eb:06:20:40:28:89:63: cf:83:a8:83:b2:0d:2b:74:f3:49:42:43:19:7d:45:4f:a1:76: 19:e8:09:03:9a:54:92:d4:58:25:51:9a:d4:23:36:92:fa:e3: 1b:08:39:66:7a:d3:93:dd:e8:69:90:ee:cf:26:0b:b1:20:44: 42:93:64:c1:81:ec:dd:3d:9d:9b:7a:66:97:db:b7:c7:f5:79: ad:fe:92:01:b2:1c:51:23:86:37:7b:ed:c3:31:ca:d7:35:b0: 47:4b:ed:4d:02:d0:ac:03:fb:25:0e:24:c6:dc:92:32:4b:99: 4d:65:0f:3f:7a:ed:89:70:6e:8e:ca:86:b0:5a:8b:cb:29:de: 21:1b:55:8a:f7:db:a0:d7:9a:fe:43:46:a7:31:d5:fc:91:ed: ab:cc:05:03:01:4e:d2:6c:a4:c8:b7:59:e6:df:2f:1f:36:e2: b3:da:25:53:9a:fa:dc:77:83:38:4d:b6:a8:0a:24:f3:a4:ff: 58:9f:37:48:c6:14:c9:d4:01:c7:e4:b7:b0:c0:d6:06:16:fa: 49:10:0d:99:6b:c2:69:c9:10:34:88:69:ae:a7:35:e6:58:8a: de:d3:b3:df:b7:a2:79:84:1a:64:fa:90:30:d1:cb:af:86:cd: f8:0c:70:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW3L9lLsmF/p1tVmW/uMGAWnB8b4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF QzREMEI3RDAeFw0yNTEyMTkwNTU3MDhaFw0yNTEyMjAwODI1MDhaMDMxMTAvBgNV BAMTKDJEOTBGOTcyM0ZEMDQ4OUMyQkU0QjUwNzA0OTIxMjVGNEY1NjQ1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPc597QxjBIozrnw/jtysnQSjp 95sRlYEz5XP3apnTHgtWqBUjYtKMglm85PxzSo4c1/PYz2F1nO50z9KB5D61RrCB /M5lZtXzEAE/LiifcuA9dRr46IyclVAx+aKJUMyEwV4iOiQwJdn5CR5Gy/EILGm0 zSxtBXnAq8EZ94il5ERXDklJiSgKz1o8xRjQi6KrOs+aFoj6n9t4BggPQ8yQ5vxG /+PClN/B+QmrC1va1maCCGXzoAOCxWPRgjfoWOBuAdUn7DoVtNBn8FRS3ngj00+W H4+D/lK012pECJpzUsAyxJpjjpQ+ktBRYEfQCHcTIGc70lL+IP7PiCq2MCwzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULZD5cj/QSJwr5LUHBJISX09WRXgwHwYDVR0j BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMC9E RDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHz5kCLNjPaImqXbrBiBAKIljz4Oog7INK3TzSUJDGX1FT6F2GegJA5pUktRY JVGa1CM2kvrjGwg5ZnrTk93oaZDuzyYLsSBEQpNkwYHs3T2dm3pml9u3x/V5rf6S AbIcUSOGN3vtwzHK1zWwR0vtTQLQrAP7JQ4kxtySMkuZTWUPP3rtiXBujsqGsFqL yyneIRtVivfboNea/kNGpzHV/JHtq8wFAwFO0mykyLdZ5t8vHzbis9olU5r63HeD OE22qAok86T/WJ83SMYUydQBx+S3sMDWBhb6SRANmWvCackQNIhprqc15liK3tOz 37eieYQaZPqQMNHLr4bN+Axwyw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:01:46 2025 by rpki-client