This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft File: D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft (raw, json) Hash identifier: SBVuvD9XUbfI4nykhL3c7M8IZ6jmikpbcI32vjZ5/vg= Subject key identifier: 1A:40:E3:F8:C3:48:10:CC:E7:77:A9:C7:B7:80:77:29:C0:7D:64:EE Authority key identifier: D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E Certificate issuer: /CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E Certificate serial: 52EBED0DC23C1ECEA10B0FBB6C96ABE4323D1F5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft Manifest number: 20 Signing time: Mon 15 Dec 2025 16:01:05 +0000 Manifest this update: Mon 15 Dec 2025 15:56:05 +0000 Manifest next update: Tue 16 Dec 2025 16:02:05 +0000 Files and hashes: 1: 3136382e302e32302e302f32322d3332203d3e20323635323432.roa (hash: annC1vFjuqC/mmR5eiElDHilugC/qrDMivSD1xl5CoM=) 2: D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl (hash: 5xfoD3Cg6ZAj+MctTz42bWzXvFptjUMyBdJ/PdzcZNI=) 3: 323830343a326363343a3a2f33322d313238203d3e20323635323432.roa (hash: CqfsmrXQSw0KVMoN7/rDxEOPPqtIUHfuvqYfHXSfdNA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 16 Dec 2025 16:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:eb:ed:0d:c2:3c:1e:ce:a1:0b:0f:bb:6c:96:ab:e4:32:3d:1f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E Validity Not Before: Dec 15 15:56:05 2025 GMT Not After : Dec 16 16:02:05 2025 GMT Subject: CN=1A40E3F8C34810CCE777A9C7B7807729C07D64EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:83:51:6e:f4:5f:01:81:be:45:e1:45:38: 1a:eb:40:6d:d4:ce:6b:51:79:41:93:0a:ae:0a:b3: 9b:71:26:17:0c:0d:b1:d7:50:70:2a:65:24:10:9a: f6:db:7d:35:fb:b5:b6:ab:cd:18:ea:91:44:8b:8f: 0f:58:7a:80:d2:2c:07:c2:dc:9e:13:3d:c4:ff:9b: fa:e7:fe:b5:30:32:9e:3d:98:6c:fa:35:61:cf:85: 4c:f3:19:b0:67:64:d9:45:a4:83:31:c2:a2:b6:d5: 63:af:94:d6:c2:43:88:99:a5:1c:eb:88:ee:e6:55: 04:b0:c2:83:b2:24:39:dd:a6:b3:05:04:12:29:ca: 7d:37:c5:01:76:17:61:80:21:57:e9:e0:54:0f:b1: c3:9d:13:fe:00:fd:e5:a9:1f:5e:c4:d3:9f:01:10: 61:2b:f1:13:f5:c6:c2:ba:d6:a2:93:3e:ae:24:43: 4b:fa:3c:71:81:d3:8d:13:c5:03:51:32:e9:b0:6b: a9:8b:bc:6a:8b:b3:fd:4b:82:60:c6:de:3d:d6:61: c3:00:58:f0:9c:e5:fd:ea:00:0d:fe:e9:a0:9d:f1: 4f:85:0f:7d:e2:ee:56:77:bd:c9:09:5e:a4:79:03: 8d:0c:f6:09:54:bc:d9:54:5c:c4:1d:50:ac:20:39: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:E3:F8:C3:48:10:CC:E7:77:A9:C7:B7:80:77:29:C0:7D:64:EE X509v3 Authority Key Identifier: keyid:D3:C1:C0:2F:BB:6D:EB:A0:20:0A:69:05:C2:4B:01:E3:F9:06:6A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/D3C1C02FBB6DEBA0200A6905C24B01E3F9066A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:72:03:a0:85:69:a8:5d:5b:da:d2:e4:67:88:5a:00:bf:2a: 4a:f0:a6:f0:5a:0d:5e:0f:66:b5:a4:d3:7f:34:79:32:db:93: 65:88:5b:41:d0:f8:1b:97:90:04:09:31:c7:34:63:15:73:02: 85:0b:d0:a2:57:87:db:7c:2e:ac:9a:32:5c:eb:b5:e4:6d:57: 4c:de:1a:f3:d4:cd:71:a2:dc:6f:8d:7c:fd:56:dc:60:c5:85: 98:de:6d:fc:89:ab:45:47:77:08:61:b0:21:eb:b1:e5:0c:b8: 1b:37:d4:f7:a4:bc:bb:ed:93:10:db:8e:6a:46:1a:f2:69:53: 86:e2:f8:31:32:ef:3e:5d:ce:eb:e6:e1:e5:b3:3c:47:9e:5d: fa:d6:63:bb:8a:aa:5e:e6:60:aa:a2:96:01:95:d2:46:ab:a9: 30:3b:1d:a6:18:f6:d4:3a:ef:9b:a2:fc:6d:1e:ae:42:79:7f: e1:9f:50:84:23:1a:39:00:af:52:cb:b9:55:6f:7e:43:5c:8a: c3:7a:73:65:be:de:b7:d1:2f:13:d3:49:0d:03:24:9b:62:f6: 22:95:26:2c:54:c0:23:61:eb:72:d6:ca:e4:4e:4d:d3:48:bc: 91:04:95:c2:f6:85:66:62:37:cc:cd:23:e8:5e:b5:2b:47:f9: 0a:93:fa:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUuvtDcI8Hs6hCw+7bJar5DI9H1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDMUMwMkZCQjZERUJBMDIwMEE2OTA1QzI0QjAxRTNG OTA2NkEwRTAeFw0yNTEyMTUxNTU2MDVaFw0yNTEyMTYxNjAyMDVaMDMxMTAvBgNV BAMTKDFBNDBFM0Y4QzM0ODEwQ0NFNzc3QTlDN0I3ODA3NzI5QzA3RDY0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9oNRbvRfAYG+ReFFOBrrQG3U zmtReUGTCq4Ks5txJhcMDbHXUHAqZSQQmvbbfTX7tbarzRjqkUSLjw9YeoDSLAfC 3J4TPcT/m/rn/rUwMp49mGz6NWHPhUzzGbBnZNlFpIMxwqK21WOvlNbCQ4iZpRzr iO7mVQSwwoOyJDndprMFBBIpyn03xQF2F2GAIVfp4FQPscOdE/4A/eWpH17E058B EGEr8RP1xsK61qKTPq4kQ0v6PHGB040TxQNRMumwa6mLvGqLs/1LgmDG3j3WYcMA WPCc5f3qAA3+6aCd8U+FD33i7lZ3vckJXqR5A40M9glUvNlUXMQdUKwgOXyHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGkDj+MNIEMznd6nHt4B3KcB9ZO4wHwYDVR0j BBgwFoAU08HAL7tt66AgCmkFwksB4/kGag4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21uRFBxZXV5Z2FRM0ZIeXBCVzhxNk1WSnI2UWNRdFNyeEtOWnFIbnBI eXUvMC9EM0MxQzAyRkJCNkRFQkEwMjAwQTY5MDVDMjRCMDFFM0Y5MDY2QTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQzFDMDJGQkI2REVCQTAy MDBBNjkwNUMyNEIwMUUzRjkwNjZBMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21uRFBxZXV5Z2FRM0ZIeXBCVzhxNk1WSnI2UWNRdFNyeEtOWnFIbnBIeXUvMC9E M0MxQzAyRkJCNkRFQkEwMjAwQTY5MDVDMjRCMDFFM0Y5MDY2QTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPXIDoIVpqF1b2tLkZ4haAL8qSvCm8FoNXg9mtaTTfzR5MtuTZYhbQdD4G5eQ BAkxxzRjFXMChQvQoleH23wurJoyXOu15G1XTN4a89TNcaLcb418/VbcYMWFmN5t /ImrRUd3CGGwIeux5Qy4GzfU96S8u+2TENuOakYa8mlThuL4MTLvPl3O6+bh5bM8 R55d+tZju4qqXuZgqqKWAZXSRqupMDsdphj21Drvm6L8bR6uQnl/4Z9QhCMaOQCv Usu5VW9+Q1yKw3pzZb7et9EvE9NJDQMkm2L2IpUmLFTAI2HrctbK5E5N00i8kQSV wvaFZmI3zM0j6F61K0f5CpP6jA== -----END CERTIFICATE-----Generated at Tue Dec 16 08:03:05 2025 by rpki-client