This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: 3JRwIUu9i0WpwS6KVEH6oERSVMf2m8yFcd7RDdyU96k= Subject key identifier: DF:2F:F5:58:30:97:86:8E:65:97:E6:45:2A:90:7F:B3:2F:A9:CC:53 Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 46965C8629D8AF61968899B7C18D4A46C7DBCF82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 0338 Signing time: Sun 21 Dec 2025 20:20:59 +0000 Manifest this update: Sun 21 Dec 2025 20:15:59 +0000 Manifest next update: Mon 22 Dec 2025 23:08:59 +0000 Files and hashes: 1: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) 2: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: friCkKB7c1PCeoDz+t/wc6kjCyZUxtLXhimWYNdDExk=) 3: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 23:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:96:5c:86:29:d8:af:61:96:88:99:b7:c1:8d:4a:46:c7:db:cf:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Dec 21 20:15:59 2025 GMT Not After : Dec 22 23:08:59 2025 GMT Subject: CN=DF2FF5583097868E6597E6452A907FB32FA9CC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:06:c2:ac:c0:58:b9:7a:c4:c7:0e:20:8d: 0c:df:32:10:be:ed:1f:d4:27:3d:39:e5:4d:25:62: ba:7a:8c:e2:7d:3e:91:a1:a6:da:5f:0c:1f:d3:6c: 51:7d:20:59:ed:73:b2:00:a4:9a:6c:39:a3:5d:3c: 7f:a5:db:ec:db:81:80:84:d0:cb:ba:77:07:5e:86: be:f0:9b:a1:c4:37:14:10:76:b4:6a:c7:cc:f9:bf: fc:29:04:fc:a5:31:24:6a:fa:e8:64:dc:33:b9:ba: e1:97:77:a1:48:4f:98:d2:47:21:08:7f:df:f1:e7: f1:ce:dd:66:35:90:75:e8:b7:13:0a:39:de:a9:01: 53:f7:53:ce:1f:8e:5e:01:6a:66:fe:3c:e3:9b:cc: e2:9c:1c:e6:ae:32:e9:69:04:5d:82:33:d2:5c:48: f5:5d:86:e4:b6:8d:35:f9:11:44:b8:ad:b2:f7:9c: 08:a2:80:77:a6:e2:ce:8d:11:d9:38:a1:de:cf:aa: 51:31:94:43:1c:ee:4a:96:5d:44:58:f2:66:c1:18: 1d:4b:57:34:f0:6b:17:9e:18:7d:3c:15:f2:1d:02: 9f:d2:13:5b:47:c0:53:5c:05:68:ec:87:68:d2:6c: 8b:bc:ee:f8:05:eb:1f:1a:2f:96:64:62:f7:92:02: 78:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2F:F5:58:30:97:86:8E:65:97:E6:45:2A:90:7F:B3:2F:A9:CC:53 X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:86:95:8c:97:71:cf:8c:37:c4:e3:16:41:78:22:06:10:45: 48:70:12:de:21:a3:69:f1:71:05:1f:e1:d0:37:10:6f:0b:5b: 4e:2e:2c:20:8b:08:6a:f9:f5:5e:de:34:08:7c:ae:33:5a:10: aa:e2:c7:1c:8a:6f:69:73:1c:03:c3:b7:56:2e:6b:2b:68:2a: 95:1a:c8:38:cb:15:9b:36:7c:7f:d7:6f:77:cf:01:52:91:4b: f9:d9:2d:16:cf:cc:2b:27:90:4d:a9:e9:e4:26:e5:cb:62:4b: 6b:60:71:be:b5:6d:2b:94:ec:fe:7a:c1:5c:35:89:c7:f9:53: 12:f8:95:00:a7:c2:46:77:91:19:ed:a2:55:6b:df:8c:23:85: d3:ed:c9:c0:4b:2f:c2:0d:65:03:0a:3b:be:d3:e6:77:ac:6e: 2b:a4:c3:8e:a4:1e:18:96:28:8a:7a:7d:c0:87:ae:78:96:1f: 0f:56:9c:4d:7f:29:63:d6:d6:e7:f9:49:4f:8d:68:d7:08:19: 67:76:4f:58:2d:af:e4:2f:01:4a:85:61:e1:34:6f:ff:dd:05: 71:a5:b2:83:29:c2:79:35:c8:df:60:8e:37:50:64:1c:76:bf: 27:76:ae:d4:d6:0f:3f:19:8c:50:b6:05:eb:34:58:3f:6f:9c: 28:1f:ea:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURpZchinYr2GWiJm3wY1KRsfbz4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNTEyMjEyMDE1NTlaFw0yNTEyMjIyMzA4NTlaMDMxMTAvBgNV BAMTKERGMkZGNTU4MzA5Nzg2OEU2NTk3RTY0NTJBOTA3RkIzMkZBOUNDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOwbCrMBYuXrExw4gjQzfMhC+ 7R/UJz055U0lYrp6jOJ9PpGhptpfDB/TbFF9IFntc7IApJpsOaNdPH+l2+zbgYCE 0Mu6dwdehr7wm6HENxQQdrRqx8z5v/wpBPylMSRq+uhk3DO5uuGXd6FIT5jSRyEI f9/x5/HO3WY1kHXotxMKOd6pAVP3U84fjl4Bamb+POObzOKcHOauMulpBF2CM9Jc SPVdhuS2jTX5EUS4rbL3nAiigHem4s6NEdk4od7PqlExlEMc7kqWXURY8mbBGB1L VzTwaxeeGH08FfIdAp/SE1tHwFNcBWjsh2jSbIu87vgF6x8aL5ZkYveSAniLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3y/1WDCXho5ll+ZFKpB/sy+pzFMwHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABoaVjJdxz4w3xOMWQXgiBhBFSHAS3iGjafFxBR/h0DcQbwtbTi4sIIsIavn1 Xt40CHyuM1oQquLHHIpvaXMcA8O3Vi5rK2gqlRrIOMsVmzZ8f9dvd88BUpFL+dkt Fs/MKyeQTanp5Cbly2JLa2BxvrVtK5Ts/nrBXDWJx/lTEviVAKfCRneRGe2iVWvf jCOF0+3JwEsvwg1lAwo7vtPmd6xuK6TDjqQeGJYoinp9wIeueJYfD1acTX8pY9bW 5/lJT41o1wgZZ3ZPWC2v5C8BSoVh4TRv/90FcaWygynCeTXI32CON1BkHHa/J3au 1NYPPxmMULYF6zRYP2+cKB/qxg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:35:41 2025 by rpki-client