This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: z/Ejb3MJgpo3eVsZVMAGztB8lnOJUaU6fXmfmkccCvs= Subject key identifier: 3F:CF:C4:4B:D9:33:DC:3E:3A:17:1B:67:8B:80:0A:21:FF:89:BD:A7 Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 3F6B2C87283A37925E727B4CCADFAF430654198D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 81 Signing time: Mon 22 Dec 2025 11:58:37 +0000 Manifest this update: Mon 22 Dec 2025 11:53:37 +0000 Manifest next update: Tue 23 Dec 2025 15:23:37 +0000 Files and hashes: 1: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=) 2: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=) 3: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: webbozgY0Yh/MtgIp9QWfTVHXpwC6S/kqV//5LOCZ7E=) 4: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 15:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6b:2c:87:28:3a:37:92:5e:72:7b:4c:ca:df:af:43:06:54:19:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Dec 22 11:53:37 2025 GMT Not After : Dec 23 15:23:37 2025 GMT Subject: CN=3FCFC44BD933DC3E3A171B678B800A21FF89BDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:8f:5f:09:cd:62:86:1a:61:ce:42:b0:ca: ee:79:d6:d9:ec:1f:16:7e:53:7d:46:cb:76:55:4e: a7:05:7c:04:3f:1b:6a:c7:e9:76:da:f4:c9:e6:0c: cf:af:db:ff:0e:33:b6:40:7b:f4:25:d4:f8:2c:b4: a2:42:5a:0b:24:db:0f:e3:3d:3e:17:19:35:fe:b3: ab:af:8e:cb:ca:97:62:25:95:8a:55:d7:67:c2:7d: 14:10:25:3f:4d:fd:5d:d7:35:26:df:1c:92:3d:ce: 32:19:a3:a5:34:33:ab:79:eb:2b:b7:a0:e7:1a:ff: da:35:84:9a:b4:77:9b:8a:cc:4e:d1:cb:aa:6a:10: 5c:ab:bc:dd:f6:3e:8b:cd:82:64:26:05:dd:bd:d4: 81:f9:da:ac:40:e4:5c:44:fe:09:7a:99:ae:3f:76: 58:77:dc:9c:96:f5:78:05:c5:c4:45:20:dd:05:d3: ed:f9:cf:96:f6:4f:02:22:7f:ad:ac:21:fd:68:e6: 65:bd:5b:5a:ef:39:80:1e:eb:89:be:cf:e6:29:da: 37:ec:fa:a3:ac:97:1c:14:87:08:09:e6:ce:9c:76: 89:6b:68:ca:4f:a3:13:f6:c6:02:9b:1c:37:70:50: 78:7e:0f:93:7b:51:49:da:89:34:6f:2f:3f:90:f5: 93:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:C4:4B:D9:33:DC:3E:3A:17:1B:67:8B:80:0A:21:FF:89:BD:A7 X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2c:e7:40:99:bf:3c:95:0a:e9:56:5a:4c:8b:2c:a2:03:9e: c3:a6:93:0b:68:83:6c:bb:8e:5a:31:aa:fe:0f:77:41:ee:09: 79:4a:af:98:1a:e4:62:16:28:09:c9:a7:d8:5a:99:22:84:c5: 9c:11:a6:67:f3:df:49:ef:43:40:8e:7e:d6:b9:d0:6f:d3:8c: 4f:f0:d4:e3:da:2c:e0:14:41:5b:84:ad:fc:a6:a7:36:87:04: 2a:a6:3c:d0:5a:c1:53:30:ba:6d:8f:2f:39:8d:f2:4d:bf:84: 08:e1:41:a4:aa:48:84:88:18:b1:13:3c:ba:62:10:47:b5:32: a9:58:5b:e3:e3:da:e3:32:c8:cc:86:da:32:cf:51:a2:8b:79: fb:35:38:86:d6:9e:a1:90:6b:66:c7:01:fd:8d:b4:be:b9:46: 1f:f6:51:de:fa:85:f6:05:36:15:0b:45:58:ab:dd:a2:12:31: 49:70:b6:8b:ab:5e:f2:cd:01:a7:7e:0a:eb:36:4d:90:84:47: 81:89:75:fd:7a:47:bc:38:b8:85:e4:cb:a7:1c:73:72:8d:e8: de:75:05:10:55:98:b7:6c:b3:b4:be:07:79:91:56:68:c3:11: 24:53:75:1a:1c:f4:87:9c:c8:36:0d:22:0a:65:ec:bf:71:6a: bd:18:fc:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP2sshyg6N5JecntMyt+vQwZUGY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNTEyMjIxMTUzMzdaFw0yNTEyMjMxNTIzMzdaMDMxMTAvBgNV BAMTKDNGQ0ZDNDRCRDkzM0RDM0UzQTE3MUI2NzhCODAwQTIxRkY4OUJEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWY9fCc1ihhphzkKwyu551tns HxZ+U31Gy3ZVTqcFfAQ/G2rH6Xba9MnmDM+v2/8OM7ZAe/Ql1PgstKJCWgsk2w/j PT4XGTX+s6uvjsvKl2IllYpV12fCfRQQJT9N/V3XNSbfHJI9zjIZo6U0M6t56yu3 oOca/9o1hJq0d5uKzE7Ry6pqEFyrvN32PovNgmQmBd291IH52qxA5FxE/gl6ma4/ dlh33JyW9XgFxcRFIN0F0+35z5b2TwIif62sIf1o5mW9W1rvOYAe64m+z+Yp2jfs +qOslxwUhwgJ5s6cdolraMpPoxP2xgKbHDdwUHh+D5N7UUnaiTRvLz+Q9ZMVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP8/ES9kz3D46Fxtni4AKIf+JvacwHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUSznQJm/PJUK6VZaTIssogOew6aTC2iDbLuOWjGq/g93Qe4JeUqvmBrkYhYo Ccmn2FqZIoTFnBGmZ/PfSe9DQI5+1rnQb9OMT/DU49os4BRBW4St/KanNocEKqY8 0FrBUzC6bY8vOY3yTb+ECOFBpKpIhIgYsRM8umIQR7UyqVhb4+Pa4zLIzIbaMs9R oot5+zU4htaeoZBrZscB/Y20vrlGH/ZR3vqF9gU2FQtFWKvdohIxSXC2i6te8s0B p34K6zZNkIRHgYl1/XpHvDi4heTLpxxzco3o3nUFEFWYt2yztL4HeZFWaMMRJFN1 Ghz0h5zINg0iCmXsv3FqvRj8fQ== -----END CERTIFICATE-----Generated at Tue Dec 23 02:25:04 2025 by rpki-client