This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json) Hash identifier: +P1Kdqc/gsi/2Y6ONIEkGIzxGS2sk4L4G29A432jykg= Subject key identifier: F8:EB:15:BF:1E:B3:E5:46:2A:D5:7C:F7:CE:B7:BE:9D:05:38:94:AF Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 34ABAAC80E245F409CFA5965EED33DDF2C795A1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft Manifest number: 3A Signing time: Thu 18 Dec 2025 06:02:25 +0000 Manifest this update: Thu 18 Dec 2025 05:57:25 +0000 Manifest next update: Fri 19 Dec 2025 07:59:25 +0000 Files and hashes: 1: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=) 2: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: Tibi5cxIwR8r+oakc1Ywt1ByOqd5qEVqpa/XM+9mqPA=) 3: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 07:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ab:aa:c8:0e:24:5f:40:9c:fa:59:65:ee:d3:3d:df:2c:79:5a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: Dec 18 05:57:25 2025 GMT Not After : Dec 19 07:59:25 2025 GMT Subject: CN=F8EB15BF1EB3E5462AD57CF7CEB7BE9D053894AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:16:65:ee:be:ef:1a:dc:2b:75:f5:3d:f7: ff:a6:8d:23:c3:af:81:99:2f:8c:ef:8b:3a:d7:bc: c1:4b:c0:3b:d7:88:64:18:0c:e4:6f:96:b3:78:17: 47:eb:bb:de:87:14:1a:d9:31:dc:35:8f:58:20:a0: 91:8d:6a:23:6b:39:75:69:78:ed:d1:5c:0e:d3:1e: 0c:4d:00:53:5e:e2:7f:ea:47:60:dc:3f:be:65:10: 17:9a:5b:67:6c:8d:66:01:d5:90:13:81:0d:56:8a: 5e:a3:43:60:55:23:ec:e9:a1:e6:e7:bc:71:64:d3: 5e:48:aa:bd:b0:9e:f2:4b:32:ed:dd:a3:c3:43:24: d2:0f:29:e5:8c:aa:b4:2b:cc:30:ea:e1:84:ba:a5: 69:cb:fa:07:2c:e3:43:d9:40:3c:1b:d8:f9:22:8d: 2a:cb:81:d4:99:c6:61:3a:de:71:52:2e:7f:f2:a1: c0:40:64:36:dd:d7:d7:10:a6:4e:a9:4c:f9:5b:8f: 83:b8:6e:6d:1a:28:c0:92:87:80:7b:d8:b1:96:09: a6:11:d1:57:ea:74:3c:9f:24:17:b1:70:37:9a:0a: 20:fa:c8:77:55:c3:14:61:e1:19:d9:4f:3b:b7:02: 5d:98:ba:1f:f1:2c:c0:0a:28:79:ba:68:c1:2d:f0: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EB:15:BF:1E:B3:E5:46:2A:D5:7C:F7:CE:B7:BE:9D:05:38:94:AF X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:41:61:d1:63:f0:a0:63:72:86:42:27:c2:96:a8:cc:63:75: f4:72:eb:2f:09:31:5b:60:15:a9:d3:10:dd:f6:96:cc:0d:e4: 51:65:22:fd:74:db:37:9c:80:32:7b:a3:eb:69:54:06:af:a7: bb:24:bc:8f:a2:83:b6:20:8f:43:47:de:72:9a:3b:85:87:46: 08:ed:a3:83:32:e1:f6:08:9c:7c:12:24:f6:e8:9c:c0:11:c7: ab:2f:52:e7:81:d2:25:ed:e1:90:04:5b:54:fe:00:25:7c:84: 07:8a:22:50:f0:37:fa:ab:e1:ff:f3:48:ee:32:72:9b:d4:11: 24:4f:c3:45:e2:a3:0e:0a:2b:c9:de:8e:9c:54:97:12:30:a2: 3f:0f:ec:20:0a:0c:35:9b:b2:c8:ea:54:1c:b4:8f:0a:78:16: b4:b8:30:b7:43:b0:df:34:14:e1:a3:2b:ff:f8:25:d3:54:8a: 9e:a4:a2:f6:91:1c:4e:14:43:42:35:66:d3:6f:00:cb:b0:41: 15:18:1f:cf:4e:0d:ad:2c:67:50:6e:9c:ce:d4:f9:48:38:6b: 74:a1:6a:f2:3a:78:21:30:4e:6c:10:32:19:1c:5c:4e:27:9a: af:73:24:af:96:5a:fb:79:92:7d:3e:7f:fc:a1:c5:fc:b7:bf: 49:45:1e:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNKuqyA4kX0Cc+lll7tM93yx5Wh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNTEyMTgwNTU3MjVaFw0yNTEyMTkwNzU5MjVaMDMxMTAvBgNV BAMTKEY4RUIxNUJGMUVCM0U1NDYyQUQ1N0NGN0NFQjdCRTlEMDUzODk0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGShZl7r7vGtwrdfU99/+mjSPD r4GZL4zvizrXvMFLwDvXiGQYDORvlrN4F0fru96HFBrZMdw1j1ggoJGNaiNrOXVp eO3RXA7THgxNAFNe4n/qR2DcP75lEBeaW2dsjWYB1ZATgQ1Wil6jQ2BVI+zpoebn vHFk015Iqr2wnvJLMu3do8NDJNIPKeWMqrQrzDDq4YS6pWnL+gcs40PZQDwb2Pki jSrLgdSZxmE63nFSLn/yocBAZDbd19cQpk6pTPlbj4O4bm0aKMCSh4B72LGWCaYR 0VfqdDyfJBexcDeaCiD6yHdVwxRh4RnZTzu3Al2Yuh/xLMAKKHm6aMEt8CnHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+OsVvx6z5UYq1Xz3zre+nQU4lK8wHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdUFh0WPwoGNyhkInwpaozGN19HLrLwkxW2AVqdMQ3faWzA3kUWUi/XTbN5yA Mnuj62lUBq+nuyS8j6KDtiCPQ0fecpo7hYdGCO2jgzLh9gicfBIk9uicwBHHqy9S 54HSJe3hkARbVP4AJXyEB4oiUPA3+qvh//NI7jJym9QRJE/DReKjDgoryd6OnFSX EjCiPw/sIAoMNZuyyOpUHLSPCngWtLgwt0Ow3zQU4aMr//gl01SKnqSi9pEcThRD QjVm028Ay7BBFRgfz04NrSxnUG6cztT5SDhrdKFq8jp4ITBObBAyGRxcTiear3Mk r5Za+3mSfT5//KHF/Le/SUUeiA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:35 2025 by rpki-client