This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft File: DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json) Hash identifier: 0r3A2XGeVsOFT3GU4RPz8ImwiuHGKUpsSZhbhgLn8E8= Subject key identifier: AE:25:FF:FC:77:A1:7C:78:39:9A:65:07:D2:FD:D8:96:18:B5:7E:F1 Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39 Certificate issuer: /CN=DDA4FC5B8E458E28765A866099AD929BAF665339 Certificate serial: 4B77FD4EF2A7D18B9D9D5B8F10B9B3588691D574 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer Subject info access: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft Manifest number: 027C Signing time: Sun 21 Dec 2025 21:11:26 +0000 Manifest this update: Sun 21 Dec 2025 21:06:26 +0000 Manifest next update: Mon 22 Dec 2025 21:46:26 +0000 Files and hashes: 1: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: nMQXkBs+poUjtuyc4CkiehDpQxelS0VJ1cjAIr/UgbA=) 2: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: jP3IQqswpGaM77xkljP+GCv95gg8T2Z4ZUCESPrqos0=) 3: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: FgEv7DHx8gpoUEHmCHDzneQcmOGaXyHJxKnB2umwj5Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 21:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:77:fd:4e:f2:a7:d1:8b:9d:9d:5b:8f:10:b9:b3:58:86:91:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339 Validity Not Before: Dec 21 21:06:26 2025 GMT Not After : Dec 22 21:46:26 2025 GMT Subject: CN=AE25FFFC77A17C78399A6507D2FDD89618B57EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:73:94:8e:fa:64:a4:9a:17:d9:59:a9:2c: 6b:43:c8:ce:72:d9:a5:90:35:74:ec:df:dc:89:24: c8:42:86:0f:34:0a:d2:0f:6f:ba:59:8d:ce:a1:64: c2:4b:48:50:1d:60:e5:93:c9:da:c7:9e:20:2e:d9: b5:33:2b:e0:5d:25:53:2d:f6:1e:ed:18:62:b6:f7: 40:06:f6:aa:16:e3:0a:0a:6d:54:c1:16:94:72:8e: 37:b3:46:7b:b3:30:dc:5f:18:72:c8:15:3d:a1:14: db:bb:b5:33:b6:40:9a:0c:79:5a:ac:54:01:9b:57: 43:1a:60:ff:4b:4b:30:c5:a5:4d:ec:dd:6c:8d:82: 19:8a:4c:77:24:65:8e:88:3c:9b:0f:b2:82:f4:62: f2:01:7e:af:ad:a8:12:e8:19:5d:90:a0:bb:4f:28: a8:c7:6c:b7:97:58:7c:00:b0:26:ea:a9:13:dd:94: 89:a5:41:9d:07:00:7a:97:55:eb:af:a9:a8:40:b2: d8:2f:3e:68:a2:3b:18:a5:58:04:71:13:22:ba:45: a7:41:af:90:fb:62:e2:84:c6:08:19:62:b7:b4:de: 1c:ad:5c:90:18:b6:55:b1:e0:a4:5b:8e:10:6b:e5: 36:53:c7:86:03:ab:be:dd:e4:f2:16:a4:6b:42:39: d8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:25:FF:FC:77:A1:7C:78:39:9A:65:07:D2:FD:D8:96:18:B5:7E:F1 X509v3 Authority Key Identifier: keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:68:7e:d2:78:d7:d5:7d:1e:9f:5b:28:22:37:87:2b:89:c4: 7f:da:f3:a5:c1:b4:5d:19:bc:5f:42:56:7f:cc:e7:c0:38:08: 4c:f5:8b:17:20:76:e0:00:d6:8b:fb:71:c6:8a:18:db:1b:5f: 6b:80:44:f0:e2:20:d9:11:4b:8f:c3:1a:75:27:cb:52:c7:c6: ce:1c:83:3c:35:5f:1a:c7:4e:6b:e2:45:e8:3a:7d:51:8c:5b: 6a:12:55:5c:b0:d6:14:fe:ff:fb:42:75:ee:3e:b0:ee:39:8d: 25:e6:d2:ae:89:83:05:bb:f2:08:39:c1:17:4d:c3:c4:f8:57: 08:0b:a3:11:23:28:3b:92:f6:f3:c4:48:f0:ef:57:64:9d:86: 28:ad:5b:c7:be:89:39:b1:e8:f7:3f:44:4e:12:6b:f3:7f:63: cb:41:bf:4f:db:81:68:60:0b:e7:5f:30:62:0f:83:2b:78:9e: 25:64:e4:b3:3f:64:b1:7b:6a:b5:43:23:d8:23:77:a0:4b:23: c8:d2:fa:5b:f8:4f:b6:5f:d5:4d:a0:27:9f:e7:62:38:14:73: 02:09:30:82:54:22:c1:9d:21:75:4f:cc:ac:19:4d:2c:2a:23: db:c9:41:92:f4:53:de:ad:fd:02:da:d9:f3:4a:9f:69:28:63: 71:70:69:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS3f9TvKn0YudnVuPELmzWIaR1XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBNEZDNUI4RTQ1OEUyODc2NUE4NjYwOTlBRDkyOUJB RjY2NTMzOTAeFw0yNTEyMjEyMTA2MjZaFw0yNTEyMjIyMTQ2MjZaMDMxMTAvBgNV BAMTKEFFMjVGRkZDNzdBMTdDNzgzOTlBNjUwN0QyRkREODk2MThCNTdFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTY3OUjvpkpJoX2VmpLGtDyM5y 2aWQNXTs39yJJMhChg80CtIPb7pZjc6hZMJLSFAdYOWTydrHniAu2bUzK+BdJVMt 9h7tGGK290AG9qoW4woKbVTBFpRyjjezRnuzMNxfGHLIFT2hFNu7tTO2QJoMeVqs VAGbV0MaYP9LSzDFpU3s3WyNghmKTHckZY6IPJsPsoL0YvIBfq+tqBLoGV2QoLtP KKjHbLeXWHwAsCbqqRPdlImlQZ0HAHqXVeuvqahAstgvPmiiOxilWARxEyK6RadB r5D7YuKExggZYre03hytXJAYtlWx4KRbjhBr5TZTx4YDq77d5PIWpGtCOdjPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUriX//HehfHg5mmUH0v3Ylhi1fvEwHwYDVR0j BBgwFoAU3aT8W45Fjih2WoZgma2Sm69mUzkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmhOWnhiV3Yza3dpWXNCOVB1eG9KbmRCbVNjUmJ0aGh0WlBMYmZGMjJM SmUvMC9EREE0RkM1QjhFNDU4RTI4NzY1QTg2NjA5OUFEOTI5QkFGNjY1MzM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTRGQzVCOEU0NThFMjg3 NjVBODY2MDk5QUQ5MjlCQUY2NjUzMzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmhOWnhiV3Yza3dpWXNCOVB1eG9KbmRCbVNjUmJ0aGh0WlBMYmZGMjJMSmUvMC9E REE0RkM1QjhFNDU4RTI4NzY1QTg2NjA5OUFEOTI5QkFGNjY1MzM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWWh+0njX1X0en1soIjeHK4nEf9rzpcG0XRm8X0JWf8znwDgITPWLFyB24ADW i/txxooY2xtfa4BE8OIg2RFLj8MadSfLUsfGzhyDPDVfGsdOa+JF6Dp9UYxbahJV XLDWFP7/+0J17j6w7jmNJebSromDBbvyCDnBF03DxPhXCAujESMoO5L288RI8O9X ZJ2GKK1bx76JObHo9z9EThJr839jy0G/T9uBaGAL518wYg+DK3ieJWTksz9ksXtq tUMj2CN3oEsjyNL6W/hPtl/VTaAnn+diOBRzAgkwglQiwZ0hdU/MrBlNLCoj28lB kvRT3q39AtrZ80qfaShjcXBpMA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:33:35 2025 by rpki-client