This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft File: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json) Hash identifier: uXRG71YTWDQjX2DgWwkuEXPR3btHiJQva3tWJYHBYH4= Subject key identifier: 40:8E:25:FF:5A:46:BF:7B:37:AD:1C:89:FE:BD:1B:68:4D:F3:D9:C9 Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Certificate serial: 554B51C42A8EE3EF3CEC6873D049ED771E977256 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft Manifest number: 0334 Signing time: Sat 20 Dec 2025 04:20:34 +0000 Manifest this update: Sat 20 Dec 2025 04:15:34 +0000 Manifest next update: Sun 21 Dec 2025 05:07:34 +0000 Files and hashes: 1: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: 8mO0xdkIy/noPDvjg6wvknnphWm/6cHlj8um6CWr3Y4=) 2: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: pT9wLb3SCYVr3rULtnzQP+Z0K6P8cggsIKhPstRPcOU=) 3: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: TM2lu8ojhx/JZZ0fRyy/mmuC8mNGbW3JwdC0RSOzsaA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4b:51:c4:2a:8e:e3:ef:3c:ec:68:73:d0:49:ed:77:1e:97:72:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Validity Not Before: Dec 20 04:15:34 2025 GMT Not After : Dec 21 05:07:34 2025 GMT Subject: CN=408E25FF5A46BF7B37AD1C89FEBD1B684DF3D9C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:d4:3b:4f:b6:74:60:b1:52:df:94:a9:9b: d2:31:1b:82:b8:d7:09:d6:f6:bf:4f:54:9e:7e:20: 34:0d:a9:e7:72:20:42:89:b6:67:14:99:3b:33:9d: 7e:3d:fc:31:73:0c:20:36:e6:9e:f8:3e:69:2b:c5: f0:30:af:26:85:d3:f6:40:2e:e4:79:2a:a2:b3:cd: 03:18:f0:44:f4:7a:eb:29:47:f7:52:81:00:89:74: 87:d9:1c:85:f8:2e:d2:db:b9:c5:52:57:38:df:17: 9c:c3:54:0b:36:6b:4d:68:8b:fd:bf:30:f3:07:c4: b7:ce:52:c5:11:b1:08:43:a4:fa:1c:66:6c:40:12: d0:ec:db:c7:5e:e7:f5:78:8a:70:0f:ad:65:cd:f6: 66:c9:38:81:dc:53:28:ed:cd:18:07:59:06:9c:83: be:7d:af:3a:7b:e4:a2:8d:fb:68:b5:1b:11:fd:18: dd:f2:07:89:eb:82:d7:af:f1:ee:ad:e4:c7:53:1c: 07:4d:da:fa:a3:fa:48:f1:dd:78:f2:65:39:14:70: 88:0a:5e:66:1a:21:10:9f:b1:fe:f0:9b:4b:6c:47: ff:1e:4f:5c:b7:89:bb:11:52:7f:75:07:44:ab:b4: d3:ce:8e:bd:5c:d6:b3:5d:6e:41:34:8d:5a:cf:c0: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8E:25:FF:5A:46:BF:7B:37:AD:1C:89:FE:BD:1B:68:4D:F3:D9:C9 X509v3 Authority Key Identifier: keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a2:f5:02:48:4d:9b:3b:51:86:a5:d5:bc:9c:b3:ad:92:f5: 58:23:21:7f:43:3c:8e:c0:a8:12:8b:84:52:7f:fb:bf:3a:31: 45:cd:52:5e:5d:81:49:5e:95:6d:5a:bb:16:21:6a:6c:e4:a4: d6:19:4a:b0:4d:81:aa:f0:c3:91:22:70:b4:df:2f:bd:a1:2c: 5e:76:69:2c:38:57:8a:83:ba:46:48:15:a3:31:52:58:40:7e: d5:c6:bf:3b:7e:33:44:cf:d8:ba:d9:ae:b4:ee:70:14:f6:9e: b8:de:23:e1:10:57:2c:6a:cd:74:bc:5f:f0:c0:d1:ce:2e:62: 7b:f9:78:d6:ce:1c:7c:42:d7:47:be:21:08:a1:57:32:08:78: 08:06:7d:c5:d5:a5:b3:c7:0c:51:89:01:65:5d:81:05:e4:99: cf:cc:94:1f:2d:b8:de:87:1b:6d:9d:40:4e:87:49:b2:b7:a3: 7c:93:65:93:ec:f1:5f:d7:a4:4e:68:be:e9:19:80:9f:5c:5e: df:a5:e1:c7:ca:56:d5:21:7f:58:12:80:a8:2a:d1:4d:14:65: c1:56:5d:75:26:25:52:f5:1f:4a:cf:5f:e6:9e:e8:58:9a:21: 62:3b:e6:1f:c6:7f:eb:19:20:f1:c4:a2:bd:0b:e4:d1:5c:db: 4e:6b:8f:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVUtRxCqO4+887Ghz0Entdx6XclYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzQTJGRDREOEQ3QUI5MTU4MTlGRTgzQ0I4NEQzQUM1 MUEzMkM3RTAeFw0yNTEyMjAwNDE1MzRaFw0yNTEyMjEwNTA3MzRaMDMxMTAvBgNV BAMTKDQwOEUyNUZGNUE0NkJGN0IzN0FEMUM4OUZFQkQxQjY4NERGM0Q5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5tQ7T7Z0YLFS35Spm9IxG4K4 1wnW9r9PVJ5+IDQNqedyIEKJtmcUmTsznX49/DFzDCA25p74PmkrxfAwryaF0/ZA LuR5KqKzzQMY8ET0euspR/dSgQCJdIfZHIX4LtLbucVSVzjfF5zDVAs2a01oi/2/ MPMHxLfOUsURsQhDpPocZmxAEtDs28de5/V4inAPrWXN9mbJOIHcUyjtzRgHWQac g759rzp75KKN+2i1GxH9GN3yB4nrgtev8e6t5MdTHAdN2vqj+kjx3XjyZTkUcIgK XmYaIRCfsf7wm0tsR/8eT1y3ibsRUn91B0SrtNPOjr1c1rNdbkE0jVrPwCuXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQI4l/1pGv3s3rRyJ/r0baE3z2ckwHwYDVR0j BBgwFoAULTov1NjXq5FYGf6Dy4TTrFGjLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK bW8vMC8yRDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEM0EyRkQ0RDhEN0FCOTE1 ODE5RkU4M0NCODREM0FDNTFBMzJDN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZKbW8vMC8y RDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaqL1AkhNmztRhqXVvJyzrZL1WCMhf0M8jsCoEouEUn/7vzoxRc1SXl2BSV6V bVq7FiFqbOSk1hlKsE2BqvDDkSJwtN8vvaEsXnZpLDhXioO6RkgVozFSWEB+1ca/ O34zRM/YutmutO5wFPaeuN4j4RBXLGrNdLxf8MDRzi5ie/l41s4cfELXR74hCKFX Mgh4CAZ9xdWls8cMUYkBZV2BBeSZz8yUHy243ocbbZ1ATodJsrejfJNlk+zxX9ek Tmi+6RmAn1xe36Xhx8pW1SF/WBKAqCrRTRRlwVZddSYlUvUfSs9f5p7oWJohYjvm H8Z/6xkg8cSivQvk0VzbTmuPIA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:06:40 2025 by rpki-client