This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: MpH2OQufe1WW/z+DFTc0azlvnUWyweG82Xn0JVnS1o4= Subject key identifier: 39:F1:A0:9A:0A:16:75:81:44:77:98:90:B1:EB:36:30:E5:18:F1:C9 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 2EE5006A47AF05B541BDE325FEF11AADEE9720A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: 010B Signing time: Mon 22 Dec 2025 02:30:49 +0000 Manifest this update: Mon 22 Dec 2025 02:25:49 +0000 Manifest next update: Tue 23 Dec 2025 04:46:49 +0000 Files and hashes: 1: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) 2: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) 3: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: 9tPlRpwdmQDmPYg4SQQnsjzDEszhaAaxCSVvJ1cvtZ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 03:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e5:00:6a:47:af:05:b5:41:bd:e3:25:fe:f1:1a:ad:ee:97:20:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Dec 22 02:25:49 2025 GMT Not After : Dec 23 04:46:49 2025 GMT Subject: CN=39F1A09A0A16758144779890B1EB3630E518F1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:01:0c:df:8e:ca:51:2a:69:5f:74:6b:bd: 85:7e:f2:3f:cc:08:bd:86:05:ef:33:f9:78:37:09: 0f:64:a0:81:3f:ae:5a:0e:42:ad:d3:72:89:6a:40: 24:8a:13:d4:b0:fd:d5:fe:90:4b:7d:bb:c2:a1:dd: e9:ba:98:fd:a9:2c:68:ca:52:c3:94:04:e3:ac:0f: 27:07:60:63:8b:84:5f:a2:a9:81:18:4b:af:15:5d: 25:0f:4c:a3:1d:67:33:6b:0f:9c:f4:d6:32:3b:62: 81:a4:a4:de:1c:f4:c8:18:bd:4a:05:83:4e:96:8b: 46:99:88:66:a6:79:d5:44:75:73:00:a9:bc:b5:25: be:29:02:a9:cf:48:9b:d3:01:e8:e5:18:a1:a7:c8: 8f:a1:4e:1c:c0:b9:24:0a:30:fd:14:57:1c:56:9e: 63:33:41:0e:ba:14:0f:7a:74:a1:0d:20:9f:a1:7b: fe:55:56:39:9b:74:a7:f9:5c:67:bf:d2:c5:62:ef: 54:19:c1:20:26:99:7f:69:ff:2d:83:12:4a:e9:5e: b7:ce:c5:96:4c:4f:ce:c0:33:6b:61:1d:f0:dc:45: f9:1b:30:fe:49:9d:77:a4:27:15:e4:e0:c0:46:30: 0a:ad:58:a2:34:44:3e:3e:58:9a:5d:68:1b:c3:cf: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F1:A0:9A:0A:16:75:81:44:77:98:90:B1:EB:36:30:E5:18:F1:C9 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:eb:92:27:c0:9a:38:25:e3:ff:5f:69:b5:a1:c7:82:cb:60: 53:79:11:8f:61:42:f1:dc:d1:8f:85:1b:b4:1c:46:bb:29:8f: 4c:42:ef:59:bc:52:2a:f6:94:7a:c8:1f:60:83:c3:ee:80:d9: a1:06:29:ad:7e:7f:86:a2:f0:ea:d5:ac:30:8f:b1:f1:e4:ff: 63:8a:ef:d4:dc:26:34:44:77:87:5d:22:94:28:2c:b8:a0:8d: 53:2d:0e:9d:32:a3:a1:67:81:d0:53:dc:fe:1c:6f:75:5d:d0: 2e:22:db:24:68:3f:d0:84:1a:aa:4f:5d:53:5d:5c:41:a4:99: 67:97:f2:b9:25:32:01:68:0c:37:81:81:f6:70:e5:60:4e:8d: ee:38:64:3a:4c:64:df:16:16:f1:77:e2:ab:47:3c:99:b6:ff: 89:20:44:b5:0a:90:ae:35:fa:60:2b:7d:a3:bf:55:73:da:df: e0:4d:6e:97:36:84:bb:d3:7b:4f:2f:07:d7:6c:1f:fb:82:19: cf:15:0a:ca:2b:90:9f:59:df:c5:2b:ab:69:2d:5b:14:98:a7: 92:91:07:99:b5:76:80:77:42:ee:fd:04:09:ee:da:f7:0b:72: dc:5a:88:36:87:6b:65:4a:bb:13:31:72:a1:7b:ca:ac:fa:09: 32:a2:ae:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULuUAakevBbVBveMl/vEare6XIKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTEyMjIwMjI1NDlaFw0yNTEyMjMwNDQ2NDlaMDMxMTAvBgNV BAMTKDM5RjFBMDlBMEExNjc1ODE0NDc3OTg5MEIxRUIzNjMwRTUxOEYxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYwEM347KUSppX3RrvYV+8j/M CL2GBe8z+Xg3CQ9koIE/rloOQq3TcolqQCSKE9Sw/dX+kEt9u8Kh3em6mP2pLGjK UsOUBOOsDycHYGOLhF+iqYEYS68VXSUPTKMdZzNrD5z01jI7YoGkpN4c9MgYvUoF g06Wi0aZiGamedVEdXMAqby1Jb4pAqnPSJvTAejlGKGnyI+hThzAuSQKMP0UVxxW nmMzQQ66FA96dKENIJ+he/5VVjmbdKf5XGe/0sVi71QZwSAmmX9p/y2DEkrpXrfO xZZMT87AM2thHfDcRfkbMP5JnXekJxXk4MBGMAqtWKI0RD4+WJpdaBvDz861AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOfGgmgoWdYFEd5iQses2MOUY8ckwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAheuSJ8CaOCXj/19ptaHHgstgU3kRj2FC8dzRj4UbtBxGuymPTELvWbxSKvaU esgfYIPD7oDZoQYprX5/hqLw6tWsMI+x8eT/Y4rv1NwmNER3h10ilCgsuKCNUy0O nTKjoWeB0FPc/hxvdV3QLiLbJGg/0IQaqk9dU11cQaSZZ5fyuSUyAWgMN4GB9nDl YE6N7jhkOkxk3xYW8Xfiq0c8mbb/iSBEtQqQrjX6YCt9o79Vc9rf4E1ulzaEu9N7 Ty8H12wf+4IZzxUKyiuQn1nfxSuraS1bFJinkpEHmbV2gHdC7v0ECe7a9wty3FqI NodrZUq7EzFyoXvKrPoJMqKuDQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:00:19 2025 by rpki-client