This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json) Hash identifier: rx1WgiqEneF/Iwi7FFgE1EvCwSKvMt53+t4tPaTosHo= Subject key identifier: 7B:C7:97:06:69:90:77:EB:A1:C3:81:AC:22:A8:13:98:95:CB:6C:B2 Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Certificate serial: 0A2DB867FAECE205655EED517BD40739FA62A84D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft Manifest number: 021D Signing time: Sun 21 Dec 2025 09:33:00 +0000 Manifest this update: Sun 21 Dec 2025 09:28:00 +0000 Manifest next update: Mon 22 Dec 2025 12:59:00 +0000 Files and hashes: 1: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: rsVQfiijpfhF5LC1p8c1WtXIfwiafOTnkz2gt+seHls=) 2: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=) 3: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 12:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2d:b8:67:fa:ec:e2:05:65:5e:ed:51:7b:d4:07:39:fa:62:a8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Validity Not Before: Dec 21 09:28:00 2025 GMT Not After : Dec 22 12:59:00 2025 GMT Subject: CN=7BC79706699077EBA1C381AC22A8139895CB6CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:0f:ac:7c:8c:cd:c4:86:6c:42:eb:7f:79: 50:66:cc:ab:3e:15:c1:42:4c:4d:d2:0b:98:19:14: 14:a1:6a:3e:1b:d2:d5:a0:2a:13:76:e0:f6:1d:a1: bf:fd:90:a5:4a:89:19:e3:4b:87:29:e8:53:ca:01: 87:4d:bc:8e:2f:21:67:58:96:cc:0c:d1:a1:78:59: 4f:26:12:70:93:e4:5b:74:de:1d:8b:34:54:72:eb: 9b:d8:0d:f9:54:6b:cc:c3:89:23:fa:10:28:b0:7a: e1:e8:07:c2:02:f3:56:78:ee:da:2f:3a:f3:3f:9d: d7:8d:d2:80:e8:fe:b5:bf:8a:7e:0a:1b:0f:c5:bc: 42:95:eb:80:aa:4b:4c:fb:6b:42:3c:fe:09:7e:a5: d5:e4:35:28:dd:5a:15:26:bb:25:16:7a:d0:72:b1: fe:9c:72:36:4c:cd:66:e2:10:9b:19:97:d5:e0:85: c4:fd:b8:c3:31:4f:66:81:d8:68:69:0c:6c:e8:73: e9:60:e0:1f:8f:85:d7:f5:46:1b:8a:2a:61:e2:80: 1b:2b:f0:41:9a:08:16:16:45:c4:13:53:3c:76:f5: 78:96:04:2e:e2:2e:6e:73:36:82:a6:b6:2b:b7:21: da:73:aa:ad:8e:19:01:94:52:c6:1d:99:91:fe:e1: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C7:97:06:69:90:77:EB:A1:C3:81:AC:22:A8:13:98:95:CB:6C:B2 X509v3 Authority Key Identifier: keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:86:72:26:e8:5f:65:6e:72:8a:ce:74:96:c9:07:cc:1a:c6: f7:3c:2b:f6:52:f0:92:b4:35:8d:e4:03:66:20:93:05:e5:35: 96:64:a2:6d:1b:b2:c2:78:9e:f7:31:af:f5:6d:3c:fd:4c:02: 8c:a9:8d:cf:a2:53:d9:ec:5f:c2:69:88:c9:5d:d2:ad:b8:f9: 81:f9:41:72:5f:bf:2f:4f:81:6a:b7:49:07:d7:47:d2:eb:4a: b3:79:87:6a:9e:76:7f:60:38:ee:44:fd:17:f4:b9:10:dc:ef: c9:fc:4d:91:f1:5c:ff:2f:97:01:a1:d2:d0:a9:67:d8:69:4c: 14:f0:16:74:e6:78:69:42:f5:a5:35:af:66:c7:71:78:b5:90: 2f:17:0e:33:31:de:94:b7:2b:fa:f8:32:8d:e5:19:82:e3:21: b5:c2:d7:93:e1:4c:88:6f:23:60:af:87:d6:2b:9e:5a:b2:c8: a1:ac:01:1f:b0:f1:46:a3:4e:bf:24:91:97:b9:3b:53:db:87: 06:fb:87:b3:e1:68:4b:21:f0:a0:ab:05:34:d7:b6:8e:90:ad: 32:0e:05:16:f8:dd:23:29:c3:43:ab:9d:eb:17:63:6d:b7:29: 52:fc:e9:9e:26:54:7f:ba:1b:ce:9a:ae:1d:0a:63:fb:ab:04: ec:31:d7:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCi24Z/rs4gVlXu1Re9QHOfpiqE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGNTU0OUNBOTBCNDdEOEZBNTIxNzgwMEYwMDVDN0VD MEQ5NjZFNzAeFw0yNTEyMjEwOTI4MDBaFw0yNTEyMjIxMjU5MDBaMDMxMTAvBgNV BAMTKDdCQzc5NzA2Njk5MDc3RUJBMUMzODFBQzIyQTgxMzk4OTVDQjZDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmQ+sfIzNxIZsQut/eVBmzKs+ FcFCTE3SC5gZFBShaj4b0tWgKhN24PYdob/9kKVKiRnjS4cp6FPKAYdNvI4vIWdY lswM0aF4WU8mEnCT5Ft03h2LNFRy65vYDflUa8zDiSP6ECiweuHoB8IC81Z47tov OvM/ndeN0oDo/rW/in4KGw/FvEKV64CqS0z7a0I8/gl+pdXkNSjdWhUmuyUWetBy sf6ccjZMzWbiEJsZl9XghcT9uMMxT2aB2GhpDGzoc+lg4B+Phdf1RhuKKmHigBsr 8EGaCBYWRcQTUzx29XiWBC7iLm5zNoKmtiu3Idpzqq2OGQGUUsYdmZH+4bchAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUe8eXBmmQd+uhw4GsIqgTmJXLbLIwHwYDVR0j BBgwFoAULfVUnKkLR9j6UheADwBcfsDZZucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dR Y1QvMC8yREY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERjU1NDlDQTkwQjQ3RDhG QTUyMTc4MDBGMDA1QzdFQzBEOTY2RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dRY1QvMC8y REY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfIZyJuhfZW5yis50lskHzBrG9zwr9lLwkrQ1jeQDZiCTBeU1lmSibRuywnie 9zGv9W08/UwCjKmNz6JT2exfwmmIyV3Srbj5gflBcl+/L0+BardJB9dH0utKs3mH ap52f2A47kT9F/S5ENzvyfxNkfFc/y+XAaHS0Kln2GlMFPAWdOZ4aUL1pTWvZsdx eLWQLxcOMzHelLcr+vgyjeUZguMhtcLXk+FMiG8jYK+H1iueWrLIoawBH7DxRqNO vySRl7k7U9uHBvuHs+FoSyHwoKsFNNe2jpCtMg4FFvjdIynDQ6ud6xdjbbcpUvzp niZUf7obzpquHQpj+6sE7DHXHw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:47 2025 by rpki-client