This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft File: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json) Hash identifier: vO/YygW47EsYkVHW81V61Rbql2pvxf6wMBN/cU/lDtE= Subject key identifier: 21:F1:C7:9A:4F:A9:E8:BA:2E:3C:3C:E9:B4:F3:67:35:E7:89:89:D3 Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 Certificate issuer: /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Certificate serial: 589435F95722736515F430CC1A18042400BC6EBE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft Manifest number: 0349 Signing time: Wed 24 Dec 2025 03:01:08 +0000 Manifest this update: Wed 24 Dec 2025 02:56:08 +0000 Manifest next update: Thu 25 Dec 2025 05:42:08 +0000 Files and hashes: 1: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: 6BQGyRfWPoyBSQCgM4C6Jq/eSUg3l4bDaxyZgDl3HcQ=) 2: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: NV6AZ5yfdgCqGTcE9O2omEQ3Tc3PgyWiRb/+meuuAVM=) 3: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: k92FdWEorNxKTyarjpxwu6x7nUdmTkLXLHku6hKnTFU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 05:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:94:35:f9:57:22:73:65:15:f4:30:cc:1a:18:04:24:00:bc:6e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Validity Not Before: Dec 24 02:56:08 2025 GMT Not After : Dec 25 05:42:08 2025 GMT Subject: CN=21F1C79A4FA9E8BA2E3C3CE9B4F36735E78989D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:6a:da:cc:cb:59:16:8c:d5:9a:e0:d1:91: 4f:5f:16:a3:67:95:cd:c9:07:66:a5:35:a4:a9:94: a5:0a:3c:34:11:c1:e8:f7:ec:7a:ab:ae:93:54:11: 00:13:b7:09:5e:ab:fb:e4:e1:54:47:e4:57:bc:ec: 3d:7a:cc:2d:4e:b9:0d:d3:9b:f5:c5:2f:5f:04:ba: 6b:cd:02:54:f1:b3:18:a3:47:1c:3b:7a:02:4c:87: 2c:a9:7c:e3:1e:1e:34:d1:4e:4f:04:45:5c:f5:36: bf:f3:48:11:5e:d8:64:30:c4:19:11:11:fb:bc:bd: 40:00:e3:68:28:01:c7:96:7f:b4:b3:ab:04:fc:22: 01:d7:26:2a:a6:d0:b2:b2:fd:b9:24:65:c6:2a:e5: d1:57:8e:16:68:57:cc:45:df:93:6b:98:c4:73:90: b4:8f:34:5d:7f:3b:77:d5:b9:25:18:6b:90:16:e0: d5:81:e7:95:20:98:a9:2e:0e:c9:05:6c:a8:17:e7: a3:16:76:90:e9:e1:6c:08:c2:0b:db:02:fd:1e:da: 84:5b:a7:83:f1:da:07:21:55:cb:9a:a4:3b:bf:7f: c8:2d:ee:64:60:7f:95:3a:8d:93:18:de:60:21:71: 6a:ef:4f:74:76:59:ef:8a:07:0a:6d:47:26:b6:3a: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:C7:9A:4F:A9:E8:BA:2E:3C:3C:E9:B4:F3:67:35:E7:89:89:D3 X509v3 Authority Key Identifier: keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:63:53:65:74:13:37:4e:ca:00:45:8a:a8:2b:86:6e:fd:e2: 97:75:b5:d7:92:c5:9e:9b:6f:30:0e:9a:ae:5a:f0:a8:1e:6b: a8:58:bb:f9:d2:97:0d:01:f7:bc:6c:bf:a0:0f:9b:d6:a0:3f: 99:3b:99:0c:39:16:9a:5c:2e:c0:40:98:2c:99:04:72:50:96: 8d:cf:70:04:7e:4d:3e:53:5c:04:b4:d2:a7:45:77:a8:b1:8f: e6:54:46:5c:7c:b8:be:0d:f0:36:77:75:69:2c:be:2b:e1:c4: 50:1a:bf:1c:cd:c1:77:37:6d:99:68:60:44:6e:c4:0e:00:8a: fc:d8:27:8f:ea:18:5a:c9:85:6e:a7:9a:13:b1:0b:e2:1d:da: 64:fc:2c:52:22:dc:e5:0e:07:60:f3:f3:98:1d:e7:2e:b9:d6: 4f:f4:94:5d:d5:91:96:c5:03:e8:9f:38:ad:15:88:99:3a:f6: 77:c7:fa:ee:49:ed:ad:e7:a3:6e:ee:51:1f:3b:72:45:b7:65: be:1c:f5:f6:83:8f:26:b4:cd:d0:d8:b3:c9:42:ab:52:8a:41: 60:96:53:52:5a:39:c3:0b:ec:89:79:97:59:25:d3:02:9b:28: 75:06:61:48:b6:85:7b:c0:ff:b3:26:fd:82:90:d3:57:d7:f1: 40:fc:7c:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWJQ1+Vcic2UV9DDMGhgEJAC8br4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx MzUwREUwODAeFw0yNTEyMjQwMjU2MDhaFw0yNTEyMjUwNTQyMDhaMDMxMTAvBgNV BAMTKDIxRjFDNzlBNEZBOUU4QkEyRTNDM0NFOUI0RjM2NzM1RTc4OTg5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GmrazMtZFozVmuDRkU9fFqNn lc3JB2alNaSplKUKPDQRwej37HqrrpNUEQATtwleq/vk4VRH5Fe87D16zC1OuQ3T m/XFL18EumvNAlTxsxijRxw7egJMhyypfOMeHjTRTk8ERVz1Nr/zSBFe2GQwxBkR Efu8vUAA42goAceWf7SzqwT8IgHXJiqm0LKy/bkkZcYq5dFXjhZoV8xF35NrmMRz kLSPNF1/O3fVuSUYa5AW4NWB55UgmKkuDskFbKgX56MWdpDp4WwIwgvbAv0e2oRb p4Px2gchVcuapDu/f8gt7mRgf5U6jZMY3mAhcWrvT3R2We+KBwptRya2OrDHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIfHHmk+p6LouPDzptPNnNeeJidMwHwYDVR0j BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6 UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFWNTZXQTN07KAEWKqCuGbv3il3W115LFnptvMA6arlrwqB5rqFi7+dKXDQH3 vGy/oA+b1qA/mTuZDDkWmlwuwECYLJkEclCWjc9wBH5NPlNcBLTSp0V3qLGP5lRG XHy4vg3wNnd1aSy+K+HEUBq/HM3BdzdtmWhgRG7EDgCK/Ngnj+oYWsmFbqeaE7EL 4h3aZPwsUiLc5Q4HYPPzmB3nLrnWT/SUXdWRlsUD6J84rRWImTr2d8f67kntreej bu5RHztyRbdlvhz19oOPJrTN0NizyUKrUopBYJZTUlo5wwvsiXmXWSXTApsodQZh SLaFe8D/syb9gpDTV9fxQPx8Kg== -----END CERTIFICATE-----Generated at Wed Dec 24 14:22:08 2025 by rpki-client