This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft File: AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft (raw, json) Hash identifier: riDnglzFQqujiYVXfNhHSoDT7V5JkVGF/92J8eVW2ew= Subject key identifier: 2F:D2:93:68:F6:DB:DF:4A:72:EA:63:30:A0:27:8F:39:D9:05:1A:7D Authority key identifier: AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D Certificate issuer: /CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D Certificate serial: 147A609C694628CCCDCAFD01FA57B97ABBA9400C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft Manifest number: 02A2 Signing time: Sat 20 Dec 2025 02:43:17 +0000 Manifest this update: Sat 20 Dec 2025 02:38:17 +0000 Manifest next update: Sun 21 Dec 2025 06:35:17 +0000 Files and hashes: 1: AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl (hash: 8+eauNP8dqQ1r+2ZXEy7xJSu+p9MZgkp46ghpmx534Q=) 2: 323830343a386365303a3a2f33322d3438203d3e20323733333230.roa (hash: mY1owELMXoq5BRjtUYOOzFgAJjl+N37JQtMJStvgBfs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 06:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7a:60:9c:69:46:28:cc:cd:ca:fd:01:fa:57:b9:7a:bb:a9:40:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D Validity Not Before: Dec 20 02:38:17 2025 GMT Not After : Dec 21 06:35:17 2025 GMT Subject: CN=2FD29368F6DBDF4A72EA6330A0278F39D9051A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:10:d3:1a:3a:8e:0a:7b:b9:57:72:a3:d5: e8:2d:9a:bf:c0:f0:ee:78:a9:cc:82:87:54:93:b1: da:be:37:ef:d6:75:a5:de:63:ea:0d:89:2c:b7:0a: 7d:c2:b9:34:1d:2b:36:44:3a:b5:9a:c5:ff:13:ce: 57:33:13:86:1e:3d:5d:1a:59:d5:52:90:9a:24:71: 1f:37:c3:51:fc:11:54:3e:bf:34:3a:5e:6b:9b:64: 36:9e:c6:8b:77:e7:53:5a:10:f2:dd:36:1e:eb:72: 8f:09:40:b9:f2:2e:3d:94:cc:41:fa:e4:5c:e9:b8: db:bc:7c:7a:30:84:8d:69:54:84:99:c1:ff:18:33: ef:a2:6e:6b:06:ef:80:3e:35:7f:5d:c6:dc:06:de: 84:ed:5d:c2:6a:d5:ab:27:ba:d1:ef:87:47:10:fb: a4:ab:79:33:11:5d:1f:9c:13:d2:21:d5:ad:0c:94: c8:50:a1:41:0a:98:28:98:51:0f:77:c9:a1:dd:ba: d3:df:46:a3:e6:25:ed:90:80:64:0e:00:11:02:4d: 2e:fe:6b:57:23:f5:5f:55:31:db:d9:eb:fc:8c:93: 18:dd:75:9e:d2:44:83:79:d0:4b:7a:7b:2d:3a:42: e1:3b:7c:e0:d2:95:57:21:7c:d2:e5:2d:05:90:a2: 51:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D2:93:68:F6:DB:DF:4A:72:EA:63:30:A0:27:8F:39:D9:05:1A:7D X509v3 Authority Key Identifier: keyid:AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:57:75:dd:f3:f1:69:53:30:72:f9:12:8e:82:66:72:fc:89: b1:67:e7:8c:54:b1:1b:ac:6f:83:e4:9d:57:5a:55:b4:ea:27: 0d:0b:91:29:36:57:32:82:ab:71:9d:92:54:5e:f2:5b:31:e8: 28:87:cd:5d:c8:87:49:b9:27:a8:37:9e:55:11:7a:09:37:93: cd:79:23:c2:8c:95:51:63:03:64:8c:ec:fb:18:ca:da:4b:49: c9:4c:63:16:0a:f9:2d:17:46:8a:68:02:c2:9b:f9:14:27:89: d5:8d:41:09:85:5d:e9:73:50:5e:68:df:a6:a0:84:8d:38:1d: c2:2f:ae:92:0b:ef:4c:83:bf:e4:61:e3:7d:5a:bc:7b:4b:b4: 70:da:1d:de:ef:79:1e:8a:17:8a:5a:58:cb:94:cc:a1:6e:d4: 72:54:05:f3:5d:d1:bb:6c:84:85:c4:03:6e:4e:ef:5a:a8:10: 64:cb:f6:ac:ee:7c:a3:84:4a:e6:4b:ad:f9:2b:74:48:d8:9e: 08:b5:48:7c:90:80:bf:5c:e6:00:9a:e1:7f:93:d9:09:9d:1d: 69:60:d8:2f:1b:a7:d7:79:03:ba:8f:f0:a4:04:53:80:81:a7: 5f:91:c8:a5:73:8a:09:26:0d:f3:6e:84:be:4d:da:38:5a:f8: 8e:aa:57:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFHpgnGlGKMzNyv0B+le5erupQAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQzOERDQkNCRTFBNkQxRTc5ODY4NThGQ0FGNEFENDA3 OTE0MkQyRDAeFw0yNTEyMjAwMjM4MTdaFw0yNTEyMjEwNjM1MTdaMDMxMTAvBgNV BAMTKDJGRDI5MzY4RjZEQkRGNEE3MkVBNjMzMEEwMjc4RjM5RDkwNTFBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4hDTGjqOCnu5V3Kj1egtmr/A 8O54qcyCh1STsdq+N+/WdaXeY+oNiSy3Cn3CuTQdKzZEOrWaxf8TzlczE4YePV0a WdVSkJokcR83w1H8EVQ+vzQ6XmubZDaexot351NaEPLdNh7rco8JQLnyLj2UzEH6 5FzpuNu8fHowhI1pVISZwf8YM++ibmsG74A+NX9dxtwG3oTtXcJq1asnutHvh0cQ +6SreTMRXR+cE9Ih1a0MlMhQoUEKmCiYUQ93yaHdutPfRqPmJe2QgGQOABECTS7+ a1cj9V9VMdvZ6/yMkxjddZ7SRIN50Et6ey06QuE7fODSlVchfNLlLQWQolGhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL9KTaPbb30py6mMwoCePOdkFGn0wHwYDVR0j BBgwFoAUrTjcvL4abR55hoWPyvStQHkULS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE1ZNWJ2ZjNrclQ5UTZ3NkxFYkxKdHI0OXpjS1Azam44ZlVONGQ1WjdS UTEvMC9BRDM4RENCQ0JFMUE2RDFFNzk4Njg1OEZDQUY0QUQ0MDc5MTQyRDJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEMzhEQ0JDQkUxQTZEMUU3 OTg2ODU4RkNBRjRBRDQwNzkxNDJEMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RE1ZNWJ2ZjNrclQ5UTZ3NkxFYkxKdHI0OXpjS1Azam44ZlVONGQ1WjdSUTEvMC9B RDM4RENCQ0JFMUE2RDFFNzk4Njg1OEZDQUY0QUQ0MDc5MTQyRDJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZVd13fPxaVMwcvkSjoJmcvyJsWfnjFSxG6xvg+SdV1pVtOonDQuRKTZXMoKr cZ2SVF7yWzHoKIfNXciHSbknqDeeVRF6CTeTzXkjwoyVUWMDZIzs+xjK2ktJyUxj Fgr5LRdGimgCwpv5FCeJ1Y1BCYVd6XNQXmjfpqCEjTgdwi+ukgvvTIO/5GHjfVq8 e0u0cNod3u95HooXilpYy5TMoW7UclQF813Ru2yEhcQDbk7vWqgQZMv2rO58o4RK 5kut+St0SNieCLVIfJCAv1zmAJrhf5PZCZ0daWDYLxun13kDuo/wpARTgIGnX5HI pXOKCSYN826Evk3aOFr4jqpXZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:51:53 2025 by rpki-client