This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft File: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft (raw, json) Hash identifier: vD73mTnBsJcgdgRyXd+iKcmC7hkYnF38KMu6HUTyVRk= Subject key identifier: 4B:56:FA:B6:90:B8:66:0C:B4:0C:08:58:CD:C2:F1:3D:8D:1A:3F:26 Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC Certificate issuer: /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC Certificate serial: 3F19CEF97F55C00D23FCD36861F80CC524AE25B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft Manifest number: C0 Signing time: Mon 22 Dec 2025 02:25:39 +0000 Manifest this update: Mon 22 Dec 2025 02:20:39 +0000 Manifest next update: Tue 23 Dec 2025 03:30:39 +0000 Files and hashes: 1: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl (hash: VraYmiz/OFUfEYAfV+SqApuJouuH5f8ut8hGX2aALh4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 03:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:19:ce:f9:7f:55:c0:0d:23:fc:d3:68:61:f8:0c:c5:24:ae:25:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC Validity Not Before: Dec 22 02:20:39 2025 GMT Not After : Dec 23 03:30:39 2025 GMT Subject: CN=4B56FAB690B8660CB40C0858CDC2F13D8D1A3F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:51:c4:0c:c8:00:99:53:76:e7:5e:1a:83:a7: c0:fa:23:de:0e:d9:96:48:ab:97:a2:75:a5:8e:2d: 6e:e8:ac:2e:14:e3:2d:22:79:b6:8a:e1:7e:26:11: 87:f8:24:78:ec:cf:57:3f:ab:6d:ca:f1:14:a5:f9: 4c:6d:23:8c:f0:6f:b7:ba:17:44:d3:00:84:67:f7: 45:66:f2:71:24:bb:55:fc:af:9c:6f:4c:bb:f3:1d: b9:11:c8:4d:fa:80:3c:c5:b8:99:c0:e9:43:80:9b: e3:22:12:e7:06:54:c6:71:21:3b:89:50:58:e8:91: ec:c1:3b:bf:fb:9b:c7:53:14:0c:03:c1:6b:c9:29: 32:df:ee:ac:d5:78:83:4c:a8:4a:6e:24:23:ba:2b: 71:49:47:ff:55:64:8f:43:bb:cd:34:89:80:93:c1: 9d:67:6d:cc:0e:4d:96:86:07:db:78:40:38:18:0f: df:12:0f:8c:35:d1:8b:67:0d:d1:c8:49:cd:35:96: 7d:c9:71:22:22:c0:a7:47:83:d2:8c:e5:7e:dd:9b: 7b:81:bc:a4:96:64:e0:2d:42:81:da:9e:8c:75:a5: 90:bf:89:e7:85:ab:a8:76:2d:ca:7e:5a:1e:dc:10: 3c:fb:d3:b1:60:ca:65:e2:f5:16:19:cf:06:d4:eb: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:56:FA:B6:90:B8:66:0C:B4:0C:08:58:CD:C2:F1:3D:8D:1A:3F:26 X509v3 Authority Key Identifier: keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1b:5b:43:6d:f5:5d:23:78:23:ad:23:41:81:17:09:b7:5f: fc:74:ac:d8:47:75:92:75:8a:11:a0:da:f0:e9:28:08:9c:c6: ab:d8:92:c6:44:f8:36:d3:0b:54:a2:8a:cb:52:d1:d2:04:65: 0d:25:7d:71:35:d3:61:ac:ac:0c:0e:9b:6a:dd:c2:31:1a:ef: 34:6e:1c:6e:a7:f0:e6:bf:ad:5c:00:79:96:2c:9c:b1:43:41: a9:24:2f:63:ce:20:54:b2:01:80:ef:7b:54:71:50:da:90:3e: d3:77:f8:4e:b3:f0:cd:bc:37:20:58:4d:fc:6e:54:4d:67:f3: 57:99:bf:bc:34:24:53:75:74:b8:c8:20:b4:a4:b6:3b:72:b1: 4a:c6:ae:89:49:be:75:c6:ce:ff:76:57:88:47:89:a9:60:aa: 10:80:bc:23:d5:56:bf:97:42:bb:58:04:2a:b9:7b:24:8d:ba: 4c:b2:8e:3f:e7:98:75:4a:c5:6d:5e:0c:e7:f6:71:80:cf:ae: f4:4b:00:b0:29:17:4c:6b:88:44:e7:04:b0:a0:1f:a4:66:12: a5:d1:74:89:8f:08:c3:92:1a:17:42:ca:5f:a6:7a:23:fc:52: 5a:e0:75:1c:57:85:a9:36:b3:20:24:27:07:92:5d:00:cf:ee: b9:a9:45:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPxnO+X9VwA0j/NNoYfgMxSSuJbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQkFBMUNEMTBENzZBOTc0MzNGMzc2Q0Q2Qjc0NzRD NTE3OTdDQzAeFw0yNTEyMjIwMjIwMzlaFw0yNTEyMjMwMzMwMzlaMDMxMTAvBgNV BAMTKDRCNTZGQUI2OTBCODY2MENCNDBDMDg1OENEQzJGMTNEOEQxQTNGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUcQMyACZU3bnXhqDp8D6I94O 2ZZIq5eidaWOLW7orC4U4y0iebaK4X4mEYf4JHjsz1c/q23K8RSl+UxtI4zwb7e6 F0TTAIRn90Vm8nEku1X8r5xvTLvzHbkRyE36gDzFuJnA6UOAm+MiEucGVMZxITuJ UFjokezBO7/7m8dTFAwDwWvJKTLf7qzVeINMqEpuJCO6K3FJR/9VZI9Du800iYCT wZ1nbcwOTZaGB9t4QDgYD98SD4w10YtnDdHISc01ln3JcSIiwKdHg9KM5X7dm3uB vKSWZOAtQoHanox1pZC/ieeFq6h2Lcp+Wh7cEDz707FgymXi9RYZzwbU6x5fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS1b6tpC4Zgy0DAhYzcLxPY0aPyYwHwYDVR0j BBgwFoAUKjuqHNENdql0M/N2zWt0dMUXl8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdl eWsvMC8yQTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBM0JBQTFDRDEwRDc2QTk3 NDMzRjM3NkNENkI3NDc0QzUxNzk3Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdleWsvMC8y QTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfBtbQ231XSN4I60jQYEXCbdf/HSs2Ed1knWKEaDa8OkoCJzGq9iSxkT4NtML VKKKy1LR0gRlDSV9cTXTYaysDA6bat3CMRrvNG4cbqfw5r+tXAB5liycsUNBqSQv Y84gVLIBgO97VHFQ2pA+03f4TrPwzbw3IFhN/G5UTWfzV5m/vDQkU3V0uMggtKS2 O3KxSsauiUm+dcbO/3ZXiEeJqWCqEIC8I9VWv5dCu1gEKrl7JI26TLKOP+eYdUrF bV4M5/ZxgM+u9EsAsCkXTGuIROcEsKAfpGYSpdF0iY8Iw5IaF0LKX6Z6I/xSWuB1 HFeFqTazICQnB5JdAM/uualFmg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:51:58 2025 by rpki-client