This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft File: DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json) Hash identifier: lu3pcXQuHlCfbJFeWSfMcC2XExjn29c2ngXKiN17LBs= Subject key identifier: A5:7A:F9:82:D6:C5:2D:09:04:95:2D:7E:57:A5:20:EE:0B:C8:4E:49 Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D Certificate issuer: /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Certificate serial: 029D55D9BD0650D581ED39B24C885EB94C26108C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft Manifest number: 015F Signing time: Sun 21 Dec 2025 12:02:08 +0000 Manifest this update: Sun 21 Dec 2025 11:57:08 +0000 Manifest next update: Mon 22 Dec 2025 15:31:08 +0000 Files and hashes: 1: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: V86kNco5ZHxMjKrWgLTi/qoHVEZvpbWtFOyczBdYZAU=) 2: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: /LZ3BNyu7a8a06aXL5dNMjRLYDecThUqsqguArZlhtc=) 3: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: EBy3rQwQ+8YvV1n0NbcOpSkf6ZX3JhodQDIQP6f8oCY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 15:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9d:55:d9:bd:06:50:d5:81:ed:39:b2:4c:88:5e:b9:4c:26:10:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Validity Not Before: Dec 21 11:57:08 2025 GMT Not After : Dec 22 15:31:08 2025 GMT Subject: CN=A57AF982D6C52D0904952D7E57A520EE0BC84E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:5a:60:6a:c9:28:e9:0d:1f:f7:83:0a:69: a1:c1:5b:64:92:97:6b:ae:0e:35:a5:dd:ab:a5:6a: e3:d5:03:24:56:a6:2d:56:f7:fe:17:bf:f3:1e:5f: dd:ad:8f:ed:17:20:65:99:c2:9c:a0:39:46:24:d4: cb:68:53:bd:0f:16:b8:98:8f:ee:0a:85:6c:53:a8: af:2d:a7:6d:8b:c0:8e:ef:ef:06:43:2a:bf:87:75: 94:ae:fc:76:9a:b1:c7:8b:1d:fa:d7:32:9a:89:07: ba:5e:ea:3c:f0:92:fa:7c:71:7f:70:c2:a2:d6:50: 84:d9:15:cc:81:95:5e:2b:1f:65:02:ae:36:07:b8: 97:90:ac:b5:ca:e2:bf:f1:12:9a:4c:91:28:dd:17: 4a:22:2b:93:ef:6e:60:a0:c9:ec:24:5e:6d:7b:f6: e9:3c:15:73:ca:6e:b4:bd:95:58:38:ee:54:df:23: c8:48:9a:b0:28:34:ce:f6:1c:f0:dd:89:2b:4b:4f: 22:df:a2:1a:05:8b:b0:65:c1:dd:3e:7c:12:ee:13: 05:35:0f:80:2e:22:61:fd:0e:68:03:83:b2:a1:d7: dd:19:31:e0:b4:fd:48:41:a4:69:e9:94:03:84:10: f8:ae:aa:a9:c5:a7:94:92:e5:ce:0a:c6:9a:4d:75: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:F9:82:D6:C5:2D:09:04:95:2D:7E:57:A5:20:EE:0B:C8:4E:49 X509v3 Authority Key Identifier: keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:62:f5:bf:8b:fa:9f:c4:c5:6d:82:7a:f1:91:0d:f0:10:c4: b3:b7:63:2b:78:01:84:45:86:09:6e:4e:e4:5f:3e:8f:09:8c: 1a:56:98:c6:37:81:3d:c1:60:96:82:fb:a8:d3:93:ee:cf:10: 44:fa:61:62:07:48:bb:dc:b7:08:0e:81:64:bf:19:07:8a:bb: 9b:44:4e:82:f0:0f:60:72:23:28:ff:ba:63:e7:9c:54:bb:86: c1:d5:e0:a8:44:3c:9c:2d:da:ef:a5:60:f1:20:05:7f:1a:2f: ed:ee:03:f9:4b:5c:04:25:3a:31:ab:6b:cd:cb:08:4e:ae:13: e4:3f:34:55:85:79:d9:75:af:73:e5:4d:5d:63:a0:9b:b4:c6: 9c:db:bf:f2:0c:5e:e9:12:6e:8b:1f:46:d0:8f:da:55:03:98: 9a:b7:8f:f5:2f:b0:ae:32:de:f3:66:1d:1c:e7:36:b8:54:97: 82:6f:72:e2:c9:8d:8b:67:a8:a2:9b:0d:25:9c:1c:43:f4:28: ff:5e:f4:64:1d:bc:e0:9c:2f:40:e5:a4:7d:ff:7c:4b:41:4c: 48:54:c0:42:39:24:4a:c2:12:ed:97:9f:72:8b:48:42:43:59: bb:9d:5a:d5:af:76:e1:a9:3e:82:b7:3d:59:b5:8a:cf:93:b5: d5:d9:75:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAp1V2b0GUNWB7TmyTIheuUwmEIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF QzREMEI3RDAeFw0yNTEyMjExMTU3MDhaFw0yNTEyMjIxNTMxMDhaMDMxMTAvBgNV BAMTKEE1N0FGOTgyRDZDNTJEMDkwNDk1MkQ3RTU3QTUyMEVFMEJDODRFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyflpgasko6Q0f94MKaaHBW2SS l2uuDjWl3aulauPVAyRWpi1W9/4Xv/MeX92tj+0XIGWZwpygOUYk1MtoU70PFriY j+4KhWxTqK8tp22LwI7v7wZDKr+HdZSu/HaasceLHfrXMpqJB7pe6jzwkvp8cX9w wqLWUITZFcyBlV4rH2UCrjYHuJeQrLXK4r/xEppMkSjdF0oiK5PvbmCgyewkXm17 9uk8FXPKbrS9lVg47lTfI8hImrAoNM72HPDdiStLTyLfohoFi7Blwd0+fBLuEwU1 D4AuImH9DmgDg7Kh190ZMeC0/UhBpGnplAOEEPiuqqnFp5SS5c4KxppNdbhBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpXr5gtbFLQkElS1+V6Ug7gvITkkwHwYDVR0j BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMC9E RDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANGL1v4v6n8TFbYJ68ZEN8BDEs7djK3gBhEWGCW5O5F8+jwmMGlaYxjeBPcFg loL7qNOT7s8QRPphYgdIu9y3CA6BZL8ZB4q7m0ROgvAPYHIjKP+6Y+ecVLuGwdXg qEQ8nC3a76Vg8SAFfxov7e4D+UtcBCU6MatrzcsITq4T5D80VYV52XWvc+VNXWOg m7TGnNu/8gxe6RJuix9G0I/aVQOYmreP9S+wrjLe82YdHOc2uFSXgm9y4smNi2eo opsNJZwcQ/Qo/170ZB284JwvQOWkff98S0FMSFTAQjkkSsIS7ZefcotIQkNZu51a 1a924ak+grc9WbWKz5O11dl1Lg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:48:00 2025 by rpki-client