This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft File: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft (raw, json) Hash identifier: T2KuxDDDG+L9Xv1y7J3na0qK3mgAYKMW5TGnWG7WNSk= Subject key identifier: FB:95:C0:B9:54:BB:D5:0B:63:F4:C4:22:C9:A4:C7:34:6F:F4:C0:70 Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE Certificate issuer: /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Certificate serial: 1BBAAFE7D2BF15F2FD5609AF083A61502FD01B94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft Manifest number: 0120 Signing time: Sun 21 Dec 2025 16:02:01 +0000 Manifest this update: Sun 21 Dec 2025 15:57:01 +0000 Manifest next update: Mon 22 Dec 2025 19:43:01 +0000 Files and hashes: 1: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl (hash: VOr7vmz1zLHlV4IHIRBwvzkR9ywc7Aiaql1R4yMkdmA=) 2: 323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (hash: GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=) 3: 3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (hash: am5A4bo+CeX/idLnSOVp8k4cvl+rRIWfZDIw8duCyYA=) 4: 3133382e302e3230342e302f32322d3234203d3e20323634353536.roa (hash: Bp/MXpC4FvWK4Yo9ZUl+rpN/2KDLvDApID7I3LrdZiw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 19:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ba:af:e7:d2:bf:15:f2:fd:56:09:af:08:3a:61:50:2f:d0:1b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Validity Not Before: Dec 21 15:57:01 2025 GMT Not After : Dec 22 19:43:01 2025 GMT Subject: CN=FB95C0B954BBD50B63F4C422C9A4C7346FF4C070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:f0:c6:c9:64:24:3d:4d:11:69:94:26:ba: af:88:7f:d2:32:df:1d:61:9a:df:4d:87:56:36:fe: 46:4e:43:d4:9f:7d:07:67:2d:a8:cc:12:87:6e:13: c2:6f:9d:e6:40:73:72:23:e8:55:db:64:71:e9:9d: 80:83:16:c8:a4:e8:78:88:3c:70:42:ce:46:3f:64: ed:9b:46:1c:af:9c:e7:53:c2:07:7b:9c:d7:be:20: 7d:63:5b:40:9a:ba:ab:b2:3c:69:df:f1:b5:ec:f0: 96:eb:aa:53:24:a7:34:ac:05:0e:56:d2:2e:6f:20: c2:72:2a:38:c4:c4:f4:a6:f6:a9:e2:19:33:0a:0c: a4:72:7d:7f:30:ea:51:11:a2:66:b5:77:cd:c3:d2: a2:9d:02:3a:7f:30:b6:b6:35:73:77:2a:14:30:49: 95:67:3d:bf:9f:e7:7d:37:40:48:a2:0e:41:0e:95: 7d:73:21:57:42:48:7b:52:ac:03:03:04:2b:e8:a9: c5:cf:9e:b7:b6:01:b1:42:0b:b4:65:bc:1f:68:12: de:74:98:c8:e4:89:6b:53:94:80:1e:92:ad:aa:20: 3b:96:41:ef:f4:1e:ef:ff:65:ce:60:e8:52:4f:c6: f1:dd:f6:69:f5:46:cf:52:d3:1f:3a:99:0b:4c:38: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:C0:B9:54:BB:D5:0B:63:F4:C4:22:C9:A4:C7:34:6F:F4:C0:70 X509v3 Authority Key Identifier: keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:91:93:d8:fb:d2:64:34:26:1f:12:7c:14:fe:04:b9:fb:aa: 94:37:ab:a1:99:77:cf:63:19:74:e4:75:2d:ea:47:a7:0d:f4: e0:63:48:39:c4:92:3f:d1:0f:3c:4f:35:45:8a:2d:e6:04:da: 4b:50:73:0f:e4:62:ba:38:96:bd:de:42:2f:d2:c2:0b:cd:9a: 54:1e:fd:69:45:80:1f:79:3a:1f:17:d6:e7:dd:58:e9:4a:d6: 23:ce:fe:76:20:fb:96:48:db:56:89:75:11:a8:ad:08:e0:ec: 76:c7:a2:1b:f6:ea:96:bb:e8:94:0e:64:1c:a1:7a:fb:93:58: 21:c0:1a:65:93:64:b2:a8:02:32:94:a6:71:8c:10:da:3c:a7: c3:6f:b9:44:47:a8:6a:be:c7:e4:28:79:e7:f7:0a:f5:3a:9c: d4:5d:ca:77:ac:59:65:bd:28:32:3e:d0:82:f1:61:8e:36:ff: ee:7e:f5:7d:b6:12:2b:a4:b2:2f:c4:bb:fb:81:26:37:67:dc: 2e:75:3f:99:83:e3:dd:77:9a:a9:3d:c8:e3:11:12:70:97:cb: 50:43:4e:3a:e2:a7:23:f6:86:9c:ce:88:71:60:b9:03:e4:b8: 1d:b0:06:5f:66:f7:bb:e6:65:92:32:2e:bd:52:13:66:b1:90: 72:4a:3f:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG7qv59K/FfL9VgmvCDphUC/QG5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzRjlCRjc3Q0MxQjMyREUxRkVFQTIwOEYxNENEMzQz OEE0RENCRTAeFw0yNTEyMjExNTU3MDFaFw0yNTEyMjIxOTQzMDFaMDMxMTAvBgNV BAMTKEZCOTVDMEI5NTRCQkQ1MEI2M0Y0QzQyMkM5QTRDNzM0NkZGNEMwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3vDGyWQkPU0RaZQmuq+If9Iy 3x1hmt9Nh1Y2/kZOQ9SffQdnLajMEoduE8JvneZAc3Ij6FXbZHHpnYCDFsik6HiI PHBCzkY/ZO2bRhyvnOdTwgd7nNe+IH1jW0CauquyPGnf8bXs8JbrqlMkpzSsBQ5W 0i5vIMJyKjjExPSm9qniGTMKDKRyfX8w6lERoma1d83D0qKdAjp/MLa2NXN3KhQw SZVnPb+f5303QEiiDkEOlX1zIVdCSHtSrAMDBCvoqcXPnre2AbFCC7RlvB9oEt50 mMjkiWtTlIAekq2qIDuWQe/0Hu//Zc5g6FJPxvHd9mn1Rs9S0x86mQtMODiRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+5XAuVS71Qtj9MQiyaTHNG/0wHAwHwYDVR0j BBgwFoAU0j+b93zBsy3h/uogjxTNNDik3L4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0px cnMvMC9EMjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0Y5QkY3N0NDMUIzMkRF MUZFRUEyMDhGMTRDRDM0MzhBNERDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0pxcnMvMC9E MjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjJGT2PvSZDQmHxJ8FP4EufuqlDeroZl3z2MZdOR1LepHpw304GNIOcSSP9EP PE81RYot5gTaS1BzD+RiujiWvd5CL9LCC82aVB79aUWAH3k6HxfW591Y6UrWI87+ diD7lkjbVol1EaitCODsdseiG/bqlrvolA5kHKF6+5NYIcAaZZNksqgCMpSmcYwQ 2jynw2+5REeoar7H5Ch55/cK9Tqc1F3Kd6xZZb0oMj7QgvFhjjb/7n71fbYSK6Sy L8S7+4EmN2fcLnU/mYPj3XeaqT3I4xEScJfLUENOOuKnI/aGnM6IcWC5A+S4HbAG X2b3u+ZlkjIuvVITZrGQcko/KQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:50:43 2025 by rpki-client