This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft File: 4E865237E426925D454145603E8DE8C3ABC12D0F.mft (raw, json) Hash identifier: CBYkNQYWlDfXOV0E1biKCIIvPLLe66l1A3G1c/ZEddI= Subject key identifier: 44:E7:5B:E1:C1:D6:61:C9:9F:84:20:0F:FB:0B:B6:48:FB:65:92:8D Authority key identifier: 4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F Certificate issuer: /CN=4E865237E426925D454145603E8DE8C3ABC12D0F Certificate serial: 1899A0569B89349520102928ACA7814C38DAA216 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft Manifest number: 033A Signing time: Fri 19 Dec 2025 03:39:36 +0000 Manifest this update: Fri 19 Dec 2025 03:34:36 +0000 Manifest next update: Sat 20 Dec 2025 03:44:36 +0000 Files and hashes: 1: 4E865237E426925D454145603E8DE8C3ABC12D0F.crl (hash: P2lxeynnbtHsZjGpcRoLh6vJorwaJJXxJPuUFOHLpmQ=) 2: 34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa (hash: OpU0/tEQBI+4vThuFy3ZyGUvrgYx1ggjKv8RdD5tmtM=) 3: 323830343a363332303a3a2f33322d3336203d3e20323639333430.roa (hash: 1zv4Gfvoo8oW8O9l/92CrciW8YXFwb8aKjX8u8vuL4s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 03:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:99:a0:56:9b:89:34:95:20:10:29:28:ac:a7:81:4c:38:da:a2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E865237E426925D454145603E8DE8C3ABC12D0F Validity Not Before: Dec 19 03:34:36 2025 GMT Not After : Dec 20 03:44:36 2025 GMT Subject: CN=44E75BE1C1D661C99F84200FFB0BB648FB65928D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:b3:1c:01:80:80:41:d2:92:a5:42:a0:ba: 81:5d:e6:d2:9e:b9:c1:b8:59:85:4a:5b:ab:53:17: 14:fc:60:a4:48:dc:9b:c4:22:7d:67:43:86:c7:60: a9:1a:14:f9:5f:83:70:43:1a:63:d8:b6:b9:94:c9: 01:87:29:b1:ff:00:87:17:ec:70:c7:95:5b:ab:35: 4b:4b:0c:0c:2e:8f:2c:7e:6b:15:71:43:65:f9:6c: 08:87:61:a3:8f:ff:97:a1:64:7e:3c:e0:5e:99:10: a2:1f:4c:4f:51:e7:a1:e8:a1:60:4f:d1:5c:48:72: cb:59:27:1c:d2:a5:ee:91:56:24:d8:dc:e2:ab:b6: ea:d1:14:12:5a:d0:58:3b:77:53:d9:81:52:d7:de: e4:6c:f3:19:2b:ca:60:14:f8:91:7d:a0:24:f1:87: a3:2a:74:ad:ce:e7:59:48:ac:46:e8:c2:80:5d:23: 6f:c6:54:50:af:3c:d7:7d:b9:c1:a3:b8:a3:8a:a6: 93:55:cf:83:44:fd:68:56:35:15:71:bc:aa:09:71: 05:ed:21:72:2f:16:52:76:1e:29:8a:37:fb:15:fd: 2d:0d:4a:7b:bc:b8:95:56:29:0b:62:e8:20:27:df: cc:a8:98:0e:23:f2:11:29:49:98:0a:d6:3b:8e:82: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:5B:E1:C1:D6:61:C9:9F:84:20:0F:FB:0B:B6:48:FB:65:92:8D X509v3 Authority Key Identifier: keyid:4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:65:c4:cb:29:e3:e5:52:69:f8:83:b0:64:26:74:bd:60: db:77:ca:34:84:18:0f:86:f0:73:b6:4e:67:35:01:a6:3e:be: c3:70:51:83:e9:38:74:ac:49:65:27:ae:35:4d:61:1f:72:94: 31:67:36:c7:22:96:7d:15:b7:75:01:49:e4:03:dc:e6:e3:b9: 39:e4:e2:b5:07:a2:34:ab:88:48:1f:78:c5:78:06:80:c1:27: ce:78:54:14:f5:2c:a4:e9:a4:cf:95:78:b3:1e:31:27:4f:f2: 2b:50:7b:74:6b:df:e4:d5:37:a5:56:24:b6:8c:89:58:6e:ec: 48:35:a4:13:0c:aa:63:3a:46:43:51:d3:d4:b9:cd:58:1b:cc: eb:cb:ec:86:17:77:14:9e:08:22:55:f3:4f:1c:0c:fb:68:6b: a7:d2:b4:7d:5f:55:cd:a7:3d:f7:ac:ca:50:03:1d:6f:0e:32: 0e:56:be:03:94:d5:63:f5:e1:91:fe:3b:8c:a8:db:59:4e:16: 7f:0d:09:77:55:70:92:05:42:98:6e:77:fc:7b:f5:b7:16:9a: bc:99:7d:74:e5:8d:7f:7f:73:18:82:23:01:4f:59:6d:d2:a1: a1:b1:65:b1:b1:28:36:ea:39:07:34:d3:2b:68:cd:b5:a2:5c: fe:51:88:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGJmgVpuJNJUgECkorKeBTDjaohYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4NjUyMzdFNDI2OTI1RDQ1NDE0NTYwM0U4REU4QzNB QkMxMkQwRjAeFw0yNTEyMTkwMzM0MzZaFw0yNTEyMjAwMzQ0MzZaMDMxMTAvBgNV BAMTKDQ0RTc1QkUxQzFENjYxQzk5Rjg0MjAwRkZCMEJCNjQ4RkI2NTkyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0rMcAYCAQdKSpUKguoFd5tKe ucG4WYVKW6tTFxT8YKRI3JvEIn1nQ4bHYKkaFPlfg3BDGmPYtrmUyQGHKbH/AIcX 7HDHlVurNUtLDAwujyx+axVxQ2X5bAiHYaOP/5ehZH484F6ZEKIfTE9R56HooWBP 0VxIcstZJxzSpe6RViTY3OKrturRFBJa0Fg7d1PZgVLX3uRs8xkrymAU+JF9oCTx h6MqdK3O51lIrEbowoBdI2/GVFCvPNd9ucGjuKOKppNVz4NE/WhWNRVxvKoJcQXt IXIvFlJ2HimKN/sV/S0NSnu8uJVWKQti6CAn38yomA4j8hEpSZgK1juOgmfDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUROdb4cHWYcmfhCAP+wu2SPtlko0wHwYDVR0j BBgwFoAUToZSN+Qmkl1FQUVgPo3ow6vBLQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWpnVGY1QWJXNVBSS2l6MllGNHBMWjlMR1VyNnplM29iZmpwMTRxelFL TmcvMC80RTg2NTIzN0U0MjY5MjVENDU0MTQ1NjAzRThERThDM0FCQzEyRDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFODY1MjM3RTQyNjkyNUQ0 NTQxNDU2MDNFOERFOEMzQUJDMTJEMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWpnVGY1QWJXNVBSS2l6MllGNHBMWjlMR1VyNnplM29iZmpwMTRxelFLTmcvMC80 RTg2NTIzN0U0MjY5MjVENDU0MTQ1NjAzRThERThDM0FCQzEyRDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYyplxMsp4+VSafiDsGQmdL1g23fKNIQYD4bwc7ZOZzUBpj6+w3BRg+k4dKxJ ZSeuNU1hH3KUMWc2xyKWfRW3dQFJ5APc5uO5OeTitQeiNKuISB94xXgGgMEnznhU FPUspOmkz5V4sx4xJ0/yK1B7dGvf5NU3pVYktoyJWG7sSDWkEwyqYzpGQ1HT1LnN WBvM68vshhd3FJ4IIlXzTxwM+2hrp9K0fV9Vzac996zKUAMdbw4yDla+A5TVY/Xh kf47jKjbWU4Wfw0Jd1VwkgVCmG53/Hv1txaavJl9dOWNf39zGIIjAU9ZbdKhobFl sbEoNuo5BzTTK2jNtaJc/lGIqA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:26:56 2025 by rpki-client