This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.mft File: 4E381BD703B94AA7B06975FB0FC88364AA7BA29E.mft (raw, json) Hash identifier: pCXosbrz17F2efAC0yHfbfP3hqgC2mQBWkM91JQFhfQ= Subject key identifier: 00:51:4F:50:4A:F8:E4:62:B6:4F:CE:04:BE:80:CF:72:53:19:08:47 Authority key identifier: 4E:38:1B:D7:03:B9:4A:A7:B0:69:75:FB:0F:C8:83:64:AA:7B:A2:9E Certificate issuer: /CN=4E381BD703B94AA7B06975FB0FC88364AA7BA29E Certificate serial: 38CCE6BC199F4086D9D49B8194F8851ABF140386 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.mft Manifest number: D4 Signing time: Mon 22 Dec 2025 21:37:43 +0000 Manifest this update: Mon 22 Dec 2025 21:32:43 +0000 Manifest next update: Tue 23 Dec 2025 23:58:43 +0000 Files and hashes: 1: 3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa (hash: NA4MuOI8+Vbswx8ZIouZwt2kR6AinWVfQbNfPCElPqE=) 2: 323830343a373761633a3a2f33322d3438203d3e20323731313932.roa (hash: LoJ0sxXhBBgwRdb70jwgcHNh4heS9Howa/+aXrT9Z58=) 3: 4E381BD703B94AA7B06975FB0FC88364AA7BA29E.crl (hash: sj2EmnjD/7fZku3/ds9Oix3M2FXAsYzKrqyb/294lXQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.crl rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 23:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cc:e6:bc:19:9f:40:86:d9:d4:9b:81:94:f8:85:1a:bf:14:03:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E381BD703B94AA7B06975FB0FC88364AA7BA29E Validity Not Before: Dec 22 21:32:43 2025 GMT Not After : Dec 23 23:58:43 2025 GMT Subject: CN=00514F504AF8E462B64FCE04BE80CF7253190847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:63:c4:8f:b6:f7:5a:61:dc:c1:72:47:51: 07:63:32:65:53:99:c8:1e:b5:71:02:56:a8:b5:2f: f7:c3:e0:a4:2d:26:b2:f1:a7:62:00:ea:85:25:20: f2:c0:c8:87:e7:10:a3:ab:af:b8:58:3b:23:5c:a0: de:23:46:ff:18:ea:de:5f:3c:45:10:e9:c7:4b:7f: 9f:4c:14:1a:5c:69:02:37:9f:b1:a9:70:71:31:ba: 82:d2:5d:88:c1:6d:08:5a:f9:53:06:06:75:19:0a: de:84:2e:4c:70:91:6d:51:b0:87:49:e5:85:9c:58: 9a:07:66:c6:ea:0a:eb:e4:35:11:51:35:29:c4:5f: 1f:ba:ed:13:05:d3:89:e8:ac:17:3d:24:f1:97:6c: 3f:29:f9:30:90:bc:bf:fa:49:64:d5:e0:62:db:03: 6e:e3:35:c2:ba:d9:68:e9:be:97:2b:ed:e6:e3:5d: cb:66:14:7e:ff:cf:2f:cb:0e:22:5b:d2:0a:a5:8a: 69:c7:5c:ef:be:c5:86:c8:ee:0f:2d:62:8e:d4:13: 0c:12:14:d7:18:55:6c:74:f4:1c:26:50:ee:ec:86: 28:8a:84:2a:a7:fe:e6:77:74:e5:7e:4b:49:d6:a0: b3:54:8c:a3:52:fd:55:a2:9f:21:39:12:82:99:1f: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:51:4F:50:4A:F8:E4:62:B6:4F:CE:04:BE:80:CF:72:53:19:08:47 X509v3 Authority Key Identifier: keyid:4E:38:1B:D7:03:B9:4A:A7:B0:69:75:FB:0F:C8:83:64:AA:7B:A2:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fc:fd:37:e2:cb:0e:05:cd:ae:9c:2d:e4:9e:58:61:73:e5: 15:d8:e1:df:06:0b:f6:f3:d3:8f:e2:f2:c9:27:c9:5c:55:5f: cd:78:d6:69:d4:d0:20:31:67:a7:80:2c:cb:b4:4a:87:7d:7a: 50:75:be:71:4d:1f:85:09:1c:f3:b9:f4:36:de:7d:3a:b1:57: 2a:3a:90:dc:4f:67:a6:f3:d9:8c:2b:d3:21:eb:35:9a:97:70: 29:fc:b0:82:5b:82:34:90:b3:b3:cc:2b:43:62:cd:ae:89:10: 95:47:21:57:be:66:31:d1:f1:3b:5d:8c:be:ce:39:06:c2:69: 41:ce:61:a0:0a:57:39:75:bf:1e:7f:28:b3:f3:c3:7c:4b:5f: 50:43:3d:b8:c7:13:59:c0:96:44:22:6e:d1:50:b2:1a:83:f1: d8:11:48:0d:d1:4e:3d:28:c0:9c:9c:35:a7:c3:73:21:b9:38: 10:9c:76:08:89:1b:62:dc:df:1d:c9:20:ac:dc:c6:62:a5:0f: ef:83:96:3e:3d:10:73:ac:69:4b:ec:72:ca:b4:0e:dc:5e:6a: 14:fa:d4:4e:a0:e7:b7:99:d8:ae:b3:10:8d:0c:f0:73:4a:f1: b4:fc:58:49:ed:76:cd:a1:29:a0:0f:90:e1:02:96:c3:eb:4c: 81:e7:52:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOMzmvBmfQIbZ1JuBlPiFGr8UA4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUzODFCRDcwM0I5NEFBN0IwNjk3NUZCMEZDODgzNjRB QTdCQTI5RTAeFw0yNTEyMjIyMTMyNDNaFw0yNTEyMjMyMzU4NDNaMDMxMTAvBgNV BAMTKDAwNTE0RjUwNEFGOEU0NjJCNjRGQ0UwNEJFODBDRjcyNTMxOTA4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqs2PEj7b3WmHcwXJHUQdjMmVT mcgetXECVqi1L/fD4KQtJrLxp2IA6oUlIPLAyIfnEKOrr7hYOyNcoN4jRv8Y6t5f PEUQ6cdLf59MFBpcaQI3n7GpcHExuoLSXYjBbQha+VMGBnUZCt6ELkxwkW1RsIdJ 5YWcWJoHZsbqCuvkNRFRNSnEXx+67RMF04norBc9JPGXbD8p+TCQvL/6SWTV4GLb A27jNcK62Wjpvpcr7ebjXctmFH7/zy/LDiJb0gqlimnHXO++xYbI7g8tYo7UEwwS FNcYVWx09BwmUO7shiiKhCqn/uZ3dOV+S0nWoLNUjKNS/VWinyE5EoKZH+3fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAFFPUEr45GK2T84EvoDPclMZCEcwHwYDVR0j BBgwFoAUTjgb1wO5SqewaXX7D8iDZKp7op4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHB4Mnc5VnU2VzJ1RERKb3RpbjlDUGRMODdqU1VtTlk2dG1neDdhQ0xZ YWsvMC80RTM4MUJENzAzQjk0QUE3QjA2OTc1RkIwRkM4ODM2NEFBN0JBMjlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFMzgxQkQ3MDNCOTRBQTdC MDY5NzVGQjBGQzg4MzY0QUE3QkEyOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHB4Mnc5VnU2VzJ1RERKb3RpbjlDUGRMODdqU1VtTlk2dG1neDdhQ0xZYWsvMC80 RTM4MUJENzAzQjk0QUE3QjA2OTc1RkIwRkM4ODM2NEFBN0JBMjlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkfz9N+LLDgXNrpwt5J5YYXPlFdjh3wYL9vPTj+LyySfJXFVfzXjWadTQIDFn p4Asy7RKh316UHW+cU0fhQkc87n0Nt59OrFXKjqQ3E9npvPZjCvTIes1mpdwKfyw gluCNJCzs8wrQ2LNrokQlUchV75mMdHxO12Mvs45BsJpQc5hoApXOXW/Hn8os/PD fEtfUEM9uMcTWcCWRCJu0VCyGoPx2BFIDdFOPSjAnJw1p8NzIbk4EJx2CIkbYtzf HckgrNzGYqUP74OWPj0Qc6xpS+xyyrQO3F5qFPrUTqDnt5nYrrMQjQzwc0rxtPxY Se12zaEpoA+Q4QKWw+tMgedSuQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:03 2025 by rpki-client