This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: mCuJgrCKWbMq2JnT+b72Ds1RRDUnAOb9izAkUT0mDvQ= Subject key identifier: 66:17:44:D8:86:1A:E0:41:1E:B6:13:79:EC:E5:C4:6A:6F:C2:54:89 Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 7B5F25D7A6B7F6898C54D89E9AA251C7278F0E3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 0313 Signing time: Thu 18 Dec 2025 08:00:24 +0000 Manifest this update: Thu 18 Dec 2025 07:55:24 +0000 Manifest next update: Fri 19 Dec 2025 10:00:24 +0000 Files and hashes: 1: 3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (hash: scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=) 2: 323830343a313165303a3a2f33322d3535203d3e20323633343435.roa (hash: JY9NjnQ88soBYNRVthMyseU4hIC042l72p6YiSE2yyU=) 3: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: E6QyLiHHqS7LyJIDPA+6UHkIP5c5T6Eb9ceuVQ2JYK8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Dec 2025 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5f:25:d7:a6:b7:f6:89:8c:54:d8:9e:9a:a2:51:c7:27:8f:0e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Dec 18 07:55:24 2025 GMT Not After : Dec 19 10:00:24 2025 GMT Subject: CN=661744D8861AE0411EB61379ECE5C46A6FC25489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:7f:c7:22:e1:f5:a5:62:7f:41:63:f9:d8: a8:48:7a:40:a0:b5:b0:d6:ac:0a:e3:43:92:e1:4f: b7:cf:fc:d9:69:55:f1:6c:09:7d:e9:b2:98:28:4c: b8:42:49:13:09:98:b6:8f:05:df:c8:6e:5f:9d:eb: 96:24:0b:f2:57:f2:16:b4:7c:40:9b:a5:57:00:66: 40:19:21:6f:e8:de:43:23:a8:23:c2:dd:de:7f:5f: 50:4d:bf:43:28:c0:94:e8:b5:3e:0e:1f:5c:05:55: e2:d6:65:f8:61:4c:3b:18:b1:b2:c5:a7:08:fe:c4: 2c:30:0f:38:1e:d7:4f:61:8d:c7:8a:d5:28:f0:8c: ff:09:e5:19:d5:4c:01:7a:32:c0:32:e4:08:09:f1: b5:b5:de:4d:a7:5c:82:63:3a:36:41:40:ce:ea:a4: ef:55:78:80:40:ef:63:80:1a:d3:06:1b:d9:c5:70: 03:4b:e4:89:c8:5f:87:3c:7f:0e:9e:96:d7:7a:69: 19:7c:9d:5c:dc:51:40:f2:eb:45:5d:0d:f6:3d:77: 03:5c:da:58:4a:5f:08:41:e4:0a:97:49:44:be:69: 18:5f:a3:36:ab:62:65:93:11:f9:a4:0e:22:7e:9d: a0:fc:35:51:94:5c:16:ca:aa:fb:d5:59:c3:23:72: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:17:44:D8:86:1A:E0:41:1E:B6:13:79:EC:E5:C4:6A:6F:C2:54:89 X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:93:f5:ec:73:25:41:3c:0f:28:cf:da:82:90:87:f6:67:f8: 02:a4:c4:c6:72:6e:37:30:f5:0c:0a:02:7f:b4:5b:3f:c7:d1: c6:93:9d:b1:96:86:f0:ca:e0:3f:f5:65:26:ba:5f:85:1c:54: 8c:ad:0d:6e:42:47:0c:56:4b:58:f7:8a:22:c4:2f:4e:e0:40: fa:da:80:be:1b:ab:30:49:be:c3:dd:01:13:97:8a:14:a9:bf: 4b:e0:94:03:6f:62:5c:e1:91:ec:11:8f:8f:3d:17:e9:e3:e0: d8:4a:1c:b6:01:f9:0d:2f:b7:ca:34:52:58:66:69:fc:5d:a1: d6:1d:ef:c3:0b:ca:1d:7f:f4:3c:12:ef:e5:a8:db:8a:0f:71: 5c:e6:fa:7b:d5:36:52:09:c0:9e:cc:fd:4b:d2:7c:fa:13:71: 73:d2:0c:4b:66:41:c1:9b:15:3d:c5:36:ad:91:97:40:49:81: df:b4:75:52:d0:b3:a7:93:2f:ff:74:15:22:35:ab:48:9a:37: 26:41:61:ca:a5:39:44:64:c6:07:41:ef:cf:a6:7a:38:ab:28: 5f:47:80:cf:fc:24:d5:ec:f5:00:a9:7d:a9:df:11:c6:73:b4: 46:e3:96:34:bb:f9:09:09:32:a5:a8:58:7d:6e:e6:8b:6d:df: 82:18:bc:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe18l16a39omMVNiemqJRxyePDjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTEyMTgwNzU1MjRaFw0yNTEyMTkxMDAwMjRaMDMxMTAvBgNV BAMTKDY2MTc0NEQ4ODYxQUUwNDExRUI2MTM3OUVDRTVDNDZBNkZDMjU0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfan/HIuH1pWJ/QWP52KhIekCg tbDWrArjQ5LhT7fP/NlpVfFsCX3pspgoTLhCSRMJmLaPBd/Ibl+d65YkC/JX8ha0 fECbpVcAZkAZIW/o3kMjqCPC3d5/X1BNv0MowJTotT4OH1wFVeLWZfhhTDsYsbLF pwj+xCwwDzge109hjceK1SjwjP8J5RnVTAF6MsAy5AgJ8bW13k2nXIJjOjZBQM7q pO9VeIBA72OAGtMGG9nFcANL5InIX4c8fw6eltd6aRl8nVzcUUDy60VdDfY9dwNc 2lhKXwhB5AqXSUS+aRhfozarYmWTEfmkDiJ+naD8NVGUXBbKqvvVWcMjcrc7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZhdE2IYa4EEethN57OXEam/CVIkwHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApZP17HMlQTwPKM/agpCH9mf4AqTExnJuNzD1DAoCf7RbP8fRxpOdsZaG8Mrg P/VlJrpfhRxUjK0NbkJHDFZLWPeKIsQvTuBA+tqAvhurMEm+w90BE5eKFKm/S+CU A29iXOGR7BGPjz0X6ePg2EoctgH5DS+3yjRSWGZp/F2h1h3vwwvKHX/0PBLv5ajb ig9xXOb6e9U2UgnAnsz9S9J8+hNxc9IMS2ZBwZsVPcU2rZGXQEmB37R1UtCzp5Mv /3QVIjWrSJo3JkFhyqU5RGTGB0Hvz6Z6OKsoX0eAz/wk1ez1AKl9qd8RxnO0RuOW NLv5CQkypahYfW7mi23fghi8mg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:40:13 2025 by rpki-client