This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft File: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft (raw, json) Hash identifier: CU7f7Ezb9xvYoH1Q/bLX1q+/70/J7bmnHfexHP2Nd3o= Subject key identifier: 64:36:12:72:63:14:0F:4C:4E:A7:C6:A5:C3:C8:D1:BD:08:AB:FB:7A Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 Certificate issuer: /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Certificate serial: 08AB3B02B58290210B91A417A4E9A347F194BD5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject info access: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft Manifest number: 031F Signing time: Tue 23 Dec 2025 04:06:18 +0000 Manifest this update: Tue 23 Dec 2025 04:01:18 +0000 Manifest next update: Wed 24 Dec 2025 07:44:18 +0000 Files and hashes: 1: 34352e3137302e3135322e302f32322d3332203d3e20323638313535.roa (hash: +dlelXLTSXqNQoNW4JGA1Yjrci2+66mbhcxy+r/G87I=) 2: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: 3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=) 3: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl (hash: nPO3o3UtJcnjyb4UdXlyx0tiWlkAchCnua1NSNa/a0s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 07:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ab:3b:02:b5:82:90:21:0b:91:a4:17:a4:e9:a3:47:f1:94:bd:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Validity Not Before: Dec 23 04:01:18 2025 GMT Not After : Dec 24 07:44:18 2025 GMT Subject: CN=6436127263140F4C4EA7C6A5C3C8D1BD08ABFB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:11:a3:6c:30:85:1f:a0:ea:97:91:06:08:d9: 41:2c:78:fc:4b:da:e3:2f:2e:74:14:8e:23:ec:19: 56:f8:36:06:59:4f:2b:1e:0f:a8:59:d7:7a:ba:ef: d9:9f:a2:9c:77:9d:50:0b:3b:4f:ae:5a:01:9b:a9: 22:13:2f:f7:2f:50:04:bb:95:73:bf:3d:73:d7:29: 9d:f3:c0:08:6c:b9:e7:af:19:2b:fe:7c:88:99:29: 7b:30:94:e4:32:08:33:7a:7f:1a:57:f8:68:e2:bb: ee:80:82:31:05:4b:90:14:a6:51:ad:b3:13:c6:22: 02:5e:90:9d:8b:ee:f5:e8:a6:fb:80:88:bb:6e:e4: c4:3a:22:5b:13:eb:65:25:01:84:ba:78:5e:ae:af: 00:73:be:f8:ce:7f:c3:43:5a:e1:c2:73:15:1c:53: 99:5b:ca:e1:e4:91:6e:1a:12:72:9f:2d:6d:0e:37: 73:41:49:ee:c0:c4:dc:f1:cb:f5:bb:90:94:4c:2d: 2c:98:20:36:34:23:ad:ef:d6:6d:74:e2:51:95:75: ae:c9:a9:35:b2:16:99:a4:bf:18:b6:2e:03:b2:e6: d3:c2:9c:03:b2:3b:3f:50:ab:62:80:bb:17:d7:af: d9:2b:68:17:20:8d:33:a4:ab:d9:9f:cc:a4:31:f2: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:36:12:72:63:14:0F:4C:4E:A7:C6:A5:C3:C8:D1:BD:08:AB:FB:7A X509v3 Authority Key Identifier: keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a1:57:a8:42:00:bd:d4:c0:35:4c:3b:82:e6:8d:e3:f2:61: f2:a2:4c:ca:bb:24:d5:c5:dc:1b:b0:e4:de:37:d0:9c:b5:31: 3a:ca:9d:22:5b:a5:e4:e0:79:ce:29:8b:69:64:2c:4f:d6:f2: 47:3c:00:8b:79:77:8a:1e:e2:ec:39:71:33:3e:bb:56:5a:7a: 2b:6d:8e:3f:1d:50:a5:04:6f:18:7c:9e:0b:d8:ce:89:ad:c9: b2:3f:a8:86:f3:4f:41:94:7a:b4:11:17:04:6f:64:1f:66:02: e3:cb:a7:0e:25:66:e1:ed:18:45:9a:45:84:b7:e7:54:1b:88: 9b:4c:b1:b9:61:d6:d9:0e:0d:2b:cd:7d:2c:a6:9c:2f:c9:f6: 95:2b:81:6c:ed:50:6f:1a:34:45:c1:b0:b3:6d:0a:09:bb:0e: 74:71:0a:18:15:85:0a:d9:80:71:2f:dd:67:37:0c:b4:79:10: 23:68:7c:41:d0:8a:4a:52:ce:43:15:eb:9b:72:d2:fb:29:27: 30:b4:66:0b:ce:3d:7f:e4:00:e0:7b:0c:52:c3:99:b5:c9:94: fd:37:8b:75:2e:bc:d0:c9:32:b8:dc:8f:b9:15:b8:d1:87:20: c1:af:0f:4f:74:48:6a:27:71:28:a4:2f:e1:a3:a7:36:c0:18: ab:d5:8e:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCKs7ArWCkCELkaQXpOmjR/GUvVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0RDZBQTU3QkQzQTI0Rjc3MDZDN0I2NUM3QzhDRDU5 RUY1Q0I2NTAeFw0yNTEyMjMwNDAxMThaFw0yNTEyMjQwNzQ0MThaMDMxMTAvBgNV BAMTKDY0MzYxMjcyNjMxNDBGNEM0RUE3QzZBNUMzQzhEMUJEMDhBQkZCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyEaNsMIUfoOqXkQYI2UEsePxL 2uMvLnQUjiPsGVb4NgZZTyseD6hZ13q679mfopx3nVALO0+uWgGbqSITL/cvUAS7 lXO/PXPXKZ3zwAhsueevGSv+fIiZKXswlOQyCDN6fxpX+Gjiu+6AgjEFS5AUplGt sxPGIgJekJ2L7vXopvuAiLtu5MQ6IlsT62UlAYS6eF6urwBzvvjOf8NDWuHCcxUc U5lbyuHkkW4aEnKfLW0ON3NBSe7AxNzxy/W7kJRMLSyYIDY0I63v1m104lGVda7J qTWyFpmkvxi2LgOy5tPCnAOyOz9Qq2KAuxfXr9kraBcgjTOkq9mfzKQx8seFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZDYScmMUD0xOp8alw8jRvQir+3owHwYDVR0j BBgwFoAUTE1qpXvTok93Bse2XHyM1Z71y2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgz cnAvMC80QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNEQ2QUE1N0JEM0EyNEY3 NzA2QzdCNjVDN0M4Q0Q1OUVGNUNCNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMC80 QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL6FXqEIAvdTANUw7guaN4/Jh8qJMyrsk1cXcG7Dk3jfQnLUxOsqdIlul5OB5 zimLaWQsT9byRzwAi3l3ih7i7DlxMz67Vlp6K22OPx1QpQRvGHyeC9jOia3Jsj+o hvNPQZR6tBEXBG9kH2YC48unDiVm4e0YRZpFhLfnVBuIm0yxuWHW2Q4NK819LKac L8n2lSuBbO1Qbxo0RcGws20KCbsOdHEKGBWFCtmAcS/dZzcMtHkQI2h8QdCKSlLO QxXrm3LS+yknMLRmC849f+QA4HsMUsOZtcmU/TeLdS680MkyuNyPuRW40Ycgwa8P T3RIaidxKKQv4aOnNsAYq9WO/Q== -----END CERTIFICATE-----Generated at Tue Dec 23 20:04:27 2025 by rpki-client