This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft File: 4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft (raw, json) Hash identifier: O4EyHmITbbqbo0mEcVSnOXUDGRf42JvVoB4uHUCRPYI= Subject key identifier: 61:C0:89:17:A9:A1:77:A4:4C:75:04:2D:DA:51:FA:3C:B0:7F:41:4B Authority key identifier: 43:44:C6:67:BE:8D:EC:17:04:E5:20:A9:E2:F5:1F:3F:AB:4C:82:3E Certificate issuer: /CN=4344C667BE8DEC1704E520A9E2F51F3FAB4C823E Certificate serial: 3CA45F7B6FA520645D5CEDDD6BCB94A5395974A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft Manifest number: 32 Signing time: Wed 24 Dec 2025 03:30:57 +0000 Manifest this update: Wed 24 Dec 2025 03:25:57 +0000 Manifest next update: Thu 25 Dec 2025 06:46:57 +0000 Files and hashes: 1: 4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl (hash: rb3XNMo57exGezoW94kUGT0sE+nQ/mzG1CbIvyotRyA=) 2: 3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa (hash: IWBxK5KR8T2XvHkjdmtzgL+i9peJ5XPLTIG5K/vg9DQ=) 3: 323830343a343061303a3a2f33322d313238203d3e20323635393731.roa (hash: g9ZxmwuBBGgvfcXz82rXOx8e0Je42lZxnrHUbCx8U4s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 06:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a4:5f:7b:6f:a5:20:64:5d:5c:ed:dd:6b:cb:94:a5:39:59:74:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4344C667BE8DEC1704E520A9E2F51F3FAB4C823E Validity Not Before: Dec 24 03:25:57 2025 GMT Not After : Dec 25 06:46:57 2025 GMT Subject: CN=61C08917A9A177A44C75042DDA51FA3CB07F414B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:47:0b:56:f5:c0:8c:de:0f:da:fe:98:05: cb:05:d1:de:09:7e:6e:8c:aa:c9:f1:84:27:44:96: 78:45:49:18:f8:14:6b:ed:42:6c:fb:0c:eb:82:39: fc:33:89:47:36:a3:d7:ff:94:e6:6b:cb:9c:5c:66: fb:49:79:fe:64:7c:64:62:a5:b5:1c:76:94:4d:e4: 30:81:76:34:56:ec:21:e4:dd:4d:b6:d6:71:af:94: 8a:95:cb:3c:05:83:c3:73:c1:c9:6f:c0:76:c8:73: 75:3d:7a:8a:24:4d:2e:df:e4:95:a1:7b:87:d4:c7: 37:b8:c8:2f:ff:7a:1a:ee:a6:7c:e1:d2:96:c4:fc: 80:61:e2:af:ce:f3:cd:79:97:df:cd:71:15:db:3a: f2:4b:98:35:0f:4e:46:87:d4:0b:0c:15:bc:4e:12: 98:78:5b:9f:3a:9a:37:03:0b:ba:6b:4a:99:d6:f7: 7f:cc:4f:a7:bc:3c:c0:d2:76:7c:41:ef:90:63:29: 5a:10:a2:00:2f:77:92:50:b3:e5:4c:bb:0c:c2:4b: 9f:a2:46:51:5b:e4:34:58:7e:dd:ec:d0:83:d4:0f: b0:b0:af:0c:34:8c:8f:c0:5f:66:d7:c1:cf:02:0f: 11:e2:89:aa:05:2b:08:11:64:7b:9c:6e:26:72:15: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C0:89:17:A9:A1:77:A4:4C:75:04:2D:DA:51:FA:3C:B0:7F:41:4B X509v3 Authority Key Identifier: keyid:43:44:C6:67:BE:8D:EC:17:04:E5:20:A9:E2:F5:1F:3F:AB:4C:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9b:c8:a4:5d:72:83:7e:45:31:0a:f4:3f:19:f0:e2:07:53: 90:c0:2a:e1:3a:e5:3c:62:9c:4a:ca:be:8a:b4:a8:e1:ab:d2: 86:9d:da:75:3a:28:2d:f1:16:82:ac:0a:1f:7a:ca:71:42:02: f1:cd:3e:73:84:66:db:3c:9c:3f:79:79:4a:69:50:6a:c2:63: 0b:17:90:b8:87:17:9e:8c:2b:aa:9b:0e:74:e8:71:29:e6:d9: 92:64:f0:20:af:e6:9d:c4:0c:70:6e:a4:b3:73:95:a6:33:b4: bc:54:f2:b1:b1:22:d0:d6:5e:72:7e:93:04:fe:99:23:cd:66: c2:c6:bd:95:59:b6:fe:e2:1a:27:2d:1d:a3:70:8f:2a:16:cb: 2c:9d:00:87:e1:f3:f6:b5:fe:b4:d6:39:48:e9:f9:3a:36:8e: be:c4:2a:ca:5b:b2:3c:16:b5:78:f6:c6:50:59:64:9f:3f:49: d7:f8:1d:7c:37:57:6d:26:84:78:48:41:d9:05:ca:b4:ac:1a: a8:1c:19:c0:78:16:5e:e1:7f:82:d4:9b:2a:98:9a:d3:e5:51: b1:0a:19:8f:b9:63:8a:a0:8d:fa:dd:3c:46:95:2c:ab:f0:b7: 43:38:bd:6b:62:19:7d:5c:ad:7d:71:ba:a3:ea:78:8a:ed:0f: 8a:68:cf:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPKRfe2+lIGRdXO3da8uUpTlZdKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM0NEM2NjdCRThERUMxNzA0RTUyMEE5RTJGNTFGM0ZB QjRDODIzRTAeFw0yNTEyMjQwMzI1NTdaFw0yNTEyMjUwNjQ2NTdaMDMxMTAvBgNV BAMTKDYxQzA4OTE3QTlBMTc3QTQ0Qzc1MDQyRERBNTFGQTNDQjA3RjQxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMUcLVvXAjN4P2v6YBcsF0d4J fm6MqsnxhCdElnhFSRj4FGvtQmz7DOuCOfwziUc2o9f/lOZry5xcZvtJef5kfGRi pbUcdpRN5DCBdjRW7CHk3U221nGvlIqVyzwFg8NzwclvwHbIc3U9eookTS7f5JWh e4fUxze4yC//ehrupnzh0pbE/IBh4q/O8815l9/NcRXbOvJLmDUPTkaH1AsMFbxO Eph4W586mjcDC7prSpnW93/MT6e8PMDSdnxB75BjKVoQogAvd5JQs+VMuwzCS5+i RlFb5DRYft3s0IPUD7Cwrww0jI/AX2bXwc8CDxHiiaoFKwgRZHucbiZyFWjfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYcCJF6mhd6RMdQQt2lH6PLB/QUswHwYDVR0j BBgwFoAUQ0TGZ76N7BcE5SCp4vUfP6tMgj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3RWWnNIUXpreGVDbUp3enNMdzNRZDVyaEVSNVV1RnJwVXVVNUZmYVhK VkwvMC80MzQ0QzY2N0JFOERFQzE3MDRFNTIwQTlFMkY1MUYzRkFCNEM4MjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNDRDNjY3QkU4REVDMTcw NEU1MjBBOUUyRjUxRjNGQUI0QzgyM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3RWWnNIUXpreGVDbUp3enNMdzNRZDVyaEVSNVV1RnJwVXVVNUZmYVhKVkwvMC80 MzQ0QzY2N0JFOERFQzE3MDRFNTIwQTlFMkY1MUYzRkFCNEM4MjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf5vIpF1yg35FMQr0Pxnw4gdTkMAq4TrlPGKcSsq+irSo4avShp3adTooLfEW gqwKH3rKcUIC8c0+c4Rm2zycP3l5SmlQasJjCxeQuIcXnowrqpsOdOhxKebZkmTw IK/mncQMcG6ks3OVpjO0vFTysbEi0NZecn6TBP6ZI81mwsa9lVm2/uIaJy0do3CP KhbLLJ0Ah+Hz9rX+tNY5SOn5OjaOvsQqyluyPBa1ePbGUFlknz9J1/gdfDdXbSaE eEhB2QXKtKwaqBwZwHgWXuF/gtSbKpia0+VRsQoZj7ljiqCN+t08RpUsq/C3Qzi9 a2IZfVytfXG6o+p4iu0PimjPmQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:12 2025 by rpki-client