This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft File: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft (raw, json) Hash identifier: G3ukjWHyTJGVJUUUH4yqj1t6z+Olu3+EqoR2QhJDl9k= Subject key identifier: B3:00:E7:17:F3:A1:55:30:FA:4A:39:61:2C:C2:BD:2A:09:CA:01:8D Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E Certificate issuer: /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Certificate serial: 645756C92F4780CA570AF56A58B920B8867F3883 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft Manifest number: 033D Signing time: Fri 19 Dec 2025 01:56:04 +0000 Manifest this update: Fri 19 Dec 2025 01:51:04 +0000 Manifest next update: Sat 20 Dec 2025 05:54:04 +0000 Files and hashes: 1: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (hash: tmAwqMhIhrFuqc+nYdV33Pa6/YiDFGZ4qnEWgs1O00c=) 2: 323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (hash: T4iUaekwa7W+wWBiZBhsMW92NOY/WFlQgDoo76BdH1c=) 3: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl (hash: t/2qfXtjJb65VxvCimjnuxgi9zMayLYtk4yPNNSqsy8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 05:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:57:56:c9:2f:47:80:ca:57:0a:f5:6a:58:b9:20:b8:86:7f:38:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Validity Not Before: Dec 19 01:51:04 2025 GMT Not After : Dec 20 05:54:04 2025 GMT Subject: CN=B300E717F3A15530FA4A39612CC2BD2A09CA018D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:0d:10:b3:86:c4:5c:ac:82:25:e4:65:dd: 80:c3:53:61:e3:30:9f:c1:ad:cc:f0:d3:89:db:1e: fd:53:28:ba:53:15:82:81:bd:05:44:d5:a3:33:4c: c7:24:7d:4a:5a:11:9e:9b:34:a4:e4:13:49:d5:7b: 44:9e:fc:8e:85:0a:51:24:fe:ab:4c:9d:e9:cd:2f: 47:de:14:fd:4a:54:0f:44:64:07:b2:ef:c9:b2:56: cd:ee:60:8f:7d:ec:91:15:fe:6e:50:42:e0:30:85: 81:14:42:cb:0e:8c:dc:c7:ad:50:cd:b3:da:be:ce: 73:de:7d:7e:50:0b:c0:e9:2a:64:72:1d:73:2b:c6: b6:38:28:66:79:7e:6d:ec:9b:50:3a:d4:0a:3b:a4: 5c:ec:43:00:37:d2:0b:89:0a:0c:2a:73:83:79:98: 6a:dc:c1:10:c9:09:3f:9f:21:e9:f8:9b:42:00:cb: 0b:3c:6d:12:df:95:32:56:d7:66:f5:d3:b1:99:81: 3c:33:61:2d:a8:a4:bc:54:74:11:83:62:32:ed:d0: f9:75:64:a3:9e:f6:3a:85:0f:43:cb:21:83:75:3f: d6:f7:ed:f4:4d:31:3f:2e:24:e4:06:dd:29:20:a3: 81:18:b8:90:71:64:ff:14:3e:b4:ca:9c:ac:01:c6: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:E7:17:F3:A1:55:30:FA:4A:39:61:2C:C2:BD:2A:09:CA:01:8D X509v3 Authority Key Identifier: keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:05:55:ba:ae:1a:2f:bd:9b:ef:6c:f2:50:e6:41:bd:43:2b: 6f:ff:17:f9:0a:30:2b:36:2d:57:62:0d:3f:cf:55:3c:8e:af: 6d:4a:3b:97:fd:a7:df:c8:9b:75:1f:2b:15:38:2c:b5:63:d3: a5:ea:af:eb:19:ba:76:77:b0:ad:98:0e:5d:e7:00:0d:65:3d: ae:da:61:8d:70:26:4c:08:81:ee:21:75:d8:28:1b:a6:6c:3b: 97:aa:7f:e9:45:60:cb:f8:2f:f9:8e:20:92:d5:bd:55:2b:43: 6a:10:6d:ef:a4:36:ac:b6:ab:17:a4:65:f7:62:98:29:e3:a5: 90:87:89:d3:ed:fd:c7:1a:1d:c0:2e:d0:97:fb:d2:74:04:ba: 49:1a:3c:71:bb:e3:9d:60:c1:d0:c6:bf:7a:a4:78:14:ac:ee: 24:c3:b6:36:45:05:7c:d4:a5:7d:e4:9b:ea:76:cd:71:39:a8: 24:e8:a9:a8:92:af:ed:9d:d3:d7:71:55:ca:85:bc:4b:8c:5a: cf:2b:e4:da:3b:6c:a0:1b:9a:ab:ec:1c:7a:2b:a4:50:89:99: 6e:39:b5:c2:02:89:7c:4a:0a:64:4a:9f:db:df:30:a0:d4:f6: 9b:e8:e4:68:be:49:9e:6c:29:dc:db:74:1d:a8:75:c2:68:10: f0:23:7a:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZFdWyS9HgMpXCvVqWLkguIZ/OIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGQ0M2NTREQjQyNDhFRDlDQzhBRkM3RDYxQjcxRjcw QTQ4NzA3RTAeFw0yNTEyMTkwMTUxMDRaFw0yNTEyMjAwNTU0MDRaMDMxMTAvBgNV BAMTKEIzMDBFNzE3RjNBMTU1MzBGQTRBMzk2MTJDQzJCRDJBMDlDQTAxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WQ0Qs4bEXKyCJeRl3YDDU2Hj MJ/Brczw04nbHv1TKLpTFYKBvQVE1aMzTMckfUpaEZ6bNKTkE0nVe0Se/I6FClEk /qtMnenNL0feFP1KVA9EZAey78myVs3uYI997JEV/m5QQuAwhYEUQssOjNzHrVDN s9q+znPefX5QC8DpKmRyHXMrxrY4KGZ5fm3sm1A61Ao7pFzsQwA30guJCgwqc4N5 mGrcwRDJCT+fIen4m0IAyws8bRLflTJW12b107GZgTwzYS2opLxUdBGDYjLt0Pl1 ZKOe9jqFD0PLIYN1P9b37fRNMT8uJOQG3Skgo4EYuJBxZP8UPrTKnKwBxiQZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUswDnF/OhVTD6SjlhLMK9KgnKAY0wHwYDVR0j BBgwFoAUS/zGVNtCSO2cyK/H1htx9wpIcH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa QWgvMS80QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNDNjU0REI0MjQ4RUQ5 Q0M4QUZDN0Q2MUI3MUY3MEE0ODcwN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZaQWgvMS80 QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUAVVuq4aL72b72zyUOZBvUMrb/8X+QowKzYtV2INP89VPI6vbUo7l/2n38ib dR8rFTgstWPTpeqv6xm6dnewrZgOXecADWU9rtphjXAmTAiB7iF12Cgbpmw7l6p/ 6UVgy/gv+Y4gktW9VStDahBt76Q2rLarF6Rl92KYKeOlkIeJ0+39xxodwC7Ql/vS dAS6SRo8cbvjnWDB0Ma/eqR4FKzuJMO2NkUFfNSlfeSb6nbNcTmoJOipqJKv7Z3T 13FVyoW8S4xazyvk2jtsoBuaq+wceiukUImZbjm1wgKJfEoKZEqf298woNT2m+jk aL5Jnmwp3Nt0Hah1wmgQ8CN6Vg== -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:54 2025 by rpki-client