This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft File: 73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft (raw, json) Hash identifier: a/S7jeVh2WsaonWyR2K+Z0ygzfqmi/pk82b/tFU/Hl4= Subject key identifier: B9:18:CD:97:75:39:E0:B6:A7:00:4D:D6:42:CB:E9:77:8F:5D:7F:AE Authority key identifier: 73:D3:EA:3E:A7:0F:87:B9:9F:08:40:C3:E9:68:A8:E5:93:C6:E4:79 Certificate issuer: /CN=73D3EA3EA70F87B99F0840C3E968A8E593C6E479 Certificate serial: 118E70CBD2BF61A9666BAA5BAFFB60899ACF8B3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.cer Subject info access: rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft Manifest number: 42 Signing time: Tue 23 Dec 2025 02:09:34 +0000 Manifest this update: Tue 23 Dec 2025 02:04:34 +0000 Manifest next update: Wed 24 Dec 2025 03:06:34 +0000 Files and hashes: 1: 73D3EA3EA70F87B99F0840C3E968A8E593C6E479.crl (hash: 1fVTPz94RXJUH7rxxobIAwpGInEjLCZkVwJbagsBHfU=) 2: 323830343a373730343a3a2f33322d313238203d3e20323731313439.roa (hash: fxkWhm2BGLVfEn+B/0WyuabZuVD+wBAeq5jJCwWm4EM=) 3: 3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa (hash: BOv3fWqiRXefUaHz5d0RZEklRzo8yubcIwueQMcJGF0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.crl rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 03:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8e:70:cb:d2:bf:61:a9:66:6b:aa:5b:af:fb:60:89:9a:cf:8b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D3EA3EA70F87B99F0840C3E968A8E593C6E479 Validity Not Before: Dec 23 02:04:34 2025 GMT Not After : Dec 24 03:06:34 2025 GMT Subject: CN=B918CD977539E0B6A7004DD642CBE9778F5D7FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:76:4b:4f:fb:fa:61:09:a2:f8:26:b8:9e: 1a:f5:ff:b0:1b:6d:0a:12:8c:db:c4:14:08:28:ec: 8e:8e:13:a8:f6:24:77:64:c7:9f:7a:b6:25:b7:50: 68:d6:14:bd:5c:13:28:56:21:58:4e:47:c1:2c:f1: 80:47:12:f2:25:d5:d9:c7:2d:6e:28:ba:6f:d2:b8: cb:18:08:a3:eb:50:fc:0e:b7:f7:b1:e7:df:6d:c0: 3c:2d:92:d9:11:58:fc:b1:10:e6:a9:63:0b:8e:7f: 18:cc:b7:eb:75:ba:c4:32:b5:c9:58:1b:75:ed:2b: 70:62:10:db:c7:4e:73:56:78:50:27:87:f0:e0:b5: 0e:29:cf:0f:4b:e2:01:2b:11:3a:04:b2:25:69:44: 27:f4:1e:43:1d:b5:5d:34:5d:65:1f:0e:a1:9e:e6: a7:d1:1a:97:b7:ec:63:a4:9b:0d:e6:04:b5:1c:7b: 04:d6:77:00:1e:6d:5b:1e:b2:bb:90:85:18:f1:49: 63:8a:fd:dd:b3:a7:4e:c7:03:e3:d6:3b:91:b4:ab: a7:ba:f2:a8:59:f7:97:f2:b9:31:b8:cf:50:66:3a: 63:73:35:b3:19:b5:77:2b:f6:f7:71:3e:b6:48:78: 49:e5:09:f0:45:ad:63:bf:c9:ff:dc:50:cf:f6:55: ca:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:CD:97:75:39:E0:B6:A7:00:4D:D6:42:CB:E9:77:8F:5D:7F:AE X509v3 Authority Key Identifier: keyid:73:D3:EA:3E:A7:0F:87:B9:9F:08:40:C3:E9:68:A8:E5:93:C6:E4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/73D3EA3EA70F87B99F0840C3E968A8E593C6E479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:01:ec:87:2c:2d:08:69:b6:dc:52:71:15:2c:36:62:ed:da: 6c:e4:b3:aa:85:13:bd:e2:70:bb:83:e5:7f:3b:d9:6e:27:c1: d5:c8:10:df:b2:97:d1:39:0f:1c:96:33:ed:30:cc:c7:4c:41: b4:1a:e9:55:0a:be:fd:93:7e:6d:75:03:cd:6c:0d:d2:74:8e: 80:13:17:25:54:c8:6c:1e:5f:64:8b:de:b4:d4:35:a3:c6:81: a9:8a:62:73:d1:e9:c5:6f:5a:5e:3a:ae:66:f8:5a:2f:b8:67: d6:4a:87:bb:c1:69:ad:0d:27:78:d7:2c:7b:61:36:cc:ab:a8: 6f:83:03:72:c8:2d:27:06:8f:af:f1:fa:87:2b:e0:e0:80:30: 0e:68:ee:b4:8e:d2:92:f2:fa:76:55:c2:c0:9e:74:c5:87:25: b9:5b:b9:d7:92:32:cc:98:17:76:db:c7:9d:7f:10:7e:2c:f7: 0e:4a:f4:75:cd:18:63:7b:2b:3f:ab:50:31:fc:87:19:11:59: 9f:48:cc:56:30:c7:df:dd:d8:9f:22:31:7d:f8:42:c6:41:74: fc:24:f3:cf:48:2b:9a:12:fa:ad:77:fd:68:b4:e0:a4:52:e4: 27:1b:7e:27:bd:46:25:fb:f9:71:6d:28:73:4e:33:c6:63:57: f5:9a:8a:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEY5wy9K/Yalma6pbr/tgiZrPiz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNEM0VBM0VBNzBGODdCOTlGMDg0MEMzRTk2OEE4RTU5 M0M2RTQ3OTAeFw0yNTEyMjMwMjA0MzRaFw0yNTEyMjQwMzA2MzRaMDMxMTAvBgNV BAMTKEI5MThDRDk3NzUzOUUwQjZBNzAwNERENjQyQ0JFOTc3OEY1RDdGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKXZLT/v6YQmi+Ca4nhr1/7Ab bQoSjNvEFAgo7I6OE6j2JHdkx596tiW3UGjWFL1cEyhWIVhOR8Es8YBHEvIl1dnH LW4oum/SuMsYCKPrUPwOt/ex599twDwtktkRWPyxEOapYwuOfxjMt+t1usQytclY G3XtK3BiENvHTnNWeFAnh/DgtQ4pzw9L4gErEToEsiVpRCf0HkMdtV00XWUfDqGe 5qfRGpe37GOkmw3mBLUcewTWdwAebVsesruQhRjxSWOK/d2zp07HA+PWO5G0q6e6 8qhZ95fyuTG4z1BmOmNzNbMZtXcr9vdxPrZIeEnlCfBFrWO/yf/cUM/2VcqPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuRjNl3U54LanAE3WQsvpd49df64wHwYDVR0j BBgwFoAUc9PqPqcPh7mfCEDD6Wio5ZPG5HkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDlGODJXbm5uOURCazQxaEc4UUo2S05wS1lxaFJ6OTZwYVZxcERISDJk b3AvMC83M0QzRUEzRUE3MEY4N0I5OUYwODQwQzNFOTY4QThFNTkzQzZFNDc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczRDNFQTNFQTcwRjg3Qjk5 RjA4NDBDM0U5NjhBOEU1OTNDNkU0NzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDlGODJXbm5uOURCazQxaEc4UUo2S05wS1lxaFJ6OTZwYVZxcERISDJkb3AvMC83 M0QzRUEzRUE3MEY4N0I5OUYwODQwQzNFOTY4QThFNTkzQzZFNDc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADAHshywtCGm23FJxFSw2Yu3abOSzqoUTveJwu4PlfzvZbifB1cgQ37KX0TkP HJYz7TDMx0xBtBrpVQq+/ZN+bXUDzWwN0nSOgBMXJVTIbB5fZIvetNQ1o8aBqYpi c9HpxW9aXjquZvhaL7hn1kqHu8FprQ0neNcse2E2zKuob4MDcsgtJwaPr/H6hyvg 4IAwDmjutI7SkvL6dlXCwJ50xYcluVu515IyzJgXdtvHnX8Qfiz3Dkr0dc0YY3sr P6tQMfyHGRFZn0jMVjDH393YnyIxffhCxkF0/CTzz0grmhL6rXf9aLTgpFLkJxt+ J71GJfv5cW0oc04zxmNX9ZqKMg== -----END CERTIFICATE-----Generated at Tue Dec 23 13:12:08 2025 by rpki-client