This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft File: 3D10000E40C545C40D0B40A419954E6B6B94E80F.mft (raw, json) Hash identifier: n/AjHYDSPZLQD2s3MRWp3dhNXySADRN7iCxowmK0FsU= Subject key identifier: 04:AD:45:43:52:47:CF:7B:D4:B7:EF:C1:DF:8F:8C:D4:C4:39:9D:71 Authority key identifier: 3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F Certificate issuer: /CN=3D10000E40C545C40D0B40A419954E6B6B94E80F Certificate serial: 4E8AB7185C802D18EB3C80954AE561622CD0F046 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft Manifest number: 0323 Signing time: Tue 23 Dec 2025 08:42:14 +0000 Manifest this update: Tue 23 Dec 2025 08:37:14 +0000 Manifest next update: Wed 24 Dec 2025 11:56:14 +0000 Files and hashes: 1: 3D10000E40C545C40D0B40A419954E6B6B94E80F.crl (hash: b2suqD9vgS9+ZUvvT82LbWgAmWUsL8GK2f96Qe0fJZE=) 2: 323830343a313363383a3a2f33322d3438203d3e20323633353531.roa (hash: /hIpNtuEzhiojgRNiztWaFYPpbFP5H++w4j3J6l6unA=) 3: 3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa (hash: hOarYccXAAG/SirinUShOfvyMPiIxns5fD4Nagfcr+E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 11:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8a:b7:18:5c:80:2d:18:eb:3c:80:95:4a:e5:61:62:2c:d0:f0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D10000E40C545C40D0B40A419954E6B6B94E80F Validity Not Before: Dec 23 08:37:14 2025 GMT Not After : Dec 24 11:56:14 2025 GMT Subject: CN=04AD45435247CF7BD4B7EFC1DF8F8CD4C4399D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:f4:56:0e:22:63:d9:f4:e8:12:28:21:72: f4:de:42:09:c6:e8:cb:09:38:55:d0:e3:db:67:0f: c3:fa:df:e5:d5:09:15:ea:e8:0d:55:24:7f:70:e9: 6e:ab:f3:cf:3c:9b:f0:cf:e0:43:fa:9a:99:b3:5b: fe:58:f8:14:07:f4:dd:ec:39:a4:79:0f:0f:f6:17: 56:81:24:7d:68:df:3e:ff:97:cc:23:33:89:75:41: 7a:25:3b:f2:4e:d9:63:b3:92:28:91:7b:8c:3d:5f: 4a:bb:7a:1b:5a:3a:02:0c:82:c9:85:01:5a:98:64: d6:2f:3e:9b:25:e3:46:62:c9:b3:05:44:88:18:c5: c7:b1:72:7d:69:ee:16:2e:c2:35:89:63:e1:0e:d0: e4:e9:e1:58:e4:08:f4:08:63:82:01:4f:76:a8:65: 1e:32:4a:3f:ed:6f:80:84:28:49:a5:d6:09:3e:22: 3e:3b:89:b5:8a:6f:98:51:6e:c4:16:84:6f:72:96: 12:51:90:14:97:44:cd:03:b7:2d:79:74:96:72:60: c8:30:65:c3:df:7b:fd:74:78:0f:08:51:b1:19:77: 81:a0:69:d3:1f:71:ea:09:47:a0:b3:15:0a:fc:c8: 08:60:5a:4b:ec:db:ae:b9:19:43:50:0b:52:60:8d: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AD:45:43:52:47:CF:7B:D4:B7:EF:C1:DF:8F:8C:D4:C4:39:9D:71 X509v3 Authority Key Identifier: keyid:3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:89:86:2a:b4:49:07:96:83:2a:96:af:ab:ca:7e:94:fd:7a: cd:df:9c:73:4c:af:89:3a:aa:e1:d5:7c:f3:f0:74:78:9c:98: 37:5b:3e:40:8b:eb:fd:21:c9:a6:95:78:1c:e6:0f:03:37:95: 03:4a:df:e7:ba:5f:b6:dc:a0:08:4e:08:4e:3c:6f:66:c0:c3: 2f:54:9d:c5:21:f2:bc:44:7e:38:0b:c4:1a:8b:01:30:dd:62: 3a:a2:22:aa:c6:17:a4:20:9e:cd:2c:26:e6:cd:bb:e3:47:30: 58:ea:aa:ad:22:fa:3c:7e:2d:0f:02:52:78:02:5b:0d:2b:c5: b7:a7:4b:1c:98:c0:d9:58:93:2d:c2:5a:e4:c6:40:56:71:85: 03:b7:e1:92:c3:c1:11:ca:7a:70:3f:0d:21:95:63:98:81:cd: 7b:55:6a:35:f6:40:40:38:a4:f3:3f:eb:62:61:a7:f1:71:c7: 3e:6d:7d:2c:3a:d9:40:72:a5:cb:0f:af:fd:ec:ce:4f:89:c3: 4f:37:2f:df:c1:a6:92:29:7c:9f:07:c5:e0:86:95:52:9a:49: 72:a3:52:0b:9f:96:e3:02:7c:38:ac:5b:3d:0e:39:b7:96:b6: ef:b0:3c:07:73:23:4f:95:a3:21:86:ee:48:f3:8d:3d:27:ac: a8:a5:72:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUToq3GFyALRjrPICVSuVhYizQ8EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxMDAwMEU0MEM1NDVDNDBEMEI0MEE0MTk5NTRFNkI2 Qjk0RTgwRjAeFw0yNTEyMjMwODM3MTRaFw0yNTEyMjQxMTU2MTRaMDMxMTAvBgNV BAMTKDA0QUQ0NTQzNTI0N0NGN0JENEI3RUZDMURGOEY4Q0Q0QzQzOTlENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEPRWDiJj2fToEighcvTeQgnG 6MsJOFXQ49tnD8P63+XVCRXq6A1VJH9w6W6r8888m/DP4EP6mpmzW/5Y+BQH9N3s OaR5Dw/2F1aBJH1o3z7/l8wjM4l1QXolO/JO2WOzkiiRe4w9X0q7ehtaOgIMgsmF AVqYZNYvPpsl40ZiybMFRIgYxcexcn1p7hYuwjWJY+EO0OTp4VjkCPQIY4IBT3ao ZR4ySj/tb4CEKEml1gk+Ij47ibWKb5hRbsQWhG9ylhJRkBSXRM0Dty15dJZyYMgw ZcPfe/10eA8IUbEZd4GgadMfceoJR6CzFQr8yAhgWkvs2665GUNQC1JgjXFLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBK1FQ1JHz3vUt+/B34+M1MQ5nXEwHwYDVR0j BBgwFoAUPRAADkDFRcQNC0CkGZVOa2uU6A8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGMxZUI4OW4xbWJ1b3Zacno3RnBmWnNXNnF6QUVKYzRMc0xSRHpwem5H RWcvMC8zRDEwMDAwRTQwQzU0NUM0MEQwQjQwQTQxOTk1NEU2QjZCOTRFODBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMTAwMDBFNDBDNTQ1QzQw RDBCNDBBNDE5OTU0RTZCNkI5NEU4MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGMxZUI4OW4xbWJ1b3Zacno3RnBmWnNXNnF6QUVKYzRMc0xSRHpwem5HRWcvMC8z RDEwMDAwRTQwQzU0NUM0MEQwQjQwQTQxOTk1NEU2QjZCOTRFODBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwYmGKrRJB5aDKpavq8p+lP16zd+cc0yviTqq4dV88/B0eJyYN1s+QIvr/SHJ ppV4HOYPAzeVA0rf57pfttygCE4ITjxvZsDDL1SdxSHyvER+OAvEGosBMN1iOqIi qsYXpCCezSwm5s2740cwWOqqrSL6PH4tDwJSeAJbDSvFt6dLHJjA2ViTLcJa5MZA VnGFA7fhksPBEcp6cD8NIZVjmIHNe1VqNfZAQDik8z/rYmGn8XHHPm19LDrZQHKl yw+v/ezOT4nDTzcv38Gmkil8nwfF4IaVUppJcqNSC5+W4wJ8OKxbPQ45t5a277A8 B3MjT5WjIYbuSPONPSesqKVyGg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:47 2025 by rpki-client