This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft File: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft (raw, json) Hash identifier: ohNZ09XY8qdfD/uuaIOD+eLW/B017Y7JyiGf9wT4RMs= Subject key identifier: B4:E7:AB:DD:61:49:9D:AD:82:04:72:57:22:B4:E3:31:7F:23:6D:8D Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF Certificate issuer: /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Certificate serial: 5872C5202C23D96A5944238373DE0F82075E2079 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft Manifest number: 10 Signing time: Sat 06 Dec 2025 03:33:24 +0000 Manifest this update: Sat 06 Dec 2025 03:28:24 +0000 Manifest next update: Sun 07 Dec 2025 05:33:24 +0000 Files and hashes: 1: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl (hash: bNLFuON0yXJd+3A5xCLsejl33FXNIS5EiiuGMe4Ab+s=) 2: 3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa (hash: WlfPkdvQaK+2iNV2J8DnE42kv5R/ULsDx9rhkKjR0cA=) 3: 3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa (hash: N91dwFlRpIMGXso4PKVxPSMTeHaKnAVRNeylT8GL1f4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:72:c5:20:2c:23:d9:6a:59:44:23:83:73:de:0f:82:07:5e:20:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Validity Not Before: Dec 6 03:28:24 2025 GMT Not After : Dec 7 05:33:24 2025 GMT Subject: CN=B4E7ABDD61499DAD8204725722B4E3317F236D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:86:ba:bf:58:9a:8a:7b:e5:cc:67:4e:41: c0:48:30:29:2a:3a:7b:87:4d:a1:b1:df:0e:67:1e: 4e:34:bc:d1:1d:24:0b:f8:a2:77:de:d5:9b:9e:33: 30:26:91:4c:42:de:14:8d:7c:b0:1f:ed:ff:5a:31: 9f:b9:04:e3:63:ed:cc:5e:71:0f:39:2b:ff:97:8e: f6:f7:d5:7f:37:7a:7d:be:e9:f6:ad:11:61:0b:3f: 77:b3:e3:70:97:48:16:46:03:80:1f:3c:55:0a:d7: 81:46:14:7b:9a:ac:3c:92:12:b4:af:cc:c5:05:73: cd:eb:58:bb:88:ab:a4:c7:85:cf:fe:7c:80:19:8a: 7f:bf:4b:77:a8:fa:1b:b8:26:c6:2e:4b:fe:4f:ab: 95:4e:48:da:34:3d:e3:47:a4:90:46:26:e0:c8:1e: 8e:ed:71:69:8e:14:77:f2:04:f1:b8:d1:c8:5c:0b: ac:90:87:71:c8:80:9d:d1:7f:b9:94:0f:ce:e2:fe: d6:c4:97:95:49:a6:8e:03:59:fa:6f:8c:c0:f3:0f: 56:b4:a0:8f:c8:76:31:3c:5d:06:c9:f2:c3:94:fa: 0c:37:7e:87:4b:e8:d1:0d:36:07:0f:2e:1b:b0:24: 34:55:1a:73:72:55:4a:ec:fa:33:e2:89:a4:47:e8: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E7:AB:DD:61:49:9D:AD:82:04:72:57:22:B4:E3:31:7F:23:6D:8D X509v3 Authority Key Identifier: keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c9:95:c8:25:52:8f:de:7b:76:cc:90:fe:10:2b:4a:20:5d: e5:a4:9c:c3:91:89:3d:a7:fe:d1:d9:60:89:4f:c6:d4:cb:bb: 9f:04:a5:0f:24:bf:ac:8c:5c:9d:88:72:10:0c:4a:bb:6e:84: be:13:b3:f8:a4:5d:2f:fe:a9:dc:9f:9e:03:16:26:41:52:a6: 37:c6:c5:01:9f:33:20:0c:eb:d9:ee:cf:a6:2b:1a:1d:bc:8d: f9:6c:82:44:9d:a0:fc:b3:69:fe:40:ed:15:5c:86:3b:45:e3: e3:04:e4:2c:b8:23:9f:85:c5:b8:6b:79:48:79:e4:fa:a8:02: 80:e0:39:45:a9:88:f6:9a:df:6a:ae:0a:24:1b:94:fa:6a:ae: 27:93:e1:46:49:c9:a3:5b:a7:af:b2:72:25:5e:e4:8d:6d:1e: c2:b7:b7:30:6b:48:58:25:0c:d9:31:30:e8:ed:a5:16:17:ba: fd:4c:c0:b4:36:5a:9b:1e:02:be:aa:c3:0f:f7:d8:94:6f:4f: 1b:bb:84:a3:7e:1c:0d:37:5c:f4:2e:53:e2:41:94:82:05:d5: 8c:31:6a:2e:a1:cf:b5:c0:eb:8e:fc:f2:2e:87:52:85:57:96: 03:26:10:2b:4f:f1:c5:ae:da:90:da:9a:2b:05:08:b5:d3:f7: d8:1d:cb:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWHLFICwj2WpZRCODc94PggdeIHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQUY5NzgzN0VEOUE5MThGQTc1RDQ5NjBGQzIwNDdC MkNGODFGRjAeFw0yNTEyMDYwMzI4MjRaFw0yNTEyMDcwNTMzMjRaMDMxMTAvBgNV BAMTKEI0RTdBQkRENjE0OTlEQUQ4MjA0NzI1NzIyQjRFMzMxN0YyMzZEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSM4a6v1iainvlzGdOQcBIMCkq OnuHTaGx3w5nHk40vNEdJAv4onfe1ZueMzAmkUxC3hSNfLAf7f9aMZ+5BONj7cxe cQ85K/+Xjvb31X83en2+6fatEWELP3ez43CXSBZGA4AfPFUK14FGFHuarDySErSv zMUFc83rWLuIq6THhc/+fIAZin+/S3eo+hu4JsYuS/5Pq5VOSNo0PeNHpJBGJuDI Ho7tcWmOFHfyBPG40chcC6yQh3HIgJ3Rf7mUD87i/tbEl5VJpo4DWfpvjMDzD1a0 oI/IdjE8XQbJ8sOU+gw3fodL6NENNgcPLhuwJDRVGnNyVUrs+jPiiaRH6C6/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtOer3WFJna2CBHJXIrTjMX8jbY0wHwYDVR0j BBgwFoAUSjr5eDftmpGPp11JYPwgR7LPgf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9B Sm4vMC80QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBM0FGOTc4MzdFRDlBOTE4 RkE3NUQ0OTYwRkMyMDQ3QjJDRjgxRkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9BSm4vMC80 QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD8mVyCVSj957dsyQ/hArSiBd5aScw5GJPaf+0dlgiU/G1Mu7nwSlDyS/rIxc nYhyEAxKu26EvhOz+KRdL/6p3J+eAxYmQVKmN8bFAZ8zIAzr2e7PpisaHbyN+WyC RJ2g/LNp/kDtFVyGO0Xj4wTkLLgjn4XFuGt5SHnk+qgCgOA5RamI9prfaq4KJBuU +mquJ5PhRknJo1unr7JyJV7kjW0ewre3MGtIWCUM2TEw6O2lFhe6/UzAtDZamx4C vqrDD/fYlG9PG7uEo34cDTdc9C5T4kGUggXVjDFqLqHPtcDrjvzyLodShVeWAyYQ K0/xxa7akNqaKwUItdP32B3LqA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:25 2025 by rpki-client