This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json) Hash identifier: NOrbBVc0o+abZxw9nZCuBFaWcEX1mQU6YrRRJMVg768= Subject key identifier: 0D:DB:02:4C:6C:C7:9B:1F:51:BA:9D:8B:0D:64:D9:43:E8:54:EA:0D Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Certificate issuer: /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Certificate serial: 397C1E433FD34ABB0A5CDD7A7AE87A7DCE71D299 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft Manifest number: 0331 Signing time: Sat 06 Dec 2025 05:58:51 +0000 Manifest this update: Sat 06 Dec 2025 05:53:51 +0000 Manifest next update: Sun 07 Dec 2025 07:56:51 +0000 Files and hashes: 1: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=) 2: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: Iw+Us/Gdq4H20rqWCwIf/+AwZ3382QcPi65IoQKUl4s=) 3: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7c:1e:43:3f:d3:4a:bb:0a:5c:dd:7a:7a:e8:7a:7d:ce:71:d2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Validity Not Before: Dec 6 05:53:51 2025 GMT Not After : Dec 7 07:56:51 2025 GMT Subject: CN=0DDB024C6CC79B1F51BA9D8B0D64D943E854EA0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:75:4f:a7:d6:42:af:0d:09:50:41:62:10: a4:ee:98:be:07:42:24:25:cc:8c:d0:f3:1c:08:01: e3:e9:62:f0:93:26:d6:9a:85:a7:ad:7d:69:9f:d7: 8a:07:9e:4a:22:a7:39:9b:b4:a9:21:f7:e4:4f:d8: 7f:23:96:30:06:70:cd:3b:54:85:0d:a6:db:37:53: cd:c4:49:96:b7:15:cd:a8:51:14:e4:35:28:db:2e: bc:d2:2f:0c:6f:f5:d2:dc:53:25:03:c3:b2:31:07: 37:37:61:60:a3:c1:e7:53:4e:58:eb:cb:8d:06:8d: d5:d0:0a:f9:04:dd:dc:3b:b5:ad:53:f1:cf:4f:e5: 08:07:3e:7e:8d:ab:8e:e7:4f:6f:ec:01:f3:10:69: 78:14:ae:0e:50:56:99:5e:ad:b8:48:d6:7d:3a:d8: 6c:dd:d7:1d:d8:e8:43:d9:70:36:ab:c0:39:3b:ce: a0:41:01:63:cd:3c:1d:b1:d4:ee:9e:94:4a:9f:d1: bc:1d:77:48:ce:21:3f:ae:ed:dc:01:34:af:0a:af: c0:fe:15:96:17:b0:52:f7:9c:77:b3:22:54:97:9e: 1a:7f:07:3b:38:4a:3d:b9:f5:7a:40:52:27:fe:2c: 78:fa:6c:b3:fb:42:84:9f:82:86:4b:77:3d:54:41: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:02:4C:6C:C7:9B:1F:51:BA:9D:8B:0D:64:D9:43:E8:54:EA:0D X509v3 Authority Key Identifier: keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5e:68:77:76:aa:66:b3:5d:06:83:5f:7f:2e:75:f1:84:b1: fe:69:f0:b2:73:bf:fd:e9:b6:b9:b5:54:bd:5b:0b:1c:9d:d3: de:5f:43:be:04:f3:e8:69:33:d3:93:d7:1a:16:5d:b0:f9:33: 00:9d:d9:d3:99:cf:ba:aa:5a:6f:6b:1c:6c:b7:fb:32:bb:fc: 3c:c9:9a:b0:8b:47:11:61:a6:5c:ea:fe:b8:d9:73:e7:09:ad: 58:2d:59:1b:a7:c7:e0:7a:a5:46:8c:81:46:d2:8e:6e:18:7d: 47:b6:cb:b2:6f:ce:3c:1f:50:8b:c1:3d:14:de:89:dd:7b:75: e1:bb:44:5a:77:bd:c8:b7:6d:10:00:3c:46:04:19:ed:b7:fe: 44:4f:c6:64:96:68:77:00:c8:73:74:11:9f:56:21:43:10:9c: 55:d1:0a:11:d7:ab:fd:a6:d9:f6:3e:39:14:22:27:df:a3:96: 54:ca:cc:74:ee:51:05:81:ed:a3:af:3f:af:fe:2d:3e:0b:63: a7:89:ef:4b:af:90:af:fc:70:33:b7:b5:ab:0e:f3:3a:35:17: 0d:70:e3:dc:18:3e:97:74:98:77:d8:2c:c5:c5:f6:5d:56:92: a8:6a:0c:8b:c7:9d:03:4c:1d:b6:83:cf:6f:a3:4e:45:18:ed: c5:27:0c:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOXweQz/TSrsKXN16euh6fc5x0pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC REFCNEJFQTAeFw0yNTEyMDYwNTUzNTFaFw0yNTEyMDcwNzU2NTFaMDMxMTAvBgNV BAMTKDBEREIwMjRDNkNDNzlCMUY1MUJBOUQ4QjBENjREOTQzRTg1NEVBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EXVPp9ZCrw0JUEFiEKTumL4H QiQlzIzQ8xwIAePpYvCTJtaahaetfWmf14oHnkoipzmbtKkh9+RP2H8jljAGcM07 VIUNpts3U83ESZa3Fc2oURTkNSjbLrzSLwxv9dLcUyUDw7IxBzc3YWCjwedTTljr y40GjdXQCvkE3dw7ta1T8c9P5QgHPn6Nq47nT2/sAfMQaXgUrg5QVplerbhI1n06 2Gzd1x3Y6EPZcDarwDk7zqBBAWPNPB2x1O6elEqf0bwdd0jOIT+u7dwBNK8Kr8D+ FZYXsFL3nHezIlSXnhp/Bzs4Sj259XpAUif+LHj6bLP7QoSfgoZLdz1UQVXFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDdsCTGzHmx9Rup2LDWTZQ+hU6g0wHwYDVR0j BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2 QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdF5od3aqZrNdBoNffy518YSx/mnwsnO//em2ubVUvVsLHJ3T3l9DvgTz6Gkz 05PXGhZdsPkzAJ3Z05nPuqpab2scbLf7Mrv8PMmasItHEWGmXOr+uNlz5wmtWC1Z G6fH4HqlRoyBRtKObhh9R7bLsm/OPB9Qi8E9FN6J3Xt14btEWne9yLdtEAA8RgQZ 7bf+RE/GZJZodwDIc3QRn1YhQxCcVdEKEder/abZ9j45FCIn36OWVMrMdO5RBYHt o68/r/4tPgtjp4nvS6+Qr/xwM7e1qw7zOjUXDXDj3Bg+l3SYd9gsxcX2XVaSqGoM i8edA0wdtoPPb6NORRjtxScMRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:08 2025 by rpki-client