This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft File: 43AAB70BF5D486443B357EA3923B581F0075D23A.mft (raw, json) Hash identifier: HdfMUWUfWRDJMUizq2tm1hRLGmt3v0ic+G4qd7ZU1ug= Subject key identifier: 4B:FA:B3:CE:94:A9:05:22:A4:AF:F6:84:AE:E1:9C:F0:5D:E6:A6:5D Authority key identifier: 43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A Certificate issuer: /CN=43AAB70BF5D486443B357EA3923B581F0075D23A Certificate serial: 66584CBF2963399D1C1487D0398185F99D6A0C61 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft Manifest number: 12 Signing time: Sat 06 Dec 2025 05:18:18 +0000 Manifest this update: Sat 06 Dec 2025 05:13:18 +0000 Manifest next update: Sun 07 Dec 2025 05:23:18 +0000 Files and hashes: 1: 3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa (hash: H9dv+DeRya1w3P02U1BRKsbDqLWpgPUpIvV9Tk+fnFM=) 2: 323830343a336237383a3a2f33322d313238203d3e20323636313531.roa (hash: QLb7skkEmJQF17WGWiLpN5j3LMyzuGsNwQnP4qVNzRQ=) 3: 43AAB70BF5D486443B357EA3923B581F0075D23A.crl (hash: WwzDVDQ01YZFPSB1Ky5BNWAGWjNizLr5vaVOEWRtRKU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:58:4c:bf:29:63:39:9d:1c:14:87:d0:39:81:85:f9:9d:6a:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AAB70BF5D486443B357EA3923B581F0075D23A Validity Not Before: Dec 6 05:13:18 2025 GMT Not After : Dec 7 05:23:18 2025 GMT Subject: CN=4BFAB3CE94A90522A4AFF684AEE19CF05DE6A65D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:12:da:e9:7f:fa:a8:7c:6a:7c:73:b7:58: ee:6a:cf:bb:25:bf:8f:f0:01:76:15:76:65:cf:5b: f1:31:75:4c:bc:5b:6e:33:49:ed:3c:bb:51:5a:50: 2e:7d:7c:7c:5c:84:72:ec:e5:05:bd:30:01:95:b0: 0b:48:62:1b:bd:41:67:1f:ec:78:dc:6c:6b:b3:68: 1a:09:a5:fc:81:35:fa:91:b5:9b:c9:c1:ff:ed:ea: 38:e2:ea:89:11:b9:b7:b3:4e:96:35:09:18:80:f6: 5e:3c:33:8e:c6:97:81:60:38:21:6d:01:0f:d9:09: ff:32:42:c4:ac:b3:15:94:86:7a:06:0c:0e:81:26: 4e:39:5b:d5:47:65:d8:40:e1:f6:0b:75:27:3c:9a: dd:d9:39:e2:61:11:4b:06:e0:34:3f:3f:36:98:8a: b2:40:fc:6a:30:34:ce:5c:a4:b8:9e:0d:07:45:32: 79:44:98:cb:04:d4:e8:aa:c1:c4:ca:dc:2d:2e:43: 6a:81:0f:7a:12:07:54:3c:f8:ec:06:18:24:8d:e1: d1:28:6e:20:b7:87:98:7f:75:a9:8f:ab:96:ef:9f: 0d:69:cf:98:38:c9:b0:4d:ff:bd:7e:0c:95:30:6f: 58:26:12:d3:09:34:f6:ea:ff:3a:65:10:39:e2:f1: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FA:B3:CE:94:A9:05:22:A4:AF:F6:84:AE:E1:9C:F0:5D:E6:A6:5D X509v3 Authority Key Identifier: keyid:43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:10:95:1e:b7:7e:c3:81:bf:ce:e7:32:2b:5f:11:32:71:1b: 16:b4:da:df:fd:9d:a9:9f:cf:a1:9c:3b:cb:f6:90:2c:b9:75: 14:16:76:7c:e6:d8:85:46:1c:cc:49:fa:05:70:1e:39:22:d0: 76:aa:f0:46:b6:b7:3b:36:d7:97:1e:68:83:71:c0:77:59:95: 15:1c:23:49:59:f9:11:68:15:0b:b9:63:9d:71:85:4b:03:89: 94:01:fe:f5:37:b9:82:55:83:97:b4:de:71:d1:3a:f9:15:c3: e7:07:29:c4:4e:8b:8d:96:89:74:da:c7:fe:5e:8b:27:8f:38: 8f:9f:15:77:0a:97:b8:78:f2:66:0e:08:d3:b1:65:81:f3:ea: 80:08:27:9b:0b:a2:65:05:e4:8a:a6:c5:a8:3b:8c:bd:b8:e8: e2:f8:7e:4d:e6:8b:ee:fd:24:b7:0f:24:0d:b4:70:23:71:7b: 6a:94:55:5a:af:90:67:26:89:92:cc:93:a6:90:8f:2a:e4:43: 2e:e9:8f:0c:97:8f:16:2e:18:f0:8a:45:89:85:ab:8b:a2:4d: c0:35:52:3c:67:f4:ed:7a:8a:7c:e0:1e:a6:10:6b:d1:5e:c9: b0:c9:59:84:0b:a7:ff:2a:b1:3f:b5:7f:d1:86:49:1a:7a:d8: 1e:b3:17:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZlhMvyljOZ0cFIfQOYGF+Z1qDGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBQUI3MEJGNUQ0ODY0NDNCMzU3RUEzOTIzQjU4MUYw MDc1RDIzQTAeFw0yNTEyMDYwNTEzMThaFw0yNTEyMDcwNTIzMThaMDMxMTAvBgNV BAMTKDRCRkFCM0NFOTRBOTA1MjJBNEFGRjY4NEFFRTE5Q0YwNURFNkE2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ARLa6X/6qHxqfHO3WO5qz7sl v4/wAXYVdmXPW/ExdUy8W24zSe08u1FaUC59fHxchHLs5QW9MAGVsAtIYhu9QWcf 7HjcbGuzaBoJpfyBNfqRtZvJwf/t6jji6okRubezTpY1CRiA9l48M47Gl4FgOCFt AQ/ZCf8yQsSssxWUhnoGDA6BJk45W9VHZdhA4fYLdSc8mt3ZOeJhEUsG4DQ/PzaY irJA/GowNM5cpLieDQdFMnlEmMsE1OiqwcTK3C0uQ2qBD3oSB1Q8+OwGGCSN4dEo biC3h5h/damPq5bvnw1pz5g4ybBN/71+DJUwb1gmEtMJNPbq/zplEDni8Rl1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS/qzzpSpBSKkr/aEruGc8F3mpl0wHwYDVR0j BBgwFoAUQ6q3C/XUhkQ7NX6jkjtYHwB10jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242 S2EvMC80M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUFCNzBCRjVENDg2NDQz QjM1N0VBMzkyM0I1ODFGMDA3NUQyM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242S2EvMC80 M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALBCVHrd+w4G/zucyK18RMnEbFrTa3/2dqZ/PoZw7y/aQLLl1FBZ2fObYhUYc zEn6BXAeOSLQdqrwRra3OzbXlx5og3HAd1mVFRwjSVn5EWgVC7ljnXGFSwOJlAH+ 9Te5glWDl7TecdE6+RXD5wcpxE6LjZaJdNrH/l6LJ484j58VdwqXuHjyZg4I07Fl gfPqgAgnmwuiZQXkiqbFqDuMvbjo4vh+TeaL7v0ktw8kDbRwI3F7apRVWq+QZyaJ ksyTppCPKuRDLumPDJePFi4Y8IpFiYWri6JNwDVSPGf07XqKfOAephBr0V7JsMlZ hAun/yqxP7V/0YZJGnrYHrMXNg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:42:29 2025 by rpki-client