This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft File: 4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft (raw, json) Hash identifier: gyOjE5P559wz7ULV4rz/EF8bmY4Wclc3oU8GdNCXDBI= Subject key identifier: FC:90:B7:D2:CE:DD:CD:59:0A:BA:5F:FD:8C:CD:E6:DE:B3:20:9C:6B Authority key identifier: 4F:F8:BB:C8:DC:FF:F6:17:75:49:3B:5A:21:8A:27:04:00:F0:B4:9E Certificate issuer: /CN=4FF8BBC8DCFFF61775493B5A218A270400F0B49E Certificate serial: 3F6C48EBBFBE7BEC5BCDCEB94746D869D1F361E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft Manifest number: 33 Signing time: Fri 05 Dec 2025 15:26:59 +0000 Manifest this update: Fri 05 Dec 2025 15:21:59 +0000 Manifest next update: Sat 06 Dec 2025 17:29:59 +0000 Files and hashes: 1: 323830343a373432383a3a2f33322d313238203d3e20323730393632.roa (hash: jwVOCirx1Zy5VhAFG6y4Kw5pago6YMpD6hETL8O2XwY=) 2: 4FF8BBC8DCFFF61775493B5A218A270400F0B49E.crl (hash: paPJquKw+DMhb3zK5O6A1FhXOoFuA+qbPVOPbGfaMHg=) 3: 3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa (hash: MNdvoCy50esAZ5WLmiKoAR2/zp8yzLFlPu25gdJuwLQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.crl rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 17:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6c:48:eb:bf:be:7b:ec:5b:cd:ce:b9:47:46:d8:69:d1:f3:61:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FF8BBC8DCFFF61775493B5A218A270400F0B49E Validity Not Before: Dec 5 15:21:59 2025 GMT Not After : Dec 6 17:29:59 2025 GMT Subject: CN=FC90B7D2CEDDCD590ABA5FFD8CCDE6DEB3209C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:e9:f3:3c:0a:f5:6c:b3:e5:dd:e5:3a:97: 06:97:c0:e1:a8:82:1f:bd:7f:cd:44:32:11:12:8a: b1:f8:1e:03:1e:8c:68:cf:39:ad:7b:4b:71:71:ed: cd:df:c9:31:a4:e9:13:80:68:31:1e:2f:c1:98:99: 2e:1a:35:71:e4:25:41:fb:77:7d:9c:ad:61:be:97: 79:ad:5d:0b:82:1b:e0:5d:57:77:1f:c0:ab:ba:bd: 00:26:8c:09:50:30:8f:ad:f0:30:45:b4:76:5b:3f: 8e:a5:94:56:40:f3:23:50:09:4b:32:2a:b9:14:66: ec:c4:49:b0:56:d4:28:51:b3:ed:18:d3:68:d7:47: 23:07:a9:af:45:0b:a7:7c:d9:3d:4d:75:9e:16:44: 68:45:6d:18:47:f2:12:b2:1b:e4:1c:f1:06:ef:a7: be:c9:62:7f:e8:4e:c6:93:5d:23:d5:11:da:f9:0d: 54:fb:1f:4c:78:67:fa:cc:2e:05:6f:c8:15:ee:0d: 88:ea:69:fc:e7:56:b3:dd:7b:5a:36:c6:4b:ea:65: 39:17:1b:e6:0a:83:32:03:da:d2:f7:e3:8b:b0:02: e0:ad:2f:3b:7d:3a:66:43:c9:38:d0:b1:e2:97:ab: e2:f8:60:24:53:93:0d:49:de:88:60:c3:2f:78:b3: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:B7:D2:CE:DD:CD:59:0A:BA:5F:FD:8C:CD:E6:DE:B3:20:9C:6B X509v3 Authority Key Identifier: keyid:4F:F8:BB:C8:DC:FF:F6:17:75:49:3B:5A:21:8A:27:04:00:F0:B4:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b5:96:4d:f4:f3:61:45:4a:df:66:bc:cb:c3:6d:3d:39:aa: e3:d5:79:14:b6:47:95:63:c0:ca:06:37:03:a5:3b:2f:86:ba: 6b:51:2a:45:ba:1c:42:6b:4f:27:31:e1:29:2c:3c:0d:b0:b8: a6:70:88:72:be:cd:94:d8:6b:b4:9c:7d:c5:68:d8:cf:8c:d2: 6b:79:76:00:1a:0e:e5:8b:e0:71:4a:2d:a5:90:a6:bc:9a:a2: 42:7e:a5:e0:75:f1:c7:a9:0f:9e:70:d7:b4:f8:f0:38:96:5f: 80:bc:ec:92:f0:4b:d9:6e:2a:3f:84:f3:af:76:02:36:79:1d: 57:66:e4:fa:fd:86:ca:45:74:f0:3e:c8:04:e2:ca:22:f6:1a: 29:a8:a2:95:20:31:33:ea:35:01:09:75:ef:3c:1f:99:76:dd: 92:a0:b4:2c:f0:54:4e:36:73:e6:ed:da:f8:8c:c6:26:85:61: 39:4b:e5:20:89:c3:97:b4:07:67:2f:18:7b:0d:dd:1f:da:1b: ab:2b:bd:a3:1b:5a:5c:7b:a0:56:52:4e:ca:c1:4d:db:c2:ea: f9:22:cb:1c:23:f4:4e:c8:68:86:34:1b:c0:0f:8d:0a:d4:8f: 72:f1:0a:8e:fb:3a:54:52:8e:42:64:79:d2:ad:97:e0:0a:0c: 92:05:eb:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP2xI67++e+xbzc65R0bYadHzYeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZGOEJCQzhEQ0ZGRjYxNzc1NDkzQjVBMjE4QTI3MDQw MEYwQjQ5RTAeFw0yNTEyMDUxNTIxNTlaFw0yNTEyMDYxNzI5NTlaMDMxMTAvBgNV BAMTKEZDOTBCN0QyQ0VERENENTkwQUJBNUZGRDhDQ0RFNkRFQjMyMDlDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgS+nzPAr1bLPl3eU6lwaXwOGo gh+9f81EMhESirH4HgMejGjPOa17S3Fx7c3fyTGk6ROAaDEeL8GYmS4aNXHkJUH7 d32crWG+l3mtXQuCG+BdV3cfwKu6vQAmjAlQMI+t8DBFtHZbP46llFZA8yNQCUsy KrkUZuzESbBW1ChRs+0Y02jXRyMHqa9FC6d82T1NdZ4WRGhFbRhH8hKyG+Qc8Qbv p77JYn/oTsaTXSPVEdr5DVT7H0x4Z/rMLgVvyBXuDYjqafznVrPde1o2xkvqZTkX G+YKgzID2tL344uwAuCtLzt9OmZDyTjQseKXq+L4YCRTkw1J3ohgwy94szevAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/JC30s7dzVkKul/9jM3m3rMgnGswHwYDVR0j BBgwFoAUT/i7yNz/9hd1STtaIYonBADwtJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW5pdDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3 MTUvMC80RkY4QkJDOERDRkZGNjE3NzU0OTNCNUEyMThBMjcwNDAwRjBCNDlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRjhCQkM4RENGRkY2MTc3 NTQ5M0I1QTIxOEEyNzA0MDBGMEI0OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW5pdDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3MTUvMC80 RkY4QkJDOERDRkZGNjE3NzU0OTNCNUEyMThBMjcwNDAwRjBCNDlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATLWWTfTzYUVK32a8y8NtPTmq49V5FLZHlWPAygY3A6U7L4a6a1EqRbocQmtP JzHhKSw8DbC4pnCIcr7NlNhrtJx9xWjYz4zSa3l2ABoO5YvgcUotpZCmvJqiQn6l 4HXxx6kPnnDXtPjwOJZfgLzskvBL2W4qP4Tzr3YCNnkdV2bk+v2GykV08D7IBOLK IvYaKaiilSAxM+o1AQl17zwfmXbdkqC0LPBUTjZz5u3a+IzGJoVhOUvlIInDl7QH Zy8Yew3dH9obqyu9oxtaXHugVlJOysFN28Lq+SLLHCP0TshohjQbwA+NCtSPcvEK jvs6VFKOQmR50q2X4AoMkgXr1A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:05 2025 by rpki-client