This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft File: 4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft (raw, json) Hash identifier: 6jwL0UC3RbXjPe5iWBCaY7KzNdDygntj6y0pZ1KpSjw= Subject key identifier: 32:85:84:4F:9D:A1:B5:1D:3E:73:0C:62:8F:1F:6A:18:39:CE:92:6E Authority key identifier: 44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7 Certificate issuer: /CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7 Certificate serial: 0D0E13E93A2C9BA7F6F1CE7896BAD7F29A45166B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft Manifest number: 02C1 Signing time: Sat 06 Dec 2025 12:22:42 +0000 Manifest this update: Sat 06 Dec 2025 12:17:42 +0000 Manifest next update: Sun 07 Dec 2025 14:37:42 +0000 Files and hashes: 1: 323830343a323866303a3a2f33322d3438203d3e20323633393838.roa (hash: FfG5ZDyee+a4qFY2Xwev7D7TVMxppMxA3lYE3RL6Ewg=) 2: 4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl (hash: 2UYZhYCiQow8NVwWRbRe/5GifTPY6h/g7zvuDr0+BPg=) 3: 3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa (hash: mA+an6yoUwu2JP22RELxIBLSwgCgRP17IquXEc/wtV4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 14:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0e:13:e9:3a:2c:9b:a7:f6:f1:ce:78:96:ba:d7:f2:9a:45:16:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7 Validity Not Before: Dec 6 12:17:42 2025 GMT Not After : Dec 7 14:37:42 2025 GMT Subject: CN=3285844F9DA1B51D3E730C628F1F6A1839CE926E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:5f:a2:53:23:21:76:13:a7:e7:26:68:a6: 24:00:69:5b:b2:9f:19:07:5d:d8:60:1a:cc:69:a0: 4b:b9:35:cb:f5:2e:39:dc:e2:c1:9c:ec:57:18:a4: af:de:09:03:b8:ff:c8:07:8c:5c:68:e1:e6:00:06: b6:2a:f4:1d:d2:65:cc:67:be:76:1e:34:0a:14:1d: 93:5b:df:0b:24:bc:77:e2:ce:0d:59:15:c4:83:5d: e8:fb:c8:23:02:bc:13:4e:8d:84:0f:69:6d:6b:85: af:2b:b2:20:07:93:06:d3:0f:b4:02:d0:b3:7b:cf: 79:e6:17:5d:79:af:28:3d:50:ad:7b:d6:f9:14:fa: 29:54:4a:bf:7b:06:29:86:ec:e5:23:c2:c2:8d:02: c9:2e:16:11:98:13:24:df:66:0e:d8:b8:0d:a6:f8: 0c:83:ed:82:16:4c:4e:ee:03:29:bb:9a:bd:7f:a1: b9:04:e8:38:ab:89:2f:11:38:94:7f:f6:17:fa:0b: 7a:41:db:5f:df:1d:7a:cc:f2:d6:a2:aa:6e:0a:ec: 02:94:9a:2b:53:f2:00:c3:d8:bd:24:0b:09:d5:97: 8a:86:d6:3f:32:1b:77:b5:d3:15:d8:66:7a:7e:ca: ee:c6:fa:a4:7b:e7:d7:84:de:37:93:a1:6b:26:16: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:85:84:4F:9D:A1:B5:1D:3E:73:0C:62:8F:1F:6A:18:39:CE:92:6E X509v3 Authority Key Identifier: keyid:44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5f:ae:fd:32:a7:29:e6:cc:99:f3:97:18:ff:bb:52:09:93: 27:34:5e:d7:4d:e7:df:e7:b5:5e:be:5e:69:ea:27:9d:23:8d: ee:60:95:52:06:0f:51:d4:77:b6:88:8c:bc:74:db:f6:ee:80: 8e:1a:2e:65:ca:88:87:dd:bc:b8:ae:06:ba:0e:45:53:13:4b: 37:a4:67:4c:95:ee:84:72:4a:1b:d7:78:03:5b:60:9e:a0:1a: 1c:9f:f0:3a:06:1a:25:e3:cd:db:bb:81:43:38:fa:25:4c:d2: 5b:6b:5b:43:f1:0d:59:15:e2:61:71:56:be:20:86:fe:89:31: 12:3f:b6:bc:ca:ce:fa:ff:dd:c3:fa:bf:20:11:23:de:55:c5: 75:4d:9e:42:8d:f1:0c:3b:34:88:c9:30:e1:68:67:da:69:b3: 30:e5:96:27:4d:f6:0c:4c:39:7b:6a:23:db:a4:ae:7a:fd:9e: 51:ec:15:27:a8:91:e6:b0:8e:c8:c6:36:64:16:88:c4:93:76: fa:ef:bf:3e:58:72:64:83:11:4b:3c:ee:78:47:ce:0f:7e:82: 35:39:3b:50:12:04:d9:b9:36:da:8f:54:21:36:09:c1:d8:60: a1:fa:c9:0d:b0:d5:b1:c4:a5:08:67:24:fc:65:0e:87:f4:a3: d1:36:b6:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDQ4T6Tosm6f28c54lrrX8ppFFmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5MUY2MUEzMzkyRjU4RENGNUIzMzQxMUFEMEVDNDMy OUM4QUZCNzAeFw0yNTEyMDYxMjE3NDJaFw0yNTEyMDcxNDM3NDJaMDMxMTAvBgNV BAMTKDMyODU4NDRGOURBMUI1MUQzRTczMEM2MjhGMUY2QTE4MzlDRTkyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUV+iUyMhdhOn5yZopiQAaVuy nxkHXdhgGsxpoEu5Ncv1Ljnc4sGc7FcYpK/eCQO4/8gHjFxo4eYABrYq9B3SZcxn vnYeNAoUHZNb3wskvHfizg1ZFcSDXej7yCMCvBNOjYQPaW1rha8rsiAHkwbTD7QC 0LN7z3nmF115ryg9UK171vkU+ilUSr97BimG7OUjwsKNAskuFhGYEyTfZg7YuA2m +AyD7YIWTE7uAym7mr1/obkE6DiriS8ROJR/9hf6C3pB21/fHXrM8taiqm4K7AKU mitT8gDD2L0kCwnVl4qG1j8yG3e10xXYZnp+yu7G+qR759eE3jeToWsmFordAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMoWET52htR0+cwxijx9qGDnOkm4wHwYDVR0j BBgwFoAURJH2GjOS9Y3PWzNBGtDsQynIr7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRk5Dd3FZUEhjQVVFUGVhbW9TN205WEMzVUppOUxrdHU1djlReXdYRnRI QXMvMC80NDkxRjYxQTMzOTJGNThEQ0Y1QjMzNDExQUQwRUM0MzI5QzhBRkI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0OTFGNjFBMzM5MkY1OERD RjVCMzM0MTFBRDBFQzQzMjlDOEFGQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rk5Dd3FZUEhjQVVFUGVhbW9TN205WEMzVUppOUxrdHU1djlReXdYRnRIQXMvMC80 NDkxRjYxQTMzOTJGNThEQ0Y1QjMzNDExQUQwRUM0MzI5QzhBRkI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW1+u/TKnKebMmfOXGP+7UgmTJzRe103n3+e1Xr5eaeonnSON7mCVUgYPUdR3 toiMvHTb9u6AjhouZcqIh928uK4Gug5FUxNLN6RnTJXuhHJKG9d4A1tgnqAaHJ/w OgYaJePN27uBQzj6JUzSW2tbQ/ENWRXiYXFWviCG/okxEj+2vMrO+v/dw/q/IBEj 3lXFdU2eQo3xDDs0iMkw4Whn2mmzMOWWJ032DEw5e2oj26Suev2eUewVJ6iR5rCO yMY2ZBaIxJN2+u+/PlhyZIMRSzzueEfOD36CNTk7UBIE2bk22o9UITYJwdhgofrJ DbDVscSlCGck/GUOh/Sj0Ta2vA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:46 2025 by rpki-client