This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft File: 4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft (raw, json) Hash identifier: 3jrM49Y6sGOXuR6CFjFsTydfsRBkKASHXJfcr/NK7vg= Subject key identifier: D5:EB:1B:97:A4:8E:94:9B:57:47:28:D6:EE:D4:F1:00:85:DC:5A:24 Authority key identifier: 4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B Certificate issuer: /CN=4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B Certificate serial: 097B0384CF26759605E3388B9CED3F04251B506D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer Subject info access: rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft Manifest number: 4C Signing time: Sat 06 Dec 2025 15:57:15 +0000 Manifest this update: Sat 06 Dec 2025 15:52:15 +0000 Manifest next update: Sun 07 Dec 2025 19:48:15 +0000 Files and hashes: 1: 4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl (hash: ElijVGPbJjSpSw5TO/U68vLCUMeGUm9cjAR/zpGrB3M=) 2: 34352e3138332e36382e302f32332d3332203d3e20323639323733.roa (hash: XfPh1ok4j7oZ7NiAwh/s5pZG0pmZyhfZ32tt7ZsO+Eg=) 3: 323830343a363231303a3a2f33322d313238203d3e20323639323733.roa (hash: wH/6pz3ahNkfk7gPFIl5c3ScL/I16vVUmQ0HDgWkMDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 19:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7b:03:84:cf:26:75:96:05:e3:38:8b:9c:ed:3f:04:25:1b:50:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B Validity Not Before: Dec 6 15:52:15 2025 GMT Not After : Dec 7 19:48:15 2025 GMT Subject: CN=D5EB1B97A48E949B574728D6EED4F10085DC5A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:f1:89:05:fb:c3:a5:c5:af:96:7b:84:0d: 39:ac:9b:11:7a:45:ae:e1:80:82:b4:8d:39:20:ee: 37:69:01:5e:e4:5f:b9:b7:61:09:8b:be:72:8c:b9: be:6e:61:b8:58:79:a4:91:28:cd:84:12:4c:d2:dd: fc:ff:fc:6e:88:09:53:47:2b:5d:8a:45:47:54:ee: b1:78:81:32:b0:01:7d:1f:e7:dc:c6:bf:18:19:5f: 7a:4c:74:69:8f:49:92:ab:54:70:59:ad:9a:0c:25: e6:bd:9a:50:f2:2a:ee:a1:ba:07:0c:b5:df:1e:5f: df:c4:15:8f:85:04:7a:b4:3d:0d:cf:ba:94:cc:e1: ee:27:52:0a:98:3c:0e:05:aa:85:c6:1d:92:ea:28: 8a:05:25:80:ba:b0:90:3a:49:e1:92:59:85:90:7a: c2:c7:15:a9:27:1d:d0:c8:3a:1a:b6:d7:23:29:41: ea:6d:62:00:9d:f1:54:74:04:1f:6c:2c:49:1b:5f: 18:2e:31:3a:af:57:ab:41:21:d4:55:09:11:27:09: 94:6d:ed:3a:db:5e:ef:36:f8:94:4b:0e:4d:82:86: 34:ef:e6:c2:b1:c3:b6:d8:83:20:a0:cb:a4:7a:d3: cb:38:29:5e:eb:43:47:73:42:0c:0d:e1:a4:14:45: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EB:1B:97:A4:8E:94:9B:57:47:28:D6:EE:D4:F1:00:85:DC:5A:24 X509v3 Authority Key Identifier: keyid:4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:0d:73:9f:bc:16:de:c0:0c:e6:87:1b:4e:1b:61:57:7b: f4:da:f2:12:37:60:ae:a2:8b:fd:67:51:07:68:80:a2:79:d9: 2f:17:32:15:4f:30:be:10:56:4a:a4:f5:f3:21:dd:34:2d:bd: 1c:dd:d6:a0:f9:55:f5:d3:18:86:49:a1:27:8a:2f:e2:f2:c3: 2e:9c:96:f5:95:45:5a:33:03:ee:a8:de:9a:f6:2a:07:ba:dc: 52:da:b1:db:e1:ff:36:1e:1b:57:45:23:b7:03:da:65:a6:af: 28:3f:c2:29:34:5a:d0:05:21:66:fe:a1:10:f5:0b:78:bb:9c: 03:5e:c7:7b:a5:a8:8b:6a:20:ea:cd:18:19:c5:c3:6e:46:e3: 53:fc:a1:90:fa:98:72:1f:68:db:96:d0:55:0e:58:56:4a:d4: dd:d8:98:05:bf:04:9f:3b:38:60:25:b9:29:44:4c:51:bc:74: 34:60:d0:5f:fb:81:65:02:7c:c3:07:4d:bd:51:ec:84:8b:f7: c4:f0:72:96:65:62:b6:d5:65:f1:6f:3e:e5:41:72:73:b7:23: a6:a8:41:18:f3:4f:dd:ad:5a:5c:f2:a7:0c:1a:ad:4a:8d:f5: eb:ba:a2:d2:a4:c8:a0:78:55:b3:64:4a:52:3c:74:44:d2:3b: 94:ac:59:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCXsDhM8mdZYF4ziLnO0/BCUbUG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZGQjMwRjRBRjZGODdBM0VDMDVCMDlBQjE0NDZGMEFE NkYwRDYxQjAeFw0yNTEyMDYxNTUyMTVaFw0yNTEyMDcxOTQ4MTVaMDMxMTAvBgNV BAMTKEQ1RUIxQjk3QTQ4RTk0OUI1NzQ3MjhENkVFRDRGMTAwODVEQzVBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2U/GJBfvDpcWvlnuEDTmsmxF6 Ra7hgIK0jTkg7jdpAV7kX7m3YQmLvnKMub5uYbhYeaSRKM2EEkzS3fz//G6ICVNH K12KRUdU7rF4gTKwAX0f59zGvxgZX3pMdGmPSZKrVHBZrZoMJea9mlDyKu6hugcM td8eX9/EFY+FBHq0PQ3PupTM4e4nUgqYPA4FqoXGHZLqKIoFJYC6sJA6SeGSWYWQ esLHFaknHdDIOhq21yMpQeptYgCd8VR0BB9sLEkbXxguMTqvV6tBIdRVCREnCZRt 7TrbXu82+JRLDk2ChjTv5sKxw7bYgyCgy6R608s4KV7rQ0dzQgwN4aQURXTZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1esbl6SOlJtXRyjW7tTxAIXcWiQwHwYDVR0j BBgwFoAUT/sw9K9vh6PsBbCasURvCtbw1hswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVORVd1RHR2MWs0WmNqNWZobzRuSk1aQ0p2akw4UkJiZjdwQ2d2dTU0 emkvMC80RkZCMzBGNEFGNkY4N0EzRUMwNUIwOUFCMTQ0NkYwQUQ2RjBENjFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRkIzMEY0QUY2Rjg3QTNF QzA1QjA5QUIxNDQ2RjBBRDZGMEQ2MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGVORVd1RHR2MWs0WmNqNWZobzRuSk1aQ0p2akw4UkJiZjdwQ2d2dTU0emkvMC80 RkZCMzBGNEFGNkY4N0EzRUMwNUIwOUFCMTQ0NkYwQUQ2RjBENjFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJgMNc5+8Ft7ADOaHG04bYVd79NryEjdgrqKL/WdRB2iAonnZLxcyFU8wvhBW SqT18yHdNC29HN3WoPlV9dMYhkmhJ4ov4vLDLpyW9ZVFWjMD7qjemvYqB7rcUtqx 2+H/Nh4bV0UjtwPaZaavKD/CKTRa0AUhZv6hEPULeLucA17He6Woi2og6s0YGcXD bkbjU/yhkPqYch9o25bQVQ5YVkrU3diYBb8Enzs4YCW5KURMUbx0NGDQX/uBZQJ8 wwdNvVHshIv3xPBylmVittVl8W8+5UFyc7cjpqhBGPNP3a1aXPKnDBqtSo3167qi 0qTIoHhVs2RKUjx0RNI7lKxZJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:35 2025 by rpki-client