This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft File: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft (raw, json) Hash identifier: hEP2WwN1rzemPJID0Ldt3Y18KUDamC5t7/bVAhTJAEE= Subject key identifier: 4F:D8:08:D2:35:26:19:35:FA:D9:0D:A1:32:F6:5B:F5:CB:D2:5F:19 Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD Certificate issuer: /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD Certificate serial: 464916D633A2DF89EDC43F8C4A19245C3AE50B44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft Manifest number: 031A Signing time: Sat 06 Dec 2025 00:34:13 +0000 Manifest this update: Sat 06 Dec 2025 00:29:13 +0000 Manifest next update: Sun 07 Dec 2025 03:07:13 +0000 Files and hashes: 1: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl (hash: RJoqp3UEMrxAXEXzRP/d+K0GInQDiL95Chh8XtoxpKI=) 2: 323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (hash: Z0J4eT+/Pm37ea2jwyYZIrXM8+ylfxcILtCFUN3f0nU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 03:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:49:16:d6:33:a2:df:89:ed:c4:3f:8c:4a:19:24:5c:3a:e5:0b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD Validity Not Before: Dec 6 00:29:13 2025 GMT Not After : Dec 7 03:07:13 2025 GMT Subject: CN=4FD808D235261935FAD90DA132F65BF5CBD25F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:9a:30:f9:af:9a:a3:eb:7d:db:dc:ca:cf: 7c:ef:87:19:ef:7a:dd:52:5e:eb:8e:31:60:88:81: 60:53:dd:34:2f:47:c9:2b:ef:56:13:5b:0a:2a:db: 18:c7:f1:6c:56:7b:00:a3:94:c8:1a:01:c6:56:28: 41:59:b6:4d:15:d0:65:17:e6:3f:91:a5:6e:51:4c: c9:c1:af:d9:18:2a:55:0b:45:24:3a:61:98:0e:19: 41:8a:d3:5c:13:99:47:dd:09:9b:af:97:97:b4:92: a5:82:d8:54:a4:8b:f1:74:72:6a:0b:77:78:64:70: a2:c9:06:3d:e4:d0:eb:6d:9f:d6:02:4c:56:17:e0: f1:79:ae:52:65:a1:7f:e1:a0:3d:77:d9:05:16:05: 7d:e6:f4:05:78:0a:0e:5f:59:27:fb:cd:7c:11:50: 3d:fd:82:88:18:3f:eb:24:d7:be:8b:40:76:f2:79: 7f:be:35:6d:af:19:8d:da:90:03:1f:83:eb:48:01: 20:f8:4d:d2:f8:c0:2c:b0:72:52:56:66:39:5e:ea: 20:28:b4:e1:7e:10:6a:7c:1c:71:b1:eb:d4:9c:60: 5b:16:c2:b6:b1:a4:9f:66:56:11:ae:f7:99:2f:ff: d9:28:7e:a5:c5:26:aa:54:dd:53:e8:7b:a8:db:d8: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D8:08:D2:35:26:19:35:FA:D9:0D:A1:32:F6:5B:F5:CB:D2:5F:19 X509v3 Authority Key Identifier: keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:5d:eb:41:85:2b:59:3a:92:38:ae:18:43:4e:f8:b5:dc:14: 2b:73:8b:a7:e0:b7:81:12:aa:78:d1:80:04:9b:73:7a:d2:bb: 6b:fa:35:dc:e7:ef:8b:d0:d7:f3:e4:1d:b4:c0:07:2b:6e:10: 8c:0d:6e:55:98:0a:a7:10:04:7c:8a:4d:b1:c9:fd:b7:ee:28: 82:d6:9c:f5:ec:9d:a9:6c:d2:3f:c0:49:70:5c:d5:42:3e:b9: 26:d6:bc:99:cc:01:e1:11:ad:1c:68:86:a2:db:63:41:12:ab: 69:5c:87:70:03:96:86:88:02:19:5f:ad:53:3b:70:bd:0d:20: f5:00:0e:c6:55:87:3c:4b:12:ea:cf:a5:4a:73:10:fd:17:1a: 50:71:b5:01:97:fa:ff:48:2c:87:7a:e1:1d:ca:66:6f:50:01: 2f:3b:c7:32:e7:5a:e3:cb:8f:89:db:ca:41:57:7b:2e:e4:95: 94:9d:86:d9:58:93:c6:8e:70:48:9e:9b:93:4f:7f:c6:f4:09: 46:f5:8f:5a:7e:38:03:50:a2:96:2c:4d:b7:7c:f0:66:b2:d3: 7f:73:cf:45:34:99:bd:f7:4b:73:e4:c3:bd:f3:db:84:37:bc: 59:69:fd:0b:f7:12:ae:8f:6b:a5:f3:1a:70:ed:d4:f0:4b:46: bc:18:b9:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURkkW1jOi34ntxD+MShkkXDrlC0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQyMjA3NzZBM0ZDRTA4MzhCMkYyNjlFQjBBQjQ3M0Uw NUQ1OUNCRDAeFw0yNTEyMDYwMDI5MTNaFw0yNTEyMDcwMzA3MTNaMDMxMTAvBgNV BAMTKDRGRDgwOEQyMzUyNjE5MzVGQUQ5MERBMTMyRjY1QkY1Q0JEMjVGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiOJow+a+ao+t929zKz3zvhxnv et1SXuuOMWCIgWBT3TQvR8kr71YTWwoq2xjH8WxWewCjlMgaAcZWKEFZtk0V0GUX 5j+RpW5RTMnBr9kYKlULRSQ6YZgOGUGK01wTmUfdCZuvl5e0kqWC2FSki/F0cmoL d3hkcKLJBj3k0Ottn9YCTFYX4PF5rlJloX/hoD132QUWBX3m9AV4Cg5fWSf7zXwR UD39gogYP+sk176LQHbyeX++NW2vGY3akAMfg+tIASD4TdL4wCywclJWZjle6iAo tOF+EGp8HHGx69ScYFsWwraxpJ9mVhGu95kv/9kofqXFJqpU3VPoe6jb2BzNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT9gI0jUmGTX62Q2hMvZb9cvSXxkwHwYDVR0j BBgwFoAUJCIHdqP84IOLLyaesKtHPgXVnL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO SFMvMC8yNDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MjIwNzc2QTNGQ0UwODM4 QjJGMjY5RUIwQUI0NzNFMDVENTlDQkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejROSFMvMC8y NDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1F3rQYUrWTqSOK4YQ074tdwUK3OLp+C3gRKqeNGABJtzetK7a/o13Ofvi9DX 8+QdtMAHK24QjA1uVZgKpxAEfIpNscn9t+4ogtac9eydqWzSP8BJcFzVQj65Jta8 mcwB4RGtHGiGottjQRKraVyHcAOWhogCGV+tUztwvQ0g9QAOxlWHPEsS6s+lSnMQ /RcaUHG1AZf6/0gsh3rhHcpmb1ABLzvHMuda48uPidvKQVd7LuSVlJ2G2ViTxo5w SJ6bk09/xvQJRvWPWn44A1CilixNt3zwZrLTf3PPRTSZvfdLc+TDvfPbhDe8WWn9 C/cSro9rpfMacO3U8EtGvBi5OA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:51 2025 by rpki-client