This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: w0zmhyy4XTn6yXn6u0tJCGyySUFKWu/zMfk8l5wEEcA= Subject key identifier: F8:72:4C:8C:4C:35:89:AD:2C:FF:9E:13:5D:4F:F3:7D:E4:13:87:B9 Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 0544365FE337F0BEAB41B6FE9C095AE37CD69467 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 0303 Signing time: Sat 06 Dec 2025 06:45:24 +0000 Manifest this update: Sat 06 Dec 2025 06:40:24 +0000 Manifest next update: Sun 07 Dec 2025 07:49:24 +0000 Files and hashes: 1: 3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (hash: scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=) 2: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: 1Hag4q04T9XfrrpeQSn6EY0kWcYetR8deBJK0X37mNs=) 3: 323830343a313165303a3a2f33322d3535203d3e20323633343435.roa (hash: JY9NjnQ88soBYNRVthMyseU4hIC042l72p6YiSE2yyU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 07:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:44:36:5f:e3:37:f0:be:ab:41:b6:fe:9c:09:5a:e3:7c:d6:94:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Dec 6 06:40:24 2025 GMT Not After : Dec 7 07:49:24 2025 GMT Subject: CN=F8724C8C4C3589AD2CFF9E135D4FF37DE41387B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:af:10:74:ef:1b:26:18:60:f8:d5:cd:3d:8e: f7:f8:79:21:9c:94:8e:b9:56:73:c0:d8:1c:d5:4b: 3a:4b:d7:ef:ec:1f:a1:f3:fc:86:13:54:00:99:71: 01:f4:d7:ca:c4:20:a7:df:67:97:9f:7d:47:70:f5: 7d:54:86:16:e5:e8:6a:8d:89:31:2c:c2:44:db:5f: 9c:b9:fd:61:0e:9d:eb:c1:e0:76:32:ab:58:8b:7b: 0d:02:31:65:0a:e8:36:a7:93:0b:8d:94:ba:f7:47: f2:4b:94:f3:d4:d0:b3:69:7f:d2:4b:46:bb:ea:c0: ff:06:fe:c6:a0:4d:99:f6:1e:6c:96:2d:cc:cb:d6: c8:df:f6:75:2c:e6:63:04:21:32:6d:bf:50:ec:c5: 17:e8:69:ff:54:c7:7d:36:ad:69:75:ef:49:aa:a3: 05:f7:b4:20:25:52:eb:1a:dc:f2:a5:9d:ea:94:ef: 79:08:a0:30:77:08:07:29:1d:0d:31:0f:c1:19:7d: 95:78:c7:0f:4e:67:d6:40:74:46:c2:e8:a1:aa:de: 9f:d4:51:75:a0:b7:05:24:e2:ca:1a:01:7c:d2:74: 44:ed:b4:46:cc:0a:b3:98:55:ef:2a:a6:0d:c4:74: 69:23:8a:d4:6b:b9:eb:ed:98:6c:c4:8e:a9:4b:40: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:72:4C:8C:4C:35:89:AD:2C:FF:9E:13:5D:4F:F3:7D:E4:13:87:B9 X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dd:22:5c:b9:3b:85:c6:b7:8f:57:dc:3b:fb:e8:f8:c6:72: 2a:ff:62:f1:38:66:43:97:d0:46:1d:4c:9c:51:0e:fc:ab:a5: e1:35:8d:d9:b4:fc:59:7b:18:94:27:c4:6f:ad:2e:11:10:30: c1:42:c3:26:46:79:a3:3d:19:97:97:f8:6e:9f:f8:e0:ca:bf: f6:26:63:ef:71:f5:17:91:04:fd:be:61:29:cc:cd:33:ad:d7: 31:02:d6:6b:7e:30:d9:e8:af:89:35:eb:49:b5:4c:01:e3:30: 29:d7:ea:5e:56:05:d9:25:76:39:00:c2:e9:66:34:1e:86:a5: 2e:1a:00:f1:31:e6:5c:72:6c:24:21:f9:92:d0:e0:41:83:0a: 2d:e2:6a:db:4e:14:39:a6:41:a7:e0:2d:70:8d:45:9f:e4:16: 9c:94:2c:5f:2a:8a:d6:ed:50:80:f7:1a:13:b3:b6:e8:d9:7b: 39:1b:1b:9a:50:52:ba:5e:34:27:bc:c4:7d:92:ab:19:31:6a: ca:a6:06:ba:6f:14:ed:c6:91:ce:8a:7e:62:67:2f:e4:40:52: 3f:b4:ea:be:9f:0c:eb:67:29:b9:a7:ff:ac:e0:87:2b:96:a6: 64:40:16:e9:c7:0f:8e:aa:1a:fc:4b:88:ab:cc:21:51:7d:e3: df:fe:f5:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBUQ2X+M38L6rQbb+nAla43zWlGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTEyMDYwNjQwMjRaFw0yNTEyMDcwNzQ5MjRaMDMxMTAvBgNV BAMTKEY4NzI0QzhDNEMzNTg5QUQyQ0ZGOUUxMzVENEZGMzdERTQxMzg3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDirxB07xsmGGD41c09jvf4eSGc lI65VnPA2BzVSzpL1+/sH6Hz/IYTVACZcQH018rEIKffZ5effUdw9X1Uhhbl6GqN iTEswkTbX5y5/WEOnevB4HYyq1iLew0CMWUK6DankwuNlLr3R/JLlPPU0LNpf9JL RrvqwP8G/sagTZn2HmyWLczL1sjf9nUs5mMEITJtv1DsxRfoaf9Ux302rWl170mq owX3tCAlUusa3PKlneqU73kIoDB3CAcpHQ0xD8EZfZV4xw9OZ9ZAdEbC6KGq3p/U UXWgtwUk4soaAXzSdETttEbMCrOYVe8qpg3EdGkjitRruevtmGzEjqlLQDFfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+HJMjEw1ia0s/54TXU/zfeQTh7kwHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACt0iXLk7hca3j1fcO/vo+MZyKv9i8ThmQ5fQRh1MnFEO/Kul4TWN2bT8WXsY lCfEb60uERAwwULDJkZ5oz0Zl5f4bp/44Mq/9iZj73H1F5EE/b5hKczNM63XMQLW a34w2eiviTXrSbVMAeMwKdfqXlYF2SV2OQDC6WY0HoalLhoA8THmXHJsJCH5ktDg QYMKLeJq204UOaZBp+AtcI1Fn+QWnJQsXyqK1u1QgPcaE7O26Nl7ORsbmlBSul40 J7zEfZKrGTFqyqYGum8U7caRzop+Ymcv5EBSP7Tqvp8M62cpuaf/rOCHK5amZEAW 6ccPjqoa/EuIq8whUX3j3/71lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:16 2025 by rpki-client