This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft File: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json) Hash identifier: /aXYURmJURj0qIQo/Prtf1q4ISFUqlf8Onag48yRODQ= Subject key identifier: 75:93:E3:6C:3D:67:C6:B9:DF:AD:2D:10:30:74:3A:13:E2:FF:07:33 Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 Certificate issuer: /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Certificate serial: 1F968C66EBECB52F11386DD6C00538EB9C090AA8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject info access: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft Manifest number: EF Signing time: Sat 06 Dec 2025 03:44:36 +0000 Manifest this update: Sat 06 Dec 2025 03:39:36 +0000 Manifest next update: Sun 07 Dec 2025 05:37:36 +0000 Files and hashes: 1: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: 3e2SR3yGaiGuRiyA88m8pSjSlKw3f6ASmixmiONtKQQ=) 2: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: fPsx4d62UPQm+f5HlAHqo78FphvrRmReo6la1d77pLU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 05:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:96:8c:66:eb:ec:b5:2f:11:38:6d:d6:c0:05:38:eb:9c:09:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Validity Not Before: Dec 6 03:39:36 2025 GMT Not After : Dec 7 05:37:36 2025 GMT Subject: CN=7593E36C3D67C6B9DFAD2D1030743A13E2FF0733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:87:dd:52:de:2e:d7:14:67:14:d0:6e:04: f7:d2:54:c1:16:56:df:86:97:16:81:95:23:1c:f9: 3d:70:54:2d:8b:47:b4:01:86:83:2d:ba:da:9c:68: 0d:20:da:3d:95:1a:5c:ab:30:d4:6e:be:00:9d:83: 7e:4c:7a:da:46:a0:58:11:f4:e1:89:02:c2:a2:89: b1:d5:60:49:f2:75:b0:ed:f3:3e:fe:01:4f:2f:88: c9:fd:dc:11:8b:05:18:0b:ce:1c:e6:49:79:e4:85: 4c:4c:37:67:35:cc:55:78:30:32:f8:7c:67:fd:cc: dc:b4:d5:31:8d:e7:af:ad:98:6c:d1:91:4b:20:a4: e3:bf:bd:0a:eb:ba:6b:78:aa:fe:b6:b0:6f:a0:3a: dc:66:8f:6f:25:30:81:a3:03:1c:b2:2f:93:15:04: e9:b2:29:4c:60:c7:9f:a6:27:c2:3f:49:cf:a0:29: 10:40:85:1f:05:7a:02:08:92:60:fc:c5:78:c7:16: 2a:05:d0:b6:06:09:db:e0:15:ae:6a:2f:1a:cd:c2: 29:59:2c:a6:20:7d:dd:b0:4f:36:91:ab:98:1c:d4: f4:b2:57:51:6a:48:7a:f7:0a:ae:4f:99:5b:80:ba: 92:82:7d:c9:c5:d6:9f:a9:97:06:52:e1:dd:89:25: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:93:E3:6C:3D:67:C6:B9:DF:AD:2D:10:30:74:3A:13:E2:FF:07:33 X509v3 Authority Key Identifier: keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a8:e5:be:70:9e:c8:92:5f:1d:79:44:df:4a:25:48:b2:65: be:02:86:84:7f:a4:b4:9b:85:69:08:90:f0:2c:b8:06:14:7f: ae:8d:7b:65:75:a2:e9:86:3f:26:2e:1f:3d:98:10:01:25:ed: d2:d1:4d:0d:db:bc:ac:c2:4b:94:56:8e:13:2e:b0:7b:b8:80: 71:97:4f:cd:70:5b:74:34:29:64:6b:c8:e5:d0:b9:76:63:ec: 3b:d5:25:46:bd:6b:a7:f7:c7:94:88:1d:13:f9:a0:24:7c:e4: 56:d0:55:8d:22:2c:13:bb:2a:8b:f8:72:cf:c3:dc:8b:8f:07: c3:9c:37:13:58:e2:2e:f8:8d:e0:fe:41:b6:2e:80:7c:7e:db: 4f:82:ef:7a:a4:22:91:8c:97:61:fa:48:e4:6d:6c:e4:c1:f3: 0d:2f:77:25:12:05:27:8c:b9:42:72:86:31:4f:98:25:90:25: 86:24:f2:38:06:c4:ef:3c:99:55:bc:df:b0:b9:9b:3d:7c:ee: 72:de:19:a0:34:92:1c:e8:55:1a:2b:1a:93:21:83:a7:21:8a: e8:ac:98:01:d1:c4:52:4a:a5:a0:a2:41:c7:26:19:b3:d2:bd: 60:1d:64:37:63:44:8a:a8:e4:3f:45:f1:40:48:f5:69:32:88: 84:b7:50:8a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUH5aMZuvstS8ROG3WwAU465wJCqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1 MEQzQzlDNDAeFw0yNTEyMDYwMzM5MzZaFw0yNTEyMDcwNTM3MzZaMDMxMTAvBgNV BAMTKDc1OTNFMzZDM0Q2N0M2QjlERkFEMkQxMDMwNzQzQTEzRTJGRjA3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIYfdUt4u1xRnFNBuBPfSVMEW Vt+GlxaBlSMc+T1wVC2LR7QBhoMtutqcaA0g2j2VGlyrMNRuvgCdg35MetpGoFgR 9OGJAsKiibHVYEnydbDt8z7+AU8viMn93BGLBRgLzhzmSXnkhUxMN2c1zFV4MDL4 fGf9zNy01TGN56+tmGzRkUsgpOO/vQrrumt4qv62sG+gOtxmj28lMIGjAxyyL5MV BOmyKUxgx5+mJ8I/Sc+gKRBAhR8FegIIkmD8xXjHFioF0LYGCdvgFa5qLxrNwilZ LKYgfd2wTzaRq5gc1PSyV1FqSHr3Cq5PmVuAupKCfcnF1p+plwZS4d2JJUQLAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUdZPjbD1nxrnfrS0QMHQ6E+L/BzMwHwYDVR0j BBgwFoAUTvB9UUuh1rL72mxNw2C+t1DTycQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YemFHSkM0bTRCWXgyb21abkszdFo4cFV6R0NZR1NVblFkdm0xUUZMeVZz LzAvNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1MEQzQzlDNC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUYwN0Q1MTRCQTFENkIyRkJE QTZDNERDMzYwQkVCNzUwRDNDOUM0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1h6 YUdKQzRtNEJZeDJvbVpuSzN0WjhwVXpHQ1lHU1VuUWR2bTFRRkx5VnMvMC80RUYw N0Q1MTRCQTFENkIyRkJEQTZDNERDMzYwQkVCNzUwRDNDOUM0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA i6jlvnCeyJJfHXlE30olSLJlvgKGhH+ktJuFaQiQ8Cy4BhR/ro17ZXWi6YY/Ji4f PZgQASXt0tFNDdu8rMJLlFaOEy6we7iAcZdPzXBbdDQpZGvI5dC5dmPsO9UlRr1r p/fHlIgdE/mgJHzkVtBVjSIsE7sqi/hyz8Pci48Hw5w3E1jiLviN4P5Bti6AfH7b T4LveqQikYyXYfpI5G1s5MHzDS93JRIFJ4y5QnKGMU+YJZAlhiTyOAbE7zyZVbzf sLmbPXzuct4ZoDSSHOhVGisakyGDpyGK6KyYAdHEUkqloKJBxyYZs9K9YB1kN2NE iqjkP0XxQEj1aTKIhLdQig== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:30 2025 by rpki-client