This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json) Hash identifier: bflh5qbWnTWFUyfr1gSbskNPTSLDAqIL5XFDeWo47AM= Subject key identifier: 7C:EB:7F:1A:9B:DE:B0:9A:BB:25:A4:E6:11:C4:03:D2:84:4D:83:F7 Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 1DD1EF7A3474BD524F35475C5E8621C6132FBD34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft Manifest number: 0322 Signing time: Sun 21 Dec 2025 06:01:05 +0000 Manifest this update: Sun 21 Dec 2025 05:56:05 +0000 Manifest next update: Mon 22 Dec 2025 06:27:05 +0000 Files and hashes: 1: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: Sbj9Ki9VD2l0O2RjYobR33TZD9sLfhT9BZLvSiBOick=) 2: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=) 3: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 06:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:ef:7a:34:74:bd:52:4f:35:47:5c:5e:86:21:c6:13:2f:bd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Dec 21 05:56:05 2025 GMT Not After : Dec 22 06:27:05 2025 GMT Subject: CN=7CEB7F1A9BDEB09ABB25A4E611C403D2844D83F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:0d:4b:98:95:a5:8c:91:cd:c6:4b:e5:e3: ed:a3:57:db:e1:a9:cf:3a:8a:9c:06:45:6d:ec:82: 47:15:4e:1e:8a:b0:74:9a:ec:40:1f:1d:7e:cb:5f: 25:49:00:61:9e:48:60:c0:be:d9:f2:dc:74:6e:93: 2c:90:67:12:72:13:01:09:77:1b:f0:50:c6:9b:ff: 66:8d:03:a5:85:25:a3:c5:46:83:83:4f:dc:34:3b: 3f:4f:de:29:64:54:0e:05:fc:75:16:70:40:af:07: 62:4d:a5:92:43:5f:ba:3c:f1:96:df:16:f3:4c:d4: 8b:39:19:64:73:de:1d:6c:81:ac:5d:37:64:1b:d5: 3c:71:e9:05:5c:82:ca:e8:28:46:6e:c8:69:e5:a3: f7:d2:cf:3a:e3:c2:b6:28:b9:37:00:05:e7:14:2d: 26:5a:6d:fa:ca:7d:c3:10:e2:4d:da:29:a8:85:51: ba:26:7a:3d:3f:91:90:f9:03:98:d5:48:f2:f0:43: 2f:07:16:d2:f4:ec:8b:78:85:41:6c:10:0f:f9:81: 7f:c1:1b:6f:c5:eb:d5:9c:45:18:fb:05:5e:00:a5: 3d:10:d9:61:30:c1:a3:fe:2e:36:69:3e:7f:b5:66: cf:94:a5:fb:b6:47:39:87:94:4b:ea:31:07:4e:03: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:7F:1A:9B:DE:B0:9A:BB:25:A4:E6:11:C4:03:D2:84:4D:83:F7 X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e4:02:8f:78:59:03:72:12:f0:ba:c2:b5:99:e3:32:c3:fd: b9:cb:89:d5:da:ea:96:5b:5a:92:2c:16:98:f6:aa:0c:8b:d4: 36:0a:56:7f:be:56:fb:79:6b:81:ac:1f:8a:7d:19:97:47:3e: 54:49:62:e9:93:05:d0:2b:75:5a:fe:e6:90:fa:d6:8c:11:65: ee:7f:67:b8:e6:ee:97:eb:a6:28:45:87:3d:18:b5:e1:c2:21: 63:5d:8b:3c:35:fe:58:97:3e:20:2f:e5:5e:97:98:49:9e:e7: dc:23:21:00:22:0b:f3:66:61:a2:89:5c:aa:ac:7c:0d:81:1b: 9f:4e:41:eb:c9:b2:89:58:d3:39:cc:e5:7d:2b:83:be:be:d8: b6:51:08:10:8d:50:09:8c:9d:23:31:95:c9:50:55:d6:4c:aa: 5c:af:5d:2a:f4:78:27:70:a5:f5:79:92:e2:c2:4c:6d:c2:f7: 78:2e:a8:ab:db:4b:df:2a:03:13:4c:60:4b:9d:be:fa:ae:9b: 92:ef:db:c2:2b:5f:70:bf:ba:75:c1:eb:8c:31:16:a2:8a:29: 1b:37:d5:33:b7:b2:99:9b:d5:22:f9:ba:f0:a3:3c:a9:28:1f: d3:2c:20:64:50:08:5e:34:ca:43:27:9c:59:a6:a2:a7:57:ed: 42:40:1a:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHdHvejR0vVJPNUdcXoYhxhMvvTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNTEyMjEwNTU2MDVaFw0yNTEyMjIwNjI3MDVaMDMxMTAvBgNV BAMTKDdDRUI3RjFBOUJERUIwOUFCQjI1QTRFNjExQzQwM0QyODQ0RDgzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXQ1LmJWljJHNxkvl4+2jV9vh qc86ipwGRW3sgkcVTh6KsHSa7EAfHX7LXyVJAGGeSGDAvtny3HRukyyQZxJyEwEJ dxvwUMab/2aNA6WFJaPFRoODT9w0Oz9P3ilkVA4F/HUWcECvB2JNpZJDX7o88Zbf FvNM1Is5GWRz3h1sgaxdN2Qb1Txx6QVcgsroKEZuyGnlo/fSzzrjwrYouTcABecU LSZabfrKfcMQ4k3aKaiFUbomej0/kZD5A5jVSPLwQy8HFtL07It4hUFsEA/5gX/B G2/F69WcRRj7BV4ApT0Q2WEwwaP+LjZpPn+1Zs+Upfu2RzmHlEvqMQdOA4yxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfOt/GpvesJq7JaTmEcQD0oRNg/cwHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80 Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxOQCj3hZA3IS8LrCtZnjMsP9ucuJ1drqlltakiwWmPaqDIvUNgpWf75W+3lr gawfin0Zl0c+VEli6ZMF0Ct1Wv7mkPrWjBFl7n9nuObul+umKEWHPRi14cIhY12L PDX+WJc+IC/lXpeYSZ7n3CMhACIL82Zhoolcqqx8DYEbn05B68myiVjTOczlfSuD vr7YtlEIEI1QCYydIzGVyVBV1kyqXK9dKvR4J3Cl9XmS4sJMbcL3eC6oq9tL3yoD E0xgS52++q6bku/bwitfcL+6dcHrjDEWooopGzfVM7eymZvVIvm68KM8qSgf0ywg ZFAIXjTKQyecWaaip1ftQkAaaA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:41:42 2025 by rpki-client