This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft File: 43AAB70BF5D486443B357EA3923B581F0075D23A.mft (raw, json) Hash identifier: EJX7TYMfSL8YfzwNpvdAqzjrsWsZxl0ntQMtac+ulxk= Subject key identifier: C2:D4:A7:3C:20:1C:B6:BF:66:47:9D:2D:06:B9:36:85:FF:D7:FE:DB Authority key identifier: 43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A Certificate issuer: /CN=43AAB70BF5D486443B357EA3923B581F0075D23A Certificate serial: 78DFDDFE42FB4CB0B03D4AA62A156E4D87F7276F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft Manifest number: 25 Signing time: Sat 20 Dec 2025 05:04:12 +0000 Manifest this update: Sat 20 Dec 2025 04:59:12 +0000 Manifest next update: Sun 21 Dec 2025 08:06:12 +0000 Files and hashes: 1: 43AAB70BF5D486443B357EA3923B581F0075D23A.crl (hash: 8qO7gs7zHTgqU7KCY8naVQFPT+NhzN6kkiazL/mr4gM=) 2: 323830343a336237383a3a2f33322d313238203d3e20323636313531.roa (hash: QLb7skkEmJQF17WGWiLpN5j3LMyzuGsNwQnP4qVNzRQ=) 3: 3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa (hash: H9dv+DeRya1w3P02U1BRKsbDqLWpgPUpIvV9Tk+fnFM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 08:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:df:dd:fe:42:fb:4c:b0:b0:3d:4a:a6:2a:15:6e:4d:87:f7:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AAB70BF5D486443B357EA3923B581F0075D23A Validity Not Before: Dec 20 04:59:12 2025 GMT Not After : Dec 21 08:06:12 2025 GMT Subject: CN=C2D4A73C201CB6BF66479D2D06B93685FFD7FEDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:c9:d3:47:69:58:0c:ff:3d:25:cd:26:0f: c8:73:36:ad:cf:d5:a1:88:93:05:26:b7:10:64:f1: bc:73:d6:4c:2d:12:8e:f4:cb:ac:d4:ae:55:d2:60: fc:ab:d9:64:07:77:44:7e:5c:6a:c5:d0:0b:b1:ea: 69:29:f4:64:9d:21:6e:9b:eb:11:da:27:4d:e5:c2: ca:7e:26:50:a0:7e:56:f3:cd:b8:37:e6:91:79:11: c2:2c:ee:dc:08:6a:bd:d7:0c:7d:a6:d2:53:c7:e3: c5:7d:64:e4:79:61:46:76:e8:8b:1c:64:03:42:82: 6a:8d:1d:67:b7:4b:84:fc:30:3d:3e:de:c7:da:55: 1d:7f:5f:31:71:f9:ad:82:08:7e:79:6f:68:f1:c0: 4a:8b:bb:b3:19:9b:89:c4:78:3c:f0:21:47:49:97: 8a:2f:83:0f:25:b8:f0:a1:cd:9d:f7:18:bd:bf:4a: e0:a0:10:7e:66:62:f6:b8:44:83:55:b2:8d:60:f7: 3a:82:15:65:28:9a:fe:a3:48:f3:a4:67:d9:4f:16: 0e:8a:9b:4a:fa:20:c4:63:1e:14:f6:a8:7c:c4:81: 9e:07:04:7e:8a:e2:e6:a7:69:c1:8b:b6:35:5b:ac: c8:a8:c0:97:99:00:1e:d7:41:c4:77:2e:76:8b:3d: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D4:A7:3C:20:1C:B6:BF:66:47:9D:2D:06:B9:36:85:FF:D7:FE:DB X509v3 Authority Key Identifier: keyid:43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0e:5d:0e:a2:95:bd:cb:21:a5:41:2a:96:1b:37:06:a9:a9: 8b:4e:9d:a2:c0:f7:17:c3:69:42:52:c4:af:0c:5c:af:d3:e5: 41:a6:98:bf:4f:30:53:0a:a4:3b:e2:8d:be:60:f9:36:c2:f4: 01:d0:5f:78:1d:24:ba:85:fc:25:fb:39:1d:c1:76:cf:7f:95: e8:40:24:49:62:28:b1:ac:fa:c6:6c:cc:9a:dd:e7:a7:a5:52: dc:63:51:03:ea:59:ab:cd:51:01:4b:09:57:35:58:9d:0e:f2: cb:16:28:3f:72:b3:7e:0b:04:b9:7e:bf:2f:d5:1c:8e:81:2e: 92:ac:8c:32:6b:c7:c6:09:d4:4f:41:1d:43:02:93:09:74:58: ab:dd:42:6d:60:f4:5d:c2:49:2f:fd:b4:0a:f4:e4:2c:d4:07: f0:27:d0:1e:88:e0:07:82:e9:b4:ad:53:a2:e8:57:b6:32:56: 0f:0c:83:51:f9:13:48:9d:33:4c:2d:3a:5e:86:7c:39:20:db: 41:84:6d:01:b9:9e:28:c1:00:64:cc:86:32:73:70:93:1f:d1: 93:4b:37:72:c2:be:2f:5e:9f:0d:06:ba:09:c0:2f:27:ab:15: 2f:04:c5:22:fd:b5:2f:47:9d:dd:41:11:92:7c:94:1d:2b:2c: db:a1:8e:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeN/d/kL7TLCwPUqmKhVuTYf3J28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBQUI3MEJGNUQ0ODY0NDNCMzU3RUEzOTIzQjU4MUYw MDc1RDIzQTAeFw0yNTEyMjAwNDU5MTJaFw0yNTEyMjEwODA2MTJaMDMxMTAvBgNV BAMTKEMyRDRBNzNDMjAxQ0I2QkY2NjQ3OUQyRDA2QjkzNjg1RkZEN0ZFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GMnTR2lYDP89Jc0mD8hzNq3P 1aGIkwUmtxBk8bxz1kwtEo70y6zUrlXSYPyr2WQHd0R+XGrF0Aux6mkp9GSdIW6b 6xHaJ03lwsp+JlCgflbzzbg35pF5EcIs7twIar3XDH2m0lPH48V9ZOR5YUZ26Isc ZANCgmqNHWe3S4T8MD0+3sfaVR1/XzFx+a2CCH55b2jxwEqLu7MZm4nEeDzwIUdJ l4ovgw8luPChzZ33GL2/SuCgEH5mYva4RINVso1g9zqCFWUomv6jSPOkZ9lPFg6K m0r6IMRjHhT2qHzEgZ4HBH6K4uanacGLtjVbrMiowJeZAB7XQcR3LnaLPRjtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwtSnPCActr9mR50tBrk2hf/X/tswHwYDVR0j BBgwFoAUQ6q3C/XUhkQ7NX6jkjtYHwB10jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242 S2EvMC80M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUFCNzBCRjVENDg2NDQz QjM1N0VBMzkyM0I1ODFGMDA3NUQyM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242S2EvMC80 M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcA5dDqKVvcshpUEqlhs3Bqmpi06dosD3F8NpQlLErwxcr9PlQaaYv08wUwqk O+KNvmD5NsL0AdBfeB0kuoX8Jfs5HcF2z3+V6EAkSWIosaz6xmzMmt3np6VS3GNR A+pZq81RAUsJVzVYnQ7yyxYoP3KzfgsEuX6/L9UcjoEukqyMMmvHxgnUT0EdQwKT CXRYq91CbWD0XcJJL/20CvTkLNQH8CfQHojgB4LptK1TouhXtjJWDwyDUfkTSJ0z TC06XoZ8OSDbQYRtAbmeKMEAZMyGMnNwkx/Rk0s3csK+L16fDQa6CcAvJ6sVLwTF Iv21L0ed3UERknyUHSss26GOyA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:43 2025 by rpki-client