This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft File: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft (raw, json) Hash identifier: 1NzkJotQMdFUAZV+HLl4riDQEi3V5DdxOsVYK2r5yJE= Subject key identifier: 86:56:E4:A0:0C:C5:71:60:60:1E:42:D4:97:D0:80:96:C7:73:EE:76 Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 Certificate issuer: /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Certificate serial: 3C28302896DF256D219EC4F7FF1FD30361B5430A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft Manifest number: 0354 Signing time: Wed 24 Dec 2025 16:32:41 +0000 Manifest this update: Wed 24 Dec 2025 16:27:41 +0000 Manifest next update: Thu 25 Dec 2025 16:39:41 +0000 Files and hashes: 1: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl (hash: hGZ1s3r80iosTY9JwoCrVzFR4TXmRBbd+M2dYy4cScE=) 2: 3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (hash: rEIptntol3bvN9Apv0evK+bT/pr64GrQa6zIT5wXlrI=) 3: 323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (hash: 8AHmINNTuIvylE8wzmf4Hk4M9s/xGc0DPLMYiUl530c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 16:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:28:30:28:96:df:25:6d:21:9e:c4:f7:ff:1f:d3:03:61:b5:43:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Validity Not Before: Dec 24 16:27:41 2025 GMT Not After : Dec 25 16:39:41 2025 GMT Subject: CN=8656E4A00CC57160601E42D497D08096C773EE76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:58:ae:55:97:e8:6e:a0:1a:64:96:6a:b7:7b: b7:ea:8b:ae:6f:2d:86:3b:c7:2f:59:53:b5:5b:8d: eb:7c:d8:77:92:ad:0e:f7:26:fc:c7:01:e9:df:8a: 9d:65:ca:8b:83:a7:ec:2c:5d:78:e5:53:36:15:91: 7f:ef:c2:8c:d9:0c:c5:9c:1f:fb:b2:86:a0:49:44: 19:41:07:c7:6a:36:ad:ac:93:ae:aa:ac:4b:67:57: fd:98:e8:61:19:46:a5:7b:8a:d0:ad:24:c5:f7:12: 02:c0:7a:15:2a:20:fd:c0:22:e9:00:32:b5:8d:57: e5:7f:e8:ae:ab:f0:7a:38:d7:c2:82:12:12:cb:66: b9:73:a4:cf:31:9d:f2:19:7f:56:26:ef:5d:2a:35: e0:25:76:01:68:d5:08:89:e6:1f:30:24:31:c9:80: d0:a5:32:f0:00:d7:00:45:f0:41:c4:e6:45:73:66: 39:5c:81:26:03:17:59:b6:75:d4:9a:5a:af:7c:7e: 9a:27:9f:96:1e:72:fc:a4:ca:f0:04:b0:c9:99:b8: af:a0:f0:75:6a:b0:f5:df:bd:de:d1:95:c3:bd:4e: 3b:b9:c9:d0:cb:1a:22:ed:1d:00:10:5e:73:35:fe: 7b:88:ee:fe:81:b5:89:0e:7b:46:63:74:7e:43:94: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:E4:A0:0C:C5:71:60:60:1E:42:D4:97:D0:80:96:C7:73:EE:76 X509v3 Authority Key Identifier: keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:52:18:99:6c:5c:f5:71:30:73:ca:ca:ab:94:c2:d4:cf:ed: bb:76:6f:e0:5b:b8:f1:8c:75:53:66:54:19:0f:5a:bb:9f:00: fe:c4:96:b5:83:65:d9:82:40:88:58:84:3f:4c:54:49:2c:2e: dc:93:35:33:36:8d:b7:42:51:4a:d0:62:f0:ee:8e:44:77:c1: 2e:c5:99:57:30:6b:51:40:92:db:cb:6c:45:1b:b9:9d:2d:8e: 7b:ed:55:50:05:2d:37:8f:c9:6c:5d:b6:d9:dc:24:63:c9:a2: 18:8a:5e:6c:17:df:d5:3f:c0:4c:f2:51:0c:22:9e:0e:60:71: 15:0f:80:c7:ba:1d:88:62:5f:0c:9f:43:69:0e:de:42:b4:e6: 5f:1c:d1:45:1f:36:83:5a:3c:6c:92:55:5e:68:8a:c6:ff:23: 71:27:91:07:6a:52:0f:21:a0:2f:10:17:76:fe:27:7a:d7:d4: e8:3b:7f:c2:26:f0:5e:69:fa:e8:30:72:33:f7:3b:21:29:ec: 79:5f:c2:9d:6c:1e:b5:2f:95:78:0c:15:7c:76:20:04:3a:be: 4d:6e:74:19:56:73:48:36:dd:69:67:6b:0c:7a:68:a5:3b:8f: b7:48:63:7a:e3:99:4b:9d:3d:87:bf:30:c9:ea:6f:50:2d:95: 6d:0b:62:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPCgwKJbfJW0hnsT3/x/TA2G1QwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5QjY1MzAyQTEzNjNGM0RDNzgwRkYzOUNCRUFFQjkw NjM3NEU3NTAeFw0yNTEyMjQxNjI3NDFaFw0yNTEyMjUxNjM5NDFaMDMxMTAvBgNV BAMTKDg2NTZFNEEwMENDNTcxNjA2MDFFNDJENDk3RDA4MDk2Qzc3M0VFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzWK5Vl+huoBpklmq3e7fqi65v LYY7xy9ZU7Vbjet82HeSrQ73JvzHAenfip1lyouDp+wsXXjlUzYVkX/vwozZDMWc H/uyhqBJRBlBB8dqNq2sk66qrEtnV/2Y6GEZRqV7itCtJMX3EgLAehUqIP3AIukA MrWNV+V/6K6r8Ho418KCEhLLZrlzpM8xnfIZf1Ym710qNeAldgFo1QiJ5h8wJDHJ gNClMvAA1wBF8EHE5kVzZjlcgSYDF1m2ddSaWq98fponn5YecvykyvAEsMmZuK+g 8HVqsPXfvd7RlcO9Tju5ydDLGiLtHQAQXnM1/nuI7v6BtYkOe0ZjdH5DlKdnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhlbkoAzFcWBgHkLUl9CAlsdz7nYwHwYDVR0j BBgwFoAUS5tlMCoTY/PceA/znL6uuQY3TnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1 V1kvMS80QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOUI2NTMwMkExMzYzRjNE Qzc4MEZGMzlDQkVBRUI5MDYzNzRFNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1V1kvMS80 QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFIYmWxc9XEwc8rKq5TC1M/tu3Zv4Fu48Yx1U2ZUGQ9au58A/sSWtYNl2YJA iFiEP0xUSSwu3JM1MzaNt0JRStBi8O6ORHfBLsWZVzBrUUCS28tsRRu5nS2Oe+1V UAUtN4/JbF222dwkY8miGIpebBff1T/ATPJRDCKeDmBxFQ+Ax7odiGJfDJ9DaQ7e QrTmXxzRRR82g1o8bJJVXmiKxv8jcSeRB2pSDyGgLxAXdv4netfU6Dt/wibwXmn6 6DByM/c7ISnseV/CnWwetS+VeAwVfHYgBDq+TW50GVZzSDbdaWdrDHpopTuPt0hj euOZS509h78wyepvUC2VbQticw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:32:41 2025 by rpki-client