This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft File: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft (raw, json) Hash identifier: Sd9U4dYS3UsptmvhsM5068c8nIWnCSQv93gJ+/xXpvY= Subject key identifier: 52:43:DC:42:F8:B7:D2:E3:A8:53:DC:BD:20:4C:E3:37:52:41:FF:4E Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 Certificate issuer: /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Certificate serial: 11973CE95EEBE23F3731AD4045F207221A233604 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft Manifest number: 035C Signing time: Tue 30 Dec 2025 10:14:28 +0000 Manifest this update: Tue 30 Dec 2025 10:09:28 +0000 Manifest next update: Wed 31 Dec 2025 13:40:28 +0000 Files and hashes: 1: 3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (hash: rEIptntol3bvN9Apv0evK+bT/pr64GrQa6zIT5wXlrI=) 2: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl (hash: WLiA2e6wqhAYF93Zcr7IDyDuJNCVRE4smaqKpT1Wxu8=) 3: 323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (hash: 8AHmINNTuIvylE8wzmf4Hk4M9s/xGc0DPLMYiUl530c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 31 Dec 2025 13:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:97:3c:e9:5e:eb:e2:3f:37:31:ad:40:45:f2:07:22:1a:23:36:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Validity Not Before: Dec 30 10:09:28 2025 GMT Not After : Dec 31 13:40:28 2025 GMT Subject: CN=5243DC42F8B7D2E3A853DCBD204CE3375241FF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:d8:b9:20:03:1b:93:86:b8:1e:0b:fc:c3: 22:30:20:4a:6a:ab:8a:41:cc:04:a1:29:b6:3d:a6: a2:04:60:22:43:7b:1b:96:1a:0a:70:ff:27:1c:68: ab:a3:cc:74:81:34:42:b3:15:ed:63:43:21:95:1a: 96:3d:ad:ff:5a:83:d8:24:34:73:47:3e:3b:16:49: fa:d8:5b:f0:7b:68:da:cf:4b:75:56:ad:5d:c6:18: 53:54:8c:40:ad:57:9d:82:c9:a4:9f:39:5c:31:54: 7a:b5:35:e2:9e:e1:2f:52:d3:9e:f8:73:61:15:88: 18:5e:21:d4:df:4b:bf:a7:e5:d7:2e:eb:25:de:1d: d0:55:ac:f2:f7:7a:1e:92:45:6d:d5:96:71:ff:bf: eb:26:bf:28:d9:04:12:17:12:7f:2c:7b:72:5a:48: 31:8b:6b:8e:b2:3f:a3:3b:7f:b1:c1:45:5e:e0:64: 37:be:70:c7:dc:2b:c0:0e:b3:d7:d1:a2:cb:ce:10: a3:97:fc:13:af:d3:b1:f5:a1:c0:bc:81:09:f3:0e: d5:d1:a4:ae:9c:98:52:f0:89:3a:f4:8e:4e:c0:38: 47:ef:bb:fa:e8:fc:b3:26:93:44:ac:2c:cf:0e:1e: aa:6e:4c:c5:4c:d8:b0:8d:08:6c:2a:00:a8:5e:58: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:DC:42:F8:B7:D2:E3:A8:53:DC:BD:20:4C:E3:37:52:41:FF:4E X509v3 Authority Key Identifier: keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ca:c8:3e:22:29:4b:ba:4f:17:b8:59:2e:89:03:22:5f:4c: 0c:e4:d7:18:e6:81:77:1a:53:9a:18:3f:d9:53:f6:70:42:9b: 13:58:2f:91:8e:60:46:5a:f1:87:6a:0a:51:e2:81:27:74:68: b8:c2:d9:9e:7b:a2:9d:0e:1b:ef:c2:c3:d8:53:57:a9:7d:45: 51:fa:89:ec:76:4f:d5:50:02:41:26:bc:17:d0:55:5a:8c:7a: 31:77:cc:9d:af:e2:e8:be:bf:d2:f4:03:34:ee:a2:5a:b9:d0: 3c:71:4e:d3:7f:d0:73:ea:0c:9b:2e:15:c6:34:a0:04:4e:60: 14:c0:57:ec:db:88:aa:b8:ed:76:b1:29:8b:ad:89:49:b1:9a: d3:bf:a0:bf:48:5d:fb:62:fd:63:d3:25:44:67:f7:7a:62:bf: 74:17:8d:b0:50:b0:37:5b:e5:5d:02:6c:c1:5f:e4:ce:bd:f6: 69:05:a5:20:32:ea:e5:85:6c:18:e6:99:31:7e:b3:86:dd:0f: fe:38:50:68:c9:7d:11:05:78:32:f4:62:ed:f0:ea:36:2a:1a: 58:d1:3a:da:db:5f:f7:a6:c1:21:aa:ea:ee:3e:a5:d4:a9:a5: d3:b8:5c:b5:c3:82:4f:c4:c7:2b:d6:09:48:62:82:35:65:4e: 55:d8:1d:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEZc86V7r4j83Ma1ARfIHIhojNgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5QjY1MzAyQTEzNjNGM0RDNzgwRkYzOUNCRUFFQjkw NjM3NEU3NTAeFw0yNTEyMzAxMDA5MjhaFw0yNTEyMzExMzQwMjhaMDMxMTAvBgNV BAMTKDUyNDNEQzQyRjhCN0QyRTNBODUzRENCRDIwNENFMzM3NTI0MUZGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMdi5IAMbk4a4Hgv8wyIwIEpq q4pBzAShKbY9pqIEYCJDexuWGgpw/yccaKujzHSBNEKzFe1jQyGVGpY9rf9ag9gk NHNHPjsWSfrYW/B7aNrPS3VWrV3GGFNUjECtV52CyaSfOVwxVHq1NeKe4S9S0574 c2EViBheIdTfS7+n5dcu6yXeHdBVrPL3eh6SRW3VlnH/v+smvyjZBBIXEn8se3Ja SDGLa46yP6M7f7HBRV7gZDe+cMfcK8AOs9fRosvOEKOX/BOv07H1ocC8gQnzDtXR pK6cmFLwiTr0jk7AOEfvu/ro/LMmk0SsLM8OHqpuTMVM2LCNCGwqAKheWMYTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUkPcQvi30uOoU9y9IEzjN1JB/04wHwYDVR0j BBgwFoAUS5tlMCoTY/PceA/znL6uuQY3TnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1 V1kvMS80QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOUI2NTMwMkExMzYzRjNE Qzc4MEZGMzlDQkVBRUI5MDYzNzRFNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1V1kvMS80 QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8rIPiIpS7pPF7hZLokDIl9MDOTXGOaBdxpTmhg/2VP2cEKbE1gvkY5gRlrx h2oKUeKBJ3RouMLZnnuinQ4b78LD2FNXqX1FUfqJ7HZP1VACQSa8F9BVWox6MXfM na/i6L6/0vQDNO6iWrnQPHFO03/Qc+oMmy4VxjSgBE5gFMBX7NuIqrjtdrEpi62J SbGa07+gv0hd+2L9Y9MlRGf3emK/dBeNsFCwN1vlXQJswV/kzr32aQWlIDLq5YVs GOaZMX6zht0P/jhQaMl9EQV4MvRi7fDqNioaWNE62ttf96bBIarq7j6l1Kml07hc tcOCT8THK9YJSGKCNWVOVdgdrw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:21:10 2025 by rpki-client