This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft File: 4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft (raw, json) Hash identifier: Eg+ik9cBob3H9GEnrrUxZeLpcb/d+U8qdBQA90AfLW8= Subject key identifier: 82:94:7E:9B:D9:28:AF:A4:11:F0:6A:70:E0:4C:11:02:C8:8A:8C:12 Authority key identifier: 43:44:C6:67:BE:8D:EC:17:04:E5:20:A9:E2:F5:1F:3F:AB:4C:82:3E Certificate issuer: /CN=4344C667BE8DEC1704E520A9E2F51F3FAB4C823E Certificate serial: 5FACFCDE5040AB35A9E830C047E3B78A2E6F196E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft Manifest number: 2C Signing time: Fri 19 Dec 2025 16:25:55 +0000 Manifest this update: Fri 19 Dec 2025 16:20:55 +0000 Manifest next update: Sat 20 Dec 2025 17:49:55 +0000 Files and hashes: 1: 4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl (hash: kl0WDpZEJdY9tkPwUpMUASh4MtORLjN3DgAaNQyYu4A=) 2: 323830343a343061303a3a2f33322d313238203d3e20323635393731.roa (hash: g9ZxmwuBBGgvfcXz82rXOx8e0Je42lZxnrHUbCx8U4s=) 3: 3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa (hash: IWBxK5KR8T2XvHkjdmtzgL+i9peJ5XPLTIG5K/vg9DQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 17:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ac:fc:de:50:40:ab:35:a9:e8:30:c0:47:e3:b7:8a:2e:6f:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4344C667BE8DEC1704E520A9E2F51F3FAB4C823E Validity Not Before: Dec 19 16:20:55 2025 GMT Not After : Dec 20 17:49:55 2025 GMT Subject: CN=82947E9BD928AFA411F06A70E04C1102C88A8C12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:6b:86:f6:c0:69:88:81:11:da:4e:05:d7: 64:ac:a1:64:6d:aa:1f:49:95:ef:cb:fe:73:a1:6e: e2:b4:93:46:f1:9d:c1:3b:c3:48:a0:d2:bb:41:cb: 8d:35:f4:74:cd:aa:81:c7:14:32:20:90:f6:13:09: f2:eb:04:8d:3f:a1:45:75:0f:e3:2c:05:4a:d7:4f: 0b:b2:f9:7a:90:72:f4:ad:ca:64:80:8f:2a:47:3d: e4:f7:d0:db:4f:79:e4:05:e5:fd:74:53:d1:1a:de: 15:95:8f:a6:ea:41:35:d4:29:d6:7d:36:18:25:88: 45:5a:7e:df:c7:e8:66:1a:1b:8f:a8:ed:85:aa:ce: dd:60:95:af:53:86:ee:7c:71:8e:d9:ef:7e:45:05: 0a:6d:a4:42:6e:c8:64:7d:2b:55:38:07:05:91:75: 17:e0:48:96:3a:f6:7b:fd:39:44:c5:aa:5e:32:3e: bb:29:f5:86:b3:94:22:52:fe:1d:ae:d6:a3:fd:92: 42:9b:3f:9f:24:d1:94:c8:95:9f:a6:94:c0:35:50: 0c:1c:34:ea:77:71:52:8c:3a:3c:48:ed:0e:d5:cd: ed:ac:2c:9b:1f:e1:55:96:19:43:1f:11:16:37:43: d2:fd:d2:20:32:f7:68:83:f5:55:43:6a:3f:e1:6c: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:94:7E:9B:D9:28:AF:A4:11:F0:6A:70:E0:4C:11:02:C8:8A:8C:12 X509v3 Authority Key Identifier: keyid:43:44:C6:67:BE:8D:EC:17:04:E5:20:A9:E2:F5:1F:3F:AB:4C:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/4344C667BE8DEC1704E520A9E2F51F3FAB4C823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:63:89:ee:c6:1b:97:16:cf:6e:ea:22:a0:94:89:15:d2:e1: c2:fd:79:cb:6a:ae:1a:da:7b:38:16:b7:2c:95:34:ee:ef:ec: 0b:ab:b4:e7:31:21:90:72:8a:67:20:cf:f3:18:f6:8a:13:3b: 2d:ca:f0:22:c4:34:7a:92:3a:a4:df:ec:27:a5:72:30:31:52: d3:f6:28:09:fe:8b:85:17:f6:c9:5d:a8:c6:30:8e:e2:ca:7f: 78:be:88:18:69:df:bf:3a:6b:74:34:16:20:97:28:4c:cc:4d: ce:a0:25:ad:0b:a8:b5:0f:9f:c8:29:c6:19:33:21:31:72:92: af:a5:b1:cd:27:b5:fd:d6:9f:e0:77:d9:44:ba:0f:4a:dd:40: 1b:a8:f4:68:8d:c2:97:72:d3:f0:d5:fc:71:f5:8b:f2:dd:54: 4b:fe:9a:d4:c1:1b:c1:f3:90:0a:ec:9a:2a:2a:39:e9:bb:8f: 7c:52:29:74:84:67:06:26:0e:fc:3e:28:07:f7:b5:95:50:a0: 5c:42:9a:10:e3:cc:b9:fd:de:71:94:31:95:8f:1e:fc:09:32: 2d:ae:e2:7b:c6:ff:18:d6:93:a2:9d:a5:91:87:e6:cd:19:64: d1:6d:d2:c3:71:a6:44:00:dc:da:89:33:87:59:41:db:76:77: 8c:e9:cc:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX6z83lBAqzWp6DDAR+O3ii5vGW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM0NEM2NjdCRThERUMxNzA0RTUyMEE5RTJGNTFGM0ZB QjRDODIzRTAeFw0yNTEyMTkxNjIwNTVaFw0yNTEyMjAxNzQ5NTVaMDMxMTAvBgNV BAMTKDgyOTQ3RTlCRDkyOEFGQTQxMUYwNkE3MEUwNEMxMTAyQzg4QThDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXWuG9sBpiIER2k4F12SsoWRt qh9Jle/L/nOhbuK0k0bxncE7w0ig0rtBy4019HTNqoHHFDIgkPYTCfLrBI0/oUV1 D+MsBUrXTwuy+XqQcvStymSAjypHPeT30NtPeeQF5f10U9Ea3hWVj6bqQTXUKdZ9 NhgliEVaft/H6GYaG4+o7YWqzt1gla9Thu58cY7Z735FBQptpEJuyGR9K1U4BwWR dRfgSJY69nv9OUTFql4yPrsp9YazlCJS/h2u1qP9kkKbP58k0ZTIlZ+mlMA1UAwc NOp3cVKMOjxI7Q7Vze2sLJsf4VWWGUMfERY3Q9L90iAy92iD9VVDaj/hbKOdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgpR+m9kor6QR8Gpw4EwRAsiKjBIwHwYDVR0j BBgwFoAUQ0TGZ76N7BcE5SCp4vUfP6tMgj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3RWWnNIUXpreGVDbUp3enNMdzNRZDVyaEVSNVV1RnJwVXVVNUZmYVhK VkwvMC80MzQ0QzY2N0JFOERFQzE3MDRFNTIwQTlFMkY1MUYzRkFCNEM4MjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNDRDNjY3QkU4REVDMTcw NEU1MjBBOUUyRjUxRjNGQUI0QzgyM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3RWWnNIUXpreGVDbUp3enNMdzNRZDVyaEVSNVV1RnJwVXVVNUZmYVhKVkwvMC80 MzQ0QzY2N0JFOERFQzE3MDRFNTIwQTlFMkY1MUYzRkFCNEM4MjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe2OJ7sYblxbPbuoioJSJFdLhwv15y2quGtp7OBa3LJU07u/sC6u05zEhkHKK ZyDP8xj2ihM7LcrwIsQ0epI6pN/sJ6VyMDFS0/YoCf6LhRf2yV2oxjCO4sp/eL6I GGnfvzprdDQWIJcoTMxNzqAlrQuotQ+fyCnGGTMhMXKSr6WxzSe1/daf4HfZRLoP St1AG6j0aI3Cl3LT8NX8cfWL8t1US/6a1MEbwfOQCuyaKio56buPfFIpdIRnBiYO /D4oB/e1lVCgXEKaEOPMuf3ecZQxlY8e/AkyLa7ie8b/GNaTop2lkYfmzRlk0W3S w3GmRADc2okzh1lB23Z3jOnMMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:21:58 2025 by rpki-client