This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft File: D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft (raw, json) Hash identifier: zAbPYt4liiM1zMVymIeZQliHrFNMpruW/9kJG/R3m8I= Subject key identifier: F2:E1:87:60:2B:3A:6F:07:63:C7:9E:B8:5D:26:81:B6:53:D8:05:4B Authority key identifier: D4:D7:B4:B6:F1:A1:DF:E5:DE:7C:71:D7:CA:00:0A:62:A3:3C:CF:F3 Certificate issuer: /CN=D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3 Certificate serial: 655EE97271F7EE1C8D26A477BC5572731F4375B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.cer Subject info access: rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft Manifest number: 4A Signing time: Sat 20 Dec 2025 02:34:02 +0000 Manifest this update: Sat 20 Dec 2025 02:29:02 +0000 Manifest next update: Sun 21 Dec 2025 05:24:02 +0000 Files and hashes: 1: 323830343a366331343a3a2f33322d313238203d3e20323730343434.roa (hash: kASh8zVYwE/Obyfpyxza9Q7wW/4pAtPYXYf8ziPeTOw=) 2: 3230302e32362e3235322e302f32322d3332203d3e20323730343434.roa (hash: MmleVkBml5/UZscO0CSe4h4eFsPXdrqauXOoF9cCo/U=) 3: D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.crl (hash: 4nK6XXuJQTVpGc40FE91+wheDp0RawMW++72M1lB3Lw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.crl rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5e:e9:72:71:f7:ee:1c:8d:26:a4:77:bc:55:72:73:1f:43:75:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3 Validity Not Before: Dec 20 02:29:02 2025 GMT Not After : Dec 21 05:24:02 2025 GMT Subject: CN=F2E187602B3A6F0763C79EB85D2681B653D8054B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:24:e1:e9:55:f3:8c:96:f4:4a:5e:26:a7: b2:93:b6:39:4e:60:08:d0:bd:92:ad:b0:64:62:be: 12:6f:18:eb:cb:d5:68:e0:77:e1:fb:ba:6f:4b:ad: f9:ef:3d:6b:df:11:da:4f:f9:5c:9c:05:08:1d:c8: 44:89:22:5e:05:50:db:ad:30:8c:eb:15:ef:1f:c0: dc:33:66:16:71:fe:87:94:c8:eb:ec:57:ae:31:8d: 90:fe:6b:6f:68:89:8c:4d:c2:8b:a9:df:13:84:55: 66:35:0d:51:5c:28:23:97:a1:d4:22:85:86:2d:62: b8:04:31:f0:9e:95:d9:71:56:31:86:fc:f8:72:70: ac:92:b8:08:cd:14:cc:d1:37:30:2f:ad:58:ea:5c: c0:71:b0:b3:c5:ec:21:cf:9a:74:4e:5e:c4:94:6f: 7b:f0:e0:a3:e8:5f:ac:f6:f7:5e:77:88:d7:63:b9: 20:f6:73:eb:80:48:54:bf:a9:60:98:c2:96:21:ae: ec:b3:46:3d:99:f9:da:bd:71:fd:8f:d3:7c:67:67: 23:04:d5:10:83:ce:fb:2d:c3:44:30:65:31:da:be: de:be:07:e6:5f:39:86:f3:35:88:55:4c:17:fa:b0: 24:39:25:61:03:d0:52:e4:d0:cb:e8:96:f4:85:4e: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E1:87:60:2B:3A:6F:07:63:C7:9E:B8:5D:26:81:B6:53:D8:05:4B X509v3 Authority Key Identifier: keyid:D4:D7:B4:B6:F1:A1:DF:E5:DE:7C:71:D7:CA:00:0A:62:A3:3C:CF:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/D4D7B4B6F1A1DFE5DE7C71D7CA000A62A33CCFF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:25:0a:74:ae:6b:87:7b:fa:92:a4:c3:0d:87:df:6a:14:01: 33:6e:b8:f7:04:6d:3c:a4:16:61:a6:eb:5d:16:e2:7b:9e:1a: 8b:d6:18:d9:f3:93:4f:dd:2b:cb:06:17:46:39:70:fe:18:44: 3b:2c:0f:f6:ee:7e:79:88:5d:9d:48:fd:61:5d:ad:12:bf:ab: 14:5b:9d:d7:ec:11:a5:7a:9c:c5:4e:72:08:d5:c3:3f:d3:56: 7a:94:1a:ae:ec:86:bb:f6:f8:a2:a8:64:2c:e5:b6:d7:0e:53: 0e:2c:74:12:3a:9d:d0:c5:6b:1b:8b:92:84:40:9c:4c:37:e4: e2:14:bf:9c:93:33:bf:01:fb:19:1a:45:a8:63:46:3f:ac:7e: 12:e1:6b:58:14:29:cf:07:52:c7:06:b6:e8:1b:b3:1c:14:b3: 8d:75:78:4d:1b:ee:17:71:cf:6b:fe:4c:0a:a1:1d:f0:e6:0c: dd:5b:8f:3a:df:4c:18:d5:3d:a5:3c:9e:94:83:b9:d2:7f:d3: cd:31:79:1a:98:db:1c:f5:1e:15:a9:79:c6:9c:91:6d:6b:9d: e9:b7:45:f0:9d:61:a1:af:ac:e6:fa:15:96:52:e8:07:18:ed: 91:55:34:8f:ed:da:1b:23:34:f4:75:60:d2:ec:26:c2:df:11: fb:ca:ef:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZV7pcnH37hyNJqR3vFVycx9DdbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREN0I0QjZGMUExREZFNURFN0M3MUQ3Q0EwMDBBNjJB MzNDQ0ZGMzAeFw0yNTEyMjAwMjI5MDJaFw0yNTEyMjEwNTI0MDJaMDMxMTAvBgNV BAMTKEYyRTE4NzYwMkIzQTZGMDc2M0M3OUVCODVEMjY4MUI2NTNEODA1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CiTh6VXzjJb0Sl4mp7KTtjlO YAjQvZKtsGRivhJvGOvL1Wjgd+H7um9LrfnvPWvfEdpP+VycBQgdyESJIl4FUNut MIzrFe8fwNwzZhZx/oeUyOvsV64xjZD+a29oiYxNwoup3xOEVWY1DVFcKCOXodQi hYYtYrgEMfCeldlxVjGG/PhycKySuAjNFMzRNzAvrVjqXMBxsLPF7CHPmnROXsSU b3vw4KPoX6z29153iNdjuSD2c+uASFS/qWCYwpYhruyzRj2Z+dq9cf2P03xnZyME 1RCDzvstw0QwZTHavt6+B+ZfOYbzNYhVTBf6sCQ5JWED0FLk0MvolvSFTofPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8uGHYCs6bwdjx564XSaBtlPYBUswHwYDVR0j BBgwFoAU1Ne0tvGh3+XefHHXygAKYqM8z/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTl1d3ZmY1NxbnlKZGlTbmlhcFFxNUNxRXZ5RUJNdkRyVk1RVzN3Nm9i Mm0vMC9ENEQ3QjRCNkYxQTFERkU1REU3QzcxRDdDQTAwMEE2MkEzM0NDRkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0RDdCNEI2RjFBMURGRTVE RTdDNzFEN0NBMDAwQTYyQTMzQ0NGRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTl1d3ZmY1NxbnlKZGlTbmlhcFFxNUNxRXZ5RUJNdkRyVk1RVzN3Nm9iMm0vMC9E NEQ3QjRCNkYxQTFERkU1REU3QzcxRDdDQTAwMEE2MkEzM0NDRkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMSUKdK5rh3v6kqTDDYffahQBM2649wRtPKQWYabrXRbie54ai9YY2fOTT90r ywYXRjlw/hhEOywP9u5+eYhdnUj9YV2tEr+rFFud1+wRpXqcxU5yCNXDP9NWepQa ruyGu/b4oqhkLOW21w5TDix0Ejqd0MVrG4uShECcTDfk4hS/nJMzvwH7GRpFqGNG P6x+EuFrWBQpzwdSxwa26BuzHBSzjXV4TRvuF3HPa/5MCqEd8OYM3VuPOt9MGNU9 pTyelIO50n/TzTF5GpjbHPUeFal5xpyRbWud6bdF8J1hoa+s5voVllLoBxjtkVU0 j+3aGyM09HVg0uwmwt8R+8rvgw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:59:33 2025 by rpki-client