This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft File: C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft (raw, json) Hash identifier: DYWxuyMvnP8MxGUjDjtsicYRoarglC0cIEM2Rc4P3gQ= Subject key identifier: A2:E6:21:7F:18:A7:F9:21:FB:C9:59:2A:BC:7A:48:4D:13:94:86:D5 Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 Certificate issuer: /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Certificate serial: 33678C049292A7CF39E4AF6A3DA8A94F7E2B9271 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft Manifest number: 033E Signing time: Sun 21 Dec 2025 08:50:48 +0000 Manifest this update: Sun 21 Dec 2025 08:45:48 +0000 Manifest next update: Mon 22 Dec 2025 11:38:48 +0000 Files and hashes: 1: 323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (hash: l5tMqCIL7uBusTfXV1I+XZ+H5PbxWfeLrf5CFIwer+Q=) 2: C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl (hash: pmvckOljfwF/ePF87gD0NeTcJYSjNnPLryDt/OAmS/8=) 3: 34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (hash: xkndpxSWLgIvlVDbgR0GBVWnaeOnom0T/C1prhscmG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 11:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:67:8c:04:92:92:a7:cf:39:e4:af:6a:3d:a8:a9:4f:7e:2b:92:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Validity Not Before: Dec 21 08:45:48 2025 GMT Not After : Dec 22 11:38:48 2025 GMT Subject: CN=A2E6217F18A7F921FBC9592ABC7A484D139486D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:66:9c:ad:77:ef:0d:e9:fb:2a:e2:ac:23: 63:2f:6f:a1:c1:4c:28:5a:b4:d5:4f:fc:7b:c2:f2: b7:53:3f:9d:ca:f6:42:6d:8b:7b:25:85:a6:fe:a2: e4:3d:45:d0:89:47:00:6d:53:da:ac:22:2b:57:74: 08:06:2c:69:17:83:80:9f:cd:6c:05:af:f2:e1:12: 4e:c2:e6:a9:00:61:b9:11:8d:4c:1f:97:17:20:27: 4e:c9:c0:bf:d3:a6:c9:f6:60:4d:89:e0:ed:76:03: 69:d8:df:df:b0:81:65:02:48:be:81:43:74:2e:2d: c1:20:fe:42:ae:98:d0:9d:8e:45:6d:2b:a8:0e:c2: e0:f6:06:42:b8:67:d3:a8:e3:85:3c:77:08:22:d3: ac:f6:c9:fc:b2:c3:98:10:7f:dd:f7:af:d6:33:37: 9b:4d:9d:f2:f6:49:23:05:c7:e8:75:12:e1:51:d8: 36:26:34:c6:48:6b:77:65:a3:2e:7c:89:b7:d1:df: 23:69:98:d4:7a:3c:83:c8:e7:e2:6a:da:2e:b5:97: f6:c1:44:ae:4c:6e:90:6b:05:6d:b5:8d:6a:02:d7: b7:27:8c:54:16:6d:16:f7:05:d0:d9:87:da:df:c6: ca:a0:0e:a9:51:53:85:21:40:95:81:e3:d3:bb:e0: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E6:21:7F:18:A7:F9:21:FB:C9:59:2A:BC:7A:48:4D:13:94:86:D5 X509v3 Authority Key Identifier: keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f5:f6:4f:0f:51:dc:f7:9a:d1:3b:e3:de:13:19:f6:29:40: d6:66:05:e2:0f:65:7c:b9:9b:c7:c5:21:0b:f3:5b:c1:5b:3e: b8:0b:ab:f7:de:0e:9d:1c:4e:3d:7d:21:6d:45:2c:89:49:94: c0:2a:bd:99:61:f2:30:fd:ec:36:56:e9:a6:04:56:44:f6:47: 02:a3:5f:54:ca:d1:e9:ef:ff:73:3f:f7:b2:a0:58:59:a2:06: 8c:54:ff:3c:0a:84:8a:f9:40:1c:b9:fd:58:6d:5f:d7:ee:7f: b9:7b:ff:69:c2:f5:f1:d2:80:90:69:13:fa:a4:26:95:30:70: 32:ec:b1:5d:ba:8a:71:ab:12:cd:cc:dd:d6:04:08:fe:19:31: a5:53:57:fc:eb:8c:ea:2e:8a:63:9a:b5:67:0d:e9:22:b1:5c: 4e:41:f3:c1:16:17:c7:11:61:ed:a2:e1:af:06:7e:6d:0f:a5: 0e:a5:63:87:d3:ce:63:6a:04:30:77:78:36:8d:a2:cb:54:31: 30:19:86:cf:74:a7:28:ec:5c:a5:3b:67:6d:fc:fb:16:d2:18: f5:ff:3d:c9:52:3b:fb:98:f3:c8:fa:a5:6f:9a:20:9c:e7:c1: 54:fb:66:b6:fb:0e:d6:0f:43:18:f6:cd:cc:88:3b:70:d9:42: 30:b8:e3:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM2eMBJKSp8855K9qPaipT34rknEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQxNTkyMkY1QkRDQjJDRENGNUMyMTQyRDQ5RjgwRjg3 ODlBMEY0OTAeFw0yNTEyMjEwODQ1NDhaFw0yNTEyMjIxMTM4NDhaMDMxMTAvBgNV BAMTKEEyRTYyMTdGMThBN0Y5MjFGQkM5NTkyQUJDN0E0ODREMTM5NDg2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI2acrXfvDen7KuKsI2Mvb6HB TChatNVP/HvC8rdTP53K9kJti3slhab+ouQ9RdCJRwBtU9qsIitXdAgGLGkXg4Cf zWwFr/LhEk7C5qkAYbkRjUwflxcgJ07JwL/Tpsn2YE2J4O12A2nY39+wgWUCSL6B Q3QuLcEg/kKumNCdjkVtK6gOwuD2BkK4Z9Oo44U8dwgi06z2yfyyw5gQf933r9Yz N5tNnfL2SSMFx+h1EuFR2DYmNMZIa3dloy58ibfR3yNpmNR6PIPI5+Jq2i61l/bB RK5MbpBrBW21jWoC17cnjFQWbRb3BdDZh9rfxsqgDqlRU4UhQJWB49O74OZ9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUouYhfxin+SH7yVkqvHpITROUhtUwHwYDVR0j BBgwFoAUxBWSL1vcss3PXCFC1J+A+HiaD0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU SGMvMi9DNDE1OTIyRjVCRENCMkNEQ0Y1QzIxNDJENDlGODBGODc4OUEwRjQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0MTU5MjJGNUJEQ0IyQ0RD RjVDMjE0MkQ0OUY4MEY4Nzg5QTBGNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFUSGMvMi9D NDE1OTIyRjVCRENCMkNEQ0Y1QzIxNDJENDlGODBGODc4OUEwRjQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd/X2Tw9R3Pea0Tvj3hMZ9ilA1mYF4g9lfLmbx8UhC/NbwVs+uAur994OnRxO PX0hbUUsiUmUwCq9mWHyMP3sNlbppgRWRPZHAqNfVMrR6e//cz/3sqBYWaIGjFT/ PAqEivlAHLn9WG1f1+5/uXv/acL18dKAkGkT+qQmlTBwMuyxXbqKcasSzczd1gQI /hkxpVNX/OuM6i6KY5q1Zw3pIrFcTkHzwRYXxxFh7aLhrwZ+bQ+lDqVjh9POY2oE MHd4No2iy1QxMBmGz3SnKOxcpTtnbfz7FtIY9f89yVI7+5jzyPqlb5ognOfBVPtm tvsO1g9DGPbNzIg7cNlCMLjjcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:28:12 2025 by rpki-client