This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft File: 42CDD454B3E8670C26A58056A69FE952D8C533F3.mft (raw, json) Hash identifier: hg5cRRmuqwst9OWR2RvGvNX5DI+JgSBcIe4EaGUc+F4= Subject key identifier: 38:A0:30:04:B6:C8:24:0A:87:AC:4D:F0:42:DB:EC:5D:14:A0:8E:F4 Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 Certificate issuer: /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Certificate serial: 5CD4786D431B75CFD9C99692EA54E790BE56E6F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft Manifest number: 33 Signing time: Fri 19 Dec 2025 14:37:55 +0000 Manifest this update: Fri 19 Dec 2025 14:32:55 +0000 Manifest next update: Sat 20 Dec 2025 15:03:55 +0000 Files and hashes: 1: 3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (hash: WZuTtUN09mCdVgOP/CQKKArbd1YguwxIubngi24thqs=) 2: 323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (hash: mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=) 3: 42CDD454B3E8670C26A58056A69FE952D8C533F3.crl (hash: A1WyR0FNXQVh9U/wVDv06iCrteuTYQq5xV136dpwUhY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 15:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d4:78:6d:43:1b:75:cf:d9:c9:96:92:ea:54:e7:90:be:56:e6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Validity Not Before: Dec 19 14:32:55 2025 GMT Not After : Dec 20 15:03:55 2025 GMT Subject: CN=38A03004B6C8240A87AC4DF042DBEC5D14A08EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:46:63:b0:34:48:fb:50:f9:1b:7b:05:92: 66:ee:aa:da:bc:38:c8:16:2a:00:ca:05:81:f7:04: 6b:93:06:aa:e4:9d:4a:6e:a2:7a:cf:b5:da:ab:33: f7:f2:48:32:f4:55:57:98:85:3f:6b:29:0e:4a:52: a1:ee:6f:86:b4:06:54:9e:57:95:40:e9:f9:83:85: 9e:b7:bc:57:eb:97:76:27:49:84:55:a4:a0:ed:64: 8a:12:a7:0b:a0:ef:db:60:39:1c:04:97:0a:52:05: 6b:ef:b1:58:59:43:f2:2a:0e:17:56:8d:46:53:60: 9f:7f:a2:e9:b2:e6:f4:fc:eb:23:cb:76:71:24:8d: 00:36:b3:fa:ae:7b:08:76:17:03:66:65:78:5d:93: cd:a3:5c:c8:20:56:47:f1:6f:d3:f6:86:14:b1:47: f3:4a:57:c3:c0:b7:15:1c:78:2c:95:cd:e5:e5:3c: 10:62:22:e9:ee:57:7d:c1:8c:55:37:15:bc:e4:29: dc:e2:5a:c1:ab:8e:84:69:07:1b:82:08:c0:4f:1e: f5:e5:0c:5b:b7:6c:3a:df:2d:09:ca:e6:4f:c3:d3: ea:45:ff:62:84:b8:fd:01:16:b9:f0:15:86:61:50: f1:28:55:a4:ff:f5:0f:f3:81:c8:20:cc:c4:47:61: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A0:30:04:B6:C8:24:0A:87:AC:4D:F0:42:DB:EC:5D:14:A0:8E:F4 X509v3 Authority Key Identifier: keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9f:77:5f:17:40:67:08:47:8e:65:57:f5:a5:a5:5d:1b:1a: fa:c2:47:1e:3e:f4:47:23:8a:b5:82:65:a0:67:36:1d:af:04: 4c:b3:94:d3:af:be:06:65:26:1b:b4:32:41:5e:45:13:96:58: 95:b1:88:7a:a5:c2:a3:3e:1f:c0:5c:a5:61:87:ae:a2:1a:c7: 9e:80:f7:06:52:a2:98:e3:ab:d3:1a:6d:0c:d9:c7:54:78:30: d4:b2:66:9c:45:ef:f1:21:47:f8:f9:9a:9e:11:13:9e:fe:d5: 31:c4:1e:c8:18:d9:5d:60:df:11:fd:24:37:26:51:9e:c8:da: 45:42:9e:82:c1:71:bd:c5:30:e1:c2:82:0f:36:af:e4:19:81: 6e:65:cc:eb:d4:be:34:88:79:42:7b:53:a9:1a:3a:cd:1a:d6: 83:f3:b4:ca:74:8b:54:32:45:26:f1:24:2e:9a:b6:10:ff:87: e9:1c:c9:04:65:65:25:6d:17:e7:aa:e5:49:b1:bd:be:a3:9e: eb:cd:0b:20:01:1f:a2:a8:ba:d2:68:ad:9c:9c:0e:09:f4:c6: d8:92:5d:35:9a:e1:d7:81:ca:c9:14:0a:8d:03:27:0b:6d:0e: f0:bb:03:fa:8e:29:d9:ae:fa:47:cd:e5:50:7c:d3:e7:f8:aa: bd:ab:77:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXNR4bUMbdc/ZyZaS6lTnkL5W5vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDREQ0NTRCM0U4NjcwQzI2QTU4MDU2QTY5RkU5NTJE OEM1MzNGMzAeFw0yNTEyMTkxNDMyNTVaFw0yNTEyMjAxNTAzNTVaMDMxMTAvBgNV BAMTKDM4QTAzMDA0QjZDODI0MEE4N0FDNERGMDQyREJFQzVEMTRBMDhFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybkZjsDRI+1D5G3sFkmbuqtq8 OMgWKgDKBYH3BGuTBqrknUpuonrPtdqrM/fySDL0VVeYhT9rKQ5KUqHub4a0BlSe V5VA6fmDhZ63vFfrl3YnSYRVpKDtZIoSpwug79tgORwElwpSBWvvsVhZQ/IqDhdW jUZTYJ9/oumy5vT86yPLdnEkjQA2s/quewh2FwNmZXhdk82jXMggVkfxb9P2hhSx R/NKV8PAtxUceCyVzeXlPBBiIunuV33BjFU3FbzkKdziWsGrjoRpBxuCCMBPHvXl DFu3bDrfLQnK5k/D0+pF/2KEuP0BFrnwFYZhUPEoVaT/9Q/zgcggzMRHYbz9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOKAwBLbIJAqHrE3wQtvsXRSgjvQwHwYDVR0j BBgwFoAUQs3UVLPoZwwmpYBWpp/pUtjFM/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdU UDgvMC80MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0RENDU0QjNFODY3MEMy NkE1ODA1NkE2OUZFOTUyRDhDNTMzRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdUUDgvMC80 MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARZ93XxdAZwhHjmVX9aWlXRsa+sJHHj70RyOKtYJloGc2Ha8ETLOU06++BmUm G7QyQV5FE5ZYlbGIeqXCoz4fwFylYYeuohrHnoD3BlKimOOr0xptDNnHVHgw1LJm nEXv8SFH+PmanhETnv7VMcQeyBjZXWDfEf0kNyZRnsjaRUKegsFxvcUw4cKCDzav 5BmBbmXM69S+NIh5QntTqRo6zRrWg/O0ynSLVDJFJvEkLpq2EP+H6RzJBGVlJW0X 56rlSbG9vqOe680LIAEfoqi60mitnJwOCfTG2JJdNZrh14HKyRQKjQMnC20O8LsD +o4p2a76R83lUHzT5/iqvat3IA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:44:13 2025 by rpki-client