This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
File: 433BC56DE61BF5759F79705E437131F09597AF13.mft (raw, json)
Hash identifier: 5N6eXNWgqOgPjzDRKL4VxBPX1iUZR+Uf4+YeOjEYFVA=
Subject key identifier: 17:90:9C:B5:39:99:D1:DD:D6:F4:13:A7:B9:15:73:00:CF:2C:C2:31
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Certificate issuer: /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial: 4CA272DD24B1DF2118E52382629A39DCCDE916E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
Manifest number: 016B
Signing time: Thu 01 Jan 2026 15:57:08 +0000
Manifest this update: Thu 01 Jan 2026 15:52:08 +0000
Manifest next update: Fri 02 Jan 2026 19:19:08 +0000
Files and hashes: 1: 323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (hash: EZAq029zsCtQXRzu/J/8xnnemD6RLViOIikO8FPSvqE=)
2: 433BC56DE61BF5759F79705E437131F09597AF13.crl (hash: O9pUg3tO3NgUwYf00qQqYYgY3+LPVQZMZgWYXvF+d30=)
3: 34352e3137392e3133322e302f32322d3232203d3e20323639303739.roa (hash: lSHjL4SYeuodW0xgVpynxr5uWpWZiUN+/cxrqS2wpvk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 02 Jan 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a2:72:dd:24:b1:df:21:18:e5:23:82:62:9a:39:dc:cd:e9:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
Validity
Not Before: Jan 1 15:52:08 2026 GMT
Not After : Jan 2 19:19:08 2026 GMT
Subject: CN=17909CB53999D1DDD6F413A7B9157300CF2CC231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:17:41:e4:8a:c7:2c:e3:cf:59:bb:a9:ea:
8b:3c:80:43:7e:5b:1e:37:d8:da:6c:e6:7f:38:7a:
d0:85:12:9f:d5:3e:91:95:cc:8e:5e:f9:de:3c:49:
94:e3:00:58:35:59:dc:5b:ad:ad:67:f2:8d:c3:18:
18:8c:c2:a5:5b:1f:08:7f:87:5f:67:b7:d6:b2:4d:
4a:95:16:31:b6:d5:0e:5b:62:26:7b:16:c8:0b:d8:
f5:28:a2:a6:50:ca:65:7f:1b:e0:15:8a:29:eb:d1:
f4:15:dc:12:e9:18:e9:3c:95:57:a9:33:37:c7:36:
e4:be:75:2a:14:2c:f7:e6:e7:53:a1:fd:59:7a:83:
43:59:bf:d3:44:d8:08:de:42:59:8b:e4:33:a4:de:
c1:b0:d1:e3:3e:ad:02:f0:46:99:d3:fa:2d:86:c6:
d4:a2:98:e4:76:1e:b7:1e:b6:56:ab:8e:96:7e:9a:
78:ec:68:cd:b1:cc:8e:cd:8b:3c:ba:1c:9a:f6:06:
79:fe:b1:c2:8b:f2:f0:e2:8f:50:f8:6c:8f:3d:74:
b4:8c:cf:ad:f1:cf:cb:15:1a:82:c5:85:56:35:08:
38:b7:36:98:e7:b0:98:cb:e4:a4:b9:58:e1:5a:0e:
c2:31:1a:8d:7a:fa:2c:20:f0:e9:dc:05:61:bb:dd:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:9C:B5:39:99:D1:DD:D6:F4:13:A7:B9:15:73:00:CF:2C:C2:31
X509v3 Authority Key Identifier:
keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b9:25:22:90:e3:d7:64:78:a1:c5:b9:da:cb:18:7b:46:b0:
2b:fa:0f:d6:dd:99:ea:d8:8a:73:90:f3:fa:1c:0a:31:02:20:
f3:3d:41:da:25:92:0b:99:0b:75:37:6c:fa:c4:6d:13:bf:7d:
49:f4:0c:b4:74:c3:35:49:c5:2f:ad:c2:6e:04:9e:a9:ef:58:
42:60:2b:12:12:9c:fc:0c:d3:06:ef:03:db:3d:44:47:05:29:
d5:6f:4f:4c:92:57:c9:34:25:eb:f7:ec:31:4a:66:f7:6e:88:
70:75:6c:4c:64:0c:e5:8a:8b:03:ee:c9:cc:3c:d8:34:03:4a:
39:07:b3:5d:69:8f:58:e6:3b:99:50:57:5a:d3:68:82:6a:38:
09:65:6d:01:8b:33:66:fc:da:69:7b:da:dc:0d:08:64:fc:0e:
0d:2f:00:4e:0b:f2:bf:e5:2b:15:2c:ac:96:ac:d0:c8:ac:94:
01:8f:81:95:d5:f9:18:77:fd:29:0d:27:f5:64:5e:bf:d4:aa:
1a:7b:36:46:3b:f8:ce:36:c7:d7:fe:ac:48:ba:ba:f2:2b:c9:
e6:2f:f2:07:d7:ba:a8:83:df:7d:e2:80:5d:5d:80:6f:4a:7b:
09:de:87:46:6d:b4:dc:e2:44:10:ea:38:80:d0:26:c8:3c:76:
cc:ed:b7:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTKJy3SSx3yEY5SOCYpo53M3pFuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzQkM1NkRFNjFCRjU3NTlGNzk3MDVFNDM3MTMxRjA5
NTk3QUYxMzAeFw0yNjAxMDExNTUyMDhaFw0yNjAxMDIxOTE5MDhaMDMxMTAvBgNV
BAMTKDE3OTA5Q0I1Mzk5OUQxRERENkY0MTNBN0I5MTU3MzAwQ0YyQ0MyMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuxdB5IrHLOPPWbup6os8gEN+
Wx432Nps5n84etCFEp/VPpGVzI5e+d48SZTjAFg1Wdxbra1n8o3DGBiMwqVbHwh/
h19nt9ayTUqVFjG21Q5bYiZ7FsgL2PUooqZQymV/G+AViinr0fQV3BLpGOk8lVep
MzfHNuS+dSoULPfm51Oh/Vl6g0NZv9NE2AjeQlmL5DOk3sGw0eM+rQLwRpnT+i2G
xtSimOR2HrcetlarjpZ+mnjsaM2xzI7Nizy6HJr2Bnn+scKL8vDij1D4bI89dLSM
z63xz8sVGoLFhVY1CDi3NpjnsJjL5KS5WOFaDsIxGo16+iwg8OncBWG73UPZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUF5CctTmZ0d3W9BOnuRVzAM8swjEwHwYDVR0j
BBgwFoAUQzvFbeYb9XWfeXBeQ3Ex8JWXrxMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBn
cEQvMC80MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JDNTZERTYxQkY1NzU5
Rjc5NzA1RTQzNzEzMUYwOTU5N0FGMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rmp3TkZuWWMzQms1RmhyVFJVMUhBZXZjQUdUcURxTnlLam1YajlnRVBncEQvMC80
MzNCQzU2REU2MUJGNTc1OUY3OTcwNUU0MzcxMzFGMDk1OTdBRjEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbLklIpDj12R4ocW52ssYe0awK/oP1t2Z6tiKc5Dz+hwKMQIg8z1B2iWSC5kL
dTds+sRtE799SfQMtHTDNUnFL63CbgSeqe9YQmArEhKc/AzTBu8D2z1ERwUp1W9P
TJJXyTQl6/fsMUpm926IcHVsTGQM5YqLA+7JzDzYNANKOQezXWmPWOY7mVBXWtNo
gmo4CWVtAYszZvzaaXva3A0IZPwODS8ATgvyv+UrFSyslqzQyKyUAY+BldX5GHf9
KQ0n9WRev9SqGns2Rjv4zjbH1/6sSLq68ivJ5i/yB9e6qIPffeKAXV2Ab0p7Cd6H
Rm203OJEEOo4gNAmyDx2zO23Ww==
-----END CERTIFICATE-----
Generated at Thu Jan 1 18:05:22 2026 by rpki-client