This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft File: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft (raw, json) Hash identifier: CSONt6CS4PG1KPBx4Kuv7SIRw7ag8FNY2x4H6XOgUOo= Subject key identifier: 40:B7:6F:94:F7:9D:A2:35:72:71:7C:90:3C:0E:A9:C6:9C:1F:F9:73 Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1 Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1 Certificate serial: 4AD482F5403BBDB8AE9E6B65F04BF6CF96C7600C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft Manifest number: 033D Signing time: Tue 23 Dec 2025 17:06:09 +0000 Manifest this update: Tue 23 Dec 2025 17:01:09 +0000 Manifest next update: Wed 24 Dec 2025 17:35:09 +0000 Files and hashes: 1: 3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (hash: gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=) 2: 323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (hash: TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=) 3: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl (hash: B3LnR3ZpU4cCRBBpfz/Kufuvn1NdaAvQpE2ProXHjUQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 17:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d4:82:f5:40:3b:bd:b8:ae:9e:6b:65:f0:4b:f6:cf:96:c7:60:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1 Validity Not Before: Dec 23 17:01:09 2025 GMT Not After : Dec 24 17:35:09 2025 GMT Subject: CN=40B76F94F79DA23572717C903C0EA9C69C1FF973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b3:58:16:4e:9f:75:92:83:c9:93:df:d2:0a: 58:2d:e4:71:62:c3:0a:af:dc:16:05:03:31:f1:d8: 44:38:ee:d7:5f:b9:96:b0:7a:54:2e:7c:bc:a4:02: 7e:aa:49:b9:c1:a7:84:54:25:3d:83:97:75:6f:dd: 00:4d:c6:1a:2e:cc:88:1b:1a:7f:fe:55:b4:00:d4: 28:85:fb:5f:52:d5:e2:c4:17:83:1f:03:cf:87:56: bf:fb:3b:47:b8:a7:c3:56:fa:df:92:99:97:8b:3b: b7:6c:f6:c7:65:46:6d:3c:e9:64:25:c3:0d:05:17: 69:fa:5e:9f:f7:12:d4:de:51:54:f9:90:f1:23:54: 98:7b:3c:a6:7f:57:f7:80:6d:6b:3d:b8:65:77:bd: 47:c1:ca:f1:23:56:82:2d:ef:5f:09:62:e4:0d:72: db:2b:53:fc:14:3c:a8:d5:f0:48:1e:27:6f:59:f7: 15:63:e2:f7:7d:1d:34:67:16:43:7c:9a:e7:ea:3d: 36:9d:ba:80:fe:68:a4:d0:70:13:78:6d:64:b3:ac: b2:61:f3:6d:44:a8:0f:a4:50:16:23:4c:b4:c4:ac: 6d:89:a1:71:c9:dc:63:41:24:99:41:47:38:bb:96: 48:7c:76:75:13:be:8d:99:0c:69:56:e3:dd:69:fb: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:6F:94:F7:9D:A2:35:72:71:7C:90:3C:0E:A9:C6:9C:1F:F9:73 X509v3 Authority Key Identifier: keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ec:cb:d8:62:84:cf:02:7c:7a:c2:ea:90:5e:0a:60:bd:a7: f6:17:62:92:6a:6d:74:64:73:72:c5:9a:78:5a:1d:08:12:a2: 0d:cb:9f:02:e8:28:bb:f6:a4:2b:d5:38:3c:a8:49:72:c3:34: d1:ed:a5:df:49:e6:02:5f:66:9c:6b:48:4c:e2:8f:fc:b9:89: 82:e5:71:de:e8:55:45:24:48:bf:9f:cf:e5:6d:b0:c4:ce:10: 56:67:2a:24:4f:8f:4d:af:9f:a1:b6:80:66:08:8c:0b:4d:48: d9:55:cb:a6:db:f2:b3:90:56:15:2b:47:0c:6b:d6:01:da:01: 11:4a:14:ba:9a:19:b0:1e:c6:7e:87:ec:bd:ba:df:d2:bc:b6: ab:7b:eb:c4:e2:a8:34:73:d0:39:ce:fd:e8:aa:6f:43:71:e8: 5a:b5:47:c4:b0:df:57:ae:48:f4:a0:73:05:88:d1:0e:51:b7: 24:76:95:81:0d:5b:2c:e8:4b:0b:31:a7:ec:be:fc:32:0f:b8: e6:e7:42:c5:5e:1d:77:df:09:ea:1a:d6:c8:4a:c0:4b:2b:15: 9b:2c:26:65:79:a3:97:1a:8a:88:a2:22:87:eb:e3:d7:06:04: ce:24:a7:f9:9c:db:d6:99:3a:75:7b:a5:d3:37:70:71:49:3d: 7d:5d:65:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUStSC9UA7vbiunmtl8Ev2z5bHYAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC Qzg1OThFMTAeFw0yNTEyMjMxNzAxMDlaFw0yNTEyMjQxNzM1MDlaMDMxMTAvBgNV BAMTKDQwQjc2Rjk0Rjc5REEyMzU3MjcxN0M5MDNDMEVBOUM2OUMxRkY5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDys1gWTp91koPJk9/SClgt5HFi wwqv3BYFAzHx2EQ47tdfuZawelQufLykAn6qSbnBp4RUJT2Dl3Vv3QBNxhouzIgb Gn/+VbQA1CiF+19S1eLEF4MfA8+HVr/7O0e4p8NW+t+SmZeLO7ds9sdlRm086WQl ww0FF2n6Xp/3EtTeUVT5kPEjVJh7PKZ/V/eAbWs9uGV3vUfByvEjVoIt718JYuQN ctsrU/wUPKjV8EgeJ29Z9xVj4vd9HTRnFkN8mufqPTaduoD+aKTQcBN4bWSzrLJh 821EqA+kUBYjTLTErG2JoXHJ3GNBJJlBRzi7lkh8dnUTvo2ZDGlW491p+xirAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQLdvlPedojVycXyQPA6pxpwf+XMwHwYDVR0j BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0 OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0OTMvMC9G RDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGOzL2GKEzwJ8esLqkF4KYL2n9hdikmptdGRzcsWaeFodCBKiDcufAugou/ak K9U4PKhJcsM00e2l30nmAl9mnGtITOKP/LmJguVx3uhVRSRIv5/P5W2wxM4QVmcq JE+PTa+fobaAZgiMC01I2VXLptvys5BWFStHDGvWAdoBEUoUupoZsB7Gfofsvbrf 0ry2q3vrxOKoNHPQOc796KpvQ3HoWrVHxLDfV65I9KBzBYjRDlG3JHaVgQ1bLOhL CzGn7L78Mg+45udCxV4dd98J6hrWyErASysVmywmZXmjlxqKiKIih+vj1wYEziSn +Zzb1pk6dXul0zdwcUk9fV1lhA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:40:24 2025 by rpki-client