This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft File: 42CDD454B3E8670C26A58056A69FE952D8C533F3.mft (raw, json) Hash identifier: NM2BTNFHExifaL9kuDAVs6D1TFOfxHpe3K3aHSZcFhc= Subject key identifier: 28:25:2D:23:2D:FE:5D:1E:20:AF:C1:CF:9F:3D:7F:81:8D:46:1E:FF Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 Certificate issuer: /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Certificate serial: 22353EAE1DE2EAF4E01B09095741501169629B28 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft Manifest number: 34 Signing time: Sat 20 Dec 2025 07:07:55 +0000 Manifest this update: Sat 20 Dec 2025 07:02:55 +0000 Manifest next update: Sun 21 Dec 2025 09:37:55 +0000 Files and hashes: 1: 3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (hash: WZuTtUN09mCdVgOP/CQKKArbd1YguwxIubngi24thqs=) 2: 323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (hash: mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=) 3: 42CDD454B3E8670C26A58056A69FE952D8C533F3.crl (hash: JM3HqUetMsmjZLGduYnpO004Bqm9nYK4pFVCpSMvxrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 09:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:35:3e:ae:1d:e2:ea:f4:e0:1b:09:09:57:41:50:11:69:62:9b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Validity Not Before: Dec 20 07:02:55 2025 GMT Not After : Dec 21 09:37:55 2025 GMT Subject: CN=28252D232DFE5D1E20AFC1CF9F3D7F818D461EFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:1d:c0:4d:f0:5e:dd:2d:4d:a0:4c:c8:f7: ac:54:2b:52:61:ad:af:87:99:09:5d:67:e5:46:00: 01:9c:b6:4f:7d:d2:0d:9f:e2:10:09:c7:85:f2:eb: f9:23:05:61:18:07:98:d3:3c:68:95:4a:93:95:39: bc:d5:29:11:5a:fc:52:fd:f0:e0:fb:bc:f0:87:67: d3:05:1f:3c:26:8a:15:b9:bd:0c:87:39:61:cd:0d: 43:f0:05:ce:77:1a:59:96:61:54:c5:b9:36:34:cb: af:80:3d:04:1b:5f:31:96:c7:b5:db:04:c6:d0:06: ab:8b:3f:8e:c0:26:60:12:72:79:70:79:ce:7f:c3: 32:9c:d0:30:75:72:4f:35:7a:f3:6e:93:14:10:b2: 9d:ed:1a:69:dc:cf:25:69:a9:08:12:13:b0:11:9c: bd:d9:1b:b5:08:95:74:08:c5:14:f3:4c:76:ce:36: 39:bc:1d:2b:76:8c:1c:eb:9b:6b:ed:d0:20:f9:be: 2b:22:44:b3:7f:65:9b:c9:c3:ea:2e:f1:98:3e:b2: 06:61:7c:eb:21:03:87:3c:80:51:6c:08:3d:94:25: 09:66:aa:b2:75:7d:95:90:91:14:e8:0d:93:32:e3: 7d:58:88:2c:23:d2:d8:42:60:44:ee:7e:26:2d:26: 6b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:25:2D:23:2D:FE:5D:1E:20:AF:C1:CF:9F:3D:7F:81:8D:46:1E:FF X509v3 Authority Key Identifier: keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1b:45:0b:13:47:a2:de:d7:12:e6:c3:1f:62:e6:e6:1e:c1: 63:1a:36:58:6e:ef:f6:c7:86:08:8c:b2:1d:bc:f4:a6:9d:68: dc:a5:bd:bb:7a:d2:87:2b:48:81:0b:ee:ce:98:1e:31:d4:00: 94:00:db:d9:c6:26:32:cb:6a:5e:d0:d2:55:85:34:c6:a8:99: 72:59:81:75:86:91:d9:2c:6c:b1:fe:1c:ea:da:51:29:6f:04: a6:6a:f6:5b:f7:27:8c:c8:7a:d7:21:4a:55:94:28:6f:b3:84: 01:99:d2:45:7b:ca:24:43:28:cd:a5:ea:5a:74:2e:a3:9d:dc: f3:1d:08:83:48:ad:94:43:5a:a6:6f:5f:f5:5b:56:4e:aa:79: 1d:fc:99:dd:95:ab:54:33:6e:f8:4f:4e:1e:2c:aa:c7:36:f9: e7:93:b9:8d:75:25:d1:33:90:20:94:ec:81:ec:f8:76:00:b7: 77:05:b0:c4:cf:14:42:04:e6:53:c0:d5:b1:d0:a2:a3:e4:fe: 94:41:05:c9:e1:50:e0:b8:79:e9:b6:7a:d0:15:43:cc:6a:25: e2:c4:62:45:d4:67:2b:30:f3:98:0c:e0:3c:77:34:48:93:54: 6c:d3:c1:7d:85:02:7b:36:67:c1:9a:14:53:c1:a8:17:39:0a: bb:67:14:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIjU+rh3i6vTgGwkJV0FQEWlimygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDREQ0NTRCM0U4NjcwQzI2QTU4MDU2QTY5RkU5NTJE OEM1MzNGMzAeFw0yNTEyMjAwNzAyNTVaFw0yNTEyMjEwOTM3NTVaMDMxMTAvBgNV BAMTKDI4MjUyRDIzMkRGRTVEMUUyMEFGQzFDRjlGM0Q3RjgxOEQ0NjFFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Kh3ATfBe3S1NoEzI96xUK1Jh ra+HmQldZ+VGAAGctk990g2f4hAJx4Xy6/kjBWEYB5jTPGiVSpOVObzVKRFa/FL9 8OD7vPCHZ9MFHzwmihW5vQyHOWHNDUPwBc53GlmWYVTFuTY0y6+APQQbXzGWx7Xb BMbQBquLP47AJmAScnlwec5/wzKc0DB1ck81evNukxQQsp3tGmnczyVpqQgSE7AR nL3ZG7UIlXQIxRTzTHbONjm8HSt2jBzrm2vt0CD5visiRLN/ZZvJw+ou8Zg+sgZh fOshA4c8gFFsCD2UJQlmqrJ1fZWQkRToDZMy431YiCwj0thCYETufiYtJmulAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKCUtIy3+XR4gr8HPnz1/gY1GHv8wHwYDVR0j BBgwFoAUQs3UVLPoZwwmpYBWpp/pUtjFM/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdU UDgvMC80MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0RENDU0QjNFODY3MEMy NkE1ODA1NkE2OUZFOTUyRDhDNTMzRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdUUDgvMC80 MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFhtFCxNHot7XEubDH2Lm5h7BYxo2WG7v9seGCIyyHbz0pp1o3KW9u3rShytI gQvuzpgeMdQAlADb2cYmMstqXtDSVYU0xqiZclmBdYaR2Sxssf4c6tpRKW8Epmr2 W/cnjMh61yFKVZQob7OEAZnSRXvKJEMozaXqWnQuo53c8x0Ig0itlENapm9f9VtW Tqp5HfyZ3ZWrVDNu+E9OHiyqxzb555O5jXUl0TOQIJTsgez4dgC3dwWwxM8UQgTm U8DVsdCio+T+lEEFyeFQ4Lh56bZ60BVDzGol4sRiRdRnKzDzmAzgPHc0SJNUbNPB fYUCezZnwZoUU8GoFzkKu2cUSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:07 2025 by rpki-client