This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft File: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft (raw, json) Hash identifier: l3Fu2U+/S1Be5oNdf6nc3PVJDW4I6JAK7Vd5gXyMJow= Subject key identifier: 25:C2:5A:E8:C6:10:36:5E:90:D7:1D:26:E1:3E:82:AC:08:E9:39:24 Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 Certificate issuer: /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Certificate serial: 24082B105DA9202B34421A4EDE25C096D03569E1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject info access: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft Manifest number: 033D Signing time: Tue 16 Dec 2025 05:00:01 +0000 Manifest this update: Tue 16 Dec 2025 04:55:01 +0000 Manifest next update: Wed 17 Dec 2025 06:15:01 +0000 Files and hashes: 1: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl (hash: OMSzpjkZ9UiOu8kstOrD/k3RRF3u2c0MLMLGsiyeQbQ=) 2: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: 0afFfPJistXXEZlrXlXusI1hM5eNaq3t1i5SVTRNels=) 3: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: xsPWu5Oyc8zYvFSpUQl6AyPy98auaRdocgkmpbAT+rI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 06:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:08:2b:10:5d:a9:20:2b:34:42:1a:4e:de:25:c0:96:d0:35:69:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Validity Not Before: Dec 16 04:55:01 2025 GMT Not After : Dec 17 06:15:01 2025 GMT Subject: CN=25C25AE8C610365E90D71D26E13E82AC08E93924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:e7:8f:b9:8a:8c:6d:e3:c7:00:bc:f2:19: 90:05:33:3b:da:c4:dc:42:de:01:b0:46:b3:39:5e: 1d:b4:c4:ae:28:87:a1:39:c3:c5:ef:e8:e7:97:f1: 6e:80:06:ab:90:c5:eb:7d:bd:1a:85:28:b6:06:2f: 10:c2:48:98:3e:1d:ff:e8:da:12:9d:72:1e:b6:66: dd:5c:bd:dd:28:d6:35:21:a3:7c:6f:5f:d2:07:80: c4:09:96:a1:2a:af:f3:70:10:ac:cc:fe:45:9b:d6: bf:1f:1d:a7:ed:a9:23:06:bd:c5:73:b0:c2:de:1b: 3d:3c:ac:79:4b:9b:d2:15:57:55:20:40:28:c5:34: 68:eb:e9:46:34:8a:82:92:c8:3e:1e:28:01:5a:aa: 92:97:c1:6d:43:04:da:0a:09:3d:e9:43:08:6f:41: 83:84:d5:48:28:3c:6d:8b:a4:48:ae:f0:02:fd:58: 99:a3:bd:d9:84:7d:3b:9f:25:64:57:c7:b9:6e:e5: ac:ad:65:dc:08:f3:70:ca:b6:0c:25:53:b0:8d:c4: fd:99:d0:4b:0e:42:9a:97:e3:ee:7e:e4:ba:68:12: f5:50:11:d2:01:1a:70:7c:80:73:8a:18:db:b7:ec: 91:59:71:ff:0a:7d:86:95:5e:36:96:ac:20:ef:87: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:5A:E8:C6:10:36:5E:90:D7:1D:26:E1:3E:82:AC:08:E9:39:24 X509v3 Authority Key Identifier: keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:01:78:f5:62:6b:d9:67:08:79:0a:ae:8b:eb:0f:1e:7c:9a: 59:62:84:60:b4:4d:45:f5:47:b5:c1:67:c6:ad:fe:82:3a:6f: 78:98:20:38:da:10:9a:cb:8d:45:8e:d3:e7:49:68:ae:a0:f8: ff:64:bf:a5:5b:fd:e5:d3:8e:dd:94:6a:04:b5:6f:61:f2:cb: de:dd:cd:c2:4f:d6:85:0f:c6:74:28:ae:e4:c2:a0:99:62:d1: 75:fa:de:24:e2:a5:72:06:64:4d:6d:57:40:20:e2:a1:34:00: 10:18:ef:69:22:a1:ab:1f:bf:1a:ef:77:62:0c:87:24:91:2b: 79:e1:49:c3:cd:5e:f7:8d:e8:f9:ae:9d:e9:52:cc:71:96:af: 5c:f9:03:f8:15:f4:df:34:ec:66:71:e4:8c:5d:13:93:76:b3: c9:b1:72:45:8c:16:5a:6d:23:a5:84:37:ee:36:4e:cf:64:17: 51:6a:4b:e0:7b:1f:9e:24:3c:23:99:e6:66:99:9f:ce:5c:fd: 9c:35:a6:2d:a6:5a:39:cb:a8:ca:db:90:75:dc:8d:45:c5:a3: e7:28:5a:9a:b2:7f:1e:28:c0:ac:3c:05:9b:44:2d:59:a4:f7: 87:65:0e:9e:88:40:0b:4f:4c:98:86:a0:58:31:ca:44:d4:5b: 3f:60:12:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJAgrEF2pICs0QhpO3iXAltA1aeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBMjFBOEQ5MjhDQUJDMEM5RUYxMzg1MDYzNUIzMUVB RjNDMjY0MjAeFw0yNTEyMTYwNDU1MDFaFw0yNTEyMTcwNjE1MDFaMDMxMTAvBgNV BAMTKDI1QzI1QUU4QzYxMDM2NUU5MEQ3MUQyNkUxM0U4MkFDMDhFOTM5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyaeePuYqMbePHALzyGZAFMzva xNxC3gGwRrM5Xh20xK4oh6E5w8Xv6OeX8W6ABquQxet9vRqFKLYGLxDCSJg+Hf/o 2hKdch62Zt1cvd0o1jUho3xvX9IHgMQJlqEqr/NwEKzM/kWb1r8fHaftqSMGvcVz sMLeGz08rHlLm9IVV1UgQCjFNGjr6UY0ioKSyD4eKAFaqpKXwW1DBNoKCT3pQwhv QYOE1UgoPG2LpEiu8AL9WJmjvdmEfTufJWRXx7lu5aytZdwI83DKtgwlU7CNxP2Z 0EsOQpqX4+5+5LpoEvVQEdIBGnB8gHOKGNu37JFZcf8KfYaVXjaWrCDvh2UFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJcJa6MYQNl6Q1x0m4T6CrAjpOSQwHwYDVR0j BBgwFoAUTKIajZKMq8DJ7xOFBjWzHq88JkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZU c2cvMS80Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIxQThEOTI4Q0FCQzBD OUVGMTM4NTA2MzVCMzFFQUYzQzI2NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZUc2cvMS80 Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhgF49WJr2WcIeQqui+sPHnyaWWKEYLRNRfVHtcFnxq3+gjpveJggONoQmsuN RY7T50lorqD4/2S/pVv95dOO3ZRqBLVvYfLL3t3Nwk/WhQ/GdCiu5MKgmWLRdfre JOKlcgZkTW1XQCDioTQAEBjvaSKhqx+/Gu93YgyHJJEreeFJw81e943o+a6d6VLM cZavXPkD+BX03zTsZnHkjF0Tk3azybFyRYwWWm0jpYQ37jZOz2QXUWpL4HsfniQ8 I5nmZpmfzlz9nDWmLaZaOcuoytuQddyNRcWj5yhamrJ/HijArDwFm0QtWaT3h2UO nohAC09MmIagWDHKRNRbP2ASLA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:20:51 2025 by rpki-client