This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json) Hash identifier: aRRbW4VbVdznNWhkOIUWHS8FqFlD/KwIWqNWebPifV0= Subject key identifier: 1A:D8:AF:CA:BF:A0:2D:80:E8:9D:30:2A:69:A6:FF:CE:16:30:C8:FE Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Certificate serial: 43438032879F871D646C8F562B581D24ECBD2C6F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft Manifest number: D4 Signing time: Sun 25 Jan 2026 09:43:19 +0000 Manifest this update: Sun 25 Jan 2026 09:38:19 +0000 Manifest next update: Mon 26 Jan 2026 11:40:19 +0000 Files and hashes: 1: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: y66qYtxldXIuuzLa4pCaEkYFngUuO6jeQ/8D5c/t8v4=) 2: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: CKT9eq9db0hVQOzidpjrrVebkbB2gnWWQf20Hwx3JYg=) 3: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: DoUiwvLldXedZMKPO5/MvjQN1fyNaVSFfpLYgpw6VZs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 11:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:80:32:87:9f:87:1d:64:6c:8f:56:2b:58:1d:24:ec:bd:2c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0 Validity Not Before: Jan 25 09:38:19 2026 GMT Not After : Jan 26 11:40:19 2026 GMT Subject: CN=1AD8AFCABFA02D80E89D302A69A6FFCE1630C8FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:16:f8:a4:47:b1:1c:84:da:ff:c1:1f:99: fc:8f:02:4e:c1:c2:28:a6:6f:4c:84:a8:5b:4b:d2: 29:e3:c0:1c:71:a1:76:b2:72:5f:42:c5:83:2c:0b: 61:d7:fb:a0:fd:e1:c6:c4:bb:d4:dd:00:97:7a:26: 54:94:aa:30:eb:d4:51:6c:3b:e8:6d:6f:46:35:d7: 7e:53:ed:5b:87:a2:62:bf:67:03:64:83:28:e5:f6: ae:e9:e2:e8:31:95:34:d7:40:21:33:23:8c:dc:53: 7e:d8:42:f4:5a:2c:cd:2b:ab:c7:7f:1d:d7:43:3f: 8c:d7:72:9f:83:08:a7:55:84:a4:ce:dd:8a:49:6a: bb:c9:9e:a9:9c:67:e4:f6:a9:20:bf:42:35:ab:36: 0d:87:d1:5c:2e:2f:14:c6:da:f0:b4:43:32:d5:36: c3:3c:41:f9:5a:89:e6:55:1d:c4:d9:57:d1:db:1f: 33:27:1f:0c:9f:cf:e0:8a:e8:84:62:f0:70:87:ab: 61:1a:6f:3c:5c:8d:98:90:6b:75:37:36:8a:a1:e3: 49:45:63:8d:18:86:c3:2b:a2:40:71:07:34:1d:50: 72:fc:56:ad:08:98:33:dd:69:df:b0:4f:02:ee:dd: e0:a3:d7:ba:a9:fe:27:80:8b:4b:6c:9d:03:80:cc: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D8:AF:CA:BF:A0:2D:80:E8:9D:30:2A:69:A6:FF:CE:16:30:C8:FE X509v3 Authority Key Identifier: keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:80:b3:e6:92:a5:a4:22:84:fb:25:e0:8c:ad:97:b8:32:aa: dd:cf:72:b9:08:f0:0b:b0:6a:68:43:54:63:75:75:06:e5:40: 70:d3:48:60:1e:6c:ea:ec:97:c7:45:39:4e:8a:8f:37:ed:3c: b9:e4:54:d1:6e:ff:7c:18:38:8d:89:31:c0:5d:99:ec:ec:42: c9:cd:7c:90:56:a0:59:68:1b:4f:29:a2:06:38:3e:12:ca:c9: e3:99:6b:e4:cd:c9:81:f2:9a:f2:9a:66:cd:1a:5b:c4:03:99: 73:62:cc:0b:7d:83:69:b1:dd:27:b5:56:04:91:6f:90:af:03: f8:0c:6e:5b:c4:39:66:b5:01:e7:6a:8f:e8:a8:9b:ea:73:0a: 02:fa:18:66:25:e3:ab:e3:19:92:98:c3:8b:0e:43:6f:dc:0d: 0d:fc:7f:0f:ed:34:e3:a4:32:40:17:55:4d:00:af:4e:87:fb: da:c2:a9:f3:31:3a:72:e1:5d:0a:fd:e4:39:2b:81:fa:98:b6: c2:06:f7:b6:cb:f3:20:67:96:f6:00:61:52:f4:ac:fa:8d:15: 73:57:12:85:2e:67:40:d1:19:ee:6c:cc:89:59:8a:3a:d2:96: 8d:34:51:c1:e3:78:9d:40:81:fd:b2:4c:f5:f1:66:ac:ff:f9: 30:38:18:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ0OAMoefhx1kbI9WK1gdJOy9LG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDOEFGNEE4MkU3OTE5REE1MDU4QjI4REMzNTc5MEE4 REEyNUJFMDAeFw0yNjAxMjUwOTM4MTlaFw0yNjAxMjYxMTQwMTlaMDMxMTAvBgNV BAMTKDFBRDhBRkNBQkZBMDJEODBFODlEMzAyQTY5QTZGRkNFMTYzMEM4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUhb4pEexHITa/8EfmfyPAk7B wiimb0yEqFtL0injwBxxoXaycl9CxYMsC2HX+6D94cbEu9TdAJd6JlSUqjDr1FFs O+htb0Y1135T7VuHomK/ZwNkgyjl9q7p4ugxlTTXQCEzI4zcU37YQvRaLM0rq8d/ HddDP4zXcp+DCKdVhKTO3YpJarvJnqmcZ+T2qSC/QjWrNg2H0VwuLxTG2vC0QzLV NsM8QflaieZVHcTZV9HbHzMnHwyfz+CK6IRi8HCHq2EabzxcjZiQa3U3Noqh40lF Y40YhsMrokBxBzQdUHL8Vq0ImDPdad+wTwLu3eCj17qp/ieAi0tsnQOAzBc9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGtivyr+gLYDonTAqaab/zhYwyP4wHwYDVR0j BBgwFoAUI8ivSoLnkZ2lBYso3DV5Co2iW+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNT OGsvMC8yM0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzhBRjRBODJFNzkxOURB NTA1OEIyOERDMzU3OTBBOERBMjVCRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjh0cEFUMnAxVzFnVFJ0MWVxR2NwUGtwdEdWbThSUjZEYWVucDVUeVNTOGsvMC8y M0M4QUY0QTgyRTc5MTlEQTUwNThCMjhEQzM1NzkwQThEQTI1QkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoICz5pKlpCKE+yXgjK2XuDKq3c9yuQjwC7BqaENUY3V1BuVAcNNIYB5s6uyX x0U5ToqPN+08ueRU0W7/fBg4jYkxwF2Z7OxCyc18kFagWWgbTymiBjg+EsrJ45lr 5M3JgfKa8ppmzRpbxAOZc2LMC32DabHdJ7VWBJFvkK8D+AxuW8Q5ZrUB52qP6Kib 6nMKAvoYZiXjq+MZkpjDiw5Db9wNDfx/D+0046QyQBdVTQCvTof72sKp8zE6cuFd Cv3kOSuB+pi2wgb3tsvzIGeW9gBhUvSs+o0Vc1cShS5nQNEZ7mzMiVmKOtKWjTRR weN4nUCB/bJM9fFmrP/5MDgYXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:37 2026 by rpki-client