This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft File: B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft (raw, json) Hash identifier: +M6yYSKwxp1tm9wrMjErxarSzqpBtkb/stVQYussUfQ= Subject key identifier: 56:92:CF:84:30:16:45:50:B4:9B:A6:32:97:1B:E8:8E:F7:EF:59:D5 Authority key identifier: B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91 Certificate issuer: /CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391 Certificate serial: 70670925E51A7CD06C21BEF5B2BF75EBE1DB2B21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft Manifest number: 023A Signing time: Sun 25 Jan 2026 07:32:37 +0000 Manifest this update: Sun 25 Jan 2026 07:27:37 +0000 Manifest next update: Mon 26 Jan 2026 09:26:37 +0000 Files and hashes: 1: 323830343a376133343a3a2f33322d313238203d3e20323731333535.roa (hash: awRXTG5/JiTvuAiBImObhWf3ci5YbXEW5AqPL0+mqo8=) 2: B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl (hash: u1iiO/C9M5jbSfBShM6EEH5YO2s0hWZLTwCOQBIh+ew=) 3: 3138312e3233322e3133362e302f32322d3234203d3e20323731333535.roa (hash: D9QppqLT7H6n7AuxOU5w0IV2pGii6IfXWxzdnP2nz5E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 09:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:67:09:25:e5:1a:7c:d0:6c:21:be:f5:b2:bf:75:eb:e1:db:2b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391 Validity Not Before: Jan 25 07:27:37 2026 GMT Not After : Jan 26 09:26:37 2026 GMT Subject: CN=5692CF8430164550B49BA632971BE88EF7EF59D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:bc:53:fe:10:c6:57:d3:ae:f8:17:47:7c: a0:14:be:dd:66:37:44:f3:f9:b9:46:aa:dd:b8:63: 75:16:27:7c:91:55:30:fd:28:e6:05:0c:e0:79:50: ff:bc:75:ca:47:5f:36:60:bd:55:1d:66:4b:90:55: b0:41:ea:83:e2:7f:18:f7:d6:78:68:d1:b9:af:6d: c1:62:c2:19:ce:09:23:3d:00:f6:84:a0:f2:02:36: f1:13:83:37:0e:53:1e:05:c1:96:07:d4:e8:98:30: 60:cf:90:87:07:0c:5f:da:0a:df:db:f5:3d:b0:57: 48:7d:83:ea:c0:31:90:0c:f5:f4:8b:20:d4:be:3b: 3b:c9:31:0f:1d:69:5d:7c:0b:25:9a:b8:00:75:62: 56:ac:7b:4d:54:a9:73:a2:cb:94:0e:a7:bf:9b:fd: f7:95:97:8d:74:a5:6e:bf:bc:15:16:e9:15:f9:d3: d9:f3:06:d4:4e:45:d9:86:c8:de:1b:bd:fb:de:59: b4:d7:0c:ca:59:e4:05:10:27:2d:c5:d3:fb:7c:81: ad:b7:74:3b:18:f5:ed:7f:3c:f7:e3:0f:a7:49:96: e6:35:a9:8a:e5:92:36:47:4a:9b:aa:63:97:aa:b1: 4a:32:f9:a1:8d:ca:a7:f3:b4:70:83:22:52:25:6d: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:CF:84:30:16:45:50:B4:9B:A6:32:97:1B:E8:8E:F7:EF:59:D5 X509v3 Authority Key Identifier: keyid:B0:9A:72:F7:DA:A1:90:5E:0B:89:C7:D8:FE:A0:3D:3E:21:E8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/B09A72F7DAA1905E0B89C7D8FEA03D3E21E85391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:36:7d:83:b8:8f:fb:63:e6:60:57:16:28:8d:fc:ab:e9:b8: 87:9c:fe:25:a7:10:62:b6:bc:12:a5:6b:ed:4f:ca:a1:7e:ca: 2a:e8:0f:e2:e2:81:67:be:65:0b:69:56:f4:4d:52:cc:b7:9c: 7d:17:18:a5:ad:4c:04:f6:37:93:aa:ff:b7:e2:c2:66:57:38: 37:2a:63:6a:25:ff:ad:19:7e:3a:10:1c:39:26:2c:a7:b0:f9: 74:56:cc:71:e0:45:3b:6b:bc:48:13:a0:e0:5f:ef:51:2a:d1: f5:11:76:57:32:cc:fb:c7:4a:5c:ca:20:fe:1d:bf:b5:d9:ba: 00:83:56:4a:87:6f:63:02:ca:89:10:98:a6:82:71:72:91:e8: fa:6c:ef:06:23:ca:47:2b:21:7f:12:7a:e6:4e:03:bc:dd:2b: ea:c0:98:95:47:75:bc:00:d7:6d:97:d1:96:d2:1c:4e:f7:fd: e1:bf:e0:a3:7a:0b:4d:5b:c5:1a:a5:d2:1c:8f:c8:3e:ea:82: 0f:56:7c:0c:e2:ca:72:75:1d:85:cd:f1:52:df:67:da:0a:cf: e7:7a:d1:c7:30:b9:4e:db:f7:20:93:b9:89:ce:93:8c:d4:21: 09:91:5e:e5:c9:e6:aa:f0:b1:b4:d9:7a:52:9e:ea:94:a8:ea: cb:7e:81:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcGcJJeUafNBsIb71sr916+HbKyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5QTcyRjdEQUExOTA1RTBCODlDN0Q4RkVBMDNEM0Uy MUU4NTM5MTAeFw0yNjAxMjUwNzI3MzdaFw0yNjAxMjYwOTI2MzdaMDMxMTAvBgNV BAMTKDU2OTJDRjg0MzAxNjQ1NTBCNDlCQTYzMjk3MUJFODhFRjdFRjU5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Z7xT/hDGV9Ou+BdHfKAUvt1m N0Tz+blGqt24Y3UWJ3yRVTD9KOYFDOB5UP+8dcpHXzZgvVUdZkuQVbBB6oPifxj3 1nho0bmvbcFiwhnOCSM9APaEoPICNvETgzcOUx4FwZYH1OiYMGDPkIcHDF/aCt/b 9T2wV0h9g+rAMZAM9fSLINS+OzvJMQ8daV18CyWauAB1Ylase01UqXOiy5QOp7+b /feVl410pW6/vBUW6RX509nzBtRORdmGyN4bvfveWbTXDMpZ5AUQJy3F0/t8ga23 dDsY9e1/PPfjD6dJluY1qYrlkjZHSpuqY5eqsUoy+aGNyqfztHCDIlIlbUMhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVpLPhDAWRVC0m6YylxvojvfvWdUwHwYDVR0j BBgwFoAUsJpy99qhkF4LicfY/qA9PiHoU5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0 VHgvMC9CMDlBNzJGN0RBQTE5MDVFMEI4OUM3RDhGRUEwM0QzRTIxRTg1MzkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwOUE3MkY3REFBMTkwNUUw Qjg5QzdEOEZFQTAzRDNFMjFFODUzOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0VHgvMC9C MDlBNzJGN0RBQTE5MDVFMEI4OUM3RDhGRUEwM0QzRTIxRTg1MzkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjDZ9g7iP+2PmYFcWKI38q+m4h5z+JacQYra8EqVr7U/KoX7KKugP4uKBZ75l C2lW9E1SzLecfRcYpa1MBPY3k6r/t+LCZlc4NypjaiX/rRl+OhAcOSYsp7D5dFbM ceBFO2u8SBOg4F/vUSrR9RF2VzLM+8dKXMog/h2/tdm6AINWSodvYwLKiRCYpoJx cpHo+mzvBiPKRyshfxJ65k4DvN0r6sCYlUd1vADXbZfRltIcTvf94b/go3oLTVvF GqXSHI/IPuqCD1Z8DOLKcnUdhc3xUt9n2grP53rRxzC5Ttv3IJO5ic6TjNQhCZFe 5cnmqvCxtNl6Up7qlKjqy36B+g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:18 2026 by rpki-client