This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft File: 43AAB70BF5D486443B357EA3923B581F0075D23A.mft (raw, json) Hash identifier: eGPEVkU8J+Wlr03hwrgKF8gLhsyC6b3E8scnMJqtVY8= Subject key identifier: 1C:63:C2:B2:AE:4A:61:BC:DF:53:A2:AE:3B:81:CC:47:57:C8:42:8C Authority key identifier: 43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A Certificate issuer: /CN=43AAB70BF5D486443B357EA3923B581F0075D23A Certificate serial: 26A2ECAA395C2E4622BFBFA84F5CEF29070B3845 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft Manifest number: 56 Signing time: Sun 25 Jan 2026 17:51:39 +0000 Manifest this update: Sun 25 Jan 2026 17:46:39 +0000 Manifest next update: Mon 26 Jan 2026 19:12:39 +0000 Files and hashes: 1: 43AAB70BF5D486443B357EA3923B581F0075D23A.crl (hash: n5+CGUa2xapZlFJN5dtumXw3HQygHt2uqsXi/x1CUyM=) 2: 3136302e3233382e3130342e302f32322d3332203d3e20323636313531.roa (hash: H9dv+DeRya1w3P02U1BRKsbDqLWpgPUpIvV9Tk+fnFM=) 3: 323830343a336237383a3a2f33322d313238203d3e20323636313531.roa (hash: QLb7skkEmJQF17WGWiLpN5j3LMyzuGsNwQnP4qVNzRQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 19:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a2:ec:aa:39:5c:2e:46:22:bf:bf:a8:4f:5c:ef:29:07:0b:38:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43AAB70BF5D486443B357EA3923B581F0075D23A Validity Not Before: Jan 25 17:46:39 2026 GMT Not After : Jan 26 19:12:39 2026 GMT Subject: CN=1C63C2B2AE4A61BCDF53A2AE3B81CC4757C8428C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:19:bf:b9:70:11:1d:b4:74:54:6c:c0:8a: 22:7f:64:1e:52:78:33:4c:c7:67:ae:98:ba:e2:a6: 2c:87:ad:07:df:04:6f:dd:e2:22:a8:64:a6:f3:d4: f9:c3:3a:8f:39:4d:a8:02:39:d7:6c:66:be:9a:cd: 82:3c:07:9d:60:65:79:25:af:b9:c9:cf:9c:57:aa: e0:c8:24:9a:bb:d6:9d:54:a8:74:0d:6b:dd:73:f4: b6:45:df:4e:5b:f7:50:d3:95:c2:c7:9f:03:d8:dc: c4:c7:eb:4a:c9:c9:df:85:ba:3e:fe:4f:78:64:2e: be:31:3c:c5:47:2b:d3:57:03:25:36:8e:00:c1:ec: ee:8b:35:ef:39:42:af:c7:65:11:84:12:26:b7:62: 29:74:31:76:41:1a:b8:9a:8a:f6:cd:b9:55:a3:28: cf:d0:c8:c6:52:e0:59:9e:87:88:9b:db:d2:59:0b: 28:52:a2:20:34:f6:b9:d2:17:af:53:9a:05:fd:86: a6:7f:9e:a1:54:55:e2:e0:8d:65:00:d9:1c:05:13: 01:93:bd:a3:f9:e1:a1:16:09:e4:3f:62:0d:3a:97: f4:1a:68:14:17:51:11:8b:70:d4:89:65:25:6b:aa: c7:7e:c9:2e:e0:af:b9:1e:f6:35:e9:da:91:95:fa: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:C2:B2:AE:4A:61:BC:DF:53:A2:AE:3B:81:CC:47:57:C8:42:8C X509v3 Authority Key Identifier: keyid:43:AA:B7:0B:F5:D4:86:44:3B:35:7E:A3:92:3B:58:1F:00:75:D2:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43AAB70BF5D486443B357EA3923B581F0075D23A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/43AAB70BF5D486443B357EA3923B581F0075D23A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ad:02:cc:ae:21:af:b5:f0:17:bc:71:71:8d:f2:e0:eb:81: f9:bb:01:40:df:ca:d4:37:f9:0f:88:d9:5a:d0:93:9e:e8:14: cc:41:95:c9:a2:0e:4c:fe:24:93:97:de:17:cb:a7:f6:9e:28: 94:6e:fc:96:6f:83:9c:10:50:55:d8:a8:5e:16:c1:03:3a:df: bd:dc:ed:38:3b:56:c9:12:ca:10:0c:c2:07:8e:71:b0:e0:b5: 0b:35:ee:e1:89:4d:89:18:4a:c0:37:28:4a:31:d4:74:a9:2a: 1c:e4:49:4f:95:4c:38:5b:32:b4:19:a2:bc:dc:91:b2:37:ff: 1d:15:54:fa:9f:09:90:79:1c:95:74:7c:d5:f8:b7:37:fe:b4: db:4b:b8:5a:8e:c6:7a:df:77:9d:99:ec:c7:78:4b:bd:7b:64: a9:f8:0d:7d:91:dd:a4:71:b6:a4:9c:1a:49:b4:0b:1a:0b:de: f2:c1:c0:a9:b6:ee:b7:6d:74:8c:2b:ab:13:a2:f2:99:1f:b0: 0a:3f:67:21:70:a9:35:f4:6a:a4:37:7d:1c:b6:b1:19:ff:90: 38:a1:8a:dd:11:4d:ed:59:e3:88:15:c5:7b:96:1c:8d:d0:b6: 39:7c:81:c9:06:29:79:c9:a4:a6:20:aa:bc:38:41:04:8f:34: 87:fb:9f:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJqLsqjlcLkYiv7+oT1zvKQcLOEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBQUI3MEJGNUQ0ODY0NDNCMzU3RUEzOTIzQjU4MUYw MDc1RDIzQTAeFw0yNjAxMjUxNzQ2MzlaFw0yNjAxMjYxOTEyMzlaMDMxMTAvBgNV BAMTKDFDNjNDMkIyQUU0QTYxQkNERjUzQTJBRTNCODFDQzQ3NTdDODQyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvmxm/uXARHbR0VGzAiiJ/ZB5S eDNMx2eumLripiyHrQffBG/d4iKoZKbz1PnDOo85TagCOddsZr6azYI8B51gZXkl r7nJz5xXquDIJJq71p1UqHQNa91z9LZF305b91DTlcLHnwPY3MTH60rJyd+Fuj7+ T3hkLr4xPMVHK9NXAyU2jgDB7O6LNe85Qq/HZRGEEia3Yil0MXZBGriaivbNuVWj KM/QyMZS4Fmeh4ib29JZCyhSoiA09rnSF69TmgX9hqZ/nqFUVeLgjWUA2RwFEwGT vaP54aEWCeQ/Yg06l/QaaBQXURGLcNSJZSVrqsd+yS7gr7ke9jXp2pGV+pgXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHGPCsq5KYbzfU6KuO4HMR1fIQowwHwYDVR0j BBgwFoAUQ6q3C/XUhkQ7NX6jkjtYHwB10jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242 S2EvMC80M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQUFCNzBCRjVENDg2NDQz QjM1N0VBMzkyM0I1ODFGMDA3NUQyM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEtLbmNTc1Fmb2s0c0pwZEhOd1hZdmhENmFqYkhDQ3F5djNlNG5GV242S2EvMC80 M0FBQjcwQkY1RDQ4NjQ0M0IzNTdFQTM5MjNCNTgxRjAwNzVEMjNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXK0CzK4hr7XwF7xxcY3y4OuB+bsBQN/K1Df5D4jZWtCTnugUzEGVyaIOTP4k k5feF8un9p4olG78lm+DnBBQVdioXhbBAzrfvdztODtWyRLKEAzCB45xsOC1CzXu 4YlNiRhKwDcoSjHUdKkqHORJT5VMOFsytBmivNyRsjf/HRVU+p8JkHkclXR81fi3 N/6020u4Wo7Get93nZnsx3hLvXtkqfgNfZHdpHG2pJwaSbQLGgve8sHAqbbut210 jCurE6LymR+wCj9nIXCpNfRqpDd9HLaxGf+QOKGK3RFN7VnjiBXFe5YcjdC2OXyB yQYpecmkpiCqvDhBBI80h/ufGg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:24:11 2026 by rpki-client