This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft File: 66DCAA5522EEEC15CC978DE673986E897244B698.mft (raw, json) Hash identifier: bghm2K+VXVUyRWd3142K0RcByn9R+UVIvatH4SKCuB4= Subject key identifier: A3:50:0D:73:DC:C0:9A:FB:3F:0A:5C:E4:A0:55:1E:F3:32:47:0D:C3 Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98 Certificate issuer: /CN=66DCAA5522EEEC15CC978DE673986E897244B698 Certificate serial: 14BD0C498D16D6A8B22B697AE47CFFEBDC269C70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer Subject info access: rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft Manifest number: 0344 Signing time: Sun 25 Jan 2026 02:23:02 +0000 Manifest this update: Sun 25 Jan 2026 02:18:02 +0000 Manifest next update: Mon 26 Jan 2026 06:17:02 +0000 Files and hashes: 1: 34352e3233352e302e302f32322d3234203d3e20323637333930.roa (hash: xxkzZlzNnmqYTshl6Uai4i2lv96/YrTBJknS6dRLNbA=) 2: 323830343a346363343a3a2f33322d3438203d3e20323637333930.roa (hash: hv7GJnPJJH69UkfbyS/UqD3tSNA9O787umB0YeWkrcY=) 3: 66DCAA5522EEEC15CC978DE673986E897244B698.crl (hash: 8Uq3plA8n7dFXpF6yyMGyj7IJ2mNWuh7vSP2PvFe3kU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 06:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bd:0c:49:8d:16:d6:a8:b2:2b:69:7a:e4:7c:ff:eb:dc:26:9c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698 Validity Not Before: Jan 25 02:18:02 2026 GMT Not After : Jan 26 06:17:02 2026 GMT Subject: CN=A3500D73DCC09AFB3F0A5CE4A0551EF332470DC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:e4:c2:50:d2:d3:21:be:d2:12:36:5e:91: 65:55:f4:43:49:08:55:8a:13:55:8c:ef:1d:02:cc: 2b:41:ec:91:45:b2:5e:46:e7:cc:4d:eb:f7:bb:39: bf:0a:38:ca:35:c0:cb:e2:d3:d8:82:74:89:fd:8f: c0:4b:76:ec:4a:cc:a3:a6:54:87:a3:07:d6:3d:20: e6:4b:5f:02:d8:14:6f:49:49:1c:8f:50:e4:8e:f7: 38:78:a2:6e:c6:a1:b6:f1:85:3a:6d:a6:2a:9d:51: 10:48:fa:90:a9:7e:5d:87:c4:5d:50:e6:c1:1d:cc: 2c:8c:9c:05:4e:76:36:be:ee:93:0f:1a:a2:b8:83: a0:99:ba:bd:a0:fd:e3:59:62:72:c9:d9:b1:ac:43: b0:29:a3:46:75:07:87:ff:e8:96:fd:e2:8a:e9:dc: 69:a7:95:63:eb:94:e8:79:e1:82:d0:24:1d:f3:a6: 9f:c2:33:25:15:d0:1a:54:f5:c0:25:b1:5b:14:d0: 5b:70:b9:6b:b3:f2:59:db:d2:17:ef:83:f5:9c:f7: 25:03:49:ab:78:15:e7:58:c3:62:a4:6d:ef:2a:67: ad:b2:6c:a1:c4:8d:0e:26:23:74:e7:88:f8:18:dd: cd:44:e3:1c:93:ae:a9:2a:14:f0:83:ef:d0:65:c4: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:0D:73:DC:C0:9A:FB:3F:0A:5C:E4:A0:55:1E:F3:32:47:0D:C3 X509v3 Authority Key Identifier: keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:68:b4:29:68:47:c9:e9:09:05:c7:d2:19:c9:ca:29:83:24: ff:be:89:4a:7d:4d:4b:e8:17:ac:b6:9a:4b:15:ec:e2:3c:8c: c6:76:f3:f7:ae:bc:19:ed:c3:09:53:5e:1b:a2:47:a2:d7:24: 6e:92:84:64:d1:2b:be:c4:17:b2:fc:85:db:88:4f:93:86:5b: 67:2e:2d:ba:7d:60:dc:ef:4e:5f:95:1f:06:4a:ba:5b:c7:49: 32:99:22:0b:33:a9:48:0c:4a:0b:97:8d:f7:53:ee:9d:4d:22: 26:c8:20:b8:20:df:ce:c2:fd:b6:e5:da:55:3d:f2:15:1d:6a: 67:e4:d7:ef:25:ab:85:53:6f:13:8e:e3:1b:4c:84:3f:78:be: 67:2e:51:af:1a:4d:35:15:e4:8b:3b:29:ef:62:a5:74:ac:d7: 26:7e:e9:c1:31:7d:89:fb:c1:b3:48:bb:e6:ac:be:c7:48:05: c4:53:3b:d6:71:b2:dc:0e:dc:95:24:78:bd:56:9f:d5:dd:a1: 47:79:39:31:3b:f9:c0:21:39:1d:59:e0:30:5d:20:e6:84:a9: 2f:fd:f6:21:2d:0c:b3:19:5e:17:ff:34:8b:91:86:71:95:0b: 89:1e:67:c7:55:a1:ce:09:0a:05:11:32:d1:b4:ca:7a:71:e4: ca:ca:11:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFL0MSY0W1qiyK2l65Hz/69wmnHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQ0FBNTUyMkVFRUMxNUNDOTc4REU2NzM5ODZFODk3 MjQ0QjY5ODAeFw0yNjAxMjUwMjE4MDJaFw0yNjAxMjYwNjE3MDJaMDMxMTAvBgNV BAMTKEEzNTAwRDczRENDMDlBRkIzRjBBNUNFNEEwNTUxRUYzMzI0NzBEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbOTCUNLTIb7SEjZekWVV9ENJ CFWKE1WM7x0CzCtB7JFFsl5G58xN6/e7Ob8KOMo1wMvi09iCdIn9j8BLduxKzKOm VIejB9Y9IOZLXwLYFG9JSRyPUOSO9zh4om7GobbxhTptpiqdURBI+pCpfl2HxF1Q 5sEdzCyMnAVOdja+7pMPGqK4g6CZur2g/eNZYnLJ2bGsQ7Apo0Z1B4f/6Jb94orp 3GmnlWPrlOh54YLQJB3zpp/CMyUV0BpU9cAlsVsU0FtwuWuz8lnb0hfvg/Wc9yUD Sat4FedYw2Kkbe8qZ62ybKHEjQ4mI3TniPgY3c1E4xyTrqkqFPCD79BlxDKdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo1ANc9zAmvs/ClzkoFUe8zJHDcMwHwYDVR0j BBgwFoAUZtyqVSLu7BXMl43mc5huiXJEtpgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5W YmsvMC82NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RENBQTU1MjJFRUVDMTVD Qzk3OERFNjczOTg2RTg5NzI0NEI2OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGhGUXV6TVJXb2NzM0Nzb1FDOHJrRkJFdkZ5enNiQzc1ajJZeXZVWU5WYmsvMC82 NkRDQUE1NTIyRUVFQzE1Q0M5NzhERTY3Mzk4NkU4OTcyNDRCNjk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVWi0KWhHyekJBcfSGcnKKYMk/76JSn1NS+gXrLaaSxXs4jyMxnbz9668Ge3D CVNeG6JHotckbpKEZNErvsQXsvyF24hPk4ZbZy4tun1g3O9OX5UfBkq6W8dJMpki CzOpSAxKC5eN91PunU0iJsgguCDfzsL9tuXaVT3yFR1qZ+TX7yWrhVNvE47jG0yE P3i+Zy5RrxpNNRXkizsp72KldKzXJn7pwTF9ifvBs0i75qy+x0gFxFM71nGy3A7c lSR4vVaf1d2hR3k5MTv5wCE5HVngMF0g5oSpL/32IS0MsxleF/80i5GGcZULiR5n x1WhzgkKBREy0bTKenHkysoR+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:05:22 2026 by rpki-client