This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft File: A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft (raw, json) Hash identifier: 7IUJa9Yhg79I/zROZpgiF8FLpzjK+RGDkWatnJW1liQ= Subject key identifier: D2:A8:5F:4D:2B:F0:0A:53:C9:23:84:CA:A1:D0:DA:70:10:52:26:51 Authority key identifier: A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38 Certificate issuer: /CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338 Certificate serial: 25B2A5FB1350EC10B4B152FBD80143D7AAE17B1E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer Subject info access: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft Manifest number: 48 Signing time: Sat 24 Jan 2026 23:46:31 +0000 Manifest this update: Sat 24 Jan 2026 23:41:31 +0000 Manifest next update: Mon 26 Jan 2026 03:41:31 +0000 Files and hashes: 1: A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl (hash: Fs5Xj9cnNbvrX/OyKeOLO5Zn7wciitMbCJuxFceNWJg=) 2: 323830343a356562383a3a2f33322d3438203d3e20323632383636.roa (hash: 5E0Ifwta81LchCt92H2rxh4tPOU70g5Au1TMHbfMgYU=) 3: 3137372e31322e3234302e302f32302d3332203d3e20323632383636.roa (hash: d2HfhAlckHg4C6fC1rT/Khe5GGcuY40/8fSPstNqiY8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 03:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b2:a5:fb:13:50:ec:10:b4:b1:52:fb:d8:01:43:d7:aa:e1:7b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338 Validity Not Before: Jan 24 23:41:31 2026 GMT Not After : Jan 26 03:41:31 2026 GMT Subject: CN=D2A85F4D2BF00A53C92384CAA1D0DA7010522651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:38:79:15:b6:0f:da:0e:db:6c:d4:be:be: 12:ff:de:16:30:e5:cd:e6:19:a3:a4:bb:aa:de:30: c6:d6:22:2d:f4:74:b4:51:8d:0a:3a:45:4c:ff:23: e8:4e:49:5f:3d:17:61:05:8d:c2:99:c7:6f:90:d4: 2e:f5:54:2a:66:e3:3f:43:e2:77:a9:9b:59:08:97: 81:3e:0f:9b:0e:cb:f2:9f:57:1f:be:88:05:dd:3c: 99:66:aa:86:e2:08:d4:50:9d:95:03:03:b4:b6:22: e6:b4:d6:fe:4d:d1:0e:02:14:50:ce:0b:9a:ce:37: 12:b4:64:dd:84:4b:85:cf:1f:28:75:12:0d:32:b7: 06:9e:f5:0c:fc:96:2a:82:d6:ba:95:76:77:e9:3e: aa:45:a8:ff:59:be:77:1d:22:4a:a0:77:0b:57:a3: 6d:f1:25:ff:f9:cd:03:69:9b:c4:8b:7d:d1:9c:34: 69:f8:6b:c9:56:97:ed:11:70:7d:dc:cb:16:e1:fc: 7c:fe:61:e8:75:74:f0:ab:1e:0d:0c:f9:42:85:f1: fc:a5:0e:b1:b3:6e:e5:e4:54:94:70:2e:5e:55:3d: e9:ac:a6:a7:31:62:ae:52:c7:c8:5c:6a:1e:bb:6b: 02:b5:82:fc:11:19:b6:2e:b7:41:a3:08:55:b9:b7: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A8:5F:4D:2B:F0:0A:53:C9:23:84:CA:A1:D0:DA:70:10:52:26:51 X509v3 Authority Key Identifier: keyid:A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:55:51:f4:ca:2a:e6:6a:eb:74:85:0e:7c:7f:6d:4a:a8:c7: 1c:3f:69:40:df:03:53:7b:32:92:8e:62:43:38:5e:90:9f:40: f2:dd:84:23:aa:8f:90:54:b8:49:1c:59:4d:ff:3a:19:1f:86: b8:95:02:94:fb:8d:01:aa:3f:87:c9:5a:c4:b2:8a:cd:78:5d: 8f:6a:1a:71:b4:e9:82:a1:6c:23:3f:d6:ab:54:52:c0:32:8d: 51:9f:9c:8d:19:fd:e2:33:98:f0:3d:0f:30:63:bd:5e:b3:fd: bf:a7:fb:29:33:4d:ba:df:ef:c1:39:1c:a2:f3:82:8f:e1:1a: 90:7a:90:16:74:86:ea:bc:a5:02:65:71:fb:5d:e6:76:72:5e: f8:a1:32:a1:74:94:62:57:d0:b5:dc:57:db:8f:21:9a:b4:63: 77:36:13:2b:25:96:01:c7:b2:4f:93:bc:96:5d:37:39:82:fb: 3f:0a:88:c3:71:15:27:94:4a:67:2f:d4:30:2c:c4:da:8a:7c: b9:bc:ee:2b:a6:62:2a:2a:8a:b0:cb:62:d8:28:db:83:8a:87: fa:8b:e3:21:d4:4b:8e:1d:aa:b3:0b:04:77:5b:12:dd:3d:df: ea:bd:51:66:d2:b6:66:27:15:69:3e:d0:11:f8:da:13:02:e6: 19:3d:9c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJbKl+xNQ7BC0sVL72AFD16rhex4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMjk1MkQ2NUNEMkU5N0MxOUU3RDdBNzg4MEY3MkJD MUUwRjMzODAeFw0yNjAxMjQyMzQxMzFaFw0yNjAxMjYwMzQxMzFaMDMxMTAvBgNV BAMTKEQyQTg1RjREMkJGMDBBNTNDOTIzODRDQUExRDBEQTcwMTA1MjI2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TDh5FbYP2g7bbNS+vhL/3hYw 5c3mGaOku6reMMbWIi30dLRRjQo6RUz/I+hOSV89F2EFjcKZx2+Q1C71VCpm4z9D 4nepm1kIl4E+D5sOy/KfVx++iAXdPJlmqobiCNRQnZUDA7S2Iua01v5N0Q4CFFDO C5rONxK0ZN2ES4XPHyh1Eg0ytwae9Qz8liqC1rqVdnfpPqpFqP9ZvncdIkqgdwtX o23xJf/5zQNpm8SLfdGcNGn4a8lWl+0RcH3cyxbh/Hz+Yeh1dPCrHg0M+UKF8fyl DrGzbuXkVJRwLl5VPemspqcxYq5Sx8hcah67awK1gvwRGbYut0GjCFW5t/o/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0qhfTSvwClPJI4TKodDacBBSJlEwHwYDVR0j BBgwFoAUqBKVLWXNLpfBnn16eID3K8Hg8zgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T RWMvMC9BODEyOTUyRDY1Q0QyRTk3QzE5RTdEN0E3ODgwRjcyQkMxRTBGMzM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MTI5NTJENjVDRDJFOTdD MTlFN0Q3QTc4ODBGNzJCQzFFMEYzMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5TRWMvMC9B ODEyOTUyRDY1Q0QyRTk3QzE5RTdEN0E3ODgwRjcyQkMxRTBGMzM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFVR9Moq5mrrdIUOfH9tSqjHHD9pQN8DU3syko5iQzhekJ9A8t2EI6qPkFS4 SRxZTf86GR+GuJUClPuNAao/h8laxLKKzXhdj2oacbTpgqFsIz/Wq1RSwDKNUZ+c jRn94jOY8D0PMGO9XrP9v6f7KTNNut/vwTkcovOCj+EakHqQFnSG6rylAmVx+13m dnJe+KEyoXSUYlfQtdxX248hmrRjdzYTKyWWAceyT5O8ll03OYL7PwqIw3EVJ5RK Zy/UMCzE2op8ubzuK6ZiKiqKsMti2Cjbg4qH+ovjIdRLjh2qswsEd1sS3T3f6r1R ZtK2ZicVaT7QEfjaEwLmGT2c/w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:57:00 2026 by rpki-client