This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft File: 509EF942F9C12C94CB01E7B74661B47CACA9126F.mft (raw, json) Hash identifier: CdOcBQUYC16xeuOvxBc0EUE4gR27MPRTWAiDBy0jSIk= Subject key identifier: 43:51:8E:B9:51:9F:72:99:B3:F3:EF:A9:1B:0C:03:26:28:D9:07:A7 Authority key identifier: 50:9E:F9:42:F9:C1:2C:94:CB:01:E7:B7:46:61:B4:7C:AC:A9:12:6F Certificate issuer: /CN=509EF942F9C12C94CB01E7B74661B47CACA9126F Certificate serial: 21BC1F550185FE8F421F54DC75E9C3FED761C818 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/509EF942F9C12C94CB01E7B74661B47CACA9126F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft Manifest number: 46 Signing time: Sun 25 Jan 2026 13:18:38 +0000 Manifest this update: Sun 25 Jan 2026 13:13:38 +0000 Manifest next update: Mon 26 Jan 2026 13:59:38 +0000 Files and hashes: 1: 323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (hash: Oht/tItHzp7Hz6Rczt/pKC8R1gBj0x0nH788dlXzZrE=) 2: 3230302e33362e3139362e302f32322d3332203d3e20323731343233.roa (hash: zVXFZl6oxvg6BnkEjHSyyicCu0b5hIdAWvYFvXFjrMI=) 3: 509EF942F9C12C94CB01E7B74661B47CACA9126F.crl (hash: 6nEyoNVSKcB/4F0p2lou6PNmBYaQTOOS7MiuCLRa2kQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.crl rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/509EF942F9C12C94CB01E7B74661B47CACA9126F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 13:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bc:1f:55:01:85:fe:8f:42:1f:54:dc:75:e9:c3:fe:d7:61:c8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509EF942F9C12C94CB01E7B74661B47CACA9126F Validity Not Before: Jan 25 13:13:38 2026 GMT Not After : Jan 26 13:59:38 2026 GMT Subject: CN=43518EB9519F7299B3F3EFA91B0C032628D907A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:19:0a:b1:5e:da:d0:b2:65:a0:15:5f:ba: b7:71:2c:c5:38:aa:0a:6a:a4:a0:94:3c:3b:15:d7: fd:d5:e3:52:51:a3:1a:8e:0d:25:6b:ea:63:5b:8b: 1b:c7:13:22:a2:0a:65:7f:67:d4:ad:c9:74:a1:e5: 9f:5c:66:66:3a:a5:72:5b:61:1d:f1:45:76:f2:85: 82:f6:68:90:82:aa:9c:39:60:5b:ec:c4:2b:81:1a: 93:95:4b:a0:9c:9a:11:ad:cc:b3:d7:67:d4:63:87: 68:37:59:78:ec:b7:9d:ca:03:4e:a5:02:7a:71:93: e4:75:77:86:c9:31:d1:96:49:52:c3:9f:2c:9c:16: 25:62:5f:e4:8a:24:5e:8a:c5:ac:bd:e4:95:41:c2: 1d:62:86:8e:27:3a:51:f9:ca:f5:e9:5b:7d:76:2d: 13:17:0f:da:90:a8:4a:cf:40:31:3a:19:af:32:c5: 9d:aa:47:fb:c7:77:ea:4e:ff:91:b4:fa:d5:3c:c5: c0:af:d7:f9:1d:c4:72:1f:44:7e:b7:25:d5:8e:cd: fd:b4:c4:4c:6b:fb:db:c3:e0:48:0c:90:32:76:d9: eb:b4:39:7c:23:25:2a:1e:f0:75:7a:59:f4:ba:44: 85:fd:d7:e3:4e:4c:33:23:d4:2c:ee:01:c5:c1:39: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:8E:B9:51:9F:72:99:B3:F3:EF:A9:1B:0C:03:26:28:D9:07:A7 X509v3 Authority Key Identifier: keyid:50:9E:F9:42:F9:C1:2C:94:CB:01:E7:B7:46:61:B4:7C:AC:A9:12:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/509EF942F9C12C94CB01E7B74661B47CACA9126F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/509EF942F9C12C94CB01E7B74661B47CACA9126F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:34:fb:12:70:e0:c7:44:ea:f2:80:33:f7:72:4b:d9:d7:a5: 0b:3c:f6:9c:37:e8:29:53:88:05:3d:e3:29:27:85:ff:b2:27: aa:52:35:65:dc:40:0c:8a:2a:bc:16:a2:13:5d:e5:04:dc:38: 7e:ed:67:51:32:49:3b:82:3a:78:2e:a1:90:d6:17:ab:1f:80: 35:94:d9:7d:5f:ae:18:7d:55:4b:99:14:b5:b8:b5:88:44:16: 64:b0:54:96:b9:66:4c:3b:69:bf:cf:61:b9:2b:3b:6d:8f:ab: 05:d3:50:b8:38:50:e4:ec:f1:b7:11:63:7d:7c:9f:48:c1:9d: 01:22:6a:cf:85:d1:d4:fd:73:59:90:7f:d3:16:6b:4a:97:49: 50:16:8c:65:20:ec:23:63:ca:1b:1b:42:cb:7b:f7:46:eb:e2: 5f:15:e2:5b:a0:58:af:d2:21:ec:74:5f:14:14:d2:0a:97:25: 84:2f:1c:2b:1c:46:d3:0b:3f:8c:51:31:19:3a:48:b9:6c:8f: 4b:d7:1e:68:a3:b4:14:73:da:6c:83:81:1e:7c:11:8f:57:49: 5f:93:4d:28:56:4a:6d:df:18:24:ee:34:31:ba:a7:0c:02:70: 34:d8:5b:6b:6b:fb:aa:b1:09:58:5c:bc:86:2b:b9:86:6f:c0: 66:d0:76:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIbwfVQGF/o9CH1TcdenD/tdhyBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5RUY5NDJGOUMxMkM5NENCMDFFN0I3NDY2MUI0N0NB Q0E5MTI2RjAeFw0yNjAxMjUxMzEzMzhaFw0yNjAxMjYxMzU5MzhaMDMxMTAvBgNV BAMTKDQzNTE4RUI5NTE5RjcyOTlCM0YzRUZBOTFCMEMwMzI2MjhEOTA3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRshkKsV7a0LJloBVfurdxLMU4 qgpqpKCUPDsV1/3V41JRoxqODSVr6mNbixvHEyKiCmV/Z9StyXSh5Z9cZmY6pXJb YR3xRXbyhYL2aJCCqpw5YFvsxCuBGpOVS6CcmhGtzLPXZ9Rjh2g3WXjst53KA06l Anpxk+R1d4bJMdGWSVLDnyycFiViX+SKJF6Kxay95JVBwh1iho4nOlH5yvXpW312 LRMXD9qQqErPQDE6Ga8yxZ2qR/vHd+pO/5G0+tU8xcCv1/kdxHIfRH63JdWOzf20 xExr+9vD4EgMkDJ22eu0OXwjJSoe8HV6WfS6RIX91+NOTDMj1CzuAcXBOZsZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ1GOuVGfcpmz8++pGwwDJijZB6cwHwYDVR0j BBgwFoAUUJ75QvnBLJTLAee3RmG0fKypEm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUy czYvMC81MDlFRjk0MkY5QzEyQzk0Q0IwMUU3Qjc0NjYxQjQ3Q0FDQTkxMjZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwOUVGOTQyRjlDMTJDOTRD QjAxRTdCNzQ2NjFCNDdDQUNBOTEyNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUyczYvMC81 MDlFRjk0MkY5QzEyQzk0Q0IwMUU3Qjc0NjYxQjQ3Q0FDQTkxMjZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDT7EnDgx0Tq8oAz93JL2delCzz2nDfoKVOIBT3jKSeF/7InqlI1ZdxADIoq vBaiE13lBNw4fu1nUTJJO4I6eC6hkNYXqx+ANZTZfV+uGH1VS5kUtbi1iEQWZLBU lrlmTDtpv89huSs7bY+rBdNQuDhQ5OzxtxFjfXyfSMGdASJqz4XR1P1zWZB/0xZr SpdJUBaMZSDsI2PKGxtCy3v3RuviXxXiW6BYr9Ih7HRfFBTSCpclhC8cKxxG0ws/ jFExGTpIuWyPS9ceaKO0FHPabIOBHnwRj1dJX5NNKFZKbd8YJO40MbqnDAJwNNhb a2v7qrEJWFy8hiu5hm/AZtB2tg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:50:51 2026 by rpki-client