This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: t6ZA6EoiTI96Q17citOptREW8R0VAGfcOMmL++0n1gk= Subject key identifier: 7D:28:CE:1C:65:98:B1:1A:A2:95:CA:96:06:2F:C3:22:27:FF:8C:DC Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 4ACF9EACC6226BC5FA90956364A8C4417D9761EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 0372 Signing time: Sun 25 Jan 2026 16:25:27 +0000 Manifest this update: Sun 25 Jan 2026 16:20:27 +0000 Manifest next update: Mon 26 Jan 2026 19:56:27 +0000 Files and hashes: 1: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: edA3Rs6eMjpScHqME9Ghe5dGKocqfYma+Nqo84HmhRQ=) 2: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: N0iF9kAWBE4X/FLd2T4A91ryGvhoTMA6eRSJgU7I2ok=) 3: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: KM9thWqBbCezSnN/udktn45yMz+Zf63QSRQur/etjgw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cf:9e:ac:c6:22:6b:c5:fa:90:95:63:64:a8:c4:41:7d:97:61:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: Jan 25 16:20:27 2026 GMT Not After : Jan 26 19:56:27 2026 GMT Subject: CN=7D28CE1C6598B11AA295CA96062FC32227FF8CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:6e:a5:55:7f:57:c1:1c:5d:dc:09:2f:a9: 60:02:3a:55:2a:df:ce:86:08:e8:59:0b:f4:55:3f: d1:a8:11:8d:33:17:70:67:ec:14:e1:b1:55:04:ca: 8e:2e:80:e4:67:c7:39:f3:66:1e:2e:95:9c:75:54: ca:3a:ef:5e:e5:ff:68:00:f7:c5:74:da:37:47:5f: 3a:d5:42:d2:cf:3e:f6:eb:85:d9:55:7d:8e:8b:35: c6:9e:9c:6c:68:65:e6:00:00:fe:6e:b1:c3:3a:71: 59:21:6a:46:3e:91:8b:8b:ef:4e:2f:74:73:95:78: 0c:87:15:f9:84:80:03:5b:73:5f:70:f8:34:bb:15: 4c:b3:b7:c1:95:eb:36:b2:54:5e:4d:96:b3:6a:c5: 92:a3:df:b7:5c:93:e6:3b:73:0c:52:e5:60:23:bf: 3b:e5:7f:97:31:3d:fa:ae:af:42:07:52:fb:e4:a6: 77:52:83:08:2f:dc:93:d0:e4:3d:46:d5:03:59:64: 0e:00:ac:c1:10:d8:5d:8a:5d:53:8f:18:3e:4c:b9: 4a:b5:83:79:a6:9a:45:4b:bc:70:34:05:93:01:25: c9:f9:24:24:ca:f5:b2:c7:b4:b5:f4:73:8b:f4:c3: 21:47:d1:51:7c:6e:3d:69:3e:dd:e7:50:ab:43:10: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:CE:1C:65:98:B1:1A:A2:95:CA:96:06:2F:C3:22:27:FF:8C:DC X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:10:2f:0a:eb:5d:ce:7b:1c:4b:31:31:74:e8:ad:56:43:fa: 6a:23:ca:91:76:60:48:cf:f8:a0:61:b1:ea:31:4b:44:35:2e: 0f:00:b4:33:8f:3a:28:c3:c5:83:88:da:af:d0:b7:d5:bd:70: 84:fc:86:99:5f:f2:4b:2f:4c:9e:f6:55:aa:c1:f0:c5:71:72: d2:34:39:42:06:1d:2c:fb:c6:9d:3c:ae:3e:19:e1:69:51:da: f5:37:24:9f:1c:58:6e:97:81:0b:2d:e6:53:d9:9f:e7:59:e8: fe:33:66:99:de:01:06:c5:fb:f1:4c:4f:aa:6c:05:e8:6f:a2: 85:b8:81:5b:59:f1:7c:2d:b5:9a:0d:37:13:0c:47:dc:5f:ca: 1e:36:59:77:1f:ba:90:f6:81:b6:73:86:e9:bf:43:a6:bd:f0: ec:15:e7:31:f0:96:18:5e:81:b2:08:be:66:73:ac:ef:fd:77: 07:78:10:6f:cc:d1:3c:f0:33:a7:f7:17:63:2b:6d:9a:45:ba: a1:04:1b:a7:8a:fb:83:3a:18:d0:50:f5:64:e3:f1:e8:e6:2c: 1e:a4:66:1a:9c:79:20:96:b4:0b:c8:13:28:51:42:89:c9:f3: c2:f5:31:1d:da:03:44:14:d1:43:e3:99:6e:0c:a8:64:e4:77: be:86:e4:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSs+erMYia8X6kJVjZKjEQX2XYe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNjAxMjUxNjIwMjdaFw0yNjAxMjYxOTU2MjdaMDMxMTAvBgNV BAMTKDdEMjhDRTFDNjU5OEIxMUFBMjk1Q0E5NjA2MkZDMzIyMjdGRjhDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8426lVX9XwRxd3AkvqWACOlUq 386GCOhZC/RVP9GoEY0zF3Bn7BThsVUEyo4ugORnxznzZh4ulZx1VMo6717l/2gA 98V02jdHXzrVQtLPPvbrhdlVfY6LNcaenGxoZeYAAP5uscM6cVkhakY+kYuL704v dHOVeAyHFfmEgANbc19w+DS7FUyzt8GV6zayVF5NlrNqxZKj37dck+Y7cwxS5WAj vzvlf5cxPfqur0IHUvvkpndSgwgv3JPQ5D1G1QNZZA4ArMEQ2F2KXVOPGD5MuUq1 g3mmmkVLvHA0BZMBJcn5JCTK9bLHtLX0c4v0wyFH0VF8bj1pPt3nUKtDEId3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfSjOHGWYsRqilcqWBi/DIif/jNwwHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPBAvCutdznscSzExdOitVkP6aiPKkXZgSM/4oGGx6jFLRDUuDwC0M486KMPF g4jar9C31b1whPyGmV/ySy9MnvZVqsHwxXFy0jQ5QgYdLPvGnTyuPhnhaVHa9Tck nxxYbpeBCy3mU9mf51no/jNmmd4BBsX78UxPqmwF6G+ihbiBW1nxfC21mg03EwxH 3F/KHjZZdx+6kPaBtnOG6b9Dpr3w7BXnMfCWGF6Bsgi+ZnOs7/13B3gQb8zRPPAz p/cXYyttmkW6oQQbp4r7gzoY0FD1ZOPx6OYsHqRmGpx5IJa0C8gTKFFCicnzwvUx HdoDRBTRQ+OZbgyoZOR3vobkdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:07:30 2026 by rpki-client