This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft File: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft (raw, json) Hash identifier: X+clIBvq+trbgi+AnYP3Nzjyhq58ALthw3aunP+VqV0= Subject key identifier: 2E:CC:49:38:15:9D:76:DE:40:68:E0:BC:06:B0:32:E4:E0:06:64:1C Authority key identifier: 21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62 Certificate issuer: /CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62 Certificate serial: 7EF16DE321D6566D362460CB6D51C23D95D0FE5B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer Subject info access: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft Manifest number: 5F Signing time: Sun 25 Jan 2026 21:08:49 +0000 Manifest this update: Sun 25 Jan 2026 21:03:49 +0000 Manifest next update: Mon 26 Jan 2026 23:47:49 +0000 Files and hashes: 1: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl (hash: ON0yGzH0k8wD9Nc6+AOBC2doaIWPVGKmJYDNLBTFU5Q=) 2: 34352e3136312e3232342e302f32322d3234203d3e20323638343737.roa (hash: VQI4ymWbBnU+UgVt+pYFL4UDEQuVU0M1Kf8Kqq/NFjI=) 3: 323830343a353163383a3a2f33322d3336203d3e20323638343737.roa (hash: ZeYF/IADxUCs97amTb0H/O7aiJsJoEpO8oClUzCl2Rs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 23:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f1:6d:e3:21:d6:56:6d:36:24:60:cb:6d:51:c2:3d:95:d0:fe:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62 Validity Not Before: Jan 25 21:03:49 2026 GMT Not After : Jan 26 23:47:49 2026 GMT Subject: CN=2ECC4938159D76DE4068E0BC06B032E4E006641C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:54:d9:bf:ad:be:94:a9:c7:26:f4:82:d8: f4:60:1f:70:89:91:e4:2e:b5:ba:8c:0b:68:a7:92: b3:39:ae:6d:3d:d5:bd:55:ab:b7:09:24:8a:2a:84: f1:49:73:a6:35:d9:68:d0:e3:c9:a6:5f:d4:d7:f4: 6e:4b:06:69:6b:88:58:5a:ed:00:6f:0b:d8:3b:ff: 7b:33:61:38:7b:79:82:8f:a3:38:59:bf:2f:3f:94: 01:37:f7:de:1e:d3:b4:47:8e:75:bf:b6:d3:fe:7f: 47:cd:d5:c0:0a:e4:cc:86:7e:65:31:fb:96:17:66: bf:73:58:90:d5:51:3d:a9:62:c4:dc:0d:db:aa:02: 9a:e4:0a:6c:25:44:28:04:50:c7:51:ee:ae:c6:10: cc:2a:d6:59:4e:5b:a2:f2:cd:1a:d7:5f:5a:a2:23: 7e:3a:4f:b6:6e:e5:82:9b:26:74:7e:ad:8e:96:70: 48:bf:0b:34:e0:df:a3:64:c2:97:b8:1f:5e:7d:3b: be:5f:21:12:94:a6:27:6a:49:d5:0c:23:d7:ac:68: f1:76:dc:73:30:43:af:33:fa:2d:89:ed:7d:72:6b: b8:fd:80:8c:33:6d:9c:42:e2:57:c8:86:76:a3:2d: 81:fc:78:62:32:5c:dd:47:d7:88:a0:a6:73:b2:35: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CC:49:38:15:9D:76:DE:40:68:E0:BC:06:B0:32:E4:E0:06:64:1C X509v3 Authority Key Identifier: keyid:21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c1:38:ba:21:20:04:bc:0d:96:c1:60:96:54:81:b5:96:e8: d9:66:bc:4f:53:2b:a5:b2:f1:58:72:ee:5b:58:6c:88:70:bc: c9:54:a0:cf:dd:87:b0:bd:5d:4c:e4:48:b9:84:d3:b4:c2:a2: a1:88:c1:0b:20:83:47:e6:39:ea:28:f3:31:4f:20:d0:68:c4: 4b:09:b2:86:45:8d:ac:f6:90:bd:ad:77:9d:ea:a4:89:76:e7: 81:05:c0:a2:ad:66:24:74:a3:bd:94:30:6e:74:2f:05:4c:4a: 91:b9:86:b3:c8:d9:a7:63:2d:dd:3a:5d:af:2c:f4:14:fd:18: cc:19:2d:96:64:4f:24:44:8d:2e:9b:2a:34:12:75:67:21:11: 26:4e:eb:75:81:73:df:24:9a:89:00:8f:95:6e:a8:12:cc:75: 82:89:9e:ad:25:d5:1a:fc:75:e4:03:09:1e:e0:63:34:a5:4e: dc:a6:6a:8c:f8:27:57:1f:24:2f:69:71:a5:d1:bc:d1:f4:ca: 2d:f7:06:38:dc:be:4d:64:63:93:82:5f:4d:ae:76:5d:b3:bb: 7d:2f:04:37:25:aa:42:53:1a:b1:76:c0:97:f8:fa:c3:aa:59: 6b:3e:b2:d5:f9:15:ae:af:62:da:62:08:39:d6:5d:85:dc:f2: 00:67:12:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfvFt4yHWVm02JGDLbVHCPZXQ/lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCQTY5MjRDRjVDQkUzRjk3MEREMzgyRTVFNDg2MEFE NjdDQUI2MjAeFw0yNjAxMjUyMTAzNDlaFw0yNjAxMjYyMzQ3NDlaMDMxMTAvBgNV BAMTKDJFQ0M0OTM4MTU5RDc2REU0MDY4RTBCQzA2QjAzMkU0RTAwNjY0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqlTZv62+lKnHJvSC2PRgH3CJ keQutbqMC2inkrM5rm091b1Vq7cJJIoqhPFJc6Y12WjQ48mmX9TX9G5LBmlriFha 7QBvC9g7/3szYTh7eYKPozhZvy8/lAE3994e07RHjnW/ttP+f0fN1cAK5MyGfmUx +5YXZr9zWJDVUT2pYsTcDduqAprkCmwlRCgEUMdR7q7GEMwq1llOW6LyzRrXX1qi I346T7Zu5YKbJnR+rY6WcEi/CzTg36Nkwpe4H159O75fIRKUpidqSdUMI9esaPF2 3HMwQ68z+i2J7X1ya7j9gIwzbZxC4lfIhnajLYH8eGIyXN1H14igpnOyNSKBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULsxJOBWddt5AaOC8BrAy5OAGZBwwHwYDVR0j BBgwFoAUIbppJM9cvj+XDdOC5eSGCtZ8q2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHpWQ3lQS0piTmc4NHpkYlRvMUZLU2E5ZlVGNDlpNkVjUlFYQ2I0dEZo aFovMC8yMUJBNjkyNENGNUNCRTNGOTcwREQzODJFNUU0ODYwQUQ2N0NBQjYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQkE2OTI0Q0Y1Q0JFM0Y5 NzBERDM4MkU1RTQ4NjBBRDY3Q0FCNjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHpWQ3lQS0piTmc4NHpkYlRvMUZLU2E5ZlVGNDlpNkVjUlFYQ2I0dEZoaFovMC8y MUJBNjkyNENGNUNCRTNGOTcwREQzODJFNUU0ODYwQUQ2N0NBQjYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAscE4uiEgBLwNlsFgllSBtZbo2Wa8T1MrpbLxWHLuW1hsiHC8yVSgz92HsL1d TORIuYTTtMKioYjBCyCDR+Y56ijzMU8g0GjESwmyhkWNrPaQva13neqkiXbngQXA oq1mJHSjvZQwbnQvBUxKkbmGs8jZp2Mt3Tpdryz0FP0YzBktlmRPJESNLpsqNBJ1 ZyERJk7rdYFz3ySaiQCPlW6oEsx1gomerSXVGvx15AMJHuBjNKVO3KZqjPgnVx8k L2lxpdG80fTKLfcGONy+TWRjk4JfTa52XbO7fS8ENyWqQlMasXbAl/j6w6pZaz6y 1fkVrq9i2mIIOdZdhdzyAGcSgA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:59:53 2026 by rpki-client