This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft File: 2B70CD0507DEB57B92FF796531C932DEF83009A2.mft (raw, json) Hash identifier: 9v+GP9kWSgtM8qaUd10PgVmrLMWJ7hnUL36b115NRTU= Subject key identifier: AA:AB:45:7A:27:0C:B7:F6:50:7A:24:F3:A9:DF:FF:7C:8B:80:71:AF Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 Certificate issuer: /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Certificate serial: 3725FA6327EA1C932ED3B986A6A4DB4B85840F1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft Manifest number: 02BA Signing time: Sun 25 Jan 2026 09:36:06 +0000 Manifest this update: Sun 25 Jan 2026 09:31:06 +0000 Manifest next update: Mon 26 Jan 2026 10:12:06 +0000 Files and hashes: 1: 323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (hash: uM7t3CdpbFI7OeW+ScOEPFx4SBbDqHNlaGrAPMxg5UE=) 2: 2B70CD0507DEB57B92FF796531C932DEF83009A2.crl (hash: pVb7b9z9Mtxsc5pMRWHm/oyA5db5CFbI4k1ym8EcN44=) 3: 3138392e3132362e31322e302f32322d3234203d3e20323730333136.roa (hash: usN4Sn/tOM9yn1kyODhJ/9CSDKsJBo6S6EP+tHpD0AQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 10:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:25:fa:63:27:ea:1c:93:2e:d3:b9:86:a6:a4:db:4b:85:84:0f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Validity Not Before: Jan 25 09:31:06 2026 GMT Not After : Jan 26 10:12:06 2026 GMT Subject: CN=AAAB457A270CB7F6507A24F3A9DFFF7C8B8071AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:98:d4:55:1f:88:a9:9f:09:a1:8b:de:91: db:26:6c:42:49:23:65:0f:f6:12:bc:d7:19:83:0e: 33:a2:85:2b:85:3b:c9:60:a2:a0:56:0b:38:df:17: 78:cf:40:84:79:82:43:5a:83:d8:c0:70:89:d4:34: 0b:0e:9f:f2:82:f6:63:6d:10:4b:23:a2:66:c5:8e: 18:3d:0e:72:05:d7:cb:3f:49:a8:b9:10:c5:b8:45: c6:5d:02:d1:6a:eb:70:29:cc:51:4c:38:43:fc:ea: af:d7:5d:2e:56:70:c4:6e:d2:4a:4a:29:46:75:4f: cf:21:c9:ff:b7:5a:7f:4f:ca:cf:f3:1a:e7:7e:27: db:30:a6:a1:d2:3e:8b:fc:b6:bd:cb:cb:8c:bb:98: 37:50:19:22:ff:a3:84:24:d8:c3:10:7e:5a:b2:ff: 71:32:2b:2a:36:61:41:ec:21:6a:ee:1b:ee:2e:fa: a0:b9:d0:97:b9:1f:65:2f:c4:4f:72:09:ce:dd:6c: 83:51:3f:84:20:bb:d4:2b:7a:d5:9f:3f:b9:9b:01: 09:71:ff:f4:b5:f3:de:e4:51:ee:f3:69:fd:70:30: ad:94:3a:6e:d6:11:a2:e7:dc:d4:a3:6f:e3:28:de: 39:b6:17:8d:b6:de:be:7a:f0:66:a7:e8:42:7e:a9: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AB:45:7A:27:0C:B7:F6:50:7A:24:F3:A9:DF:FF:7C:8B:80:71:AF X509v3 Authority Key Identifier: keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e2:f4:cc:72:52:4a:7a:65:a7:0c:73:4f:7f:83:c5:f3:17: 10:b8:26:cf:c5:ac:46:d1:4b:1d:67:c0:59:ea:89:9a:56:c3: f3:d4:89:c1:d5:94:61:9c:b1:1b:af:29:d9:7a:10:e1:5d:f0: 98:9a:c9:69:91:17:43:c1:01:4e:24:45:d8:c0:7c:5f:2c:a9: 91:be:aa:34:05:c9:40:ac:52:44:e8:2a:8a:df:9d:60:52:65: 81:dd:80:55:96:6f:4d:72:24:19:eb:1b:db:70:9c:9b:8c:3a: e5:5f:53:44:ef:60:2d:ab:55:1c:3d:26:ac:16:b7:05:5e:99: e0:e4:67:04:3d:ee:a2:62:ba:a1:1b:66:51:8d:27:e2:cb:50: e9:db:5d:69:bc:e6:4d:60:ee:f9:24:ad:b4:eb:25:91:ac:85: 8f:5f:11:39:db:28:e0:2c:49:51:47:f1:c1:ab:aa:55:38:e8: f7:07:89:83:66:da:bb:81:3f:93:3f:72:db:d2:d2:1f:e7:62: ff:11:40:a2:70:38:da:0a:ec:39:2a:5b:16:f0:13:cc:e1:6a: a6:63:19:7a:88:ab:fa:d5:5a:ab:09:8a:7e:a8:bc:0c:c2:6e: b6:99:32:47:46:88:81:ec:73:36:ac:9f:91:a3:9e:32:f9:be: 56:07:ec:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNyX6YyfqHJMu07mGpqTbS4WEDx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3MENEMDUwN0RFQjU3QjkyRkY3OTY1MzFDOTMyREVG ODMwMDlBMjAeFw0yNjAxMjUwOTMxMDZaFw0yNjAxMjYxMDEyMDZaMDMxMTAvBgNV BAMTKEFBQUI0NTdBMjcwQ0I3RjY1MDdBMjRGM0E5REZGRjdDOEI4MDcxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+5jUVR+IqZ8JoYvekdsmbEJJ I2UP9hK81xmDDjOihSuFO8lgoqBWCzjfF3jPQIR5gkNag9jAcInUNAsOn/KC9mNt EEsjombFjhg9DnIF18s/Sai5EMW4RcZdAtFq63ApzFFMOEP86q/XXS5WcMRu0kpK KUZ1T88hyf+3Wn9Pys/zGud+J9swpqHSPov8tr3Ly4y7mDdQGSL/o4Qk2MMQflqy /3EyKyo2YUHsIWruG+4u+qC50Je5H2UvxE9yCc7dbINRP4Qgu9QretWfP7mbAQlx //S1897kUe7zaf1wMK2UOm7WEaLn3NSjb+Mo3jm2F4223r568Gan6EJ+qQQ9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqqtFeicMt/ZQeiTzqd//fIuAca8wHwYDVR0j BBgwFoAUK3DNBQfetXuS/3llMcky3vgwCaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFk SmQvMC8yQjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzBDRDA1MDdERUI1N0I5 MkZGNzk2NTMxQzkzMkRFRjgzMDA5QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFkSmQvMC8y QjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkOL0zHJSSnplpwxzT3+DxfMXELgmz8WsRtFLHWfAWeqJmlbD89SJwdWUYZyx G68p2XoQ4V3wmJrJaZEXQ8EBTiRF2MB8Xyypkb6qNAXJQKxSROgqit+dYFJlgd2A VZZvTXIkGesb23Ccm4w65V9TRO9gLatVHD0mrBa3BV6Z4ORnBD3uomK6oRtmUY0n 4stQ6dtdabzmTWDu+SSttOslkayFj18ROdso4CxJUUfxwauqVTjo9weJg2bau4E/ kz9y29LSH+di/xFAonA42grsOSpbFvATzOFqpmMZeoir+tVaqwmKfqi8DMJutpky R0aIgexzNqyfkaOeMvm+VgfsUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:49:54 2026 by rpki-client