This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft File: BD11125724CB8C5430E605E8628C6235B0ECD037.mft (raw, json) Hash identifier: UP8quh5zvkEsM5eFrxMG7BelzzwMG7ykd+7NH2mfWLE= Subject key identifier: 21:C8:23:08:2A:7A:65:D6:D4:9A:64:56:73:4D:CF:F4:A3:31:E1:4E Authority key identifier: BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37 Certificate issuer: /CN=BD11125724CB8C5430E605E8628C6235B0ECD037 Certificate serial: 72C7BA5D12087BE2C7995F5962198B1003A82637 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer Subject info access: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft Manifest number: 017B Signing time: Sun 25 Jan 2026 11:32:57 +0000 Manifest this update: Sun 25 Jan 2026 11:27:57 +0000 Manifest next update: Mon 26 Jan 2026 14:50:57 +0000 Files and hashes: 1: 3137372e35322e33322e302f32322d3332203d3e20323632343336.roa (hash: RtrsE+xGCCVr2chEHvLdQ7AT5f/sRQG9Zyqj0JzNMs0=) 2: BD11125724CB8C5430E605E8628C6235B0ECD037.crl (hash: //qgzfef6oP4HuZe6eZBjWnNULDOT2ny0x9qUoZY5jU=) 3: 3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa (hash: +AusLg2SKOw9O5wiWzX6vgr5NojjKfN8e30wCraIzYo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c7:ba:5d:12:08:7b:e2:c7:99:5f:59:62:19:8b:10:03:a8:26:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD11125724CB8C5430E605E8628C6235B0ECD037 Validity Not Before: Jan 25 11:27:57 2026 GMT Not After : Jan 26 14:50:57 2026 GMT Subject: CN=21C823082A7A65D6D49A6456734DCFF4A331E14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:ba:4c:02:71:32:83:ad:64:fe:0d:81:17: b0:33:5c:5d:dd:32:83:cc:56:8b:4d:92:10:5f:76: be:b7:e3:b6:76:2a:80:f5:e9:8a:cc:c5:e0:18:3f: 1a:b7:47:68:64:b1:6c:f1:c9:01:eb:15:ce:9d:61: eb:ce:35:dc:93:01:d1:cc:c5:b7:93:f2:23:c2:4c: 63:af:1b:3e:5d:53:86:fb:24:86:6a:b7:66:59:ea: 9a:ca:a9:37:0d:48:27:2a:3b:c4:2e:a0:cd:25:e9: e9:47:98:85:71:4b:cd:9c:50:e2:a0:2b:bb:dd:f2: b8:42:fb:60:e4:4a:85:9f:06:00:46:aa:6c:79:dc: 78:1a:fa:35:e8:b1:9f:60:12:1b:ee:c9:4c:c0:3d: f9:13:3d:6e:ee:be:4e:c2:ad:c7:7e:80:32:5a:7a: 07:5a:81:da:ba:4a:5c:fc:9c:99:7c:5f:40:28:20: 2f:82:ce:5d:36:9f:84:26:48:0c:68:aa:47:18:cf: f4:d3:26:ee:4c:6f:c0:69:eb:63:26:31:44:93:44: 45:7f:0a:38:56:b3:98:cb:c8:3a:ef:36:93:5c:de: b5:3d:14:87:07:d9:2f:eb:ae:ff:c6:92:f0:0f:b2: 3d:d2:d0:38:9c:a4:b7:e2:94:8f:54:b1:d1:4c:88: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:23:08:2A:7A:65:D6:D4:9A:64:56:73:4D:CF:F4:A3:31:E1:4E X509v3 Authority Key Identifier: keyid:BD:11:12:57:24:CB:8C:54:30:E6:05:E8:62:8C:62:35:B0:EC:D0:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11125724CB8C5430E605E8628C6235B0ECD037.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/BD11125724CB8C5430E605E8628C6235B0ECD037.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:62:b8:ff:79:c2:aa:1e:7b:8a:93:10:50:10:19:3b:21:bb: 5d:01:ae:f1:bd:7b:23:8d:ce:b5:4b:29:d2:f3:17:85:5f:84: a0:b9:77:84:0b:ba:62:bb:6b:bb:af:6c:7a:49:93:be:46:d3: 59:60:84:02:e7:30:54:ed:28:1f:bc:8e:11:b5:db:30:d9:17: fe:6f:11:c4:61:7d:3d:4f:27:6a:25:c8:cf:80:3d:4a:a5:c3: 21:85:34:e2:04:88:f8:00:12:b9:30:fd:9e:5d:72:f1:51:fe: 09:7a:96:c1:aa:6e:92:44:b3:a5:71:85:41:1f:16:7c:ec:c8: c9:32:73:ca:35:ae:33:85:7b:bc:25:81:71:c4:f1:04:3d:3c: 54:64:43:a3:7c:bc:80:dc:e8:7c:f4:91:d8:56:27:0f:21:62: a6:40:07:18:0a:b6:aa:f8:e9:94:c6:fb:52:53:56:d7:2a:32: 01:64:c3:35:50:a4:82:4c:22:54:a0:b4:ba:c5:ad:41:82:9f: 47:7c:91:b4:01:e3:36:02:79:93:4c:b4:4e:ab:5b:79:97:b4: ff:13:d9:22:ee:e5:d9:f3:00:ed:0a:15:c5:b0:48:c4:08:14: 01:c7:92:35:b2:2f:78:47:c1:6e:2c:f3:a6:5b:51:98:a5:8a: dc:5a:c2:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcse6XRIIe+LHmV9ZYhmLEAOoJjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQxMTEyNTcyNENCOEM1NDMwRTYwNUU4NjI4QzYyMzVC MEVDRDAzNzAeFw0yNjAxMjUxMTI3NTdaFw0yNjAxMjYxNDUwNTdaMDMxMTAvBgNV BAMTKDIxQzgyMzA4MkE3QTY1RDZENDlBNjQ1NjczNERDRkY0QTMzMUUxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCLpMAnEyg61k/g2BF7AzXF3d MoPMVotNkhBfdr6347Z2KoD16YrMxeAYPxq3R2hksWzxyQHrFc6dYevONdyTAdHM xbeT8iPCTGOvGz5dU4b7JIZqt2ZZ6prKqTcNSCcqO8QuoM0l6elHmIVxS82cUOKg K7vd8rhC+2DkSoWfBgBGqmx53Hga+jXosZ9gEhvuyUzAPfkTPW7uvk7Crcd+gDJa egdagdq6Slz8nJl8X0AoIC+Czl02n4QmSAxoqkcYz/TTJu5Mb8Bp62MmMUSTREV/ CjhWs5jLyDrvNpNc3rU9FIcH2S/rrv/GkvAPsj3S0DicpLfilI9UsdFMiDVBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIcgjCCp6ZdbUmmRWc03P9KMx4U4wHwYDVR0j BBgwFoAUvRESVyTLjFQw5gXoYoxiNbDs0DcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhF dWMvMC9CRDExMTI1NzI0Q0I4QzU0MzBFNjA1RTg2MjhDNjIzNUIwRUNEMDM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMTExMjU3MjRDQjhDNTQz MEU2MDVFODYyOEM2MjM1QjBFQ0QwMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhFdWMvMC9C RDExMTI1NzI0Q0I4QzU0MzBFNjA1RTg2MjhDNjIzNUIwRUNEMDM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWmK4/3nCqh57ipMQUBAZOyG7XQGu8b17I43OtUsp0vMXhV+EoLl3hAu6Yrtr u69sekmTvkbTWWCEAucwVO0oH7yOEbXbMNkX/m8RxGF9PU8naiXIz4A9SqXDIYU0 4gSI+AASuTD9nl1y8VH+CXqWwapukkSzpXGFQR8WfOzIyTJzyjWuM4V7vCWBccTx BD08VGRDo3y8gNzofPSR2FYnDyFipkAHGAq2qvjplMb7UlNW1yoyAWTDNVCkgkwi VKC0usWtQYKfR3yRtAHjNgJ5k0y0TqtbeZe0/xPZIu7l2fMA7QoVxbBIxAgUAceS NbIveEfBbizzpltRmKWK3FrCmQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:51:10 2026 by rpki-client