This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: t+Kwv42wMfgvhwqTybwgwM6mkC7N0+F2ESoNmQyEgLc= Subject key identifier: 31:3E:95:EB:BF:BD:FB:54:B0:EE:A4:45:D0:63:47:74:58:DD:F8:A6 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 4A4F18617184B6EEA681D75E1AF2B5B0D5EEE938 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0247 Signing time: Sat 24 Jan 2026 21:09:20 +0000 Manifest this update: Sat 24 Jan 2026 21:04:20 +0000 Manifest next update: Mon 26 Jan 2026 00:51:20 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: wKH5AaHOd7aky9Y05SPMsgufQG5WAOqfjTT0XOXV2dA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 00:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4f:18:61:71:84:b6:ee:a6:81:d7:5e:1a:f2:b5:b0:d5:ee:e9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Jan 24 21:04:20 2026 GMT Not After : Jan 26 00:51:20 2026 GMT Subject: CN=313E95EBBFBDFB54B0EEA445D063477458DDF8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:37:5a:a3:f3:1a:da:13:30:7c:98:df:25: ca:70:22:eb:9a:07:b9:42:3c:09:50:9c:fe:b8:a0: 3d:2c:e8:5b:e8:cc:d1:be:9d:2a:68:38:b9:12:29: d3:e4:4e:86:1a:f4:65:45:be:86:8a:0d:11:81:7d: d3:15:c0:f4:62:62:1e:79:fe:ee:9f:29:47:6b:13: f3:be:a4:c8:7e:ee:15:2e:b0:25:8f:97:9e:61:d1: 85:a4:db:e3:09:dd:32:f5:14:c8:ad:bf:33:48:2a: 94:0e:43:95:9a:8f:1b:36:49:f6:83:49:1e:7e:23: 06:55:2e:96:d9:fc:da:81:49:2a:2e:ac:8e:2b:0f: 23:ba:a7:a5:a1:5d:74:02:52:80:a8:a5:22:05:a4: 6b:af:c1:65:7c:88:17:ac:2a:83:86:76:cd:ae:86: cc:25:dd:3a:71:04:d9:12:97:f5:00:f8:f2:3f:f4: e2:80:8b:eb:ad:98:c1:8d:9f:b4:55:2a:c9:fb:fd: 7a:19:e8:73:a6:c1:26:08:52:9e:58:b9:38:28:bd: 38:68:33:c7:34:6b:67:bd:7e:74:c3:47:5f:36:90: a9:c7:56:d4:34:9a:1d:3d:6b:67:43:77:b0:b3:54: 21:c3:7e:4e:06:0b:96:22:10:4d:e9:fa:8a:ea:2a: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3E:95:EB:BF:BD:FB:54:B0:EE:A4:45:D0:63:47:74:58:DD:F8:A6 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:51:c4:a5:1d:62:23:f1:b4:71:ef:d6:06:5b:de:9d:cf:3f: 62:01:32:30:5c:f5:cf:9a:fa:ce:7e:e8:9d:e0:32:c6:41:0d: c8:99:2b:4d:17:9f:f0:2f:79:31:79:b8:48:d6:7b:bc:2b:8c: b7:d1:e9:4e:1e:0c:7b:4e:2f:e3:ca:34:29:b0:fe:10:8a:fd: 67:6e:24:39:28:5d:a5:d7:9b:2a:54:cc:c4:1b:d8:bc:6e:4a: 04:b4:57:f4:28:8c:cd:b4:3b:08:6e:5a:95:37:5b:64:58:ed: 7c:02:dd:97:88:c0:23:ba:17:b2:34:53:e0:37:df:54:1c:76: 24:35:fc:bf:c0:e4:f1:e1:73:85:df:94:96:2b:e6:71:5f:8a: 98:25:09:15:bb:eb:e9:7b:0b:75:6a:23:ab:78:21:69:8d:a1: b1:4e:25:30:8d:88:c2:48:e4:6d:01:20:23:8a:db:e2:8e:36: d3:87:4f:12:db:17:aa:ed:f4:46:58:04:82:a4:d5:cf:cc:3e: c3:4a:ab:52:df:f7:cd:3d:72:02:47:09:bb:c5:ef:fb:15:87: 8b:3f:71:5b:3b:95:81:68:ba:65:35:2a:a0:a0:b0:e1:43:f1: c3:01:6e:0a:d3:be:cf:98:5f:91:0e:9d:3c:f6:58:3f:98:b1: 50:4e:09:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSk8YYXGEtu6mgddeGvK1sNXu6TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNjAxMjQyMTA0MjBaFw0yNjAxMjYwMDUxMjBaMDMxMTAvBgNV BAMTKDMxM0U5NUVCQkZCREZCNTRCMEVFQTQ0NUQwNjM0Nzc0NThEREY4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kTdao/Ma2hMwfJjfJcpwIuua B7lCPAlQnP64oD0s6FvozNG+nSpoOLkSKdPkToYa9GVFvoaKDRGBfdMVwPRiYh55 /u6fKUdrE/O+pMh+7hUusCWPl55h0YWk2+MJ3TL1FMitvzNIKpQOQ5Wajxs2SfaD SR5+IwZVLpbZ/NqBSSourI4rDyO6p6WhXXQCUoCopSIFpGuvwWV8iBesKoOGds2u hswl3TpxBNkSl/UA+PI/9OKAi+utmMGNn7RVKsn7/XoZ6HOmwSYIUp5YuTgovTho M8c0a2e9fnTDR182kKnHVtQ0mh09a2dDd7CzVCHDfk4GC5YiEE3p+orqKvrJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMT6V67+9+1Sw7qRF0GNHdFjd+KYwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuFHEpR1iI/G0ce/WBlvenc8/YgEyMFz1z5r6zn7oneAyxkENyJkrTRef8C95 MXm4SNZ7vCuMt9HpTh4Me04v48o0KbD+EIr9Z24kOShdpdebKlTMxBvYvG5KBLRX 9CiMzbQ7CG5alTdbZFjtfALdl4jAI7oXsjRT4DffVBx2JDX8v8Dk8eFzhd+Ulivm cV+KmCUJFbvr6XsLdWojq3ghaY2hsU4lMI2IwkjkbQEgI4rb4o4204dPEtsXqu30 RlgEgqTVz8w+w0qrUt/3zT1yAkcJu8Xv+xWHiz9xWzuVgWi6ZTUqoKCw4UPxwwFu CtO+z5hfkQ6dPPZYP5ixUE4JfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:51:45 2026 by rpki-client