This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft File: 964DA9AAC4C916D348B028DBC19BD5C08E437560.mft (raw, json) Hash identifier: j8yM8BLiFNWnUjWuGcyRzC+MA0dCceWZLDMxdQoSwCw= Subject key identifier: CE:64:6E:47:82:07:2E:21:21:F2:C3:29:A5:D8:31:CF:D7:31:29:6F Authority key identifier: 96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60 Certificate issuer: /CN=964DA9AAC4C916D348B028DBC19BD5C08E437560 Certificate serial: 4E218D7F543CCA79502B1C6367DF11F08308A854 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft Manifest number: 91 Signing time: Sat 24 Jan 2026 23:39:05 +0000 Manifest this update: Sat 24 Jan 2026 23:34:05 +0000 Manifest next update: Mon 26 Jan 2026 00:44:05 +0000 Files and hashes: 1: 34352e3138342e3230342e302f32322d3234203d3e20323732343539.roa (hash: mA2x0qV3KIplcTlRhrF70yJUuAie/XmNs1/bE1FVb5M=) 2: 964DA9AAC4C916D348B028DBC19BD5C08E437560.crl (hash: CspXDt80fW6SfdO+KPh6+8cmhTuX+2yA0wiI1BN39K8=) 3: 323830343a383138343a3a2f33322d3438203d3e20323732343539.roa (hash: nV+YnLkMXJ7NLvIA4eiIiwEhwUO0vMdc2CE6F8m39Pw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 00:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:21:8d:7f:54:3c:ca:79:50:2b:1c:63:67:df:11:f0:83:08:a8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=964DA9AAC4C916D348B028DBC19BD5C08E437560 Validity Not Before: Jan 24 23:34:05 2026 GMT Not After : Jan 26 00:44:05 2026 GMT Subject: CN=CE646E4782072E2121F2C329A5D831CFD731296F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:71:2d:18:6c:3a:d6:05:39:54:29:3d:8c: 86:ee:6b:2f:20:fb:f4:7a:8b:0a:b0:24:c3:db:a3: 1f:ff:b9:0f:ed:00:ba:92:3a:70:71:09:21:ee:ef: 4a:c3:e6:29:be:c5:83:d7:15:bf:35:a0:7f:8e:9f: 30:07:79:e7:cd:1b:9b:3e:4e:b7:95:cd:83:3e:d9: 8e:77:5d:3d:f3:d3:c1:b6:ac:2b:7a:48:fc:eb:a7: a5:d7:82:c2:15:ef:59:44:36:11:10:ad:2b:a2:68: ea:ac:4e:37:fc:e8:3c:2a:43:88:a3:9b:4e:dc:ae: f4:6c:20:79:b0:16:82:ef:70:e4:0f:3a:d2:e3:a1: 53:88:93:0d:d0:da:c3:a9:3f:27:c7:ea:1f:68:26: 07:e6:fa:1e:86:e9:bb:60:1a:43:cc:81:8e:75:fe: 94:8c:bc:aa:e2:f6:fa:31:e4:b7:87:42:2a:f8:8b: 82:e8:f3:0c:f6:8e:18:36:6c:a0:28:f6:c8:b9:4c: 35:f0:19:1f:9d:98:31:29:5a:93:d1:0c:e2:90:d8: b9:f3:17:2c:84:8e:5a:5f:55:50:e8:ea:cd:cd:6a: ae:06:74:be:03:ca:c0:1d:ed:74:4b:fe:f2:6a:ec: 47:91:01:24:9a:ab:ef:f8:ba:6f:43:f8:87:97:ad: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:64:6E:47:82:07:2E:21:21:F2:C3:29:A5:D8:31:CF:D7:31:29:6F X509v3 Authority Key Identifier: keyid:96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4e:e0:77:4c:a9:51:2f:df:88:f4:7c:9a:d8:36:68:f4:dd: be:f9:95:8a:9f:17:03:47:5e:15:9c:69:6b:60:67:a1:29:09: 53:5a:63:ef:fb:9f:f5:c0:b9:1d:54:5a:c1:7d:d8:39:24:63: 58:1c:53:40:ef:7a:72:b4:32:db:46:8c:d2:d4:9e:d0:d0:9b: 16:87:e8:c9:dd:ee:c7:04:96:53:a7:4f:86:05:b8:c4:b5:8e: a0:e6:1b:a2:38:06:f2:d6:60:f6:8e:d3:1d:f2:74:5b:89:ce: 8b:bc:81:fa:f0:49:3f:cf:4c:14:fa:aa:7a:74:1a:23:00:94: 0a:c5:2f:e0:74:5a:f8:3b:16:81:05:76:f4:4b:2c:d2:b2:64: 29:79:3a:72:1e:8d:a8:26:e7:d6:1c:62:de:0d:75:6d:89:c3: 7f:95:cd:ea:c2:a3:15:7c:bb:99:f7:46:44:7b:23:75:d2:fb: cf:41:8d:21:4f:68:42:a1:04:a5:9b:c4:5a:e4:69:fe:d3:f2: 9a:d8:e5:62:be:76:3e:59:e3:a9:74:38:85:7b:df:ee:38:1c: 05:9b:c7:ad:d3:4e:89:0e:b6:1a:52:89:2b:07:de:a6:af:cd: 73:36:54:30:8f:a4:14:01:a6:24:e4:cc:46:73:af:06:56:b6: 81:e3:43:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTiGNf1Q8ynlQKxxjZ98R8IMIqFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY0REE5QUFDNEM5MTZEMzQ4QjAyOERCQzE5QkQ1QzA4 RTQzNzU2MDAeFw0yNjAxMjQyMzM0MDVaFw0yNjAxMjYwMDQ0MDVaMDMxMTAvBgNV BAMTKENFNjQ2RTQ3ODIwNzJFMjEyMUYyQzMyOUE1RDgzMUNGRDczMTI5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClhnEtGGw61gU5VCk9jIbuay8g +/R6iwqwJMPbox//uQ/tALqSOnBxCSHu70rD5im+xYPXFb81oH+OnzAHeefNG5s+ TreVzYM+2Y53XT3z08G2rCt6SPzrp6XXgsIV71lENhEQrSuiaOqsTjf86DwqQ4ij m07crvRsIHmwFoLvcOQPOtLjoVOIkw3Q2sOpPyfH6h9oJgfm+h6G6btgGkPMgY51 /pSMvKri9vox5LeHQir4i4Lo8wz2jhg2bKAo9si5TDXwGR+dmDEpWpPRDOKQ2Lnz FyyEjlpfVVDo6s3Naq4GdL4DysAd7XRL/vJq7EeRASSaq+/4um9D+IeXrXn/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzmRuR4IHLiEh8sMppdgxz9cxKW8wHwYDVR0j BBgwFoAUlk2pqsTJFtNIsCjbwZvVwI5DdWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NYaXZnSGhyYm5UM0xaRXltTGhKR2tLY0ZnS2J3TkhEaVgydWp5TnhB TEQvMC85NjREQTlBQUM0QzkxNkQzNDhCMDI4REJDMTlCRDVDMDhFNDM3NTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NERBOUFBQzRDOTE2RDM0 OEIwMjhEQkMxOUJENUMwOEU0Mzc1NjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NYaXZnSGhyYm5UM0xaRXltTGhKR2tLY0ZnS2J3TkhEaVgydWp5TnhBTEQvMC85 NjREQTlBQUM0QzkxNkQzNDhCMDI4REJDMTlCRDVDMDhFNDM3NTYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcU7gd0ypUS/fiPR8mtg2aPTdvvmVip8XA0deFZxpa2BnoSkJU1pj7/uf9cC5 HVRawX3YOSRjWBxTQO96crQy20aM0tSe0NCbFofoyd3uxwSWU6dPhgW4xLWOoOYb ojgG8tZg9o7THfJ0W4nOi7yB+vBJP89MFPqqenQaIwCUCsUv4HRa+DsWgQV29Ess 0rJkKXk6ch6NqCbn1hxi3g11bYnDf5XN6sKjFXy7mfdGRHsjddL7z0GNIU9oQqEE pZvEWuRp/tPymtjlYr52PlnjqXQ4hXvf7jgcBZvHrdNOiQ62GlKJKwfepq/NczZU MI+kFAGmJOTMRnOvBla2geNDzA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:05:38 2026 by rpki-client