This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft File: 7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft (raw, json) Hash identifier: /2/uCcXo7Qdum9dCm0sIAnp+M4fvwBPZW9K7+oeW3Co= Subject key identifier: 43:2F:A7:B4:17:C3:D5:0F:B1:D7:9D:32:51:1C:0E:17:7E:50:25:B0 Authority key identifier: 79:20:D0:21:77:EC:D4:7B:7D:D8:D2:27:1C:07:93:BA:EA:92:E3:8F Certificate issuer: /CN=7920D02177ECD47B7DD8D2271C0793BAEA92E38F Certificate serial: 0FCEBFA290D0563F7F53BAA041A6C432B409DB11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft Manifest number: 8B Signing time: Sat 24 Jan 2026 23:52:22 +0000 Manifest this update: Sat 24 Jan 2026 23:47:22 +0000 Manifest next update: Mon 26 Jan 2026 02:46:22 +0000 Files and hashes: 1: 3138362e3230382e3137362e302f32302d3234203d3e20323632373431.roa (hash: jEz9zY+wxzS97iwHB9xE1PykVRf11fGW8YWmOIzhiCw=) 2: 323830343a326233303a3a2f33322d3336203d3e20323632373431.roa (hash: 7UQAkAdK8C+wlUP4V5aeumqZo5vBRfE6ctyUTDb+9ww=) 3: 7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl (hash: b0f1H2g5H3po2cJ3VF3MWwYq7zi6IfFk4chzld1xsNU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 02:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ce:bf:a2:90:d0:56:3f:7f:53:ba:a0:41:a6:c4:32:b4:09:db:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7920D02177ECD47B7DD8D2271C0793BAEA92E38F Validity Not Before: Jan 24 23:47:22 2026 GMT Not After : Jan 26 02:46:22 2026 GMT Subject: CN=432FA7B417C3D50FB1D79D32511C0E177E5025B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:eb:86:24:86:00:5a:8d:89:2f:2d:19:6e: 93:61:9f:83:e7:eb:f3:e9:9c:07:a4:10:0b:da:05: f9:7f:da:cc:4a:95:0d:41:1a:5b:82:4f:5d:f9:78: 0f:a2:a9:9c:31:1a:d6:b2:3d:9e:a9:ae:ab:fc:6a: d5:ee:c5:25:4d:b1:11:d2:94:a9:e0:6a:b6:b2:ec: b4:ba:03:75:40:82:ab:45:bf:6b:05:85:55:d4:0f: 03:12:c0:a0:31:c3:7e:5d:2a:87:be:7c:ca:ff:46: 06:77:ca:74:d0:2b:8d:f9:b3:17:27:ee:9a:15:cc: 24:ce:5c:3a:f2:3e:b3:cd:5d:73:7a:94:76:ff:d4: f2:54:e1:40:9f:c1:26:be:33:f0:60:82:d1:d2:6c: 34:5c:7a:ae:c9:fc:00:88:1f:a8:3f:58:33:87:0f: 9c:36:cb:7e:e8:45:bd:5b:6c:32:53:50:e4:ba:47: 76:29:5e:63:e5:74:ce:5b:b7:62:5a:e5:fb:b1:e8: 7f:6d:c6:40:ae:8f:d1:7a:42:d1:3f:d6:2e:98:05: f1:89:86:9e:3c:f5:4d:72:e6:04:09:09:ec:c1:2d: 7b:33:de:f9:13:6c:28:a7:6f:83:e1:89:71:5f:8a: 52:13:44:59:66:14:e8:f4:ad:aa:2e:33:8a:4e:e1: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2F:A7:B4:17:C3:D5:0F:B1:D7:9D:32:51:1C:0E:17:7E:50:25:B0 X509v3 Authority Key Identifier: keyid:79:20:D0:21:77:EC:D4:7B:7D:D8:D2:27:1C:07:93:BA:EA:92:E3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/7920D02177ECD47B7DD8D2271C0793BAEA92E38F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:db:83:26:01:cb:53:fc:71:0d:99:36:79:12:0c:df:98:82: 73:5c:55:5c:2e:ce:b9:9d:ce:e9:c4:8e:7e:ba:2c:49:40:5d: 58:35:8f:99:65:8e:96:a1:ff:07:b5:fb:63:9b:ba:de:03:70: 85:cb:8f:3e:3d:ed:a0:ab:c8:93:b9:c3:c4:36:58:87:90:62: b2:f1:8e:9b:ac:a2:4f:90:1d:46:12:4b:62:28:78:69:8d:38: ba:d9:8b:38:b2:b2:31:58:73:bb:f8:29:bf:5c:df:2e:8d:50: 7d:5c:37:31:70:29:15:ed:14:28:82:08:3c:e7:c7:88:68:7d: 33:4a:95:46:40:73:d6:97:74:f3:eb:7c:d0:7b:21:9b:84:f8: 2a:91:57:09:e5:d1:c0:de:61:d4:fe:03:c8:bb:1b:e9:b2:62: 8c:a7:ed:6c:f0:79:a0:9d:66:1a:73:4f:13:fa:54:8a:07:e3: ac:23:ff:28:d9:a3:a2:4b:0c:0a:2d:f4:17:3a:ef:fd:2b:f4: b6:48:16:94:9f:39:23:20:bb:f6:c9:36:a0:ea:9b:c6:a3:33: 2c:e5:4d:08:3a:2e:26:f0:48:78:32:2c:1e:8e:b7:6f:77:c6: b1:76:d2:33:53:e9:00:c9:4e:d9:14:e7:43:8a:66:2b:17:b9: fb:58:2f:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD86/opDQVj9/U7qgQabEMrQJ2xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkyMEQwMjE3N0VDRDQ3QjdERDhEMjI3MUMwNzkzQkFF QTkyRTM4RjAeFw0yNjAxMjQyMzQ3MjJaFw0yNjAxMjYwMjQ2MjJaMDMxMTAvBgNV BAMTKDQzMkZBN0I0MTdDM0Q1MEZCMUQ3OUQzMjUxMUMwRTE3N0U1MDI1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuP+uGJIYAWo2JLy0ZbpNhn4Pn 6/PpnAekEAvaBfl/2sxKlQ1BGluCT135eA+iqZwxGtayPZ6prqv8atXuxSVNsRHS lKngaray7LS6A3VAgqtFv2sFhVXUDwMSwKAxw35dKoe+fMr/RgZ3ynTQK435sxcn 7poVzCTOXDryPrPNXXN6lHb/1PJU4UCfwSa+M/BggtHSbDRceq7J/ACIH6g/WDOH D5w2y37oRb1bbDJTUOS6R3YpXmPldM5bt2Ja5fux6H9txkCuj9F6QtE/1i6YBfGJ hp489U1y5gQJCezBLXsz3vkTbCinb4PhiXFfilITRFlmFOj0raouM4pO4WFHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQy+ntBfD1Q+x150yURwOF35QJbAwHwYDVR0j BBgwFoAUeSDQIXfs1Ht92NInHAeTuuqS448wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj VzEvMC83OTIwRDAyMTc3RUNENDdCN0REOEQyMjcxQzA3OTNCQUVBOTJFMzhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MjBEMDIxNzdFQ0Q0N0I3 REQ4RDIyNzFDMDc5M0JBRUE5MkUzOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJjVzEvMC83 OTIwRDAyMTc3RUNENDdCN0REOEQyMjcxQzA3OTNCQUVBOTJFMzhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATtuDJgHLU/xxDZk2eRIM35iCc1xVXC7OuZ3O6cSOfrosSUBdWDWPmWWOlqH/ B7X7Y5u63gNwhcuPPj3toKvIk7nDxDZYh5BisvGOm6yiT5AdRhJLYih4aY04utmL OLKyMVhzu/gpv1zfLo1QfVw3MXApFe0UKIIIPOfHiGh9M0qVRkBz1pd08+t80Hsh m4T4KpFXCeXRwN5h1P4DyLsb6bJijKftbPB5oJ1mGnNPE/pUigfjrCP/KNmjoksM Ci30Fzrv/Sv0tkgWlJ85IyC79sk2oOqbxqMzLOVNCDouJvBIeDIsHo63b3fGsXbS M1PpAMlO2RTnQ4pmKxe5+1gvbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:47:51 2026 by rpki-client