This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json) Hash identifier: Pfs+caMJwcEZFZK92TrRNhjF+T2GbRf9b8h9T4sG4ik= Subject key identifier: 65:FD:89:5D:67:68:82:47:83:E2:0C:A6:62:16:05:2B:9D:02:FD:59 Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Certificate serial: 74025D9D098A02B63194920CB659A5DF0BED97B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft Manifest number: 0245 Signing time: Sun 25 Jan 2026 11:38:03 +0000 Manifest this update: Sun 25 Jan 2026 11:33:03 +0000 Manifest next update: Mon 26 Jan 2026 15:07:03 +0000 Files and hashes: 1: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=) 2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: GGvqeRkDRa1ts7K6eDF6BFXwIlTZ5W+SNYnEJ1w7xMI=) 3: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:02:5d:9d:09:8a:02:b6:31:94:92:0c:b6:59:a5:df:0b:ed:97:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Validity Not Before: Jan 25 11:33:03 2026 GMT Not After : Jan 26 15:07:03 2026 GMT Subject: CN=65FD895D6768824783E20CA66216052B9D02FD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:38:4b:e7:10:6d:8a:0b:c6:6c:ea:0e:9f: 6c:99:26:32:32:a7:28:06:74:ba:b1:6a:73:89:73: b4:85:63:b4:47:24:85:b7:aa:2b:c0:52:69:23:af: 63:92:ce:4d:16:d5:34:32:cf:0b:b0:d8:96:5d:29: fc:c5:99:fc:e5:19:c0:e2:55:2f:28:1b:88:18:0d: b9:88:79:23:6b:94:33:3c:48:2e:f1:d0:26:dc:ad: a9:13:1d:6a:8b:b4:8c:fa:a9:9f:bc:37:c8:0f:aa: 75:4c:2c:c5:12:12:3f:ad:de:82:04:ce:3e:2a:23: 38:47:6d:e2:36:74:a2:23:2e:a0:69:4c:3e:73:ac: 8d:1b:ea:65:46:96:c3:33:00:74:e4:7c:52:06:d2: 32:71:f9:72:18:f0:c2:ff:18:bb:b9:64:bc:f4:dc: b9:c5:c7:5d:d0:f4:a5:1e:71:bb:25:d8:ac:22:f7: 25:f9:0d:8c:81:3f:da:f9:46:95:51:f7:68:a0:63: 54:53:95:dd:61:79:38:98:e7:90:a7:08:c4:3c:6f: 41:5a:8f:51:e4:a7:68:20:fd:de:5e:b7:6a:5d:28: 6e:3e:87:87:ac:2b:93:1e:b6:c4:9a:2a:cc:7c:3d: 13:1c:23:4b:78:e2:e0:df:6c:88:10:35:ae:1c:85: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FD:89:5D:67:68:82:47:83:E2:0C:A6:62:16:05:2B:9D:02:FD:59 X509v3 Authority Key Identifier: keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:46:43:27:7d:7f:b7:4d:fc:fc:a8:a6:0d:4e:78:8f:61:d4: ad:e6:4f:fe:c4:fb:74:a1:da:79:d3:de:11:1f:93:c3:e3:a7: 6c:f1:e9:3d:c9:ef:d8:17:c5:63:ee:a4:a0:1f:6b:20:48:87: 9f:1c:dc:59:ce:d5:18:51:56:13:75:ba:76:65:2d:97:47:e9: 8b:cc:9e:6d:34:1f:f1:a0:b8:e0:c7:4f:67:73:65:3a:dc:00: 4a:42:6d:31:c1:03:2e:d3:e7:d8:dc:c9:d1:de:c6:80:e1:34: c4:c1:f3:8e:19:ad:3a:d1:cb:d2:ec:3a:f3:32:de:00:08:b9: 7b:38:e8:b5:5d:b2:32:66:c0:4f:20:af:1d:2d:84:73:41:7d: 03:2f:88:54:cb:26:c8:86:54:7f:6d:ac:73:d3:97:eb:80:5b: af:5e:1b:58:71:ff:7d:6d:a0:79:5e:f1:43:e3:d6:3c:98:53: 96:b4:c9:4a:ba:0a:3d:46:9f:18:ca:19:d8:b7:b8:9f:d0:41: 34:50:d1:7c:86:a8:08:d2:74:e3:32:77:24:ce:c7:f6:84:4e: 3a:d1:f4:4d:5b:e9:a6:b2:cb:cb:d8:a7:04:84:33:ad:2e:bd: 27:c6:98:a4:45:38:a7:ba:67:c6:b5:ca:a2:f7:c7:37:ab:b2: b1:e3:90:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdAJdnQmKArYxlJIMtlml3wvtl7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGNTU0OUNBOTBCNDdEOEZBNTIxNzgwMEYwMDVDN0VD MEQ5NjZFNzAeFw0yNjAxMjUxMTMzMDNaFw0yNjAxMjYxNTA3MDNaMDMxMTAvBgNV BAMTKDY1RkQ4OTVENjc2ODgyNDc4M0UyMENBNjYyMTYwNTJCOUQwMkZENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwDhL5xBtigvGbOoOn2yZJjIy pygGdLqxanOJc7SFY7RHJIW3qivAUmkjr2OSzk0W1TQyzwuw2JZdKfzFmfzlGcDi VS8oG4gYDbmIeSNrlDM8SC7x0CbcrakTHWqLtIz6qZ+8N8gPqnVMLMUSEj+t3oIE zj4qIzhHbeI2dKIjLqBpTD5zrI0b6mVGlsMzAHTkfFIG0jJx+XIY8ML/GLu5ZLz0 3LnFx13Q9KUecbsl2Kwi9yX5DYyBP9r5RpVR92igY1RTld1heTiY55CnCMQ8b0Fa j1Hkp2gg/d5et2pdKG4+h4esK5MetsSaKsx8PRMcI0t44uDfbIgQNa4chY1NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZf2JXWdogkeD4gymYhYFK50C/VkwHwYDVR0j BBgwFoAULfVUnKkLR9j6UheADwBcfsDZZucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dR Y1QvMC8yREY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERjU1NDlDQTkwQjQ3RDhG QTUyMTc4MDBGMDA1QzdFQzBEOTY2RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dRY1QvMC8y REY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEEZDJ31/t038/KimDU54j2HUreZP/sT7dKHaedPeER+Tw+OnbPHpPcnv2BfF Y+6koB9rIEiHnxzcWc7VGFFWE3W6dmUtl0fpi8yebTQf8aC44MdPZ3NlOtwASkJt McEDLtPn2NzJ0d7GgOE0xMHzjhmtOtHL0uw68zLeAAi5ezjotV2yMmbATyCvHS2E c0F9Ay+IVMsmyIZUf22sc9OX64Bbr14bWHH/fW2geV7xQ+PWPJhTlrTJSroKPUaf GMoZ2Le4n9BBNFDRfIaoCNJ04zJ3JM7H9oROOtH0TVvpprLLy9inBIQzrS69J8aY pEU4p7pnxrXKovfHN6uyseOQCA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:54:39 2026 by rpki-client