This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft File: F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft (raw, json) Hash identifier: ZNtcio4CXUYD7xKh+/xOhxQkvCwJTM6RBf+mm7O0TBI= Subject key identifier: 1D:FE:2E:93:4D:31:51:73:23:47:99:32:31:3F:4F:C2:8E:5E:63:16 Authority key identifier: F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95 Certificate issuer: /CN=F8F717C76795A8AA5AB172A4E1895F2B3431F895 Certificate serial: 43BCA5D1BD0F231D924AC449722BE01C2AEED7E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer Subject info access: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft Manifest number: 1A Signing time: Sun 25 Jan 2026 12:22:42 +0000 Manifest this update: Sun 25 Jan 2026 12:17:42 +0000 Manifest next update: Mon 26 Jan 2026 16:00:42 +0000 Files and hashes: 1: F8F717C76795A8AA5AB172A4E1895F2B3431F895.crl (hash: 6pqwG8m2uYASgAYRu3ptyvPfVXgJk0z7LJg6YZlJ9GY=) 2: 323830343a316235383a3a2f33322d3438203d3e203631373233.roa (hash: 2qQw1RRx7ZrD1NIxh1wm9oV+g5wzrWz3/GPFFbns0MU=) 3: 3133312e37322e34302e302f32322d3234203d3e203631373233.roa (hash: L5EP6//sryGO8wGuW7V+aUEo+4kv0AA9WtgMzV8aCyY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.crl rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bc:a5:d1:bd:0f:23:1d:92:4a:c4:49:72:2b:e0:1c:2a:ee:d7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F717C76795A8AA5AB172A4E1895F2B3431F895 Validity Not Before: Jan 25 12:17:42 2026 GMT Not After : Jan 26 16:00:42 2026 GMT Subject: CN=1DFE2E934D31517323479932313F4FC28E5E6316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:43:bb:b2:c3:51:b0:9f:0c:ab:8b:74:5f: e2:06:2b:f3:7c:a5:34:54:6e:50:89:27:e3:df:7a: 8b:f0:dd:c3:06:f8:de:0b:a8:2e:3c:02:8c:74:1a: 65:47:fa:cd:12:ae:48:d8:64:d1:92:6d:8f:c1:a8: 7d:c7:9f:b4:df:aa:a6:5a:ec:5f:19:44:8d:38:b8: 65:ac:c6:59:2b:7b:db:79:12:a5:31:eb:0c:5c:5f: 95:49:9e:d2:a1:24:02:3d:1f:ea:e7:71:d0:ae:a5: 84:50:12:89:91:88:03:72:4d:11:7b:bb:9f:58:4e: 33:6d:16:1d:b6:4b:1f:db:79:d6:9f:b4:6b:e0:11: 1a:68:17:89:33:34:fe:77:f4:c0:35:0e:1c:37:83: e9:ac:7e:0c:2e:1f:b4:9c:69:ae:e8:1a:e5:a8:5f: f3:13:12:b5:24:e5:48:87:7f:88:b4:52:69:ec:d2: e5:7f:30:46:c9:74:c3:85:29:6d:ee:92:74:8b:d0: 1b:13:67:ee:57:5f:03:1a:fd:e0:00:be:10:fa:e6: 3a:32:79:e1:4e:0d:82:9c:d6:0c:8e:fa:cb:6e:50: 7c:a6:76:a8:61:01:b0:9b:e9:73:d7:c7:c2:65:ca: 18:be:5a:3d:35:87:67:5b:c4:16:a7:c4:35:aa:15: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FE:2E:93:4D:31:51:73:23:47:99:32:31:3F:4F:C2:8E:5E:63:16 X509v3 Authority Key Identifier: keyid:F8:F7:17:C7:67:95:A8:AA:5A:B1:72:A4:E1:89:5F:2B:34:31:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F717C76795A8AA5AB172A4E1895F2B3431F895.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGgw3P2KCLnaMRxipCQtrqjHfCxVxJ1CMEJdEMkvANNh/0/F8F717C76795A8AA5AB172A4E1895F2B3431F895.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:65:5b:7d:27:4c:f7:4a:5a:48:1c:a3:26:c0:35:75:3f:4a: a3:3f:28:f8:71:bf:e8:e2:d4:41:a9:3d:25:01:06:b3:b7:07: ba:b5:e1:b3:82:f2:f6:b9:de:c4:2f:e9:f3:51:29:0e:10:ce: 16:8e:d4:c2:bb:bc:cc:28:d7:7b:2c:b3:63:ba:aa:ea:e4:c1: 5c:4d:81:ae:32:41:2c:35:0b:6e:2b:81:3d:59:e1:19:7e:6e: a1:f4:c3:e5:22:74:d2:95:d4:96:9b:18:33:db:5d:d0:be:99: 87:33:d3:9f:46:b3:7d:62:49:4b:55:53:54:88:6f:d5:77:02: 80:8d:00:94:72:91:1c:14:39:a8:b0:a3:2f:90:e7:f6:c8:1f: fe:67:ae:68:9c:e1:2c:b7:dc:d2:61:b4:5d:c1:49:7f:14:9e: 2d:bd:b4:f2:64:d5:b4:1a:c1:6d:56:62:93:a9:68:53:6f:3a: 1a:2f:07:3f:e4:74:a4:00:50:d2:15:16:1e:b7:54:5a:dd:bc: 0c:06:00:4d:93:91:75:94:b4:74:db:30:47:04:13:e8:a7:ba: fc:33:d5:43:6d:6c:4b:6f:18:2c:ac:b5:9f:a1:4f:b9:22:4f: 4d:07:1b:6e:61:0d:6a:9d:96:1f:62:a0:da:4b:b7:3a:59:bd: 6b:47:66:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ7yl0b0PIx2SSsRJcivgHCru1+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNzE3Qzc2Nzk1QThBQTVBQjE3MkE0RTE4OTVGMkIz NDMxRjg5NTAeFw0yNjAxMjUxMjE3NDJaFw0yNjAxMjYxNjAwNDJaMDMxMTAvBgNV BAMTKDFERkUyRTkzNEQzMTUxNzMyMzQ3OTkzMjMxM0Y0RkMyOEU1RTYzMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuk0O7ssNRsJ8Mq4t0X+IGK/N8 pTRUblCJJ+Pfeovw3cMG+N4LqC48Aox0GmVH+s0SrkjYZNGSbY/BqH3Hn7TfqqZa 7F8ZRI04uGWsxlkre9t5EqUx6wxcX5VJntKhJAI9H+rncdCupYRQEomRiANyTRF7 u59YTjNtFh22Sx/bedaftGvgERpoF4kzNP539MA1Dhw3g+msfgwuH7Scaa7oGuWo X/MTErUk5UiHf4i0Umns0uV/MEbJdMOFKW3uknSL0BsTZ+5XXwMa/eAAvhD65joy eeFODYKc1gyO+stuUHymdqhhAbCb6XPXx8Jlyhi+Wj01h2dbxBanxDWqFW7/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHf4uk00xUXMjR5kyMT9Pwo5eYxYwHwYDVR0j BBgwFoAU+PcXx2eVqKpasXKk4YlfKzQx+JUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREdndzNQMktDTG5hTVJ4aXBDUXRycWpIZkN4VnhKMUNNRUpkRU1rdkFO TmgvMC9GOEY3MTdDNzY3OTVBOEFBNUFCMTcyQTRFMTg5NUYyQjM0MzFGODk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4RjcxN0M3Njc5NUE4QUE1 QUIxNzJBNEUxODk1RjJCMzQzMUY4OTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REdndzNQMktDTG5hTVJ4aXBDUXRycWpIZkN4VnhKMUNNRUpkRU1rdkFOTmgvMC9G OEY3MTdDNzY3OTVBOEFBNUFCMTcyQTRFMTg5NUYyQjM0MzFGODk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP2VbfSdM90paSByjJsA1dT9Koz8o+HG/6OLUQak9JQEGs7cHurXhs4Ly9rne xC/p81EpDhDOFo7Uwru8zCjXeyyzY7qq6uTBXE2BrjJBLDULbiuBPVnhGX5uofTD 5SJ00pXUlpsYM9td0L6ZhzPTn0azfWJJS1VTVIhv1XcCgI0AlHKRHBQ5qLCjL5Dn 9sgf/meuaJzhLLfc0mG0XcFJfxSeLb208mTVtBrBbVZik6loU286Gi8HP+R0pABQ 0hUWHrdUWt28DAYATZORdZS0dNswRwQT6Ke6/DPVQ21sS28YLKy1n6FPuSJPTQcb bmENap2WH2Kg2ku3Olm9a0dmQg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:26:08 2026 by rpki-client