This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft File: F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft (raw, json) Hash identifier: GMAB8CcRZmJfAtXHZYJGgtMWQae0XxhaJgUDEwnMr+w= Subject key identifier: DE:6F:A9:B0:60:12:A8:B0:B7:E0:F5:1F:DF:F6:9B:8B:14:7E:E1:6D Authority key identifier: F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3 Certificate issuer: /CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3 Certificate serial: 56873C18D356EBB4E76855FDC2D9620A1470C8C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft Manifest number: 27 Signing time: Sun 25 Jan 2026 16:15:07 +0000 Manifest this update: Sun 25 Jan 2026 16:10:07 +0000 Manifest next update: Mon 26 Jan 2026 19:40:07 +0000 Files and hashes: 1: F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl (hash: j1L4SZlYvyZTi/RLnp+opQ1Jd/8FOESuKcyNkoPu3dA=) 2: 323830343a376464303a3a2f33322d313238203d3e20323731353834.roa (hash: mlUJ+quRfskP/Sx5+VIC5IVIX52LJCcChlx6Gr6nMLo=) 3: 3138392e39312e3136382e302f32322d3332203d3e20323731353834.roa (hash: 7hcf6r7XVABsgk3V6zpLGmkwiyQfGLsY1cg4z0gkhhM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 19:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:87:3c:18:d3:56:eb:b4:e7:68:55:fd:c2:d9:62:0a:14:70:c8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3 Validity Not Before: Jan 25 16:10:07 2026 GMT Not After : Jan 26 19:40:07 2026 GMT Subject: CN=DE6FA9B06012A8B0B7E0F51FDFF69B8B147EE16D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:5f:85:3c:52:13:ce:c1:0a:98:99:9d:7e: 79:ae:44:6f:2d:59:be:dc:4e:e7:35:7a:e7:96:d6: 90:c3:cc:3f:ae:57:26:76:9f:97:5d:0b:23:7f:f0: 89:c8:2c:0a:f7:83:ef:4c:16:4a:4e:7f:f9:35:ab: 62:49:22:df:4d:bf:db:ad:34:43:56:9b:e6:ff:d3: 68:14:6a:4a:ea:47:90:ad:54:29:ef:67:b9:12:53: 07:49:78:b9:a8:3a:89:fc:5a:96:c8:2a:e8:4e:b4: ee:7c:36:dd:f6:70:77:16:59:2c:2b:31:e3:90:72: f7:f4:f3:01:11:df:90:62:41:51:a3:de:e0:79:6a: b0:eb:9f:87:75:47:8f:ce:30:d3:53:3e:73:db:dd: 71:34:67:a4:6b:23:2c:4d:73:56:e0:ec:0d:ad:c8: 17:55:28:96:33:eb:db:ee:f6:40:a0:c7:b0:28:78: b9:14:ca:72:27:42:da:39:2f:68:9e:fe:d2:3c:ed: a9:5c:85:7a:1a:02:4d:a4:1a:07:47:2b:1d:db:b8: dd:05:9b:da:49:6c:18:10:50:7f:55:53:d0:14:db: e7:41:ac:98:79:9f:79:92:c3:b1:61:86:92:dd:da: cb:48:4b:94:0b:e2:2a:fd:e8:13:47:42:ba:69:b3: fb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:A9:B0:60:12:A8:B0:B7:E0:F5:1F:DF:F6:9B:8B:14:7E:E1:6D X509v3 Authority Key Identifier: keyid:F8:40:9E:FF:6F:B6:FE:F1:1C:3B:A9:A4:80:1F:61:51:3E:4F:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN4HJE3u2zDS9K55LAXc1YbGrn66xXp8G6JDg6NHmdQa/0/F8409EFF6FB6FEF11C3BA9A4801F61513E4F41A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0a:1c:0e:30:26:18:ce:49:97:56:97:43:f8:b0:57:b6:c4: cb:01:8f:21:e6:94:27:bc:03:29:28:6f:a1:dd:da:12:93:b6: b8:7f:49:c1:e5:e7:b7:6a:fa:52:55:43:f3:8b:dc:c3:5b:cb: 71:86:c5:9a:d8:1f:68:87:53:02:eb:53:cd:99:f5:63:8c:c2: 4a:f3:8e:2d:fe:93:f6:6c:95:5a:2b:c4:02:c8:26:66:2b:46: cf:b9:b5:e1:82:95:98:87:d8:11:7e:74:2a:af:fd:c9:55:7d: 12:5b:84:cc:44:b0:6a:22:5d:1c:9a:0e:7e:2d:16:aa:3a:29: 5a:1a:e0:d5:65:f9:09:fe:39:91:61:2a:a7:29:3d:09:c4:d8: e8:24:0e:37:e5:36:06:3a:07:4d:c4:f7:76:88:35:24:1a:7c: 98:aa:52:4e:e5:df:d4:fa:97:8e:11:d0:41:d2:4e:cf:b2:7b: 62:34:b2:38:5f:12:d8:62:e8:ce:20:0c:93:38:0d:c0:58:0d: c4:93:7a:fa:29:97:99:8e:36:ff:92:88:32:20:bf:f7:86:45: c0:d5:24:9e:d2:be:99:ab:03:a7:50:a8:54:a0:63:28:d5:9b: 46:44:31:24:af:fe:5f:76:58:12:df:7a:72:ef:20:cb:4c:58: 61:f4:f1:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVoc8GNNW67TnaFX9wtliChRwyMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MDlFRkY2RkI2RkVGMTFDM0JBOUE0ODAxRjYxNTEz RTRGNDFBMzAeFw0yNjAxMjUxNjEwMDdaFw0yNjAxMjYxOTQwMDdaMDMxMTAvBgNV BAMTKERFNkZBOUIwNjAxMkE4QjBCN0UwRjUxRkRGRjY5QjhCMTQ3RUUxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7F+FPFITzsEKmJmdfnmuRG8t Wb7cTuc1eueW1pDDzD+uVyZ2n5ddCyN/8InILAr3g+9MFkpOf/k1q2JJIt9Nv9ut NENWm+b/02gUakrqR5CtVCnvZ7kSUwdJeLmoOon8WpbIKuhOtO58Nt32cHcWWSwr MeOQcvf08wER35BiQVGj3uB5arDrn4d1R4/OMNNTPnPb3XE0Z6RrIyxNc1bg7A2t yBdVKJYz69vu9kCgx7AoeLkUynInQto5L2ie/tI87alchXoaAk2kGgdHKx3buN0F m9pJbBgQUH9VU9AU2+dBrJh5n3mSw7FhhpLd2stIS5QL4ir96BNHQrpps/vHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3m+psGASqLC34PUf3/abixR+4W0wHwYDVR0j BBgwFoAU+ECe/2+2/vEcO6mkgB9hUT5PQaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE40SEpFM3UyekRTOUs1NUxBWGMxWWJHcm42NnhYcDhHNkpEZzZOSG1k UWEvMC9GODQwOUVGRjZGQjZGRUYxMUMzQkE5QTQ4MDFGNjE1MTNFNEY0MUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NDA5RUZGNkZCNkZFRjEx QzNCQTlBNDgwMUY2MTUxM0U0RjQxQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RE40SEpFM3UyekRTOUs1NUxBWGMxWWJHcm42NnhYcDhHNkpEZzZOSG1kUWEvMC9G ODQwOUVGRjZGQjZGRUYxMUMzQkE5QTQ4MDFGNjE1MTNFNEY0MUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQQocDjAmGM5Jl1aXQ/iwV7bEywGPIeaUJ7wDKShvod3aEpO2uH9JweXnt2r6 UlVD84vcw1vLcYbFmtgfaIdTAutTzZn1Y4zCSvOOLf6T9myVWivEAsgmZitGz7m1 4YKVmIfYEX50Kq/9yVV9EluEzESwaiJdHJoOfi0WqjopWhrg1WX5Cf45kWEqpyk9 CcTY6CQON+U2BjoHTcT3dog1JBp8mKpSTuXf1PqXjhHQQdJOz7J7YjSyOF8S2GLo ziAMkzgNwFgNxJN6+imXmY42/5KIMiC/94ZFwNUkntK+masDp1CoVKBjKNWbRkQx JK/+X3ZYEt96cu8gy0xYYfTxOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:29 2026 by rpki-client