This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft File: 3921558C04D37C64DA2CBC9D86CFF035672C152F.mft (raw, json) Hash identifier: GUTDKFxvJPgDHiCvB3LNP82jlPf59X6Mi02IxSopUAs= Subject key identifier: 15:C7:E7:11:3E:E0:BB:C4:E3:39:1A:8B:B4:0A:26:01:C6:AD:DB:57 Authority key identifier: 39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F Certificate issuer: /CN=3921558C04D37C64DA2CBC9D86CFF035672C152F Certificate serial: 1F59C5EB13A0CA22FF2685D543117076372DA100 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer Subject info access: rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft Manifest number: D1 Signing time: Sun 25 Jan 2026 04:10:53 +0000 Manifest this update: Sun 25 Jan 2026 04:05:53 +0000 Manifest next update: Mon 26 Jan 2026 06:00:53 +0000 Files and hashes: 1: 323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (hash: dUDlHgNCuZ93aicUk/mH3Si/Q6dP4PtlITKr+tKS6Wc=) 2: 3921558C04D37C64DA2CBC9D86CFF035672C152F.crl (hash: 1hHETEWIfXtaKK+PjfexsW3Xpb7SLhgysRHhqQWaOsY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:59:c5:eb:13:a0:ca:22:ff:26:85:d5:43:11:70:76:37:2d:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3921558C04D37C64DA2CBC9D86CFF035672C152F Validity Not Before: Jan 25 04:05:53 2026 GMT Not After : Jan 26 06:00:53 2026 GMT Subject: CN=15C7E7113EE0BBC4E3391A8BB40A2601C6ADDB57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:e7:55:34:82:b9:ec:f4:62:fe:ec:22:01: b3:27:be:92:5a:c2:bd:bb:16:51:2d:aa:2e:f6:35: c6:53:9a:73:bc:24:92:98:52:4e:89:b3:a2:bd:2c: e4:53:46:46:59:d6:87:b1:59:57:2e:eb:d2:bc:65: d8:87:83:52:37:a1:99:11:cf:eb:4f:0c:df:cb:3f: c1:dc:b0:5e:be:7f:b3:98:8d:1b:24:e8:4f:8c:fb: 42:b2:7d:32:97:a9:74:12:a7:02:7d:2b:91:a5:91: b7:2d:bb:14:dd:a0:4f:a8:5f:83:3e:29:c7:64:d8: 81:08:ca:32:75:64:3f:7e:dc:f2:a0:ea:4a:61:e5: 05:cd:6e:79:0d:26:f8:3f:88:ec:f6:7b:48:85:05: 77:f8:8e:2f:63:cb:c7:a2:2a:4e:41:ee:20:07:6f: 6a:e7:d2:b0:b8:e2:f2:e8:c9:ad:c4:78:f3:8e:b5: d1:a8:b5:3a:fd:b1:38:dd:d3:e3:41:86:98:45:c2: fd:ea:07:c2:c3:33:39:02:fc:72:64:01:bf:b6:2f: 38:89:3f:17:a4:5a:ff:ea:8c:3f:90:74:2e:fc:f9: fe:dc:a5:83:41:b0:8c:95:9e:bd:e8:7b:82:d5:b6: 17:d6:5e:67:e3:2c:9f:5c:25:69:35:a9:d0:2d:64: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C7:E7:11:3E:E0:BB:C4:E3:39:1A:8B:B4:0A:26:01:C6:AD:DB:57 X509v3 Authority Key Identifier: keyid:39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:99:41:b6:a7:d0:2f:01:c1:51:b7:90:ee:05:5a:34:5c:97: 08:da:9f:83:76:89:cd:bd:8b:a0:20:1a:ab:f8:8c:10:9a:42: ec:b3:65:14:a7:40:f3:47:13:69:bc:20:51:e9:07:77:9f:7d: 6c:e1:0e:65:36:da:5a:5d:58:61:85:73:30:ed:17:16:39:c1: c1:54:aa:4b:56:0e:82:c1:f8:a9:a5:ff:0b:c4:cb:65:40:d5: 7f:85:9b:ea:17:dd:c8:6b:0e:9e:53:9a:7e:1d:ec:65:3f:c3: bb:52:11:ce:cb:0f:1f:cf:3c:23:d5:81:4a:48:bc:58:ed:d8: bc:0b:cf:3b:94:c7:6d:4f:72:2c:64:7b:9e:36:78:a4:28:1c: 2e:b7:fa:f5:7e:65:a1:c5:3b:f2:e3:f1:3b:ea:cd:19:56:4f: 3f:bb:fd:df:cb:c5:e1:66:9a:76:f7:0c:a7:60:dc:dd:41:f9: a2:59:57:16:fd:83:c9:32:cf:7e:12:82:85:0d:79:0e:fc:9e: b9:b3:5d:e4:41:ba:d8:f6:88:53:88:6c:d6:a4:a2:5c:1e:9e: 1f:fb:65:57:9a:2d:a0:88:fb:e8:81:e4:94:bc:6e:87:77:83: f3:6b:2d:e0:9f:41:bb:32:ca:99:36:a1:50:98:40:8a:0c:fd: 98:0c:fb:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH1nF6xOgyiL/JoXVQxFwdjctoQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkyMTU1OEMwNEQzN0M2NERBMkNCQzlEODZDRkYwMzU2 NzJDMTUyRjAeFw0yNjAxMjUwNDA1NTNaFw0yNjAxMjYwNjAwNTNaMDMxMTAvBgNV BAMTKDE1QzdFNzExM0VFMEJCQzRFMzM5MUE4QkI0MEEyNjAxQzZBRERCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QedVNIK57PRi/uwiAbMnvpJa wr27FlEtqi72NcZTmnO8JJKYUk6Js6K9LORTRkZZ1oexWVcu69K8ZdiHg1I3oZkR z+tPDN/LP8HcsF6+f7OYjRsk6E+M+0KyfTKXqXQSpwJ9K5GlkbctuxTdoE+oX4M+ Kcdk2IEIyjJ1ZD9+3PKg6kph5QXNbnkNJvg/iOz2e0iFBXf4ji9jy8eiKk5B7iAH b2rn0rC44vLoya3EePOOtdGotTr9sTjd0+NBhphFwv3qB8LDMzkC/HJkAb+2LziJ PxekWv/qjD+QdC78+f7cpYNBsIyVnr3oe4LVthfWXmfjLJ9cJWk1qdAtZBB3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFcfnET7gu8TjORqLtAomAcat21cwHwYDVR0j BBgwFoAUOSFVjATTfGTaLLydhs/wNWcsFS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGFEcDdwcjk0R1dEWERIcFdHWkZQVDhHY1hMQWJidmFiWnBpV2lieVo2 UHUvMC8zOTIxNTU4QzA0RDM3QzY0REEyQ0JDOUQ4NkNGRjAzNTY3MkMxNTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MjE1NThDMDREMzdDNjRE QTJDQkM5RDg2Q0ZGMDM1NjcyQzE1MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGFEcDdwcjk0R1dEWERIcFdHWkZQVDhHY1hMQWJidmFiWnBpV2lieVo2UHUvMC8z OTIxNTU4QzA0RDM3QzY0REEyQ0JDOUQ4NkNGRjAzNTY3MkMxNTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5lBtqfQLwHBUbeQ7gVaNFyXCNqfg3aJzb2LoCAaq/iMEJpC7LNlFKdA80cT abwgUekHd599bOEOZTbaWl1YYYVzMO0XFjnBwVSqS1YOgsH4qaX/C8TLZUDVf4Wb 6hfdyGsOnlOafh3sZT/Du1IRzssPH888I9WBSki8WO3YvAvPO5THbU9yLGR7njZ4 pCgcLrf69X5locU78uPxO+rNGVZPP7v938vF4WaadvcMp2Dc3UH5ollXFv2DyTLP fhKChQ15DvyeubNd5EG62PaIU4hs1qSiXB6eH/tlV5otoIj76IHklLxuh3eD82st 4J9BuzLKmTahUJhAigz9mAz7BQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:56:35 2026 by rpki-client