This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft File: D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft (raw, json) Hash identifier: NwLQmN27/0sPM0PVEvhLtDWeYLvNfpBjMS+kyDfYiWQ= Subject key identifier: 68:F0:8F:09:3B:34:AE:D5:5A:48:31:72:DF:46:12:D7:03:0D:E5:24 Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3 Certificate issuer: /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3 Certificate serial: 0D9265FB52D39FDDFCF33CF8E1A93BAFFF61919B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft Manifest number: 0357 Signing time: Sat 24 Jan 2026 22:10:22 +0000 Manifest this update: Sat 24 Jan 2026 22:05:22 +0000 Manifest next update: Mon 26 Jan 2026 01:48:22 +0000 Files and hashes: 1: 323830343a343630343a3a2f33322d3334203d3e20323636393632.roa (hash: xwaJR5dhjhBO4fQGCT/XLU8PXXzRhmShVjgGEu1UG64=) 2: D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl (hash: gtr87xPD7MHrq9c1ZbXYNYm4H79SHuCEHegpP1/D2F8=) 3: 34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa (hash: GajE+SmGWaNYBKVNw4W3zPMLuW5M9g5AsGBUOwDGmFM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 01:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:92:65:fb:52:d3:9f:dd:fc:f3:3c:f8:e1:a9:3b:af:ff:61:91:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3 Validity Not Before: Jan 24 22:05:22 2026 GMT Not After : Jan 26 01:48:22 2026 GMT Subject: CN=68F08F093B34AED55A483172DF4612D7030DE524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:fe:96:a5:d2:b1:ff:79:28:39:c6:b9:93: d7:15:3b:06:de:b6:2f:52:7e:b1:bf:70:32:d5:5a: 1a:e3:1e:25:17:24:ec:58:f1:21:0c:b7:93:9e:bb: e8:b3:18:53:d8:b2:0f:08:50:9a:57:7c:8b:c1:a7: e3:95:95:eb:24:5d:3b:55:8e:30:2a:2b:ed:ae:7e: b1:aa:57:cb:0f:5c:43:f9:26:24:82:f1:81:db:fc: e2:3d:01:79:ec:4d:7a:da:03:6b:6c:5e:f8:d3:57: 7a:39:2b:62:84:a1:1f:f5:b4:7b:c7:cc:00:bb:45: a4:d1:14:8b:de:d2:40:4d:34:f6:6d:35:83:c8:e7: d4:e4:32:25:d9:0d:7f:25:56:6c:ce:b3:5b:1c:07: 2d:ca:ad:e5:5a:f2:8f:6c:58:b7:14:73:21:8c:93: f8:1e:5e:08:98:9f:f0:4c:69:f4:10:45:b4:82:dd: a3:de:c0:b0:d5:84:33:06:9f:59:dc:33:c5:a5:7b: 2a:56:4d:4a:4b:b2:4d:76:1b:6a:95:b2:8e:53:30: 74:8c:71:a0:ac:b7:2f:41:ac:1d:64:e0:73:d0:45: c5:0e:6f:78:54:54:88:ae:53:1d:41:6c:ab:a4:a2: d5:34:7b:5f:1d:b2:33:67:cc:0f:98:5c:66:c2:38: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:8F:09:3B:34:AE:D5:5A:48:31:72:DF:46:12:D7:03:0D:E5:24 X509v3 Authority Key Identifier: keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5e:b0:c9:e1:21:1a:df:80:bf:97:78:5b:0b:32:28:76:1e: 35:0c:f7:ae:e3:29:8c:26:c1:15:09:88:d1:a6:95:dc:f5:c0: 4c:95:c2:34:02:16:12:37:e7:12:97:60:01:29:7c:f5:ab:bd: a1:6d:94:8e:cb:ec:77:24:dc:3d:db:92:5b:c6:ce:90:ca:4d: ad:83:da:d9:52:8b:80:34:55:85:79:79:b1:72:09:61:9f:48: 2a:f7:ae:68:d7:00:d4:cd:1a:0f:8c:21:d5:67:0a:9d:cc:18: 58:08:87:77:9b:cd:78:5a:d7:6e:8b:8b:9a:46:cf:03:ec:fc: ad:1e:bd:5d:e1:aa:61:16:06:4e:25:91:f0:ef:5c:d0:60:ce: 9c:60:d3:ab:5d:0c:d5:f9:46:e7:60:1a:3c:76:7a:73:d8:db: d4:d3:27:a6:24:9c:f8:2c:b3:6a:6d:5c:87:d5:15:31:15:6b: 19:2f:34:c5:53:0d:73:71:22:2a:b2:82:8e:0b:af:16:7a:e1: 7d:f0:12:38:e2:7d:35:03:4f:79:44:d6:32:d7:39:e8:f8:b4: f9:8e:5b:25:54:14:74:d3:39:27:62:ad:28:60:13:64:e5:ff: 61:09:46:a6:ee:23:1a:1d:16:b9:1e:5d:e6:63:19:9e:c6:76: f8:21:6c:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDZJl+1LTn9388zz44ak7r/9hkZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQzI4NTdBMjkwOERBOUU5N0VFRjQyMkEyNTc0NUQ4 OUYyODJCMzAeFw0yNjAxMjQyMjA1MjJaFw0yNjAxMjYwMTQ4MjJaMDMxMTAvBgNV BAMTKDY4RjA4RjA5M0IzNEFFRDU1QTQ4MzE3MkRGNDYxMkQ3MDMwREU1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHf6WpdKx/3koOca5k9cVOwbe ti9SfrG/cDLVWhrjHiUXJOxY8SEMt5Oeu+izGFPYsg8IUJpXfIvBp+OVleskXTtV jjAqK+2ufrGqV8sPXEP5JiSC8YHb/OI9AXnsTXraA2tsXvjTV3o5K2KEoR/1tHvH zAC7RaTRFIve0kBNNPZtNYPI59TkMiXZDX8lVmzOs1scBy3KreVa8o9sWLcUcyGM k/geXgiYn/BMafQQRbSC3aPewLDVhDMGn1ncM8WleypWTUpLsk12G2qVso5TMHSM caCsty9BrB1k4HPQRcUOb3hUVIiuUx1BbKukotU0e18dsjNnzA+YXGbCOE85AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaPCPCTs0rtVaSDFy30YS1wMN5SQwHwYDVR0j BBgwFoAU2LwoV6KQjanpfu9CKiV0XYnygrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRk1yamtDRXlDN3VrVXp1RVc3d1JUdjdEV1pBemV0a3VVNXc3bjJTNU1y ZDYvMC9EOEJDMjg1N0EyOTA4REE5RTk3RUVGNDIyQTI1NzQ1RDg5RjI4MkIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkMyODU3QTI5MDhEQTlF OTdFRUY0MjJBMjU3NDVEODlGMjgyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rk1yamtDRXlDN3VrVXp1RVc3d1JUdjdEV1pBemV0a3VVNXc3bjJTNU1yZDYvMC9E OEJDMjg1N0EyOTA4REE5RTk3RUVGNDIyQTI1NzQ1RDg5RjI4MkIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS16wyeEhGt+Av5d4WwsyKHYeNQz3ruMpjCbBFQmI0aaV3PXATJXCNAIWEjfn EpdgASl89au9oW2UjsvsdyTcPduSW8bOkMpNrYPa2VKLgDRVhXl5sXIJYZ9IKveu aNcA1M0aD4wh1WcKncwYWAiHd5vNeFrXbouLmkbPA+z8rR69XeGqYRYGTiWR8O9c 0GDOnGDTq10M1flG52AaPHZ6c9jb1NMnpiSc+Cyzam1ch9UVMRVrGS80xVMNc3Ei KrKCjguvFnrhffASOOJ9NQNPeUTWMtc56Pi0+Y5bJVQUdNM5J2KtKGATZOX/YQlG pu4jGh0WuR5d5mMZnsZ2+CFspA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:49:12 2026 by rpki-client