This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft File: C952C93A676BA611AEC114DD4983F2B03168FE10.mft (raw, json) Hash identifier: SA539pRVQeBBgOWX57tl7T6x7J2ySRNFkjypAGe3B8g= Subject key identifier: 4F:DF:AE:03:3E:51:2A:EC:74:64:D7:D8:51:B7:46:60:A2:6D:C4:8C Authority key identifier: C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10 Certificate issuer: /CN=C952C93A676BA611AEC114DD4983F2B03168FE10 Certificate serial: 77D34CA7742F4C3BB3363CDA6996B80E6045D710 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft Manifest number: EF Signing time: Sun 25 Jan 2026 01:37:43 +0000 Manifest this update: Sun 25 Jan 2026 01:32:43 +0000 Manifest next update: Mon 26 Jan 2026 02:57:43 +0000 Files and hashes: 1: C952C93A676BA611AEC114DD4983F2B03168FE10.crl (hash: Iv3npoF889iFCqY2/JGt7sj7gj8izQ2KQMylpba1U5k=) 2: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: FX7CxEwMe77oGVOke0pJc/KWM5ZKvh54JurYKVnN8TM=) 3: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: CinqX1j3jyRc5maom4CkOjawfLigGHk+YxdzO16vL9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 02:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d3:4c:a7:74:2f:4c:3b:b3:36:3c:da:69:96:b8:0e:60:45:d7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C952C93A676BA611AEC114DD4983F2B03168FE10 Validity Not Before: Jan 25 01:32:43 2026 GMT Not After : Jan 26 02:57:43 2026 GMT Subject: CN=4FDFAE033E512AEC7464D7D851B74660A26DC48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9b:6b:e3:31:0f:b5:9b:13:d4:ab:21:22:e0: 5c:d6:aa:2d:38:c3:05:4d:9e:c4:6e:d6:ef:cf:e2: 3d:82:da:10:a4:bf:94:44:55:c8:c8:2a:60:ca:8d: c8:ca:f5:01:a1:db:f4:5a:d1:4c:11:99:01:90:e7: 7a:6f:81:9c:71:a5:4b:11:2e:c0:34:ca:3f:a9:da: fc:6a:ea:bb:1f:51:4d:6f:94:3b:fa:dd:6a:fc:d5: 6f:ff:43:c8:fb:49:07:ee:c2:7c:2e:5b:c2:8a:72: de:04:bc:dd:7e:1b:45:ec:53:c8:74:22:2e:ce:71: 88:ff:2e:71:c1:42:df:57:2d:67:39:cb:68:77:cc: e0:50:45:73:c1:cd:05:e4:55:16:18:76:df:e2:64: 48:da:fa:9e:7d:6c:64:65:ce:c6:36:ad:c6:f4:33: b8:59:e6:03:6f:73:9d:86:6a:6a:a7:ed:84:8a:5a: 1b:82:d6:69:54:68:00:a7:8e:76:2c:55:2a:f5:95: f8:bf:e2:8e:1f:c5:4d:69:77:3c:e1:ff:65:2c:fd: 71:9e:33:6a:10:68:de:6a:2b:38:a5:99:0f:c1:0d: f7:cc:c4:3b:1c:c6:4f:ea:b3:45:f6:ea:2c:01:3a: b0:62:40:98:4d:be:4d:94:86:7f:19:aa:64:40:78: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DF:AE:03:3E:51:2A:EC:74:64:D7:D8:51:B7:46:60:A2:6D:C4:8C X509v3 Authority Key Identifier: keyid:C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ea:71:a4:a8:f3:87:71:da:f3:44:58:cd:08:1f:4c:0d:15: 67:0e:aa:c2:3f:c3:ad:23:7c:4d:65:db:72:33:d9:51:26:98: 85:0a:bc:7c:10:5d:77:43:47:b5:d5:a5:d7:84:ce:fc:30:19: bd:6a:7d:12:29:ec:dd:66:bf:f5:48:9a:0a:cf:f9:e0:3a:8f: ee:e3:19:a1:62:81:9b:21:8c:a5:0d:0c:f6:88:37:22:53:15: 2b:84:66:04:21:20:08:a2:0f:2c:e5:87:cf:bd:70:6e:af:67: a1:0e:06:f9:e0:93:10:f9:6f:33:d4:7a:eb:ee:2c:c5:80:fc: e8:9d:9f:9a:28:c1:64:8d:96:13:8d:ba:b3:60:e1:b6:1b:54: c8:a1:91:bb:1a:92:5f:ef:6e:86:67:b9:ae:43:f3:08:73:e2: cd:e7:f0:d8:ab:36:58:80:1f:ba:ff:b2:c8:1b:5a:04:56:26: 4a:71:ac:98:ea:84:23:bf:a9:4c:68:2c:6e:72:10:2e:57:b3: 2e:b8:2c:82:32:d2:0f:93:d8:f2:dd:cb:7f:6f:2f:ee:42:b6: 5e:53:b8:c3:52:f9:2f:9b:27:02:bc:a4:b8:0a:c5:24:44:60: 7f:b6:06:01:de:c6:e3:51:76:96:80:9a:90:06:37:82:57:1a: f1:ba:00:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd9NMp3QvTDuzNjzaaZa4DmBF1xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MkM5M0E2NzZCQTYxMUFFQzExNERENDk4M0YyQjAz MTY4RkUxMDAeFw0yNjAxMjUwMTMyNDNaFw0yNjAxMjYwMjU3NDNaMDMxMTAvBgNV BAMTKDRGREZBRTAzM0U1MTJBRUM3NDY0RDdEODUxQjc0NjYwQTI2REM0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYm2vjMQ+1mxPUqyEi4FzWqi04 wwVNnsRu1u/P4j2C2hCkv5REVcjIKmDKjcjK9QGh2/Ra0UwRmQGQ53pvgZxxpUsR LsA0yj+p2vxq6rsfUU1vlDv63Wr81W//Q8j7SQfuwnwuW8KKct4EvN1+G0XsU8h0 Ii7OcYj/LnHBQt9XLWc5y2h3zOBQRXPBzQXkVRYYdt/iZEja+p59bGRlzsY2rcb0 M7hZ5gNvc52Gamqn7YSKWhuC1mlUaACnjnYsVSr1lfi/4o4fxU1pdzzh/2Us/XGe M2oQaN5qKzilmQ/BDffMxDscxk/qs0X26iwBOrBiQJhNvk2Uhn8ZqmRAeFCBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT9+uAz5RKux0ZNfYUbdGYKJtxIwwHwYDVR0j BBgwFoAUyVLJOmdrphGuwRTdSYPysDFo/hAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC9DOTUyQzkzQTY3NkJBNjExQUVDMTE0REQ0OTgzRjJCMDMxNjhGRTEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5NTJDOTNBNjc2QkE2MTFB RUMxMTRERDQ5ODNGMkIwMzE2OEZFMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC9D OTUyQzkzQTY3NkJBNjExQUVDMTE0REQ0OTgzRjJCMDMxNjhGRTEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPupxpKjzh3Ha80RYzQgfTA0VZw6qwj/DrSN8TWXbcjPZUSaYhQq8fBBdd0NH tdWl14TO/DAZvWp9Eins3Wa/9UiaCs/54DqP7uMZoWKBmyGMpQ0M9og3IlMVK4Rm BCEgCKIPLOWHz71wbq9noQ4G+eCTEPlvM9R66+4sxYD86J2fmijBZI2WE426s2Dh thtUyKGRuxqSX+9uhme5rkPzCHPizefw2Ks2WIAfuv+yyBtaBFYmSnGsmOqEI7+p TGgsbnIQLlezLrgsgjLSD5PY8t3Lf28v7kK2XlO4w1L5L5snArykuArFJERgf7YG Ad7G41F2loCakAY3glca8boAoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:48:18 2026 by rpki-client