This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
File: BA3E764B84DA8622ADE38A43DC527A79F7881585.mft (raw, json)
Hash identifier: 6vP9qYByCUugUkqNyMSmg6g96ZLqiFXsCDPrn7hGv2M=
Subject key identifier: FB:29:38:A8:2C:47:4D:89:C8:8A:6D:F1:8E:A5:C8:BE:DA:D7:72:81
Authority key identifier: BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
Certificate issuer: /CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Certificate serial: 73B2F239A3F8367DFEF601816A37F43BFA9136F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
Manifest number: 5A
Signing time: Sun 25 Jan 2026 13:11:03 +0000
Manifest this update: Sun 25 Jan 2026 13:06:03 +0000
Manifest next update: Mon 26 Jan 2026 15:01:03 +0000
Files and hashes: 1: 323830343a6636383a343030303a3a2f33362d3336203d3e20323633353834.roa (hash: MZgRTyf2J28RWgfhi5URnSouRJuk3sbODbnWZpe0v+A=)
2: 323830343a6636383a3a2f33362d3336203d3e20323633353834.roa (hash: x8uXLzYJ3KQgEVIKfWCOnvuX0Q4DS24j88C/gxom4ZM=)
3: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (hash: P1MG0nPdsp5CzH8mrfswYDpVTZqDRgdOnx+GwgAa1z8=)
4: 3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa (hash: t50JabpR/fHm4jYbN9ijYjyBCxDsn3x6P1Shp1ReHsQ=)
5: 3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (hash: 5Wjj8bzw0RazLZKAchZPhzS06hskM1n65O+NoY45Nt4=)
6: 323830343a6636383a363030303a3a2f33362d3336203d3e20323633353834.roa (hash: vghdzbzTW9gbTQBL/z6/MB6BKjAIv4vGcKbKudcyj1g=)
7: 3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (hash: xoeRtFQ3sjtZXLJixW8KyfpWs2JWWXX4DSEdzHDcRQE=)
8: 3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (hash: 2du9xE+p67VA79UZjUxhk4cb6pu/g5bYUVcnOk00dsk=)
9: 323830343a6636383a313030303a3a2f33362d3336203d3e20323633353834.roa (hash: qKQQpw1mjeg1W/0vZWkgb+QCXVU+GySV+l4MeFtxQac=)
10: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (hash: ndx2DdUf4v1bm0a+hqnEwvujPvBCw1fLMGxzNzWbE1E=)
11: 323830343a6636383a353030303a3a2f33362d3336203d3e20323633353834.roa (hash: LJWMhYXgYibrkvJawC53GG6yEZMzQWX5wlL36dgS80w=)
12: 323830343a6636383a323030303a3a2f33362d3336203d3e20323633353834.roa (hash: uYq8Z2eSQOmRiD5ILvx6fyjRk9b9+qtvQGSCE7Ep2e8=)
13: 3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa (hash: 9cvoKxhkNAQCqmZ4MxIm2viMWaoXDeioiIjsieTsL9g=)
14: 323830343a6636383a333030303a3a2f33362d3336203d3e20323633353834.roa (hash: uiOrLiMshlGbHKdZdj77/3SCjLAFsyVnDP7Zz91l1A4=)
15: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (hash: TT6alJAbxGe6MzLt59P++mK+/7Se+vb1JMyKuM/QDqI=)
16: BA3E764B84DA8622ADE38A43DC527A79F7881585.crl (hash: IYBgdxLTjT60O01HYXOOGk6QZmiRsdy6l/fUNLY9Xsc=)
17: 323830343a6636383a373030303a3a2f33362d3336203d3e20323633353834.roa (hash: ItfrLUpu0thSvMym/sdBqPRf1tcrXSLOyHc4sTMgWT0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 26 Jan 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b2:f2:39:a3:f8:36:7d:fe:f6:01:81:6a:37:f4:3b:fa:91:36:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA3E764B84DA8622ADE38A43DC527A79F7881585
Validity
Not Before: Jan 25 13:06:03 2026 GMT
Not After : Jan 26 15:01:03 2026 GMT
Subject: CN=FB2938A82C474D89C88A6DF18EA5C8BEDAD77281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:5d:ad:a3:e4:d0:7f:5a:41:71:f7:fc:31:
c2:d6:6f:55:f6:67:de:54:2f:ff:61:e9:57:8e:a3:
2a:6c:64:88:9c:c8:50:d1:2e:0a:1b:c6:db:73:bc:
df:a0:db:ce:38:b9:0f:1f:a8:e5:aa:f5:e8:2e:d1:
55:6f:6b:18:1f:e1:9e:4e:06:a4:02:aa:d6:bf:fb:
f9:a1:69:5e:ca:49:83:4e:89:41:5a:03:ee:a6:73:
1e:bc:5f:60:5f:65:4e:d1:c4:40:27:9c:b2:c1:12:
f2:24:a1:e5:0b:df:bd:a9:01:21:4d:b2:2c:21:88:
a8:91:9b:bb:50:19:2f:33:22:81:7e:d0:4d:01:dd:
40:b4:f3:62:b2:ef:7b:89:a4:4d:bf:43:2f:c0:5c:
1a:1c:1f:2b:27:82:93:ae:8a:e7:4e:c3:a8:c7:7e:
07:ef:06:a5:d6:b9:bb:ac:41:0d:1f:09:5d:e3:e2:
da:11:aa:01:95:59:16:c1:c0:c6:15:95:c0:3c:fb:
e3:d7:56:8e:1f:e6:19:38:89:31:05:ff:cb:5f:3b:
a4:14:da:e2:af:94:09:64:77:b2:e4:bb:be:75:6d:
2d:18:ca:e1:fe:ff:b7:48:41:31:3a:43:80:98:4f:
12:70:ea:70:b5:0c:5e:0c:33:81:05:a1:0e:56:a9:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:38:A8:2C:47:4D:89:C8:8A:6D:F1:8E:A5:C8:BE:DA:D7:72:81
X509v3 Authority Key Identifier:
keyid:BA:3E:76:4B:84:DA:86:22:AD:E3:8A:43:DC:52:7A:79:F7:88:15:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3E764B84DA8622ADE38A43DC527A79F7881585.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/BA3E764B84DA8622ADE38A43DC527A79F7881585.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:c7:3a:f0:8b:b3:14:47:72:98:fe:51:ae:84:f7:40:35:
9d:e6:87:cb:c9:b6:23:18:f7:01:c3:fb:e4:3d:fe:51:c5:04:
48:b3:99:4a:9a:aa:58:0a:90:3c:14:27:8a:34:21:79:55:ec:
60:73:a6:b5:a3:11:79:6c:05:f2:14:1d:5b:7a:1c:fa:ee:0d:
23:65:90:2f:bf:21:ea:08:e8:8f:ef:a6:f9:40:25:b4:bb:72:
9e:b3:eb:4f:b6:5c:6c:b4:0f:5b:14:ef:ba:44:67:77:a5:bb:
f9:73:2c:8f:4c:04:ea:91:df:f1:a0:12:85:36:32:ce:06:65:
0d:4c:1a:be:47:ce:aa:07:8a:3a:90:95:57:5e:e9:18:8e:dc:
a9:e5:33:60:58:d9:0e:ac:59:20:26:1a:f7:76:82:8b:a0:9e:
66:a5:8a:12:78:66:97:c9:31:37:ac:f2:5c:e7:7b:82:a9:7a:
dd:8f:2a:ef:88:aa:32:63:83:9b:6b:b4:f0:d0:a3:3f:5f:58:
58:0a:08:ec:61:9a:f3:69:f0:40:b7:9a:05:01:f3:6c:b3:55:
22:2d:ae:5e:0f:b8:03:bc:af:57:27:8c:08:ed:de:76:b3:00:
a5:d9:6a:0f:4f:41:bb:7a:25:b7:92:01:0f:b8:ca:01:0c:94:
16:49:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:31:33 2026 by rpki-client