This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft File: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft (raw, json) Hash identifier: 0QL6QKGzwS49FVfwQSPsl87nrTY4IMfMjes0US7ALKk= Subject key identifier: CE:32:39:56:12:18:57:A1:55:CA:A6:2F:30:15:3D:69:A9:D5:97:9C Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E Certificate issuer: /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Certificate serial: 07061C9E888B912EDFA3A380DBCD6717A4DA8C9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft Manifest number: 036F Signing time: Sun 25 Jan 2026 14:21:06 +0000 Manifest this update: Sun 25 Jan 2026 14:16:06 +0000 Manifest next update: Mon 26 Jan 2026 14:21:06 +0000 Files and hashes: 1: 323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (hash: T4iUaekwa7W+wWBiZBhsMW92NOY/WFlQgDoo76BdH1c=) 2: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl (hash: jcIyY4v4y8opnhg8cSWU9+RBgnR5ygaLQi0oNznuIFs=) 3: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (hash: tmAwqMhIhrFuqc+nYdV33Pa6/YiDFGZ4qnEWgs1O00c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:06:1c:9e:88:8b:91:2e:df:a3:a3:80:db:cd:67:17:a4:da:8c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Validity Not Before: Jan 25 14:16:06 2026 GMT Not After : Jan 26 14:21:06 2026 GMT Subject: CN=CE323956121857A155CAA62F30153D69A9D5979C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:2e:2b:69:bc:31:93:92:47:22:8f:01:be: 74:18:ca:56:5c:71:36:29:97:8c:a0:28:1b:49:ac: 0d:c5:fd:bf:ad:fa:0d:69:cb:b8:34:ba:60:5b:2c: 99:ba:f5:83:e1:8e:38:29:cf:80:85:04:a0:96:24: ce:2c:9a:5c:4c:2a:a2:18:55:54:86:6c:8f:18:77: 1c:93:e6:a9:b7:1f:9a:93:42:64:3e:4b:9f:d8:ae: d4:f4:d1:fd:a8:e2:0c:c8:6f:71:0f:5b:ab:17:08: da:f9:0d:18:29:74:f3:39:5d:81:4d:43:07:7d:4e: a7:1f:4e:85:29:6f:2a:b5:7d:76:cb:da:ae:7b:b5: aa:85:03:52:3c:b4:7b:3e:06:77:4d:cd:ba:86:ca: d7:e4:9a:1d:dc:89:54:f7:b3:47:65:1d:52:43:82: c6:14:65:1d:13:a5:f3:05:8e:ab:52:ca:f0:cc:dc: 22:82:07:98:19:ac:11:0a:d3:20:c1:e5:a5:e7:a6: 03:45:a3:2a:4a:0c:2b:b7:1e:7a:35:41:b4:62:43: f6:6b:3c:93:a9:51:00:83:05:b9:63:a2:a1:5d:14: c1:e5:2b:0c:e6:7c:10:4b:64:a4:99:55:46:51:93: 94:49:e6:20:ea:b3:4e:96:ee:21:20:9b:13:8e:ed: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:39:56:12:18:57:A1:55:CA:A6:2F:30:15:3D:69:A9:D5:97:9C X509v3 Authority Key Identifier: keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:aa:bf:91:39:87:55:a5:5e:dc:71:5d:a7:b6:53:21:e8:6a: 60:a8:b7:b2:d8:5a:0b:a3:51:c3:60:b4:a5:5a:e8:af:43:4f: 4e:dc:d9:8c:bc:79:b3:92:9c:25:09:72:e9:78:32:5b:8a:f9: 19:9e:96:4b:5f:41:53:2a:ab:90:72:2e:5f:b4:5c:61:0b:12: 2b:24:f9:13:92:c9:be:88:79:44:24:cd:11:65:28:8d:a1:ea: 4b:5b:3f:8d:ac:68:08:6e:c8:cb:bb:5d:ca:0c:5f:1c:77:c4: 1b:82:f6:b9:45:fb:80:ec:8c:bb:1c:12:6c:3c:ff:ba:b2:eb: 84:40:94:18:3f:e2:32:dc:86:55:2e:75:d8:6d:9f:a0:10:87: 49:72:f6:ea:ef:2a:8b:a2:ae:41:c7:29:ed:46:1e:a2:fd:10: 9b:f3:9f:c3:31:72:bc:4c:8e:f0:4f:66:16:21:d3:01:5e:d0: 8d:c6:09:3f:4a:ed:80:eb:2d:97:a7:fb:73:78:16:ae:b7:07: 89:d4:5a:de:48:98:ea:49:65:4f:4f:91:20:2e:c0:d2:a7:9e: 62:18:ee:bd:46:91:c6:d0:0d:89:09:88:e7:38:5d:a3:b5:e1: fe:ae:1a:c7:01:7e:ed:b8:17:ce:1d:c8:a0:0d:12:84:94:22: 33:ec:b8:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBwYcnoiLkS7fo6OA281nF6TajJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGQ0M2NTREQjQyNDhFRDlDQzhBRkM3RDYxQjcxRjcw QTQ4NzA3RTAeFw0yNjAxMjUxNDE2MDZaFw0yNjAxMjYxNDIxMDZaMDMxMTAvBgNV BAMTKENFMzIzOTU2MTIxODU3QTE1NUNBQTYyRjMwMTUzRDY5QTlENTk3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cy4rabwxk5JHIo8BvnQYylZc cTYpl4ygKBtJrA3F/b+t+g1py7g0umBbLJm69YPhjjgpz4CFBKCWJM4smlxMKqIY VVSGbI8YdxyT5qm3H5qTQmQ+S5/YrtT00f2o4gzIb3EPW6sXCNr5DRgpdPM5XYFN Qwd9TqcfToUpbyq1fXbL2q57taqFA1I8tHs+BndNzbqGytfkmh3ciVT3s0dlHVJD gsYUZR0TpfMFjqtSyvDM3CKCB5gZrBEK0yDB5aXnpgNFoypKDCu3Hno1QbRiQ/Zr PJOpUQCDBbljoqFdFMHlKwzmfBBLZKSZVUZRk5RJ5iDqs06W7iEgmxOO7ftJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzjI5VhIYV6FVyqYvMBU9aanVl5wwHwYDVR0j BBgwFoAUS/zGVNtCSO2cyK/H1htx9wpIcH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa QWgvMS80QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNDNjU0REI0MjQ4RUQ5 Q0M4QUZDN0Q2MUI3MUY3MEE0ODcwN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZaQWgvMS80 QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh6q/kTmHVaVe3HFdp7ZTIehqYKi3sthaC6NRw2C0pVror0NPTtzZjLx5s5Kc JQly6XgyW4r5GZ6WS19BUyqrkHIuX7RcYQsSKyT5E5LJvoh5RCTNEWUojaHqS1s/ jaxoCG7Iy7tdygxfHHfEG4L2uUX7gOyMuxwSbDz/urLrhECUGD/iMtyGVS512G2f oBCHSXL26u8qi6KuQccp7UYeov0Qm/OfwzFyvEyO8E9mFiHTAV7QjcYJP0rtgOst l6f7c3gWrrcHidRa3kiY6kllT0+RIC7A0qeeYhjuvUaRxtANiQmI5zhdo7Xh/q4a xwF+7bgXzh3IoA0ShJQiM+y40A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:31:17 2026 by rpki-client