This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft File: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft (raw, json) Hash identifier: JO1jzlWXwbvfcryMZANlMg9VinY6Oy5zoKoGsn67GlM= Subject key identifier: D9:4F:C7:22:8C:50:B7:40:84:4E:26:F2:58:2D:98:76:CB:E4:F9:E6 Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 Certificate issuer: /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Certificate serial: 3C8A82F27AAC53CE965746AFB8C09929835ED423 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft Manifest number: 0271 Signing time: Sun 25 Jan 2026 18:09:48 +0000 Manifest this update: Sun 25 Jan 2026 18:04:48 +0000 Manifest next update: Mon 26 Jan 2026 20:53:48 +0000 Files and hashes: 1: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: VSH2fxDW2V0tjSJpkhSvwy0Yrc/hswmaGt0+pSH8vjk=) 2: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: 2qOT4j6HG0vWun6Vyzh2Pkj1UkPidk6rSXOhaCbNHUU=) 3: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl (hash: qY9OxWzNq/jBUJbI3GD0Wm4FMcL5AXdNtwuTAhgaduM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8a:82:f2:7a:ac:53:ce:96:57:46:af:b8:c0:99:29:83:5e:d4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Validity Not Before: Jan 25 18:04:48 2026 GMT Not After : Jan 26 20:53:48 2026 GMT Subject: CN=D94FC7228C50B740844E26F2582D9876CBE4F9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:d2:56:a4:76:6a:47:ef:db:be:2f:37:e9: 2b:a1:26:72:93:88:ec:4a:1d:e1:95:92:73:f3:dc: ed:7f:18:a2:3e:6d:45:e9:2e:ee:de:23:a6:47:8d: b2:22:eb:ad:7c:5f:a1:c2:80:3d:da:7f:67:4c:a1: 3b:68:d1:eb:f7:f9:96:16:45:c3:16:bc:68:68:62: 04:33:b8:96:c8:26:2b:3a:19:9e:5a:f8:9a:8e:6a: d1:3e:42:dc:2a:67:87:ce:9d:1a:22:cf:bd:b2:bc: d6:16:55:b7:89:d9:58:69:0e:02:71:8f:3d:4c:b6: 3a:b0:99:7f:ba:59:b1:82:de:02:5b:be:56:44:b4: ba:2d:99:e9:f6:d6:fb:55:97:66:6d:a7:68:28:ed: ee:f0:46:ef:45:30:b7:0e:c0:da:5d:04:69:fb:46: 43:00:06:31:a8:22:74:d2:53:19:2e:7d:21:fd:56: 9c:74:c4:08:94:02:89:2e:bf:f7:ed:05:f1:2a:48: b8:b1:f7:ad:ad:5d:c4:d3:c5:21:28:16:f3:23:6c: ad:ab:a5:ed:39:2a:44:6e:e2:0f:50:59:33:3d:0d: 61:95:10:f6:df:8d:4b:f4:74:3d:c1:4d:d0:36:29: 9b:2f:ae:b8:e5:58:33:70:b4:f7:3a:8b:28:00:1b: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4F:C7:22:8C:50:B7:40:84:4E:26:F2:58:2D:98:76:CB:E4:F9:E6 X509v3 Authority Key Identifier: keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b5:e6:25:0e:44:90:18:f1:4f:ed:2d:ca:72:50:db:35:11: 98:81:61:94:eb:93:93:52:b9:d8:42:4d:6d:09:de:51:75:d7: c9:cc:82:d4:c3:11:36:37:8a:b6:48:b9:54:46:7a:d9:fd:52: 05:be:c6:a0:e9:23:83:e5:2e:22:ca:1a:15:64:93:49:4d:65: cb:e8:11:f4:e0:ca:42:c8:11:38:97:ce:e8:92:fa:8f:80:c9: a8:6b:a1:33:5c:dd:b7:23:d1:3a:df:53:3d:4a:12:1b:bb:3a: 57:20:80:46:78:2c:ad:85:6b:be:33:ab:0b:4e:ba:d2:1f:b0: 1b:9e:14:ad:bb:5f:d0:fa:29:05:13:e9:c6:14:df:c0:67:7d: 1b:6e:7f:d5:50:45:22:bf:ce:d0:68:bf:88:26:96:e8:7b:30: 1a:53:3a:70:f9:82:f0:92:af:2e:2a:04:e8:1c:9f:85:64:c2: 95:ef:8e:b8:26:5e:4c:80:84:fd:e4:f0:6e:0e:a8:0c:14:6c: a5:de:59:30:9c:e6:8a:d3:a0:25:3b:05:eb:1e:df:19:da:a3: 25:22:77:c8:9a:e5:cc:c7:e8:39:a2:87:96:f2:46:4a:d9:75: a5:bd:9f:ab:85:fa:34:3f:09:df:3b:c8:c0:d6:82:10:8d:78: 0d:2b:cf:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPIqC8nqsU86WV0avuMCZKYNe1CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU4RTFEQjVDMzNEM0ZDOEY4RTdDOTkzMDExNTgwQUEy OEYzMEJDOTAeFw0yNjAxMjUxODA0NDhaFw0yNjAxMjYyMDUzNDhaMDMxMTAvBgNV BAMTKEQ5NEZDNzIyOEM1MEI3NDA4NDRFMjZGMjU4MkQ5ODc2Q0JFNEY5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZtJWpHZqR+/bvi836SuhJnKT iOxKHeGVknPz3O1/GKI+bUXpLu7eI6ZHjbIi6618X6HCgD3af2dMoTto0ev3+ZYW RcMWvGhoYgQzuJbIJis6GZ5a+JqOatE+QtwqZ4fOnRoiz72yvNYWVbeJ2VhpDgJx jz1MtjqwmX+6WbGC3gJbvlZEtLotmen21vtVl2Ztp2go7e7wRu9FMLcOwNpdBGn7 RkMABjGoInTSUxkufSH9Vpx0xAiUAokuv/ftBfEqSLix962tXcTTxSEoFvMjbK2r pe05KkRu4g9QWTM9DWGVEPbfjUv0dD3BTdA2KZsvrrjlWDNwtPc6iygAG7lnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2U/HIoxQt0CETibyWC2Ydsvk+eYwHwYDVR0j BBgwFoAUno4dtcM9P8j458mTARWAqijzC8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5F eWsvMC85RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOEUxREI1QzMzRDNGQzhG OEU3Qzk5MzAxMTU4MEFBMjhGMzBCQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5FeWsvMC85 RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmbXmJQ5EkBjxT+0tynJQ2zURmIFhlOuTk1K52EJNbQneUXXXycyC1MMRNjeK tki5VEZ62f1SBb7GoOkjg+UuIsoaFWSTSU1ly+gR9ODKQsgROJfO6JL6j4DJqGuh M1zdtyPROt9TPUoSG7s6VyCARngsrYVrvjOrC0660h+wG54Urbtf0PopBRPpxhTf wGd9G25/1VBFIr/O0Gi/iCaW6HswGlM6cPmC8JKvLioE6ByfhWTCle+OuCZeTICE /eTwbg6oDBRspd5ZMJzmitOgJTsF6x7fGdqjJSJ3yJrlzMfoOaKHlvJGStl1pb2f q4X6ND8J3zvIwNaCEI14DSvPLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:59:00 2026 by rpki-client