This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.mft File: C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.mft (raw, json) Hash identifier: rM751vq6J/qCZ0i+jzQtCjiWcXLgFCPm7k5BfSBh064= Subject key identifier: 36:0D:C2:07:19:FB:82:DB:21:E3:A6:75:A6:81:DF:EB:18:25:8E:54 Authority key identifier: C4:B0:46:63:F9:DE:2C:28:14:BA:90:68:A5:3C:9D:70:64:FD:CC:F0 Certificate issuer: /CN=C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0 Certificate serial: 2833AEEDD323F8519215C0D938C7F28853761FB8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.mft Manifest number: 0F Signing time: Sun 25 Jan 2026 18:20:40 +0000 Manifest this update: Sun 25 Jan 2026 18:15:40 +0000 Manifest next update: Mon 26 Jan 2026 20:50:40 +0000 Files and hashes: 1: C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.crl (hash: eCch5ASd0FuVwmcAszUgauf8lwlE8LUdLr9AycVBm64=) 2: 323830343a386566383a3a2f33322d3334203d3e20323733343539.roa (hash: w0CCYlYInF8hKU1Hes+ZRPZMCr9jWXlJU7BNGQLeV44=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.crl rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 20:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:33:ae:ed:d3:23:f8:51:92:15:c0:d9:38:c7:f2:88:53:76:1f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0 Validity Not Before: Jan 25 18:15:40 2026 GMT Not After : Jan 26 20:50:40 2026 GMT Subject: CN=360DC20719FB82DB21E3A675A681DFEB18258E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:f4:3d:20:d9:de:31:37:79:99:44:65:35: 8c:1a:f8:05:98:9e:70:c4:51:45:09:e4:93:b9:cf: de:f5:37:ce:9c:f9:db:b7:23:98:7a:1c:4b:54:12: 8f:3a:54:3b:a2:15:58:f8:4e:49:b7:11:bf:09:15: 44:59:65:01:02:cb:ca:bd:4f:c9:dd:c9:8c:73:50: 70:64:02:8a:b2:c2:e3:aa:96:c0:a8:d1:ab:f7:e7: d8:93:81:27:0c:b4:21:81:a8:4c:07:93:21:16:5a: 09:4a:7d:24:17:fb:d9:8a:18:c8:f1:e3:39:40:c3: c2:68:46:18:89:be:72:4f:5e:66:9d:f6:ed:14:8e: ea:66:57:53:e4:20:79:14:30:fb:41:54:1e:e3:57: 37:21:05:b1:44:97:1a:05:d1:ba:25:b5:fe:a3:a0: f6:0e:a2:18:6f:28:92:90:7f:e8:b5:f5:03:ea:09: aa:44:78:2a:05:43:c5:97:52:16:7b:8d:6e:70:80: dd:da:7a:7c:07:53:ed:eb:78:56:90:c3:44:56:a1: 30:2e:ac:4b:d3:1e:42:b9:b8:cc:72:87:73:ab:c8: fd:90:0f:0b:08:69:91:d2:25:96:fd:50:e8:99:14: e0:89:2b:26:93:6c:fe:17:fc:88:45:86:f7:23:20: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0D:C2:07:19:FB:82:DB:21:E3:A6:75:A6:81:DF:EB:18:25:8E:54 X509v3 Authority Key Identifier: keyid:C4:B0:46:63:F9:DE:2C:28:14:BA:90:68:A5:3C:9D:70:64:FD:CC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/C4B04663F9DE2C2814BA9068A53C9D7064FDCCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1f:a0:ae:0c:3b:42:b8:86:ec:d9:4c:b3:30:80:9a:b4:93: c9:57:28:33:29:36:62:68:a1:69:90:24:4d:b5:e0:86:32:52: b1:9a:57:05:f3:89:35:4f:e7:c4:c6:4f:d8:0c:8f:c8:47:f6: a3:02:1e:20:e3:e7:0d:3c:ad:ed:99:b5:1d:c9:6e:07:5c:85: a0:ba:4a:f0:1f:fe:aa:64:f6:62:aa:49:c1:32:e4:5a:45:4c: 55:c4:d6:ad:65:53:d2:ef:07:47:76:37:3c:02:28:dc:48:f5: b3:5e:57:af:80:7f:11:fb:2b:89:91:aa:d6:30:19:18:f0:a3: ab:26:15:6c:d5:29:9d:2d:03:2d:2f:7c:f6:dd:d3:77:24:d3: 1a:81:9d:4a:78:c7:78:fe:65:15:e5:79:58:d5:29:58:69:f9: 84:da:c7:f4:00:cb:fc:75:40:08:55:1c:a1:cb:d8:70:19:18: 2f:1e:b4:c0:3f:7b:8e:87:71:38:8d:68:d6:62:7c:72:18:8e: 7b:44:56:04:7e:be:92:2a:db:c0:57:90:9c:ff:4f:50:66:31: ad:f5:d6:6d:00:04:3a:d8:a7:fe:54:40:6d:29:f9:19:1d:f7: 4e:6f:1f:f6:56:7a:bf:b6:d8:8c:1f:ff:42:26:a3:a0:a5:fc: 88:46:39:f9 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKDOu7dMj+FGSFcDZOMfyiFN2H7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRCMDQ2NjNGOURFMkMyODE0QkE5MDY4QTUzQzlENzA2 NEZEQ0NGMDAeFw0yNjAxMjUxODE1NDBaFw0yNjAxMjYyMDUwNDBaMDMxMTAvBgNV BAMTKDM2MERDMjA3MTlGQjgyREIyMUUzQTY3NUE2ODFERkVCMTgyNThFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lPQ9INneMTd5mURlNYwa+AWY nnDEUUUJ5JO5z971N86c+du3I5h6HEtUEo86VDuiFVj4Tkm3Eb8JFURZZQECy8q9 T8ndyYxzUHBkAoqywuOqlsCo0av359iTgScMtCGBqEwHkyEWWglKfSQX+9mKGMjx 4zlAw8JoRhiJvnJPXmad9u0UjupmV1PkIHkUMPtBVB7jVzchBbFElxoF0boltf6j oPYOohhvKJKQf+i19QPqCapEeCoFQ8WXUhZ7jW5wgN3aenwHU+3reFaQw0RWoTAu rEvTHkK5uMxyh3OryP2QDwsIaZHSJZb9UOiZFOCJKyaTbP4X/IhFhvcjIIDrAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUNg3CBxn7gtsh46Z1poHf6xgljlQwHwYDVR0j BBgwFoAUxLBGY/neLCgUupBopTydcGT9zPAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Yc21mcWR3bkNMU1paWjZNaUQ5VWZSZDFxRUg5UkNWOGd4eXZCOGtERUVU LzAvQzRCMDQ2NjNGOURFMkMyODE0QkE5MDY4QTUzQzlENzA2NEZEQ0NGMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DNEIwNDY2M0Y5REUyQzI4MTRC QTkwNjhBNTNDOUQ3MDY0RkRDQ0YwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hz bWZxZHduQ0xTWlpaNk1pRDlVZlJkMXFFSDlSQ1Y4Z3h5dkI4a0RFRVQvMC9DNEIw NDY2M0Y5REUyQzI4MTRCQTkwNjhBNTNDOUQ3MDY0RkRDQ0YwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA gx+grgw7QriG7NlMszCAmrSTyVcoMyk2YmihaZAkTbXghjJSsZpXBfOJNU/nxMZP 2AyPyEf2owIeIOPnDTyt7Zm1HcluB1yFoLpK8B/+qmT2YqpJwTLkWkVMVcTWrWVT 0u8HR3Y3PAIo3Ej1s15Xr4B/EfsriZGq1jAZGPCjqyYVbNUpnS0DLS989t3TdyTT GoGdSnjHeP5lFeV5WNUpWGn5hNrH9ADL/HVACFUcocvYcBkYLx60wD97jodxOI1o 1mJ8chiOe0RWBH6+kirbwFeQnP9PUGYxrfXWbQAEOtin/lRAbSn5GR33Tm8f9lZ6 v7bYjB//QiajoKX8iEY5+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:40 2026 by rpki-client