This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft File: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json) Hash identifier: R5Xiusmnu8ZitBcTRhmzx/YaVNv5dT1ZUNwroZXMpRg= Subject key identifier: 10:AA:F2:BB:33:7E:75:6D:3D:05:7D:EF:62:3C:57:47:0E:8D:65:B9 Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 Certificate issuer: /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Certificate serial: 368DBA63FBB3FF1B08A28FD9B8A4B434344D2799 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject info access: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft Manifest number: 0130 Signing time: Sat 24 Jan 2026 18:51:39 +0000 Manifest this update: Sat 24 Jan 2026 18:46:39 +0000 Manifest next update: Sun 25 Jan 2026 22:36:39 +0000 Files and hashes: 1: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: fPsx4d62UPQm+f5HlAHqo78FphvrRmReo6la1d77pLU=) 2: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: jgH3DjyoZ6BGWn1QTX5vO9+dVxJBmqcuVXr7VeElWV4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 25 Jan 2026 22:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8d:ba:63:fb:b3:ff:1b:08:a2:8f:d9:b8:a4:b4:34:34:4d:27:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Validity Not Before: Jan 24 18:46:39 2026 GMT Not After : Jan 25 22:36:39 2026 GMT Subject: CN=10AAF2BB337E756D3D057DEF623C57470E8D65B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:58:d1:31:d3:5b:73:25:a5:6e:c1:ec:c3: f5:e0:d0:14:19:a0:2d:f3:59:e8:4b:e7:68:f5:d0: 3b:df:13:ce:fe:88:9f:b4:5f:d1:76:b0:36:02:f8: 9b:38:05:44:a5:08:0d:a5:66:c4:e4:bd:bb:54:99: 8c:95:1e:c5:f8:b1:c9:d1:62:76:a4:b0:58:ce:08: 9b:93:9f:b3:6f:4d:f2:ba:23:4d:dd:ed:ce:0b:8d: c9:2b:94:b1:4f:3b:7f:0b:1b:05:8c:8f:88:81:74: 8a:12:bd:1c:c0:0d:ee:1e:7d:a6:6e:87:d7:46:ba: 15:b5:eb:fc:20:11:4d:5b:af:57:15:84:f2:dc:5d: 8d:d1:f4:14:f2:61:a1:63:cf:e2:ec:f5:9c:12:0e: 36:9b:7f:1e:b8:f3:52:30:1a:94:38:38:48:68:86: 0e:60:64:bd:f4:17:32:a5:48:d4:c2:fe:60:dc:b6: 0c:b5:d6:fa:60:61:de:88:40:36:ac:0a:f2:15:ab: cb:c9:df:42:b0:e3:fa:8b:26:92:ac:44:04:62:d1: 5e:97:2a:d2:e8:6f:a8:02:49:0b:c9:49:45:08:22: 29:e8:b0:69:46:26:78:65:ee:05:3e:c2:0d:30:f3: 04:bf:df:8b:86:d7:1f:23:28:3b:18:cb:86:2f:8c: 5c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:F2:BB:33:7E:75:6D:3D:05:7D:EF:62:3C:57:47:0E:8D:65:B9 X509v3 Authority Key Identifier: keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f8:59:39:ce:7a:df:17:4b:05:73:2e:b3:f1:f9:fd:99:ed: 29:3e:66:7d:06:34:61:de:74:70:c9:de:57:b1:d8:fe:25:fd: bf:8a:81:38:6c:50:de:6a:d1:6e:7c:25:e0:f0:4a:20:eb:0c: 36:db:bd:eb:f2:20:32:0d:c6:93:42:70:89:47:8d:1f:cb:46: c6:8c:b0:3a:b7:f9:a0:5e:4f:d1:94:0d:eb:a5:85:8f:6b:9e: 48:31:57:d4:6e:87:c0:e4:b6:17:3f:ee:f8:9e:15:0f:08:5a: 50:1d:c1:d9:cc:05:8e:db:9d:9a:d2:1f:74:f0:77:bd:cd:80: 14:08:8b:42:0c:13:75:62:13:f5:93:a7:f9:cc:45:a1:7f:c2: 9b:29:d3:0a:89:65:5d:51:32:be:04:59:66:fe:87:5c:a4:fc: 87:c4:6f:68:8e:28:74:63:d2:7a:c4:9d:15:47:1d:ad:63:75: 2a:56:2f:ba:b0:0b:98:28:7f:f6:8f:12:81:7b:ad:1d:2c:f7: 95:54:e9:73:c8:6c:b9:58:2c:a0:d5:98:74:8c:3c:1b:a1:56: d6:8a:cc:aa:30:d5:37:3d:ff:95:f6:ad:58:f5:62:6c:76:af: f9:e5:d8:5c:0e:f1:5a:25:1d:25:a7:dc:16:2b:10:44:69:83: 4f:f7:2a:a2 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUNo26Y/uz/xsIoo/ZuKS0NDRNJ5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1 MEQzQzlDNDAeFw0yNjAxMjQxODQ2MzlaFw0yNjAxMjUyMjM2MzlaMDMxMTAvBgNV BAMTKDEwQUFGMkJCMzM3RTc1NkQzRDA1N0RFRjYyM0M1NzQ3MEU4RDY1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChNljRMdNbcyWlbsHsw/Xg0BQZ oC3zWehL52j10DvfE87+iJ+0X9F2sDYC+Js4BUSlCA2lZsTkvbtUmYyVHsX4scnR YnaksFjOCJuTn7NvTfK6I03d7c4LjckrlLFPO38LGwWMj4iBdIoSvRzADe4efaZu h9dGuhW16/wgEU1br1cVhPLcXY3R9BTyYaFjz+Ls9ZwSDjabfx6481IwGpQ4OEho hg5gZL30FzKlSNTC/mDctgy11vpgYd6IQDasCvIVq8vJ30Kw4/qLJpKsRARi0V6X KtLob6gCSQvJSUUIIinosGlGJnhl7gU+wg0w8wS/34uG1x8jKDsYy4YvjFzdAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUEKryuzN+dW09BX3vYjxXRw6NZbkwHwYDVR0j BBgwFoAUTvB9UUuh1rL72mxNw2C+t1DTycQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YemFHSkM0bTRCWXgyb21abkszdFo4cFV6R0NZR1NVblFkdm0xUUZMeVZz LzAvNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1MEQzQzlDNC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUYwN0Q1MTRCQTFENkIyRkJE QTZDNERDMzYwQkVCNzUwRDNDOUM0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1h6 YUdKQzRtNEJZeDJvbVpuSzN0WjhwVXpHQ1lHU1VuUWR2bTFRRkx5VnMvMC80RUYw N0Q1MTRCQTFENkIyRkJEQTZDNERDMzYwQkVCNzUwRDNDOUM0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA SvhZOc563xdLBXMus/H5/ZntKT5mfQY0Yd50cMneV7HY/iX9v4qBOGxQ3mrRbnwl 4PBKIOsMNtu96/IgMg3Gk0JwiUeNH8tGxoywOrf5oF5P0ZQN66WFj2ueSDFX1G6H wOS2Fz/u+J4VDwhaUB3B2cwFjtudmtIfdPB3vc2AFAiLQgwTdWIT9ZOn+cxFoX/C mynTCollXVEyvgRZZv6HXKT8h8RvaI4odGPSesSdFUcdrWN1KlYvurALmCh/9o8S gXutHSz3lVTpc8hsuVgsoNWYdIw8G6FW1orMqjDVNz3/lfatWPVibHav+eXYXA7x WiUdJafcFisQRGmDT/cqog== -----END CERTIFICATE-----Generated at Sun Jan 25 16:31:12 2026 by rpki-client