This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: Ow6LXzyzBfFrWII8Xx+PawEIhOYqSwcI/1R8/+HH3hc= Subject key identifier: 2F:16:61:CC:3B:FA:8C:AC:50:29:70:0D:0E:00:CA:A4:0F:6F:E0:B7 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 4B8595EEA458B8CF2024BA4E9219E15A00949BAE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0361 Signing time: Fri 09 Jan 2026 05:21:00 +0000 Manifest this update: Fri 09 Jan 2026 05:16:00 +0000 Manifest next update: Sat 10 Jan 2026 07:28:00 +0000 Files and hashes: 1: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) 2: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: ateKgB/+dL2fS0wsEIVDZiVHk/hemI86tINeM1Gw+Wc=) 3: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 Jan 2026 07:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:85:95:ee:a4:58:b8:cf:20:24:ba:4e:92:19:e1:5a:00:94:9b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Jan 9 05:16:00 2026 GMT Not After : Jan 10 07:28:00 2026 GMT Subject: CN=2F1661CC3BFA8CAC5029700D0E00CAA40F6FE0B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:46:4e:69:67:30:10:ba:a0:86:77:6c:44: 50:b6:44:60:0e:9c:b6:8e:35:af:2f:76:d5:b2:16: dc:2a:5d:11:e6:79:9c:44:e5:8d:8a:29:64:e0:43: 02:80:38:3e:6b:ef:b1:17:15:1d:39:57:cc:5c:48: bf:b7:7e:1f:fb:46:11:ce:fc:f5:8a:d7:d7:fc:b1: a3:ff:41:95:d5:d9:58:17:c0:ad:a6:35:ab:7f:85: cb:7a:18:cd:9b:08:0d:dc:cc:45:fe:b5:41:8b:8c: 15:46:06:2b:85:fd:c7:4d:1d:59:5b:db:2e:44:20: 9e:77:52:d0:7d:68:e3:c3:dd:e5:f4:7c:d0:3e:7b: e9:ef:8f:95:f8:e1:49:db:33:7f:3e:0d:70:a0:60: 2f:fb:3b:8f:e0:f9:31:3a:29:cd:86:c6:65:47:77: af:d7:b1:00:28:ef:fd:6b:ad:0c:c3:bb:e5:d6:63: 11:bb:2d:85:b9:70:2b:37:da:18:73:29:19:b0:91: 3d:88:92:af:bc:5b:81:cb:43:0d:13:e0:08:ec:74: c7:9a:4f:ed:a1:79:ed:b3:fc:39:7d:55:12:3b:f9: ce:ca:4d:69:90:e8:30:65:59:73:30:d3:52:78:c4: 80:d3:ec:56:45:a9:90:e6:c7:10:46:c2:d1:21:78: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:61:CC:3B:FA:8C:AC:50:29:70:0D:0E:00:CA:A4:0F:6F:E0:B7 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c3:68:c0:0d:54:8e:75:09:8e:c6:44:13:7e:b5:5b:21:ef: fb:c8:b7:4f:72:7d:c9:bf:6b:25:3a:c1:d1:3a:13:d3:79:aa: 68:7a:cc:c4:b9:d6:13:0c:b0:c7:f8:0a:cb:09:e4:df:60:1a: 22:33:04:fd:e2:f0:cb:60:c8:ec:1a:2c:8d:ed:26:08:83:b7: 13:49:db:f5:62:5f:ab:91:7c:99:b0:35:38:2e:7b:c2:49:5d: 10:48:f3:2f:ea:9c:04:2a:72:ed:44:93:91:7f:c2:a8:af:66: d5:56:3d:e7:1c:23:5e:bd:6e:07:cf:c0:8f:fe:82:70:66:4f: d7:08:e0:31:7e:92:62:eb:e5:8d:36:45:49:b0:13:66:92:60: 57:d3:21:cf:68:20:a9:8e:91:db:4e:fd:26:90:60:41:2f:db: ed:ee:33:5f:3b:23:85:83:ad:a6:79:c2:e5:1e:3b:7a:74:65: 26:5f:dc:a1:c6:b5:5d:cc:9f:ed:21:ab:d6:72:b8:22:0f:4d: fb:62:32:0d:77:bb:67:4a:1f:bf:ff:92:88:e2:4f:89:17:0e: 39:df:26:b0:63:1e:f8:29:d0:b8:13:a9:9e:9a:c9:13:b9:d4: 90:19:86:ad:5b:05:56:41:34:21:d5:3e:34:32:60:a3:b2:cb: e9:8b:f5:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS4WV7qRYuM8gJLpOkhnhWgCUm64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNjAxMDkwNTE2MDBaFw0yNjAxMTAwNzI4MDBaMDMxMTAvBgNV BAMTKDJGMTY2MUNDM0JGQThDQUM1MDI5NzAwRDBFMDBDQUE0MEY2RkUwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgEZOaWcwELqghndsRFC2RGAO nLaONa8vdtWyFtwqXRHmeZxE5Y2KKWTgQwKAOD5r77EXFR05V8xcSL+3fh/7RhHO /PWK19f8saP/QZXV2VgXwK2mNat/hct6GM2bCA3czEX+tUGLjBVGBiuF/cdNHVlb 2y5EIJ53UtB9aOPD3eX0fNA+e+nvj5X44UnbM38+DXCgYC/7O4/g+TE6Kc2GxmVH d6/XsQAo7/1rrQzDu+XWYxG7LYW5cCs32hhzKRmwkT2Ikq+8W4HLQw0T4AjsdMea T+2hee2z/Dl9VRI7+c7KTWmQ6DBlWXMw01J4xIDT7FZFqZDmxxBGwtEheLVVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULxZhzDv6jKxQKXANDgDKpA9v4LcwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbcNowA1UjnUJjsZEE361WyHv+8i3T3J9yb9rJTrB0ToT03mqaHrMxLnWEwyw x/gKywnk32AaIjME/eLwy2DI7Bosje0mCIO3E0nb9WJfq5F8mbA1OC57wkldEEjz L+qcBCpy7USTkX/CqK9m1VY95xwjXr1uB8/Aj/6CcGZP1wjgMX6SYuvljTZFSbAT ZpJgV9Mhz2ggqY6R2079JpBgQS/b7e4zXzsjhYOtpnnC5R47enRlJl/coca1Xcyf 7SGr1nK4Ig9N+2IyDXe7Z0ofv/+SiOJPiRcOOd8msGMe+CnQuBOpnprJE7nUkBmG rVsFVkE0IdU+NDJgo7LL6Yv1Zg== -----END CERTIFICATE-----Generated at Fri Jan 9 15:56:01 2026 by rpki-client