This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft File: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json) Hash identifier: g8N394eCA34xJ44BrSISXJgwQBnGbUW2BsV4ZX7T600= Subject key identifier: 81:59:9C:2E:B0:92:B2:BB:85:B4:82:9B:07:57:17:8A:4F:91:C4:C3 Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 Certificate issuer: /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Certificate serial: 4FD7816A07B38D2723C1E61D25533A26FCFF82F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft Manifest number: 0349 Signing time: Thu 01 Jan 2026 18:32:15 +0000 Manifest this update: Thu 01 Jan 2026 18:27:15 +0000 Manifest next update: Fri 02 Jan 2026 19:48:15 +0000 Files and hashes: 1: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=) 2: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=) 3: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: P80Xi/1njDQp9gYAKAhCg04w6XQec5prRIt4N1GhLOI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 19:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d7:81:6a:07:b3:8d:27:23:c1:e6:1d:25:53:3a:26:fc:ff:82:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Validity Not Before: Jan 1 18:27:15 2026 GMT Not After : Jan 2 19:48:15 2026 GMT Subject: CN=81599C2EB092B2BB85B4829B0757178A4F91C4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:d5:3f:62:53:ab:50:30:f8:6a:37:76:56: 70:57:c6:e9:de:c0:0a:ba:b0:6c:1c:fd:0c:0e:a5: c5:f4:cb:e7:03:a6:3f:a8:25:28:61:19:64:da:37: 22:03:35:99:4c:4a:03:cb:18:2a:ca:14:c5:b4:0a: d8:c7:8b:00:8f:26:9c:83:5b:1d:62:26:83:b7:cc: c7:96:72:41:2f:18:f9:5c:84:a7:25:2e:dc:35:70: 95:f7:9b:99:ee:d1:2e:8b:79:94:cd:48:22:d4:f4: 4f:1e:a6:f1:91:87:6a:50:77:c0:77:a2:d4:df:e8: 51:1f:e4:12:2b:72:bf:f9:78:f2:96:2f:90:04:f3: fb:be:14:34:46:c7:a1:73:6a:a8:bf:9d:61:29:2c: e1:ec:56:40:47:c7:4f:1e:d4:0f:2b:e9:4c:48:35: 30:88:0d:36:5a:57:3e:a1:7c:b4:b4:e4:4f:d0:9a: 63:a0:71:1f:1c:ab:da:71:67:7c:bf:f6:1c:cb:8b: e1:ad:3a:e2:ca:5b:78:62:93:a7:f2:73:f9:1b:7e: d0:dc:ab:dc:f4:0c:cd:bf:80:fd:f7:90:1b:16:39: 67:13:44:4c:5f:c5:04:4e:1e:b6:fc:82:50:c4:a5: ca:49:ac:e3:e6:b8:c5:41:93:ba:41:9d:b5:0a:97: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:59:9C:2E:B0:92:B2:BB:85:B4:82:9B:07:57:17:8A:4F:91:C4:C3 X509v3 Authority Key Identifier: keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c0:cf:7c:e3:71:d7:c2:17:5d:79:d8:63:f3:65:0e:be:1f: 93:91:d1:fa:bd:19:c4:99:7a:64:5e:38:9a:e4:bc:6e:66:7b: 15:6a:a8:94:fe:8e:7c:ce:6c:24:a5:d3:9c:7b:45:07:db:4f: 1d:a2:4a:cb:25:01:8f:79:4d:67:f9:22:18:1e:aa:49:de:d0: 47:a5:f7:d0:a2:f0:0e:05:43:de:93:59:eb:8a:6f:56:ca:0d: 1a:c6:01:5a:60:1c:36:36:86:81:c2:a3:8e:5d:46:09:7f:20: 9a:23:b2:4e:59:f5:c5:65:4c:bd:aa:5d:7c:21:f9:f8:31:35: 6f:28:36:57:03:15:9f:5a:75:ef:41:83:ec:45:a6:73:45:6d: aa:1a:b1:09:fe:3e:ba:69:ee:a7:36:ab:8d:0a:2d:f4:48:c9: 39:0f:b8:d9:80:3c:d4:29:4d:24:3b:15:71:b2:a4:ed:ff:0b: a8:9e:5e:51:5f:da:42:f9:4c:e6:44:95:d6:f3:be:e8:02:1e: 62:54:ab:f3:3b:5d:0c:d8:9f:aa:fa:61:3e:c1:fd:da:e0:72: 5a:d6:40:f2:e3:87:37:50:14:3b:85:87:cf:f1:92:40:78:80: fa:46:cf:b5:8d:6f:e3:d8:f6:e4:e2:da:0d:92:e9:67:3e:23: e3:3b:d5:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT9eBagezjScjweYdJVM6Jvz/gvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3NTY4Q0E0QzMzNDMwRUI3MkREQkM4MjJENDBFNjVG NjMwNDJBMzAeFw0yNjAxMDExODI3MTVaFw0yNjAxMDIxOTQ4MTVaMDMxMTAvBgNV BAMTKDgxNTk5QzJFQjA5MkIyQkI4NUI0ODI5QjA3NTcxNzhBNEY5MUM0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjtU/YlOrUDD4ajd2VnBXxune wAq6sGwc/QwOpcX0y+cDpj+oJShhGWTaNyIDNZlMSgPLGCrKFMW0CtjHiwCPJpyD Wx1iJoO3zMeWckEvGPlchKclLtw1cJX3m5nu0S6LeZTNSCLU9E8epvGRh2pQd8B3 otTf6FEf5BIrcr/5ePKWL5AE8/u+FDRGx6Fzaqi/nWEpLOHsVkBHx08e1A8r6UxI NTCIDTZaVz6hfLS05E/QmmOgcR8cq9pxZ3y/9hzLi+GtOuLKW3hik6fyc/kbftDc q9z0DM2/gP33kBsWOWcTRExfxQROHrb8glDEpcpJrOPmuMVBk7pBnbUKl/qBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgVmcLrCSsruFtIKbB1cXik+RxMMwHwYDVR0j BBgwFoAUK3VoykwzQw63LdvIItQOZfYwQqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVk N1kvMC8yQjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzU2OENBNEMzMzQzMEVC NzJEREJDODIyRDQwRTY1RjYzMDQyQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVkN1kvMC8y Qjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB8DPfONx18IXXXnYY/NlDr4fk5HR+r0ZxJl6ZF44muS8bmZ7FWqolP6OfM5s JKXTnHtFB9tPHaJKyyUBj3lNZ/kiGB6qSd7QR6X30KLwDgVD3pNZ64pvVsoNGsYB WmAcNjaGgcKjjl1GCX8gmiOyTln1xWVMvapdfCH5+DE1byg2VwMVn1p170GD7EWm c0VtqhqxCf4+umnupzarjQot9EjJOQ+42YA81ClNJDsVcbKk7f8LqJ5eUV/aQvlM 5kSV1vO+6AIeYlSr8ztdDNifqvphPsH92uByWtZA8uOHN1AUO4WHz/GSQHiA+kbP tY1v49j25OLaDZLpZz4j4zvVCw== -----END CERTIFICATE-----Generated at Thu Jan 1 19:55:13 2026 by rpki-client