This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft File: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft (raw, json) Hash identifier: i15kRNzjGxJ9qZKUsOuJf9C9ILaPu/f7kep2mcnELGA= Subject key identifier: D5:95:BE:5B:B4:99:1F:D7:24:15:69:2E:B2:9B:58:65:66:40:C9:B0 Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1 Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1 Certificate serial: 6AF18CB2DD1C311C3BC4F0C0DE2EA969BAAF919F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft Manifest number: 0356 Signing time: Sun 11 Jan 2026 12:43:28 +0000 Manifest this update: Sun 11 Jan 2026 12:38:28 +0000 Manifest next update: Mon 12 Jan 2026 16:01:28 +0000 Files and hashes: 1: 323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (hash: TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=) 2: 3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (hash: gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=) 3: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl (hash: +VH88cCfQt+XMVS/6wlF6DPysGDGDn/mr0Ze8r0YEOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f1:8c:b2:dd:1c:31:1c:3b:c4:f0:c0:de:2e:a9:69:ba:af:91:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1 Validity Not Before: Jan 11 12:38:28 2026 GMT Not After : Jan 12 16:01:28 2026 GMT Subject: CN=D595BE5BB4991FD72415692EB29B58656640C9B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5c:64:93:9c:2b:2e:64:40:c8:1c:33:40:1b: 44:b5:7e:2d:0f:41:79:c7:ea:6f:90:f3:78:42:e4: 47:26:7d:0a:eb:1e:e8:cb:a3:b5:11:97:34:ab:ef: 5a:15:27:6a:54:47:03:6e:bd:14:ae:e5:12:af:4d: a8:5d:a1:9b:3b:e7:c2:ba:54:ce:9f:cb:94:07:31: 99:d3:f7:56:20:68:92:a3:d8:39:12:78:b7:c6:e4: 69:26:42:a8:4f:a7:fc:95:9b:e5:ae:fc:53:c3:83: 74:48:b4:45:9f:ad:78:d6:83:b3:59:1c:76:17:90: bf:b0:e9:a8:fe:c9:71:f6:97:d1:1a:91:fc:b5:51: 90:5f:17:91:63:b0:84:96:9f:fd:81:24:d0:6d:b9: ba:e7:67:d3:c3:38:68:c7:33:81:f5:83:26:a4:bc: 60:29:eb:f0:f4:9e:4e:62:0a:2a:d8:d6:03:ec:0d: 29:90:82:be:4a:ef:0c:77:48:29:fb:ff:c5:5d:19: 5e:f5:7e:15:d0:34:2b:66:e2:e3:f8:e0:13:44:05: 70:05:1b:9d:10:3b:66:8e:12:24:3b:f7:02:7c:f1: ba:29:c5:a3:07:e2:b8:c3:67:92:ed:d3:bb:96:f9: 9a:2f:21:29:f9:7f:c1:19:9a:7f:de:ff:1f:5b:1a: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:95:BE:5B:B4:99:1F:D7:24:15:69:2E:B2:9B:58:65:66:40:C9:B0 X509v3 Authority Key Identifier: keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:09:da:11:e4:8f:7b:b7:11:03:09:99:99:1e:71:18:72:a5: 91:b7:15:28:d2:05:b1:8d:da:d0:da:56:53:7e:ca:10:6c:60: 99:44:d0:ad:1c:49:cd:00:a2:3f:05:89:32:27:00:de:ab:5a: a0:d4:ab:7c:44:31:a9:09:a3:02:18:c0:37:73:c0:14:c1:48: 3c:18:22:e4:66:ba:f8:2e:0c:0c:bd:0a:39:5c:3c:a0:5b:86: 31:90:9f:2d:71:0c:da:74:a0:5d:ad:4f:73:28:d1:35:25:aa: 8a:09:b4:27:e5:ca:7f:00:da:fb:fc:22:c2:5b:4b:88:f1:b4: 25:59:08:da:e8:35:a9:e2:84:f0:94:0d:60:85:ce:72:39:a5: 82:ef:91:84:39:ad:a7:08:19:74:ed:8d:79:cb:1b:69:5b:98: 35:d7:31:fe:12:49:30:cc:45:e6:ed:1e:ab:f2:d8:79:46:0f: 21:d7:d0:5d:71:3c:2d:5e:dc:97:5f:0c:5a:a5:f9:86:b0:85: 15:a0:62:30:8a:95:b1:a3:4a:25:f5:f2:8d:c3:f7:8b:4f:f5: cc:0c:be:83:cc:be:da:b6:7a:6a:96:b5:37:d0:15:bc:9e:91: d1:3c:bc:e7:8d:76:05:0f:b2:6e:a5:1e:67:fc:64:67:b8:9b: c0:58:7e:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUavGMst0cMRw7xPDA3i6pabqvkZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC Qzg1OThFMTAeFw0yNjAxMTExMjM4MjhaFw0yNjAxMTIxNjAxMjhaMDMxMTAvBgNV BAMTKEQ1OTVCRTVCQjQ5OTFGRDcyNDE1NjkyRUIyOUI1ODY1NjY0MEM5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuXGSTnCsuZEDIHDNAG0S1fi0P QXnH6m+Q83hC5EcmfQrrHujLo7URlzSr71oVJ2pURwNuvRSu5RKvTahdoZs758K6 VM6fy5QHMZnT91YgaJKj2DkSeLfG5GkmQqhPp/yVm+Wu/FPDg3RItEWfrXjWg7NZ HHYXkL+w6aj+yXH2l9Eakfy1UZBfF5FjsISWn/2BJNBtubrnZ9PDOGjHM4H1gyak vGAp6/D0nk5iCirY1gPsDSmQgr5K7wx3SCn7/8VdGV71fhXQNCtm4uP44BNEBXAF G50QO2aOEiQ79wJ88bopxaMH4rjDZ5Lt07uW+ZovISn5f8EZmn/e/x9bGuu3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1ZW+W7SZH9ckFWkusptYZWZAybAwHwYDVR0j BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0 OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0OTMvMC9G RDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4AnaEeSPe7cRAwmZmR5xGHKlkbcVKNIFsY3a0NpWU37KEGxgmUTQrRxJzQCi PwWJMicA3qtaoNSrfEQxqQmjAhjAN3PAFMFIPBgi5Ga6+C4MDL0KOVw8oFuGMZCf LXEM2nSgXa1PcyjRNSWqigm0J+XKfwDa+/wiwltLiPG0JVkI2ug1qeKE8JQNYIXO cjmlgu+RhDmtpwgZdO2NecsbaVuYNdcx/hJJMMxF5u0eq/LYeUYPIdfQXXE8LV7c l18MWqX5hrCFFaBiMIqVsaNKJfXyjcP3i0/1zAy+g8y+2rZ6apa1N9AVvJ6R0Ty8 5412BQ+ybqUeZ/xkZ7ibwFh+4A== -----END CERTIFICATE-----Generated at Mon Jan 12 01:54:51 2026 by rpki-client