This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft File: E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft (raw, json) Hash identifier: 70YmE9JyAOZNBlL3ZKNbrdmyyzblBhziryK9Lcfa0LM= Subject key identifier: 18:CF:7A:57:17:BD:B4:B5:B6:37:99:81:CA:68:A7:32:2A:B3:42:20 Authority key identifier: E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23 Certificate issuer: /CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223 Certificate serial: 386AE6E32D1D6C6D49ED6126DD998130C0B789AC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft Manifest number: 0295 Signing time: Fri 02 Jan 2026 21:10:58 +0000 Manifest this update: Fri 02 Jan 2026 21:05:58 +0000 Manifest next update: Sun 04 Jan 2026 01:02:58 +0000 Files and hashes: 1: 323830343a343431303a3a2f33322d3438203d3e20323637363139.roa (hash: VSSVyl3TEf6TYDtC7eJ00zjTr9caCfIiX+mXtC3UJkg=) 2: E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl (hash: Uf4Pex12fUut4fG8zRuJuCMAvwWSAUzSsagXUS4lx3E=) 3: 34352e37312e3132302e302f32322d3234203d3e20323637363139.roa (hash: GpQZkLwXG54lHOHQzGAKznEEd+6AMx8gO62nnVu5jhE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 Jan 2026 01:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6a:e6:e3:2d:1d:6c:6d:49:ed:61:26:dd:99:81:30:c0:b7:89:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223 Validity Not Before: Jan 2 21:05:58 2026 GMT Not After : Jan 4 01:02:58 2026 GMT Subject: CN=18CF7A5717BDB4B5B6379981CA68A7322AB34220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:6c:95:7b:8f:d3:0f:fe:51:f0:22:1c:13: 15:e2:7f:01:d2:d8:2f:e9:43:e5:1a:ea:37:ee:fd: c3:2f:9a:92:ad:30:1c:a7:3d:47:79:d3:44:e5:8c: d0:4b:80:98:af:61:c7:da:61:06:9f:33:39:f1:c8: 67:cf:33:3a:4c:f8:a9:ce:1c:15:6c:cb:19:ea:8a: 73:37:cf:56:9c:ac:3e:38:e3:9b:a7:af:d0:5d:c0: 19:27:dd:9f:75:be:f0:88:9b:ff:ca:c1:d7:00:4d: e8:1f:d7:32:d3:49:b6:11:3f:2b:43:ee:8f:84:11: 37:1c:c3:2c:2f:56:f8:f0:c1:6c:2f:f3:f5:fc:38: b2:21:16:47:a0:75:7e:5a:f8:ee:38:ec:bb:00:1e: 9e:fc:41:83:b3:46:78:39:9c:4e:28:49:18:53:07: c7:10:af:a9:07:cf:eb:d1:6c:36:20:6f:76:84:5d: 80:e3:3a:22:f4:4e:9e:f3:5d:0c:72:97:64:fb:88: 3c:95:80:bf:3f:51:92:5b:5d:ec:40:44:fb:89:c9: 9c:db:a8:72:fd:80:ec:9e:b3:d3:13:27:83:c7:70: 72:1f:6a:c9:98:b3:d2:ac:66:f0:64:06:44:53:21: 58:f1:2d:66:f8:58:56:ff:20:8e:f4:47:99:eb:69: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CF:7A:57:17:BD:B4:B5:B6:37:99:81:CA:68:A7:32:2A:B3:42:20 X509v3 Authority Key Identifier: keyid:E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c7:02:08:ff:a0:2e:f7:0e:f7:c2:0f:84:aa:9f:e8:bf:da: 4b:66:d1:c6:92:00:ac:67:70:bd:76:76:5b:8d:73:17:65:4d: 64:1e:08:79:ab:3e:bc:1d:0a:3c:b9:53:ab:c6:35:40:ef:4f: ee:90:09:b4:0c:cb:dd:7d:ff:84:6f:d6:bd:fa:79:04:0f:13: e7:d0:25:35:12:a5:cf:b9:45:63:cc:da:23:b4:fa:98:6b:bd: a5:28:e1:b0:92:94:ed:05:dc:0c:ac:7e:e1:87:c2:b6:ac:75: 36:e9:10:20:b3:97:9e:92:73:f5:ee:ce:e4:4f:91:3d:4b:55: 78:49:93:0e:60:db:4e:03:11:03:ed:4d:1f:bd:4d:8d:a5:11: 6e:ca:19:26:d0:77:ab:9b:14:eb:99:d5:8e:26:32:8e:a7:8a: e5:f6:cf:85:d1:ef:f8:9d:ba:07:bc:c5:87:0f:97:dd:19:6c: f9:2a:8a:2d:77:9c:7e:e8:e1:15:99:db:1c:70:7f:5a:5b:e7: 8f:20:ae:40:ec:95:84:78:db:cb:75:f9:ff:87:69:07:f2:32: b8:69:1e:a0:6b:bd:9d:26:e8:49:b4:89:76:99:f3:08:b3:40: da:ee:fe:3e:6e:59:bc:04:55:a4:ff:b8:03:8d:61:86:14:2c: 27:e4:dc:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOGrm4y0dbG1J7WEm3ZmBMMC3iawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTExRjhBQkVEN0Q3NkU1Mzc1QTg0MzZGRDFGNzk5NTVG RjJGRTIyMzAeFw0yNjAxMDIyMTA1NThaFw0yNjAxMDQwMTAyNThaMDMxMTAvBgNV BAMTKDE4Q0Y3QTU3MTdCREI0QjVCNjM3OTk4MUNBNjhBNzMyMkFCMzQyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwmyVe4/TD/5R8CIcExXifwHS 2C/pQ+Ua6jfu/cMvmpKtMBynPUd500TljNBLgJivYcfaYQafMznxyGfPMzpM+KnO HBVsyxnqinM3z1acrD4445unr9BdwBkn3Z91vvCIm//KwdcATegf1zLTSbYRPytD 7o+EETccwywvVvjwwWwv8/X8OLIhFkegdX5a+O447LsAHp78QYOzRng5nE4oSRhT B8cQr6kHz+vRbDYgb3aEXYDjOiL0Tp7zXQxyl2T7iDyVgL8/UZJbXexARPuJyZzb qHL9gOyes9MTJ4PHcHIfasmYs9KsZvBkBkRTIVjxLWb4WFb/II70R5nraQyfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGM96Vxe9tLW2N5mByminMiqzQiAwHwYDVR0j BBgwFoAU4R+KvtfXblN1qENv0feZVf8v4iMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdIaFBkM1d0clhzcTlzZ3ZqSFRpaFk4MzRSR1laTVp4elM0M3lDS1dG b3UvMC9FMTFGOEFCRUQ3RDc2RTUzNzVBODQzNkZEMUY3OTk1NUZGMkZFMjIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMUY4QUJFRDdENzZFNTM3 NUE4NDM2RkQxRjc5OTU1RkYyRkUyMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdIaFBkM1d0clhzcTlzZ3ZqSFRpaFk4MzRSR1laTVp4elM0M3lDS1dGb3UvMC9F MTFGOEFCRUQ3RDc2RTUzNzVBODQzNkZEMUY3OTk1NUZGMkZFMjIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA8cCCP+gLvcO98IPhKqf6L/aS2bRxpIArGdwvXZ2W41zF2VNZB4Ieas+vB0K PLlTq8Y1QO9P7pAJtAzL3X3/hG/Wvfp5BA8T59AlNRKlz7lFY8zaI7T6mGu9pSjh sJKU7QXcDKx+4YfCtqx1NukQILOXnpJz9e7O5E+RPUtVeEmTDmDbTgMRA+1NH71N jaURbsoZJtB3q5sU65nVjiYyjqeK5fbPhdHv+J26B7zFhw+X3Rls+SqKLXecfujh FZnbHHB/WlvnjyCuQOyVhHjby3X5/4dpB/IyuGkeoGu9nSboSbSJdpnzCLNA2u7+ Pm5ZvARVpP+4A41hhhQsJ+TcAg== -----END CERTIFICATE-----Generated at Sat Jan 3 13:08:32 2026 by rpki-client