This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft File: 99C2A53A53B7161516985068CD39F465FE646938.mft (raw, json) Hash identifier: aRgPFZx3UuqhHYFc+aEGDBB/Kd9ZAz0Sz4S2gjlSJCg= Subject key identifier: E5:88:B0:F5:17:1F:33:D3:18:2A:66:1D:FC:C3:0D:AB:41:14:93:F2 Authority key identifier: 99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 Certificate issuer: /CN=99C2A53A53B7161516985068CD39F465FE646938 Certificate serial: 7F6A430E832E0284D897D1551107EB0CFDF7CE2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft Manifest number: 01FD Signing time: Tue 06 Jan 2026 14:08:15 +0000 Manifest this update: Tue 06 Jan 2026 14:03:15 +0000 Manifest next update: Wed 07 Jan 2026 17:31:15 +0000 Files and hashes: 1: 323830343a376564383a3a2f33322d3438203d3e203238323332.roa (hash: PhO68uVnCgFScnDEM039IdG1hpyK/D+rO+AQU/xYeQ4=) 2: 3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (hash: LEXqlZJbf5qMWkOrSfLzDj7qmflNSbw1YqpcAf5AUH8=) 3: 99C2A53A53B7161516985068CD39F465FE646938.crl (hash: WaDvs/Fk71Gt8cOfCcbmRKG2tQyYxo3RZANatVUTWYw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 Jan 2026 17:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6a:43:0e:83:2e:02:84:d8:97:d1:55:11:07:eb:0c:fd:f7:ce:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99C2A53A53B7161516985068CD39F465FE646938 Validity Not Before: Jan 6 14:03:15 2026 GMT Not After : Jan 7 17:31:15 2026 GMT Subject: CN=E588B0F5171F33D3182A661DFCC30DAB411493F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c7:f1:e4:23:5f:0b:c2:79:5c:86:ef:41:ea: 9d:b4:69:50:a3:16:fc:e9:4d:62:d3:64:a4:e0:a9: 51:1e:3c:4c:06:b0:2c:80:57:c5:32:c5:7e:90:e2: e8:91:b4:d5:05:87:9a:31:55:6c:52:ca:e5:3f:88: cb:d7:08:ad:91:fa:46:fd:a1:00:b5:cb:ac:38:12: 6d:4e:e5:62:7c:6a:4c:49:01:fb:d0:41:89:9d:e6: cf:1f:61:f1:b5:32:8e:38:de:4f:f3:f8:77:ea:37: 2f:3a:6d:cd:82:2f:99:6c:bf:4f:09:8e:32:8c:cf: e7:5e:67:44:1f:a1:b1:64:4c:ac:fa:f5:96:b1:3c: cc:1b:16:b9:c8:09:8f:a0:c3:f9:13:53:38:da:a8: d7:08:f4:66:4c:5f:e8:9a:2a:18:49:b8:c6:0d:4b: 7d:d4:66:8a:42:48:ba:3b:55:c5:ae:04:8f:13:ea: 03:2c:4a:88:c6:17:81:fa:6c:84:cd:57:b7:d6:4d: 79:24:3a:27:d8:b2:4e:07:ff:a5:97:fe:02:4f:1a: 50:3a:9f:d5:14:57:2e:9e:9f:9a:61:e3:a2:a2:80: 7b:30:a5:95:53:ba:6c:6e:9a:16:0c:c6:f0:64:00: 5a:5a:d0:bd:f3:54:a5:42:92:4e:90:bc:f0:4c:46: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:B0:F5:17:1F:33:D3:18:2A:66:1D:FC:C3:0D:AB:41:14:93:F2 X509v3 Authority Key Identifier: keyid:99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4d:5c:ba:36:ba:47:4b:bf:21:a0:44:24:69:7d:eb:9e:1e: 80:85:12:d4:10:68:ac:3b:b9:97:0e:ed:92:ce:42:1e:e3:e9: e2:35:52:51:86:0a:67:5f:25:57:7e:8f:50:3a:e6:f5:2f:31: 57:c7:29:a5:17:5c:24:a5:87:bc:d3:a4:93:40:d9:3e:ae:7b: b2:40:4b:55:d7:31:70:29:4b:c9:a5:0f:30:23:b1:a2:66:b1: b0:06:41:78:60:1c:43:01:b3:80:d6:e6:38:73:00:b0:66:c7: 34:fd:81:2a:41:3a:0d:ce:7b:15:d6:c1:96:61:c9:82:c5:4a: 9b:a3:a4:1c:6e:f2:da:e0:7b:b3:58:f3:7a:67:fd:f9:1f:60: e2:92:82:94:36:41:ac:a9:0d:6c:de:18:b7:9b:08:fd:b3:62: 11:e0:76:93:a7:d6:06:10:71:5f:0c:f3:7d:70:f7:9a:5b:fc: 88:53:26:30:34:cd:b8:4e:db:93:12:9b:05:9d:b9:01:ed:f2: a8:50:c7:c9:d4:e6:f3:79:a6:7e:3a:87:60:8d:02:0e:53:3d: d3:e6:b9:ab:5d:2c:85:e4:2f:35:3b:a3:56:70:71:8d:4e:47: ec:45:09:4d:a3:a7:5c:88:8a:1a:3d:27:52:71:13:28:c9:00: 57:15:32:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf2pDDoMuAoTYl9FVEQfrDP33ziswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDMkE1M0E1M0I3MTYxNTE2OTg1MDY4Q0QzOUY0NjVG RTY0NjkzODAeFw0yNjAxMDYxNDAzMTVaFw0yNjAxMDcxNzMxMTVaMDMxMTAvBgNV BAMTKEU1ODhCMEY1MTcxRjMzRDMxODJBNjYxREZDQzMwREFCNDExNDkzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbx/HkI18Lwnlchu9B6p20aVCj FvzpTWLTZKTgqVEePEwGsCyAV8UyxX6Q4uiRtNUFh5oxVWxSyuU/iMvXCK2R+kb9 oQC1y6w4Em1O5WJ8akxJAfvQQYmd5s8fYfG1Mo443k/z+HfqNy86bc2CL5lsv08J jjKMz+deZ0QfobFkTKz69ZaxPMwbFrnICY+gw/kTUzjaqNcI9GZMX+iaKhhJuMYN S33UZopCSLo7VcWuBI8T6gMsSojGF4H6bITNV7fWTXkkOifYsk4H/6WX/gJPGlA6 n9UUVy6en5ph46KigHswpZVTumxumhYMxvBkAFpa0L3zVKVCkk6QvPBMRnZ7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5Yiw9RcfM9MYKmYd/MMNq0EUk/IwHwYDVR0j BBgwFoAUmcKlOlO3FhUWmFBozTn0Zf5kaTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVn elovMC85OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QzJBNTNBNTNCNzE2MTUx Njk4NTA2OENEMzlGNDY1RkU2NDY5MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVnelovMC85 OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALU1cuja6R0u/IaBEJGl9654egIUS1BBorDu5lw7tks5CHuPp4jVSUYYKZ18l V36PUDrm9S8xV8cppRdcJKWHvNOkk0DZPq57skBLVdcxcClLyaUPMCOxomaxsAZB eGAcQwGzgNbmOHMAsGbHNP2BKkE6Dc57FdbBlmHJgsVKm6OkHG7y2uB7s1jzemf9 +R9g4pKClDZBrKkNbN4Yt5sI/bNiEeB2k6fWBhBxXwzzfXD3mlv8iFMmMDTNuE7b kxKbBZ25Ae3yqFDHydTm83mmfjqHYI0CDlM90+a5q10sheQvNTujVnBxjU5H7EUJ TaOnXIiKGj0nUnETKMkAVxUyhg== -----END CERTIFICATE-----Generated at Tue Jan 6 20:16:37 2026 by rpki-client