This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft File: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft (raw, json) Hash identifier: FqqDMXgxMrC7e9hvCzHnxkhaEc7tlbzg9UYp2EawTkw= Subject key identifier: 07:B0:B7:3A:37:49:4D:94:44:D9:EF:5A:EB:09:BF:93:23:B3:39:A9 Authority key identifier: 42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D Certificate issuer: /CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Certificate serial: 453D980ACC84A87DED7B660A5C95FFCCD1075422 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft Manifest number: 07 Signing time: Mon 12 Jan 2026 06:06:35 +0000 Manifest this update: Mon 12 Jan 2026 06:01:35 +0000 Manifest next update: Tue 13 Jan 2026 09:31:35 +0000 Files and hashes: 1: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: EXEgFqBvttmF5ktT401dLdibdAL47+eANSkTz2upTnU=) 2: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: Zb565rDHy7WtypXGVJ40AUrNMbJgCT2lb99PVr98XvA=) 3: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl (hash: B3WBXXnbT0hxiN3V0vvG1JRmoacHrmO1rqrI25liWvw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 09:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3d:98:0a:cc:84:a8:7d:ed:7b:66:0a:5c:95:ff:cc:d1:07:54:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Validity Not Before: Jan 12 06:01:35 2026 GMT Not After : Jan 13 09:31:35 2026 GMT Subject: CN=07B0B73A37494D9444D9EF5AEB09BF9323B339A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:95:a8:42:20:90:37:03:4e:9a:ad:1a:5c:e2: a9:f9:4a:84:98:12:8d:48:41:f9:b1:f6:f0:fb:a2: 71:ce:e7:f2:d6:fd:07:55:bc:f6:7a:ff:8f:a1:66: 1a:69:98:9a:ab:ca:21:3e:84:0d:24:42:f9:01:28: b3:e5:a6:68:03:2b:e6:71:54:ef:63:b2:51:08:0b: 1f:df:4a:1d:71:80:26:20:04:56:05:ef:75:9c:8e: 2d:3d:9d:68:f2:3b:a9:9b:f2:e7:cb:17:6b:dc:14: fb:9a:51:19:82:9e:4f:76:89:3d:25:ea:29:4b:ce: 5b:49:04:41:29:af:00:18:4d:d5:c3:d3:ff:3f:9d: d9:57:3a:e7:cb:d5:ec:84:a1:f2:59:61:f8:d6:2f: 28:3a:37:db:eb:c6:dc:d2:66:50:00:3d:d6:4b:87: 2d:90:e7:94:28:09:dd:89:2e:fa:64:d0:40:4e:3c: 99:87:27:67:f5:99:1f:d3:bd:d0:37:99:48:56:04: e1:d1:f1:10:90:12:19:b8:1e:95:37:11:92:ee:47: 82:b8:47:d1:9a:db:59:d0:2b:6f:40:dc:24:68:72: 25:eb:ec:c5:cc:b7:30:9f:85:f7:20:2c:2e:d0:6d: c5:ea:7b:51:37:33:24:bb:14:e0:d2:45:04:d0:50: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B0:B7:3A:37:49:4D:94:44:D9:EF:5A:EB:09:BF:93:23:B3:39:A9 X509v3 Authority Key Identifier: keyid:42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:64:46:dd:3d:a4:4b:7f:b9:50:4e:45:12:e6:c3:c5:eb:6b: 3d:b5:91:2d:10:fd:84:f4:18:45:28:54:35:fa:c4:ec:9f:12: b7:24:af:35:29:91:42:13:e3:64:08:0e:46:84:9f:88:c0:5e: 7b:f8:0d:71:66:92:17:53:74:e3:bb:54:ca:0f:99:e6:50:91: 28:27:23:22:3f:de:23:ac:43:f9:c2:bb:c7:13:3f:56:cd:cb: 78:5f:f3:1d:63:44:69:1f:75:32:44:85:c0:e1:6e:26:09:1d: 51:6f:9b:3a:90:e6:2b:db:2e:56:13:2f:57:81:8b:a7:c9:b1: d1:4c:57:18:5f:03:8b:15:36:8c:62:e4:68:7b:d3:9f:06:a5: 99:40:62:19:78:29:87:62:e6:9c:1d:02:27:bb:24:29:ca:88: 07:c4:24:67:69:75:b3:ba:5f:3d:91:df:d3:1c:68:72:3e:20: e8:4d:2b:fb:b1:86:3b:ab:ff:bf:eb:62:59:4d:39:cc:65:b9: 65:09:22:0b:76:7b:ff:44:12:38:ac:9e:1c:6e:09:da:cb:14: 44:52:8d:ac:81:a8:f8:3b:9b:2a:ee:62:3b:69:de:4e:f8:b2: a9:d6:86:73:c3:20:05:c9:2c:64:56:0d:eb:5b:53:07:c1:76: a0:c5:ee:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURT2YCsyEqH3te2YKXJX/zNEHVCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1RTcyOEFFMUZBRTg1QTVENkQxN0NDNTNENjhDREUy MUZBNjM5RDAeFw0yNjAxMTIwNjAxMzVaFw0yNjAxMTMwOTMxMzVaMDMxMTAvBgNV BAMTKDA3QjBCNzNBMzc0OTREOTQ0NEQ5RUY1QUVCMDlCRjkzMjNCMzM5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnlahCIJA3A06arRpc4qn5SoSY Eo1IQfmx9vD7onHO5/LW/QdVvPZ6/4+hZhppmJqryiE+hA0kQvkBKLPlpmgDK+Zx VO9jslEICx/fSh1xgCYgBFYF73Wcji09nWjyO6mb8ufLF2vcFPuaURmCnk92iT0l 6ilLzltJBEEprwAYTdXD0/8/ndlXOufL1eyEofJZYfjWLyg6N9vrxtzSZlAAPdZL hy2Q55QoCd2JLvpk0EBOPJmHJ2f1mR/TvdA3mUhWBOHR8RCQEhm4HpU3EZLuR4K4 R9Ga21nQK29A3CRociXr7MXMtzCfhfcgLC7QbcXqe1E3MyS7FODSRQTQUFfnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB7C3OjdJTZRE2e9a6wm/kyOzOakwHwYDVR0j BBgwFoAUQl5yiuH66FpdbRfMU9aM3iH6Y50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC80MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNUU3MjhBRTFGQUU4NUE1 RDZEMTdDQzUzRDY4Q0RFMjFGQTYzOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC80 MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApGRG3T2kS3+5UE5FEubDxetrPbWRLRD9hPQYRShUNfrE7J8StySvNSmRQhPj ZAgORoSfiMBee/gNcWaSF1N047tUyg+Z5lCRKCcjIj/eI6xD+cK7xxM/Vs3LeF/z HWNEaR91MkSFwOFuJgkdUW+bOpDmK9suVhMvV4GLp8mx0UxXGF8DixU2jGLkaHvT nwalmUBiGXgph2LmnB0CJ7skKcqIB8QkZ2l1s7pfPZHf0xxocj4g6E0r+7GGO6v/ v+tiWU05zGW5ZQkiC3Z7/0QSOKyeHG4J2ssURFKNrIGo+DubKu5iO2neTviyqdaG c8MgBcksZFYN61tTB8F2oMXuIQ== -----END CERTIFICATE-----Generated at Mon Jan 12 15:47:00 2026 by rpki-client