This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft File: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json) Hash identifier: mOTTBb6k4r2LN87vBJvqALdb0VP6LC1XEzvfuSHEwyk= Subject key identifier: 98:70:E3:D0:0C:BB:F6:5E:2A:FC:44:99:7C:71:C2:19:12:D0:CA:44 Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 Certificate issuer: /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Certificate serial: A08C01962E1E8A35D28FFEC8A86924AEB2ED18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft Manifest number: F2 Signing time: Thu 01 Jan 2026 04:42:39 +0000 Manifest this update: Thu 01 Jan 2026 04:37:39 +0000 Manifest next update: Fri 02 Jan 2026 05:32:39 +0000 Files and hashes: 1: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: cfIQQu9G7Hwc0ian794JHX20f69HSTaf2JYd0+QnvQU=) 2: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 05:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a0:8c:01:96:2e:1e:8a:35:d2:8f:fe:c8:a8:69:24:ae:b2:ed:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2 Validity Not Before: Jan 1 04:37:39 2026 GMT Not After : Jan 2 05:32:39 2026 GMT Subject: CN=9870E3D00CBBF65E2AFC44997C71C21912D0CA44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:89:50:49:23:71:a8:71:b3:97:3a:b9:3a: d4:2b:c3:90:98:cb:f4:ff:6c:68:f9:a8:30:08:fe: ca:1f:d6:35:4b:5d:1c:d7:91:25:b7:f5:6e:f7:c9: cc:f4:10:9b:4a:79:89:bb:a3:c7:d0:bd:48:64:58: 50:ea:b7:31:35:f9:b9:c5:45:06:e9:20:32:b3:0f: 51:17:ab:c4:ba:fb:27:d7:8b:5c:6c:9f:9d:42:c7: 77:67:9d:39:be:9f:0b:b4:79:ce:11:c9:9e:c7:af: 38:71:40:44:6f:24:0c:5c:48:ab:ce:8b:26:1c:cc: f4:d2:e9:e2:33:fa:4d:75:f1:f3:73:a2:23:42:a6: 82:8e:4e:5b:d0:7f:21:07:e9:d5:22:42:28:70:07: e7:a1:82:4a:a7:fa:80:e3:8f:6a:7c:33:fd:94:cf: 70:f0:8d:5e:47:14:9b:ed:85:78:e7:e3:12:5d:0a: a6:11:f5:a7:d3:8a:fc:9c:05:e2:29:83:7e:c8:dd: 33:4f:1c:b0:d1:74:ea:e8:4f:55:2e:ad:c5:e9:0e: 14:4c:bd:fd:2e:5d:f1:54:72:63:bc:05:cc:ca:68: dd:68:66:45:e6:b8:ce:3d:78:f4:a7:df:d6:ee:4b: 8c:30:56:e6:7d:11:d6:62:3c:ca:ce:30:96:3b:a3: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:E3:D0:0C:BB:F6:5E:2A:FC:44:99:7C:71:C2:19:12:D0:CA:44 X509v3 Authority Key Identifier: keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3a:87:20:a0:a9:ce:af:e4:50:e0:eb:ef:e7:47:5b:aa:b3: b1:88:ae:f3:93:94:c2:d6:09:83:8e:b9:e2:39:5c:fa:58:a8: 79:28:e2:be:1a:7c:54:ff:bb:b0:64:f9:39:8b:17:2e:f9:a0: 5b:ff:d5:7a:44:bd:ac:f1:46:4e:ad:51:24:40:25:62:c7:f5: 49:60:80:9d:8f:4c:cb:6b:af:7e:8d:0f:b4:ba:ff:28:0f:29: ae:f2:08:ef:54:5b:0a:37:d9:9d:82:0d:4f:a7:8e:d9:16:23: 8b:c4:a0:6e:84:d3:20:8d:1e:b9:b9:e7:6d:7f:57:43:14:be: b1:2e:de:72:6e:5b:c6:5d:9a:94:ce:ff:be:2c:61:23:a2:6c: 3e:06:7d:e5:73:ae:a9:c4:b6:21:21:d6:9c:da:90:95:ee:ca: 38:59:44:f7:e2:97:d2:74:29:25:51:24:13:22:e7:cd:34:ac: b4:82:c2:47:ad:5a:b2:6b:8c:68:73:e2:c7:55:57:6d:36:6f: 75:6c:71:a3:17:43:50:bf:c6:5b:59:66:dc:9e:c0:d6:c8:4c: 9d:fa:74:4f:85:58:ea:80:3e:d8:a3:36:bf:31:34:17:3a:b3: ee:92:18:40:48:c4:ed:ce:25:b3:f0:b8:43:b7:67:9c:ef:f9: de:e5:96:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAKCMAZYuHoo10o/+yKhpJK6y7RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDNDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRG RTYxREJDMjAeFw0yNjAxMDEwNDM3MzlaFw0yNjAxMDIwNTMyMzlaMDMxMTAvBgNV BAMTKDk4NzBFM0QwMENCQkY2NUUyQUZDNDQ5OTdDNzFDMjE5MTJEMENBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWjolQSSNxqHGzlzq5OtQrw5CY y/T/bGj5qDAI/sof1jVLXRzXkSW39W73ycz0EJtKeYm7o8fQvUhkWFDqtzE1+bnF RQbpIDKzD1EXq8S6+yfXi1xsn51Cx3dnnTm+nwu0ec4RyZ7HrzhxQERvJAxcSKvO iyYczPTS6eIz+k118fNzoiNCpoKOTlvQfyEH6dUiQihwB+ehgkqn+oDjj2p8M/2U z3DwjV5HFJvthXjn4xJdCqYR9afTivycBeIpg37I3TNPHLDRdOroT1UurcXpDhRM vf0uXfFUcmO8BczKaN1oZkXmuM49ePSn39buS4wwVuZ9EdZiPMrOMJY7oy0/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmHDj0Ay79l4q/ESZfHHCGRLQykQwHwYDVR0j BBgwFoAU1cQx0XuDBzX+smQJxp4+9P5h28IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVw TUQvMC9ENUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QzQzMUQxN0I4MzA3MzVG RUIyNjQwOUM2OUUzRUY0RkU2MURCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC9E NUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVTqHIKCpzq/kUODr7+dHW6qzsYiu85OUwtYJg4654jlc+lioeSjivhp8VP+7 sGT5OYsXLvmgW//VekS9rPFGTq1RJEAlYsf1SWCAnY9My2uvfo0PtLr/KA8prvII 71RbCjfZnYINT6eO2RYji8SgboTTII0eubnnbX9XQxS+sS7ecm5bxl2alM7/vixh I6JsPgZ95XOuqcS2ISHWnNqQle7KOFlE9+KX0nQpJVEkEyLnzTSstILCR61asmuM aHPix1VXbTZvdWxxoxdDUL/GW1lm3J7A1shMnfp0T4VY6oA+2KM2vzE0Fzqz7pIY QEjE7c4ls/C4Q7dnnO/53uWWOQ== -----END CERTIFICATE-----Generated at Thu Jan 1 09:28:08 2026 by rpki-client