This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json) Hash identifier: 8T46K01SqsNVtNOeUK1YYohmYcIsfcnBv9GlDTMF1kI= Subject key identifier: 54:DB:50:63:C4:4D:F9:79:B0:74:8C:0C:5E:B8:1E:8C:93:C8:7A:04 Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Certificate serial: 3AE7383A5D17EA38D0D08F8F5AAA38AC83A98498 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft Manifest number: 0350 Signing time: Mon 05 Jan 2026 07:02:02 +0000 Manifest this update: Mon 05 Jan 2026 06:57:02 +0000 Manifest next update: Tue 06 Jan 2026 08:52:02 +0000 Files and hashes: 1: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=) 2: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=) 3: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: PtuiYL+XUSPEYS5LKDyCsbuG20Rvbn6qjJ2zKYYo0KA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 Jan 2026 08:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e7:38:3a:5d:17:ea:38:d0:d0:8f:8f:5a:aa:38:ac:83:a9:84:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Validity Not Before: Jan 5 06:57:02 2026 GMT Not After : Jan 6 08:52:02 2026 GMT Subject: CN=54DB5063C44DF979B0748C0C5EB81E8C93C87A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:fa:48:07:cb:a8:3a:fa:df:ea:43:95:ce: e3:8b:ec:2d:3c:94:31:5b:ed:1a:6b:83:c9:12:05: 75:40:f6:87:f0:d4:d7:42:1e:7f:4b:fc:24:5d:71: cb:e5:53:13:b5:0f:01:1d:ea:82:53:65:8c:dc:10: 2e:d7:f4:6e:50:ad:cc:26:20:c2:a4:cf:d7:73:1d: fd:c1:81:ec:00:3b:e9:11:db:f8:94:ce:65:43:7f: f4:dc:06:51:bf:a9:30:08:3a:f7:6a:ec:07:87:b8: cd:a9:f2:98:f0:96:5f:7e:fc:8e:78:4f:36:a6:a2: 27:29:6c:4e:e2:ac:c8:de:28:38:1f:7c:72:b7:ae: 03:6e:78:58:49:51:ef:e2:c7:f4:1d:45:fd:87:28: 99:c0:29:da:f6:ef:5d:6e:28:b6:d6:ac:50:a1:d5: 00:4f:fe:8e:aa:c6:2b:75:5c:3b:74:a1:31:04:03: c8:d8:39:77:9c:b2:48:07:e9:fb:a5:64:f5:17:b6: 0c:15:29:65:7a:99:a2:04:6e:cf:82:f2:e0:97:d4: 3f:2b:39:e1:50:39:f7:41:cb:23:51:99:1a:f6:54: f1:67:78:34:9b:23:ea:44:2d:a3:d9:7d:27:1c:81: f7:8d:49:52:28:f7:90:e3:5e:8c:2a:ac:a7:07:d9: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DB:50:63:C4:4D:F9:79:B0:74:8C:0C:5E:B8:1E:8C:93:C8:7A:04 X509v3 Authority Key Identifier: keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:96:7f:0b:4b:af:47:3b:2a:d8:48:72:cf:9e:10:d9:59:d2: d2:93:26:a3:38:3e:43:f2:69:64:7e:9f:3f:d8:d1:32:e8:8c: 95:65:fe:0d:1f:94:23:ae:46:08:3f:8a:9a:b3:2e:ea:a2:3d: 37:8f:f2:63:3e:06:ce:12:07:1e:9c:74:c6:34:50:9f:53:83: 67:e0:9e:85:eb:73:30:52:90:a9:f8:2a:e8:ed:a9:b4:0c:fa: d3:eb:e0:33:30:fd:ff:50:72:dc:4e:0c:57:98:9c:81:17:6a: dd:af:2e:72:94:5c:c3:6b:a8:99:1f:49:33:94:cd:85:9a:35: 8d:ee:11:b8:4d:db:ef:a4:8b:30:a6:9c:c7:45:db:1e:57:40: f4:96:8a:dd:24:15:fb:11:7a:bd:e9:24:26:a9:e2:bb:66:86: 58:e2:5f:26:43:ff:3f:d4:f4:2c:ee:9c:38:63:38:04:10:f0: d7:c0:67:2f:38:40:24:9f:eb:09:7d:8e:ae:e0:46:56:de:18: e0:53:ad:ba:3e:b8:17:af:13:90:da:e2:43:ae:05:0f:dc:60: 4a:1a:00:94:ea:da:a9:11:a2:24:1c:e8:de:56:31:f9:b2:30: 34:47:49:92:db:ff:60:9d:91:d2:c0:91:13:21:80:1b:3b:75: 1a:66:42:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOuc4Ol0X6jjQ0I+PWqo4rIOphJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD RDhBMjIzRjAeFw0yNjAxMDUwNjU3MDJaFw0yNjAxMDYwODUyMDJaMDMxMTAvBgNV BAMTKDU0REI1MDYzQzQ0REY5NzlCMDc0OEMwQzVFQjgxRThDOTNDODdBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVW/pIB8uoOvrf6kOVzuOL7C08 lDFb7Rprg8kSBXVA9ofw1NdCHn9L/CRdccvlUxO1DwEd6oJTZYzcEC7X9G5Qrcwm IMKkz9dzHf3BgewAO+kR2/iUzmVDf/TcBlG/qTAIOvdq7AeHuM2p8pjwll9+/I54 TzamoicpbE7irMjeKDgffHK3rgNueFhJUe/ix/QdRf2HKJnAKdr2711uKLbWrFCh 1QBP/o6qxit1XDt0oTEEA8jYOXecskgH6fulZPUXtgwVKWV6maIEbs+C8uCX1D8r OeFQOfdByyNRmRr2VPFneDSbI+pELaPZfSccgfeNSVIo95DjXowqrKcH2W3XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVNtQY8RN+XmwdIwMXrgejJPIegQwHwYDVR0j BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1 Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdpZ/C0uvRzsq2Ehyz54Q2VnS0pMmozg+Q/JpZH6fP9jRMuiMlWX+DR+UI65G CD+KmrMu6qI9N4/yYz4GzhIHHpx0xjRQn1ODZ+CehetzMFKQqfgq6O2ptAz60+vg MzD9/1By3E4MV5icgRdq3a8ucpRcw2uomR9JM5TNhZo1je4RuE3b76SLMKacx0Xb HldA9JaK3SQV+xF6vekkJqniu2aGWOJfJkP/P9T0LO6cOGM4BBDw18BnLzhAJJ/r CX2OruBGVt4Y4FOtuj64F68TkNriQ64FD9xgShoAlOraqRGiJBzo3lYx+bIwNEdJ ktv/YJ2R0sCREyGAGzt1GmZChw== -----END CERTIFICATE-----Generated at Mon Jan 5 13:08:27 2026 by rpki-client