This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft File: 5A3AE20076D062C545A8A8573997926813E925D8.mft (raw, json) Hash identifier: B60IpgJ4PXPbcpRK2TGTid0Iixsse3c6O9aX2Cr/fhA= Subject key identifier: 3A:55:CA:4A:5F:54:E8:5E:3D:8B:E0:19:9B:14:D3:84:55:3F:E7:EE Authority key identifier: 5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8 Certificate issuer: /CN=5A3AE20076D062C545A8A8573997926813E925D8 Certificate serial: 174BAA075BF8EED205B923D575BA2FFC2BD6C3A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft Manifest number: 0235 Signing time: Sun 04 Jan 2026 17:23:06 +0000 Manifest this update: Sun 04 Jan 2026 17:18:06 +0000 Manifest next update: Mon 05 Jan 2026 20:32:06 +0000 Files and hashes: 1: 323830343a356437343a3a2f33322d3438203d3e20323638393733.roa (hash: MsKHn0SiETNQZVMd+4wWyPuOBT80tvdac+Ej9lHHtR0=) 2: 34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (hash: 6W+sBJcJZ2b6bj5RsmyJFMfqEinjpbph4IeKP9qOa9U=) 3: 5A3AE20076D062C545A8A8573997926813E925D8.crl (hash: QAjTs+TQ47T35EnQB5ZGXioENQg4qlO6TD5Tw6wYxrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 Jan 2026 20:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4b:aa:07:5b:f8:ee:d2:05:b9:23:d5:75:ba:2f:fc:2b:d6:c3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3AE20076D062C545A8A8573997926813E925D8 Validity Not Before: Jan 4 17:18:06 2026 GMT Not After : Jan 5 20:32:06 2026 GMT Subject: CN=3A55CA4A5F54E85E3D8BE0199B14D384553FE7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:0f:cc:ae:03:17:20:e4:1c:e4:88:66:69: e8:b8:ff:c3:8a:e0:72:26:e5:d3:cd:29:4c:5d:a9: 92:74:1e:ac:59:d4:fd:4c:51:09:04:1e:99:78:a2: c5:97:b5:33:49:b9:5c:f6:57:5b:77:28:e5:05:4e: 1c:09:94:b5:c0:f1:70:27:46:0c:92:ef:50:db:9f: ea:a9:b6:a4:86:75:9e:87:47:81:1a:c4:7b:48:d0: 1d:05:96:67:75:38:b8:e4:0a:fe:69:b5:4b:21:9f: 99:5a:d0:8b:3a:a7:c7:12:57:6c:c8:ac:4a:62:13: 41:22:48:94:32:ec:b3:05:ea:80:2e:f3:12:88:7e: 12:fc:53:cb:9e:86:8d:15:00:f5:d1:fb:98:52:25: 72:a3:fd:ea:cf:c3:f5:19:c3:a6:35:96:0e:5f:29: 90:a4:e5:81:5f:ad:1a:eb:27:7d:6e:49:90:2d:80: 7a:7a:22:9d:cc:95:5f:58:a4:f6:f7:cd:32:e0:20: fa:23:58:46:20:ed:db:e7:27:37:64:08:ce:6e:64: 39:03:4a:6f:0a:dd:93:2d:d9:07:59:96:ce:78:33: 51:40:eb:1d:d1:02:be:92:c5:df:c8:0e:ec:37:5a: 8d:10:36:8f:4c:48:71:8b:94:59:4b:11:f6:00:5c: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:CA:4A:5F:54:E8:5E:3D:8B:E0:19:9B:14:D3:84:55:3F:E7:EE X509v3 Authority Key Identifier: keyid:5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e5:b7:b5:3c:0e:51:66:a4:6d:f5:75:80:77:28:3e:41:49: 00:1c:38:67:24:b0:d6:aa:f7:3e:a7:41:fd:85:52:2a:51:fb: a8:52:bc:98:e8:13:16:c7:41:03:4b:2e:26:ee:92:c9:cc:86: 1c:39:9b:0b:d1:cf:0c:b2:e1:8c:25:fa:b0:cd:84:0c:af:f8: 99:47:7b:00:5e:d4:5f:69:5a:58:8f:08:21:3f:4a:7c:e6:26: 5b:d5:08:4e:35:a5:3b:29:90:78:c1:ce:1b:0b:d0:53:d1:fc: 4f:53:7a:1e:0d:ce:00:4f:56:d7:bf:40:d6:95:4a:1a:1b:41: 5d:34:d1:9a:53:fd:ce:55:c7:c9:a1:91:29:c6:0b:77:6d:b6: 9b:34:a0:c8:7c:14:81:92:45:3a:28:f2:2b:91:7d:4f:95:58: 7a:cb:07:9d:e2:4c:91:98:df:ca:4e:cc:49:5e:72:47:95:72: 9f:fd:89:95:a8:2d:d3:ca:69:dd:1b:71:3c:97:17:0f:e3:c2: bd:ee:8c:87:d3:f1:a8:e2:8c:90:da:02:55:19:ec:b2:9e:fe: b6:fd:81:36:c3:b7:e9:16:94:c3:3f:3a:bd:33:9f:18:3a:46: 14:62:51:d6:2e:de:f8:84:7d:dc:f7:72:52:c6:66:fe:74:ce: b1:80:0b:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF0uqB1v47tIFuSPVdbov/CvWw6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzQUUyMDA3NkQwNjJDNTQ1QThBODU3Mzk5NzkyNjgx M0U5MjVEODAeFw0yNjAxMDQxNzE4MDZaFw0yNjAxMDUyMDMyMDZaMDMxMTAvBgNV BAMTKDNBNTVDQTRBNUY1NEU4NUUzRDhCRTAxOTlCMTREMzg0NTUzRkU3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73w/MrgMXIOQc5Ihmaei4/8OK 4HIm5dPNKUxdqZJ0HqxZ1P1MUQkEHpl4osWXtTNJuVz2V1t3KOUFThwJlLXA8XAn RgyS71Dbn+qptqSGdZ6HR4EaxHtI0B0Flmd1OLjkCv5ptUshn5la0Is6p8cSV2zI rEpiE0EiSJQy7LMF6oAu8xKIfhL8U8ueho0VAPXR+5hSJXKj/erPw/UZw6Y1lg5f KZCk5YFfrRrrJ31uSZAtgHp6Ip3MlV9YpPb3zTLgIPojWEYg7dvnJzdkCM5uZDkD Sm8K3ZMt2QdZls54M1FA6x3RAr6Sxd/IDuw3Wo0QNo9MSHGLlFlLEfYAXHdZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOlXKSl9U6F49i+AZmxTThFU/5+4wHwYDVR0j BBgwFoAUWjriAHbQYsVFqKhXOZeSaBPpJdgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6 azcvMC81QTNBRTIwMDc2RDA2MkM1NDVBOEE4NTczOTk3OTI2ODEzRTkyNUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBM0FFMjAwNzZEMDYyQzU0 NUE4QTg1NzM5OTc5MjY4MTNFOTI1RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMC81 QTNBRTIwMDc2RDA2MkM1NDVBOEE4NTczOTk3OTI2ODEzRTkyNUQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjeW3tTwOUWakbfV1gHcoPkFJABw4ZySw1qr3PqdB/YVSKlH7qFK8mOgTFsdB A0suJu6SycyGHDmbC9HPDLLhjCX6sM2EDK/4mUd7AF7UX2laWI8IIT9KfOYmW9UI TjWlOymQeMHOGwvQU9H8T1N6Hg3OAE9W179A1pVKGhtBXTTRmlP9zlXHyaGRKcYL d222mzSgyHwUgZJFOijyK5F9T5VYessHneJMkZjfyk7MSV5yR5Vyn/2Jlagt08pp 3RtxPJcXD+PCve6Mh9PxqOKMkNoCVRnssp7+tv2BNsO36RaUwz86vTOfGDpGFGJR 1i7e+IR93PdyUsZm/nTOsYALqw== -----END CERTIFICATE-----Generated at Mon Jan 5 03:07:19 2026 by rpki-client