This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: Dyjh5DGPXSOWtjry9p8Uv9SlpGjULRIh5fPBGCbrb3Y= Subject key identifier: 14:13:A3:BE:FF:5F:65:F5:03:26:F0:00:FF:40:23:CB:D3:43:9B:CA Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 2AD78C7682B15AD42E63488D27213734A5488499 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 029B Signing time: Sun 11 Jan 2026 12:03:36 +0000 Manifest this update: Sun 11 Jan 2026 11:58:36 +0000 Manifest next update: Mon 12 Jan 2026 14:21:36 +0000 Files and hashes: 1: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: pLvSY1yxDA8qzhGG8TsUXT6myAcvOUBgchoP4AR5OyI=) 2: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) 3: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 14:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d7:8c:76:82:b1:5a:d4:2e:63:48:8d:27:21:37:34:a5:48:84:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Jan 11 11:58:36 2026 GMT Not After : Jan 12 14:21:36 2026 GMT Subject: CN=1413A3BEFF5F65F50326F000FF4023CBD3439BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:b5:86:5d:dc:20:8f:8d:d3:c2:8f:c1:4e: 5b:f4:19:0f:cc:46:65:03:6c:64:45:9a:d6:de:c3: 29:3d:b4:bb:8a:b9:2c:6a:e7:c9:9e:4b:ec:37:13: 74:fb:03:b0:f7:11:ad:5b:83:d9:af:4a:a5:c3:8b: 02:29:4a:62:85:64:f6:3c:6a:7b:c8:2d:48:1d:37: e0:98:ee:53:cf:4d:4e:f7:84:a2:0a:65:73:54:b5: 49:6c:68:59:b6:b4:8f:84:56:bb:a8:bb:28:6c:e3: a6:2c:09:41:f2:1e:30:bb:ab:b6:e9:2f:ee:09:7d: c4:a9:08:f2:16:1b:c5:97:87:f6:cd:72:f5:16:b1: c1:f1:6a:f8:52:c6:bb:c7:4b:10:d8:18:57:46:b2: 01:a8:a3:b4:85:ab:c1:a1:91:50:57:df:53:e6:43: d0:5d:63:b3:76:e4:bb:e3:cb:68:7b:b5:f3:bb:26: 89:cb:3b:13:d9:43:90:d3:ee:b1:aa:ab:5e:ae:cf: c9:a5:95:e8:e3:88:d8:67:d7:41:70:a2:ca:3d:2f: f6:7b:25:46:18:22:49:6d:e9:47:c1:67:90:99:77: 4d:6d:8b:78:f4:c7:ae:28:eb:ca:b2:5f:69:58:cb: ec:a4:0b:fe:3a:36:75:29:27:ed:39:40:0a:bf:74: 61:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:13:A3:BE:FF:5F:65:F5:03:26:F0:00:FF:40:23:CB:D3:43:9B:CA X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3c:53:50:da:ec:4b:30:be:79:d7:d3:95:a7:66:df:c4:cb: b1:31:db:1b:bf:3c:17:23:e5:e2:4b:a9:e0:24:37:be:a8:d7: 94:bc:df:33:7d:01:43:fb:b9:96:67:58:ef:82:04:c4:50:10: 35:f5:73:5c:b1:ce:25:aa:e5:fc:7d:df:b0:d4:85:5b:79:fe: 77:85:0e:99:be:ac:fd:51:89:8a:1d:fe:92:0c:3c:d3:1c:3f: 86:3d:10:6d:ef:a0:b7:ab:81:77:0f:7b:48:b9:2a:c4:80:76: 44:f1:e5:cc:36:45:c8:6c:c7:24:9e:9a:9c:bc:43:bc:da:67: 2a:29:81:74:46:08:ee:d0:f9:d2:ab:e2:9e:a2:c7:ca:59:2a: 9b:b6:f2:fb:86:db:ad:e0:97:be:5b:58:e7:7a:b9:a5:e5:df: 90:71:d4:54:c5:b1:a7:7b:9d:67:22:fc:5c:2d:98:8c:99:58: 33:0a:1c:d6:75:85:99:02:5d:c8:db:d7:c8:58:9a:0b:b6:1a: a6:6e:ad:bf:11:87:91:28:96:1c:d2:14:4d:6d:4c:70:f0:59: b7:02:78:e1:52:06:b0:b3:32:c5:e2:88:0b:d5:68:6f:87:75: 9a:29:20:e9:db:63:ef:06:41:dd:9d:1f:db:96:9b:a5:eb:3d: 7d:d4:96:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKteMdoKxWtQuY0iNJyE3NKVIhJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNjAxMTExMTU4MzZaFw0yNjAxMTIxNDIxMzZaMDMxMTAvBgNV BAMTKDE0MTNBM0JFRkY1RjY1RjUwMzI2RjAwMEZGNDAyM0NCRDM0MzlCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykbWGXdwgj43Two/BTlv0GQ/M RmUDbGRFmtbewyk9tLuKuSxq58meS+w3E3T7A7D3Ea1bg9mvSqXDiwIpSmKFZPY8 anvILUgdN+CY7lPPTU73hKIKZXNUtUlsaFm2tI+EVruouyhs46YsCUHyHjC7q7bp L+4JfcSpCPIWG8WXh/bNcvUWscHxavhSxrvHSxDYGFdGsgGoo7SFq8GhkVBX31Pm Q9BdY7N25Lvjy2h7tfO7JonLOxPZQ5DT7rGqq16uz8mllejjiNhn10Fwoso9L/Z7 JUYYIklt6UfBZ5CZd01ti3j0x64o68qyX2lYy+ykC/46NnUpJ+05QAq/dGEJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFBOjvv9fZfUDJvAA/0Ajy9NDm8owHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGjxTUNrsSzC+edfTladm38TLsTHbG788FyPl4kup4CQ3vqjXlLzfM30BQ/u5 lmdY74IExFAQNfVzXLHOJarl/H3fsNSFW3n+d4UOmb6s/VGJih3+kgw80xw/hj0Q be+gt6uBdw97SLkqxIB2RPHlzDZFyGzHJJ6anLxDvNpnKimBdEYI7tD50qvinqLH ylkqm7by+4bbreCXvltY53q5peXfkHHUVMWxp3udZyL8XC2YjJlYMwoc1nWFmQJd yNvXyFiaC7Yapm6tvxGHkSiWHNIUTW1McPBZtwJ44VIGsLMyxeKIC9Vob4d1mikg 6dtj7wZB3Z0f25abpes9fdSW5A== -----END CERTIFICATE-----Generated at Sun Jan 11 18:19:07 2026 by rpki-client