This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft File: DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft (raw, json) Hash identifier: zPVDeRlbqvGgRVf2dhvsepZqxPjlGgimEmRZXFvSvos= Subject key identifier: 04:8F:17:FA:A1:ED:52:D4:F4:6B:95:21:CD:90:31:00:70:84:02:29 Authority key identifier: DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B Certificate issuer: /CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B Certificate serial: 3FADA9B085BC98DCC6DBC9F34086B8E14E382A3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft Manifest number: 0298 Signing time: Sun 11 Jan 2026 15:41:38 +0000 Manifest this update: Sun 11 Jan 2026 15:36:38 +0000 Manifest next update: Mon 12 Jan 2026 16:43:38 +0000 Files and hashes: 1: 323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (hash: QTNnzR+UYlBgLx4JqbZERJxck9MVaHyRwCbO/zvmHR4=) 2: 3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa (hash: ydnnka0+OlIVr22V1E7GQvPOVKsua6emsd0Y50DmFag=) 3: DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl (hash: zRbBsMA3yDHAOIOy4DLdpi+I3QmkhAlfGDnr+lOg/pY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Jan 2026 16:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ad:a9:b0:85:bc:98:dc:c6:db:c9:f3:40:86:b8:e1:4e:38:2a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B Validity Not Before: Jan 11 15:36:38 2026 GMT Not After : Jan 12 16:43:38 2026 GMT Subject: CN=048F17FAA1ED52D4F46B9521CD90310070840229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:48:85:f6:73:10:03:da:92:f4:30:63:f3: ec:e7:fb:f1:4f:4c:75:ff:e1:8c:9a:84:d4:13:57: d6:c9:ae:36:d4:29:bc:92:b9:d4:50:e7:e4:8a:eb: 27:47:ea:13:cc:15:d0:f1:57:a2:23:0e:47:96:6b: 5f:7a:37:bd:f8:ba:57:97:84:37:e8:1c:29:5c:ff: c6:44:b5:9e:ba:a9:8f:a6:3a:58:a2:18:c9:23:eb: 30:d2:21:22:2f:23:5b:19:f6:c1:3d:b2:26:88:4a: 6f:2c:91:5f:53:4c:4a:0f:01:fc:1a:fe:59:2d:e9: 77:3f:b1:73:51:68:58:c4:21:8d:e1:c3:01:52:3a: 02:7c:18:18:76:ce:f8:23:bf:4f:84:67:95:99:8c: 45:85:5a:79:19:44:2d:75:6c:93:ab:90:c0:16:4f: 47:e8:c0:87:7e:17:32:96:60:b4:85:58:09:f3:04: 84:4e:6f:cf:86:4f:59:20:17:59:d0:79:65:4b:2c: de:bf:09:3f:7f:3e:c9:64:d9:13:c1:f9:47:38:91: e1:e4:2f:e0:41:ab:bf:c6:98:a0:93:97:92:6b:d3: 3e:da:49:04:06:68:03:cc:e7:98:96:88:66:71:05: 2f:42:f5:08:3e:07:f9:85:fb:d1:bc:de:bb:27:fc: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8F:17:FA:A1:ED:52:D4:F4:6B:95:21:CD:90:31:00:70:84:02:29 X509v3 Authority Key Identifier: keyid:DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:cb:43:18:68:df:f0:d8:19:dd:6f:ac:e1:72:db:01:76:ff: 92:55:20:3f:9a:ab:61:df:71:e6:53:d6:f3:32:45:18:92:b3: b5:b4:10:8e:2c:f4:e9:7f:0e:71:6a:84:79:40:73:3c:31:28: da:38:55:67:87:97:27:e5:26:26:fc:14:f0:12:96:9a:af:1a: 76:90:1c:df:ae:ae:5d:52:0c:e1:87:e7:a0:f0:2b:73:90:9a: ab:77:92:f0:e8:bc:d3:a5:3d:7e:41:bb:f0:51:7d:9a:9a:5a: 74:dc:c4:bd:ff:5f:90:9a:3b:e4:a4:68:16:4e:bc:9b:17:8b: f7:7c:6b:61:be:fb:81:ad:b4:6d:74:30:da:de:5f:a2:82:da: d0:f8:ed:67:1b:d5:58:95:65:4c:bc:69:e4:06:77:e8:66:29: 33:b1:0f:93:e1:85:a4:64:1c:9b:d1:74:ee:72:98:5a:f8:61: d4:6d:1b:0c:50:f4:4e:ad:d4:d5:2a:bb:bc:5e:51:46:16:cd: 06:2e:20:85:6b:26:20:43:9f:ba:11:77:96:7d:f4:5f:d0:9e: d7:74:5e:8c:09:15:d0:4f:4e:07:39:25:fd:f9:ce:68:2d:0b: 15:1f:ae:90:ed:7b:3c:37:1b:ad:b0:47:98:bf:bd:bd:fa:cd: 6d:3d:5e:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP62psIW8mNzG28nzQIa44U44Kj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxMUY4MTg1MjE0ODAwQ0E0QzcxQzJBNTMyMDA0Q0M3 QkU4RTAwQjAeFw0yNjAxMTExNTM2MzhaFw0yNjAxMTIxNjQzMzhaMDMxMTAvBgNV BAMTKDA0OEYxN0ZBQTFFRDUyRDRGNDZCOTUyMUNEOTAzMTAwNzA4NDAyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQEiF9nMQA9qS9DBj8+zn+/FP THX/4YyahNQTV9bJrjbUKbySudRQ5+SK6ydH6hPMFdDxV6IjDkeWa196N734uleX hDfoHClc/8ZEtZ66qY+mOliiGMkj6zDSISIvI1sZ9sE9siaISm8skV9TTEoPAfwa /lkt6Xc/sXNRaFjEIY3hwwFSOgJ8GBh2zvgjv0+EZ5WZjEWFWnkZRC11bJOrkMAW T0fowId+FzKWYLSFWAnzBIROb8+GT1kgF1nQeWVLLN6/CT9/Pslk2RPB+Uc4keHk L+BBq7/GmKCTl5Jr0z7aSQQGaAPM55iWiGZxBS9C9Qg+B/mF+9G83rsn/FuPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBI8X+qHtUtT0a5UhzZAxAHCEAikwHwYDVR0j BBgwFoAU3hH4GFIUgAykxxwqUyAEzHvo4AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBY eXIvMC9ERTExRjgxODUyMTQ4MDBDQTRDNzFDMkE1MzIwMDRDQzdCRThFMDBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMTFGODE4NTIxNDgwMENB NEM3MUMyQTUzMjAwNENDN0JFOEUwMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBYeXIvMC9E RTExRjgxODUyMTQ4MDBDQTRDNzFDMkE1MzIwMDRDQzdCRThFMDBCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhstDGGjf8NgZ3W+s4XLbAXb/klUgP5qrYd9x5lPW8zJFGJKztbQQjiz06X8O cWqEeUBzPDEo2jhVZ4eXJ+UmJvwU8BKWmq8adpAc366uXVIM4YfnoPArc5Caq3eS 8Oi806U9fkG78FF9mppadNzEvf9fkJo75KRoFk68mxeL93xrYb77ga20bXQw2t5f ooLa0PjtZxvVWJVlTLxp5AZ36GYpM7EPk+GFpGQcm9F07nKYWvhh1G0bDFD0Tq3U 1Sq7vF5RRhbNBi4ghWsmIEOfuhF3ln30X9Ce13RejAkV0E9OBzkl/fnOaC0LFR+u kO17PDcbrbBHmL+9vfrNbT1eqQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:01:43 2026 by rpki-client