This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft File: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft (raw, json) Hash identifier: eXGCxePwvLS8flOqx4L6ShT08ZuT4ciqCYMkvpLCjH8= Subject key identifier: BE:87:A9:5D:6A:86:50:F8:24:6D:FE:9B:9C:BE:65:34:00:B0:99:DE Authority key identifier: 72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5 Certificate issuer: /CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5 Certificate serial: 758CEDB39763946D3C0D803F9398C0E4F15F2B2C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft Manifest number: 01B3 Signing time: Fri 02 Jan 2026 13:04:32 +0000 Manifest this update: Fri 02 Jan 2026 12:59:32 +0000 Manifest next update: Sat 03 Jan 2026 13:29:32 +0000 Files and hashes: 1: 323830343a393264633a3a2f33322d3336203d3e20323734373337.roa (hash: rKtywLS1zxT4+jk+4qBxZeJh+sNRpKnf9wjGS48HysM=) 2: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl (hash: S8a98sgcGGtBevRCjrbt7TfZxcwlCkmJTrtlDFfm+2c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 Jan 2026 13:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8c:ed:b3:97:63:94:6d:3c:0d:80:3f:93:98:c0:e4:f1:5f:2b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5 Validity Not Before: Jan 2 12:59:32 2026 GMT Not After : Jan 3 13:29:32 2026 GMT Subject: CN=BE87A95D6A8650F8246DFE9B9CBE653400B099DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:08:d1:fa:cc:e7:a8:a0:2e:83:c5:0c:bf: f1:be:a2:fe:c0:45:87:3d:bc:11:e9:72:18:e5:dd: 92:99:95:77:4a:8c:a4:31:d0:e7:14:ae:af:37:e8: a2:9b:e2:a1:46:6f:48:dd:3f:76:3f:a0:8d:a3:19: 27:0a:08:d9:ab:6c:c5:b1:07:99:f5:37:af:60:27: c8:12:13:e6:01:c9:7e:0c:de:9c:49:8a:18:2e:03: 7a:7b:8c:72:3d:8f:da:3f:13:d6:c0:cc:f0:b9:8d: 32:52:1c:80:e4:c4:0e:0f:af:4f:f5:2a:b1:a2:93: bf:1e:f5:74:ee:77:22:49:3e:ea:a2:16:0d:fc:f7: a0:7c:a8:fb:41:4d:fb:57:4b:af:b7:36:39:c6:92: 52:00:48:05:5a:7b:cf:71:ef:10:0f:5f:23:e0:49: cc:01:a8:b8:74:71:fc:ee:f1:33:8c:5c:09:0a:a9: 32:ea:32:24:cc:21:b6:86:e9:92:f4:ce:f3:ce:fb: 1d:32:62:50:91:33:5f:20:6a:08:b9:22:61:dc:3c: 04:82:96:ef:3e:07:43:d8:51:fa:46:03:dc:a0:42: b8:3f:4d:d4:3d:4d:40:49:7e:94:e4:93:f1:88:7d: fe:22:3a:22:c1:5e:6d:0e:fb:9e:74:30:13:3d:c2: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:87:A9:5D:6A:86:50:F8:24:6D:FE:9B:9C:BE:65:34:00:B0:99:DE X509v3 Authority Key Identifier: keyid:72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f8:6c:50:71:1a:97:a2:39:91:25:9b:d3:7d:20:b8:b7:4f: 8f:72:14:fb:ca:d9:6a:6f:1d:3a:1f:2e:97:1d:c0:38:28:13: ff:0a:f2:e3:16:22:a5:58:7f:91:a5:e0:95:df:f2:fa:a6:55: b8:99:20:7a:14:37:28:b7:a9:0f:e6:01:ce:c3:0c:64:db:57: ee:71:7c:54:51:84:1b:92:92:34:7f:df:17:ca:c7:e3:0a:a8: 42:49:9a:25:69:5e:98:45:72:00:fe:82:d9:4e:29:a6:11:38: 3c:3d:4c:0c:b9:b9:98:bc:d2:12:b3:b1:b7:7b:9e:35:37:a1: 16:8c:3a:85:9f:b1:8e:c4:ca:2c:7f:23:db:2a:27:20:91:02: 31:ad:78:50:a6:b8:f7:19:f3:c2:2e:36:50:60:62:c4:09:e9: 37:cd:85:d4:fe:ad:07:db:49:ce:ca:c3:2c:1d:0f:47:15:aa: 0e:83:2b:9e:fe:24:d2:bd:03:8a:3a:7c:9d:c0:16:78:ef:1a: 6c:e8:95:90:44:24:50:46:ff:51:a2:f9:8d:81:92:6e:10:36: d9:ea:16:77:dc:f5:a4:5a:43:38:f4:73:e7:4e:cf:11:59:3b: 56:54:46:f7:d7:cf:9c:f9:95:ac:fa:ed:50:f1:9e:31:ff:fc: cf:43:50:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdYzts5djlG08DYA/k5jA5PFfKywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDQkY4NzAxQzdDMEFFRDYzRjdCNjk1NUZENkVBQzY1 Q0UzMkVDNTAeFw0yNjAxMDIxMjU5MzJaFw0yNjAxMDMxMzI5MzJaMDMxMTAvBgNV BAMTKEJFODdBOTVENkE4NjUwRjgyNDZERkU5QjlDQkU2NTM0MDBCMDk5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9wjR+sznqKAug8UMv/G+ov7A RYc9vBHpchjl3ZKZlXdKjKQx0OcUrq836KKb4qFGb0jdP3Y/oI2jGScKCNmrbMWx B5n1N69gJ8gSE+YByX4M3pxJihguA3p7jHI9j9o/E9bAzPC5jTJSHIDkxA4Pr0/1 KrGik78e9XTudyJJPuqiFg3896B8qPtBTftXS6+3NjnGklIASAVae89x7xAPXyPg ScwBqLh0cfzu8TOMXAkKqTLqMiTMIbaG6ZL0zvPO+x0yYlCRM18gagi5ImHcPASC lu8+B0PYUfpGA9ygQrg/TdQ9TUBJfpTkk/GIff4iOiLBXm0O+550MBM9ws0TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvoepXWqGUPgkbf6bnL5lNACwmd4wHwYDVR0j BBgwFoAUcsv4cBx8Cu1j97aVX9bqxlzjLsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4y dkYvMC83MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyQ0JGODcwMUM3QzBBRUQ2 M0Y3QjY5NTVGRDZFQUM2NUNFMzJFQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4ydkYvMC83 MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXfhsUHEal6I5kSWb030guLdPj3IU+8rZam8dOh8ulx3AOCgT/wry4xYipVh/ kaXgld/y+qZVuJkgehQ3KLepD+YBzsMMZNtX7nF8VFGEG5KSNH/fF8rH4wqoQkma JWlemEVyAP6C2U4pphE4PD1MDLm5mLzSErOxt3ueNTehFow6hZ+xjsTKLH8j2yon IJECMa14UKa49xnzwi42UGBixAnpN82F1P6tB9tJzsrDLB0PRxWqDoMrnv4k0r0D ijp8ncAWeO8abOiVkEQkUEb/UaL5jYGSbhA22eoWd9z1pFpDOPRz507PEVk7VlRG 99fPnPmVrPrtUPGeMf/8z0NQfA== -----END CERTIFICATE-----Generated at Sat Jan 3 02:24:01 2026 by rpki-client