This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft File: 34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft (raw, json) Hash identifier: LXAV/v0Wy5e02eKvZT5uuhjWbF7jBFbVhRUEsyg5VD8= Subject key identifier: D9:AE:63:04:B3:56:D2:8D:93:4B:CA:6A:68:22:79:C2:D0:F1:6B:C7 Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F Certificate issuer: /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F Certificate serial: 3D58C9E26DEA3885D2F3E21F0C0916D6B1A42E40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer Subject info access: rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft Manifest number: 035A Signing time: Mon 05 Jan 2026 23:28:14 +0000 Manifest this update: Mon 05 Jan 2026 23:23:14 +0000 Manifest next update: Wed 07 Jan 2026 02:44:14 +0000 Files and hashes: 1: 3138312e3233322e3233322e302f32322d3233203d3e20323732353438.roa (hash: lVJItJB1wmM8POPEtsWyZVB7SR+z5ZVxesmXhl2OYUY=) 2: 34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl (hash: 1sQDmXNlY4S+bige7Ujz6QwLNFsSWdKUFjbdn4zvuR4=) 3: 323830343a383466343a3a2f33322d3431203d3e20323732353438.roa (hash: oXzqou6hsYj2ELcRjSkh2wVr70A0V8XsJDsMDK91qwo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 Jan 2026 02:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:58:c9:e2:6d:ea:38:85:d2:f3:e2:1f:0c:09:16:d6:b1:a4:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F Validity Not Before: Jan 5 23:23:14 2026 GMT Not After : Jan 7 02:44:14 2026 GMT Subject: CN=D9AE6304B356D28D934BCA6A682279C2D0F16BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:da:fa:75:5b:5d:6b:11:fe:8e:4f:66:6a:06: cb:00:aa:77:ef:2e:02:c3:24:13:df:20:aa:e9:75: 3b:b6:ca:3e:c3:46:50:b6:0c:d4:8a:13:8c:ae:91: 11:f0:93:81:d9:ce:26:7e:e9:3c:8b:81:d1:91:3a: 4c:ff:5a:bf:a7:2d:4e:95:f1:7f:6a:e2:c9:2b:ae: c9:76:3d:12:37:15:98:b4:b6:d0:39:31:eb:32:70: df:e8:7c:d4:60:ae:27:fd:1b:34:9d:8e:d1:3f:3c: 05:57:42:ed:51:bd:a0:8f:89:90:d8:d6:cf:b9:65: 66:4e:94:99:1e:59:a9:b0:15:41:0c:58:dd:81:58: d9:be:9f:20:a7:3b:fb:22:aa:44:8e:cc:d5:b1:61: 6f:80:b0:de:e3:a4:8c:cc:f8:e4:bd:f4:3a:60:c6: 3c:20:75:e7:fe:23:d3:21:42:0a:00:97:97:1c:ad: ea:d8:b5:5e:fe:17:d4:46:60:52:27:03:b0:8d:1c: e5:6c:fb:86:fc:48:0f:18:e3:f1:33:aa:42:cc:fa: 84:27:73:a3:9c:65:9b:cd:21:2c:da:e1:19:01:17: 89:6b:03:82:31:4a:9c:9f:85:d5:b8:d0:1f:6a:42: 40:12:ab:de:de:9c:e6:d0:87:0e:6d:19:cf:33:52: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AE:63:04:B3:56:D2:8D:93:4B:CA:6A:68:22:79:C2:D0:F1:6B:C7 X509v3 Authority Key Identifier: keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f9:de:06:c4:f9:46:e4:d1:32:db:4f:8d:e9:79:89:a8:73: 08:2f:b9:73:89:d8:cf:7c:fe:ba:08:a8:9e:58:f4:98:83:ea: ae:3e:37:10:06:29:48:17:5e:a9:38:26:94:d2:83:f6:90:a6: 6e:ee:02:78:d1:36:85:92:f6:55:2d:2d:2a:95:7f:de:35:cc: df:e6:e8:7c:5c:11:1f:c2:bc:22:10:ae:10:7d:dd:d4:0e:d1: 73:f7:58:8b:7b:1e:9e:64:e1:e1:d9:1a:1e:21:93:30:77:ae: 4a:87:30:1c:91:b0:92:27:8e:6f:8f:43:66:85:a8:33:16:0c: ca:a3:8e:78:1a:73:67:99:36:a5:57:7b:1a:48:9a:b9:36:89: b3:95:46:4e:b7:f9:24:42:4a:60:c8:c2:e4:5b:87:be:40:f4: 97:e7:08:3e:62:c9:d7:62:eb:fc:d6:15:58:42:ed:4e:38:af: 13:5f:8f:a5:56:77:d8:58:75:10:09:f2:57:be:62:d4:5a:88: ee:35:0f:14:1d:58:20:cd:47:5c:30:5e:58:42:bc:70:af:a8: 64:65:d0:fd:ac:f2:5c:09:5e:42:1b:a8:24:0b:1b:95:b3:ad: bb:22:ae:bc:8b:bd:da:e3:28:74:dd:f5:79:9b:2e:3d:ca:59: b5:c3:89:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPVjJ4m3qOIXS8+IfDAkW1rGkLkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyOTZBQzAyNzRDOUUxOEZGQTFERTZBNzZEOEU4QjhF RjdGRDMxRjAeFw0yNjAxMDUyMzIzMTRaFw0yNjAxMDcwMjQ0MTRaMDMxMTAvBgNV BAMTKEQ5QUU2MzA0QjM1NkQyOEQ5MzRCQ0E2QTY4MjI3OUMyRDBGMTZCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy2vp1W11rEf6OT2ZqBssAqnfv LgLDJBPfIKrpdTu2yj7DRlC2DNSKE4yukRHwk4HZziZ+6TyLgdGROkz/Wr+nLU6V 8X9q4skrrsl2PRI3FZi0ttA5MesycN/ofNRgrif9GzSdjtE/PAVXQu1RvaCPiZDY 1s+5ZWZOlJkeWamwFUEMWN2BWNm+nyCnO/siqkSOzNWxYW+AsN7jpIzM+OS99Dpg xjwgdef+I9MhQgoAl5ccrerYtV7+F9RGYFInA7CNHOVs+4b8SA8Y4/EzqkLM+oQn c6OcZZvNISza4RkBF4lrA4IxSpyfhdW40B9qQkASq97enObQhw5tGc8zUj6zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2a5jBLNW0o2TS8pqaCJ5wtDxa8cwHwYDVR0j BBgwFoAUNClqwCdMnhj/od5qdtjouO9/0x8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtS R2svMS8zNDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0Mjk2QUMwMjc0QzlFMThG RkExREU2QTc2RDhFOEI4RUY3RkQzMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtSR2svMS8z NDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc/neBsT5RuTRMttPjel5iahzCC+5c4nYz3z+ugionlj0mIPqrj43EAYpSBde qTgmlNKD9pCmbu4CeNE2hZL2VS0tKpV/3jXM3+bofFwRH8K8IhCuEH3d1A7Rc/dY i3senmTh4dkaHiGTMHeuSocwHJGwkieOb49DZoWoMxYMyqOOeBpzZ5k2pVd7Gkia uTaJs5VGTrf5JEJKYMjC5FuHvkD0l+cIPmLJ12Lr/NYVWELtTjivE1+PpVZ32Fh1 EAnyV75i1FqI7jUPFB1YIM1HXDBeWEK8cK+oZGXQ/azyXAleQhuoJAsblbOtuyKu vIu92uModN31eZsuPcpZtcOJqg== -----END CERTIFICATE-----Generated at Tue Jan 6 03:31:46 2026 by rpki-client