This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft File: 98BC0C92855F76759D28CD06035C9FF965BDF09F.mft (raw, json) Hash identifier: Q4ycjfvclnp+Eazd5LG7aMbYJDsQ1EE/VDvkg8nl8aI= Subject key identifier: FD:9E:D7:18:56:37:28:D0:77:F4:9F:23:DE:54:BC:08:F9:F0:A8:32 Authority key identifier: 98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F Certificate issuer: /CN=98BC0C92855F76759D28CD06035C9FF965BDF09F Certificate serial: FD8FC4BC4330E5341AAA6062CBA080BE078DD7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft Manifest number: 0242 Signing time: Mon 12 Jan 2026 04:10:12 +0000 Manifest this update: Mon 12 Jan 2026 04:05:12 +0000 Manifest next update: Tue 13 Jan 2026 07:46:12 +0000 Files and hashes: 1: 34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (hash: t+XjGLzXBnXntotjRrTq9Lj8Z53+sgV/xlqOeTYWMzk=) 2: 98BC0C92855F76759D28CD06035C9FF965BDF09F.crl (hash: qpASKANDplAfBIHZKi7vEFle3ug49GrcevbujjtVzAk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 07:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fd:8f:c4:bc:43:30:e5:34:1a:aa:60:62:cb:a0:80:be:07:8d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98BC0C92855F76759D28CD06035C9FF965BDF09F Validity Not Before: Jan 12 04:05:12 2026 GMT Not After : Jan 13 07:46:12 2026 GMT Subject: CN=FD9ED718563728D077F49F23DE54BC08F9F0A832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:84:37:af:fc:bc:c5:6b:a5:93:3b:e1:fd: 63:63:41:61:fa:c7:01:71:b1:b1:6e:1b:ea:ee:a0: 46:c2:2c:f9:36:f9:8a:d6:84:9c:b9:e8:a0:a2:b0: 68:37:7d:1f:a7:5b:33:22:d3:7a:aa:6b:29:b6:46: 44:65:70:4d:c9:a6:85:54:a0:92:bb:4c:23:14:be: 0c:bf:a8:4c:d6:b7:6d:1d:21:95:df:13:ae:d2:c3: 77:6f:5a:4a:25:e4:0c:01:ae:da:f3:c0:65:90:93: 01:90:b5:93:fd:af:04:76:a8:ac:f2:2c:e0:47:d0: f8:15:53:e2:07:67:5f:38:a6:de:3f:e5:63:9b:dd: 4d:6a:f7:f8:a6:4c:97:93:da:f5:55:5b:b9:0d:9c: da:0c:cc:ec:a2:26:76:ab:46:cd:49:67:be:9a:25: 00:20:64:bc:11:b6:aa:05:4d:79:16:52:6c:21:fa: 34:54:4c:9d:2b:3a:4f:c9:6f:ef:8f:98:23:4b:c4: df:8c:d4:16:a1:07:a3:69:d7:f2:9b:6a:a0:64:49: 80:5a:73:40:7c:c8:ba:42:4b:a5:73:d2:9b:9b:4d: de:f9:b1:eb:1b:62:88:e1:07:1e:20:9d:41:e1:a2: 2d:29:54:f6:55:94:c0:58:00:8a:75:3d:5d:62:71: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9E:D7:18:56:37:28:D0:77:F4:9F:23:DE:54:BC:08:F9:F0:A8:32 X509v3 Authority Key Identifier: keyid:98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:ce:e9:88:11:cd:d2:6b:9d:1f:97:3f:a5:3c:13:87:2c:ab: ae:d6:ad:ea:49:a1:a4:8b:47:6b:be:16:b5:5a:92:02:c5:87: 59:7d:85:cd:be:a9:ab:ea:d2:e2:59:92:d3:25:16:c4:40:0e: 07:c1:bf:11:2b:c9:74:f4:a1:bd:d7:ad:18:76:b7:cf:98:fd: 6b:51:39:be:fd:a5:17:bf:9e:86:86:8e:1f:b5:1a:07:0c:df: 84:35:1d:1f:7e:bb:0e:d8:27:09:77:c6:27:c2:4d:b3:2d:f9: a9:73:3b:a2:21:78:79:d0:bd:41:5e:fc:f5:35:19:71:b8:ca: f8:5d:fa:3f:89:9d:6a:1e:c4:c6:bf:7a:f6:43:e1:48:1a:40: ae:c2:ad:62:87:3d:3f:83:a1:b1:df:ec:af:e5:77:b2:24:99: 64:9c:77:02:04:4d:64:be:c9:4d:0b:bd:06:c7:23:ff:96:8c: e8:ed:e0:3e:e9:b3:94:43:6d:24:76:9a:72:2b:89:b3:c9:45: e3:36:14:8a:8c:6a:65:a6:dc:60:cf:56:27:07:7e:b3:b1:17: 08:ce:a2:fb:01:08:08:c3:52:58:ce:38:39:a9:38:f1:ef:f4: 15:db:07:26:e6:ae:ec:ce:32:97:79:86:cf:d4:04:ad:b2:7c: c3:ec:b9:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAP2PxLxDMOU0GqpgYsuggL4HjdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThCQzBDOTI4NTVGNzY3NTlEMjhDRDA2MDM1QzlGRjk2 NUJERjA5RjAeFw0yNjAxMTIwNDA1MTJaFw0yNjAxMTMwNzQ2MTJaMDMxMTAvBgNV BAMTKEZEOUVENzE4NTYzNzI4RDA3N0Y0OUYyM0RFNTRCQzA4RjlGMEE4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5G4Q3r/y8xWulkzvh/WNjQWH6 xwFxsbFuG+ruoEbCLPk2+YrWhJy56KCisGg3fR+nWzMi03qqaym2RkRlcE3JpoVU oJK7TCMUvgy/qEzWt20dIZXfE67Sw3dvWkol5AwBrtrzwGWQkwGQtZP9rwR2qKzy LOBH0PgVU+IHZ184pt4/5WOb3U1q9/imTJeT2vVVW7kNnNoMzOyiJnarRs1JZ76a JQAgZLwRtqoFTXkWUmwh+jRUTJ0rOk/Jb++PmCNLxN+M1BahB6Np1/KbaqBkSYBa c0B8yLpCS6Vz0pubTd75sesbYojhBx4gnUHhoi0pVPZVlMBYAIp1PV1icWxnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/Z7XGFY3KNB39J8j3lS8CPnwqDIwHwYDVR0j BBgwFoAUmLwMkoVfdnWdKM0GA1yf+WW98J8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2tpV2N0Z3pLbThOUzY0VEIyQ1dMaGtDRFFTYnlHVHBqWW5iVDNOcHFl cUQvMC85OEJDMEM5Mjg1NUY3Njc1OUQyOENEMDYwMzVDOUZGOTY1QkRGMDlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4QkMwQzkyODU1Rjc2NzU5 RDI4Q0QwNjAzNUM5RkY5NjVCREYwOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2tpV2N0Z3pLbThOUzY0VEIyQ1dMaGtDRFFTYnlHVHBqWW5iVDNOcHFlcUQvMC85 OEJDMEM5Mjg1NUY3Njc1OUQyOENEMDYwMzVDOUZGOTY1QkRGMDlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0M7piBHN0mudH5c/pTwThyyrrtat6kmhpItHa74WtVqSAsWHWX2Fzb6pq+rS 4lmS0yUWxEAOB8G/ESvJdPShvdetGHa3z5j9a1E5vv2lF7+ehoaOH7UaBwzfhDUd H367DtgnCXfGJ8JNsy35qXM7oiF4edC9QV789TUZcbjK+F36P4mdah7Exr969kPh SBpArsKtYoc9P4Ohsd/sr+V3siSZZJx3AgRNZL7JTQu9Bscj/5aM6O3gPumzlENt JHaaciuJs8lF4zYUioxqZabcYM9WJwd+s7EXCM6i+wEICMNSWM44Oak48e/0FdsH Juau7M4yl3mGz9QErbJ8w+y5jg== -----END CERTIFICATE-----Generated at Mon Jan 12 10:53:43 2026 by rpki-client