This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft File: D272B79940440721190429AABBA45B0BB5589F3E.mft (raw, json) Hash identifier: rjrwb2Z5hGFy52425mh17ERLaCc7h7oEkbfXa1FdoLI= Subject key identifier: D8:33:C9:AE:C1:07:F7:79:78:B3:33:DD:B2:42:B2:A5:C7:35:E0:87 Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E Certificate issuer: /CN=D272B79940440721190429AABBA45B0BB5589F3E Certificate serial: 5DAC79DEB70836E21E1621936A92A22D82C3F324 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft Manifest number: 01C9 Signing time: Fri 02 Jan 2026 06:10:06 +0000 Manifest this update: Fri 02 Jan 2026 06:05:06 +0000 Manifest next update: Sat 03 Jan 2026 09:49:06 +0000 Files and hashes: 1: D272B79940440721190429AABBA45B0BB5589F3E.crl (hash: 2s0YT3apHJEDbKZwkBrrKZ6E7AdeZT03pQ/ZimjUyuU=) 2: 34352e352e39362e302f32322d3234203d3e20323636303931.roa (hash: TpP0pyyBddetIefEQp+tbjSdfBvTQ1UGHo5796I3wNk=) 3: 323830343a336137383a3a2f33322d3438203d3e20323636303931.roa (hash: EZVes/T3eOPUmikgpWX7VMptgq3WkVAYcR28QtUPSJs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 Jan 2026 09:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ac:79:de:b7:08:36:e2:1e:16:21:93:6a:92:a2:2d:82:c3:f3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E Validity Not Before: Jan 2 06:05:06 2026 GMT Not After : Jan 3 09:49:06 2026 GMT Subject: CN=D833C9AEC107F77978B333DDB242B2A5C735E087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:89:3d:d3:ac:ed:51:6d:36:9f:90:4c:cf:a4: 3b:45:97:dc:03:76:9d:cc:cf:8c:c2:78:36:36:d3: 0a:be:c4:22:69:09:4d:43:e3:56:98:8c:fa:81:7a: 33:e9:65:74:89:99:9c:76:b3:16:c7:12:71:ae:a1: 8e:13:a3:1c:92:06:25:cf:5f:7a:c1:21:9a:e8:a9: f7:c0:16:bd:1d:ae:b5:49:50:85:ca:ea:8f:63:34: 6f:d0:d8:a8:68:ad:59:13:4e:1e:59:5b:40:8b:bd: fa:c4:7c:d2:01:01:b1:22:e2:bd:24:e8:9d:80:f1: 84:a2:e5:37:b8:50:1a:85:34:48:84:73:c1:73:77: 51:a2:aa:86:11:53:99:11:24:c3:bd:3f:84:15:0f: 33:9f:78:54:04:dd:ae:70:0d:34:52:5b:65:a1:ce: d0:a7:4c:39:af:74:02:45:0b:3b:98:7a:46:08:82: 0c:6b:3c:0a:fb:17:cc:8a:f1:b5:e6:9c:7c:97:4d: 1c:42:cb:91:9f:e9:db:1d:e4:32:9e:4e:a8:d2:d3: aa:f9:42:28:dd:bc:a2:a9:d3:f2:05:0b:73:8c:10: a3:f3:ce:e3:81:16:fe:e5:dd:b1:14:12:6d:a3:77: 66:86:66:a2:9c:15:bb:32:8f:be:67:35:99:0d:79: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:33:C9:AE:C1:07:F7:79:78:B3:33:DD:B2:42:B2:A5:C7:35:E0:87 X509v3 Authority Key Identifier: keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ff:5c:9d:5a:c4:82:6e:c4:65:23:31:62:a5:95:cc:5d:16: 21:d1:1a:99:6b:4c:bc:71:a2:21:f4:83:aa:bb:21:21:ed:8f: 84:f8:77:9c:e0:75:c7:cc:f6:2b:52:72:9a:5b:71:01:c0:6c: 25:6b:8b:d2:73:b9:8a:0f:6e:5e:e1:bc:6a:3f:de:bb:9d:db: a3:b0:ef:7d:39:7b:40:b2:9e:a1:22:d5:54:f6:24:73:8e:aa: 2e:ab:ee:95:d1:95:41:8e:f7:90:d5:d6:09:ce:7b:b7:52:49: 68:a8:da:82:c3:97:ed:c8:fa:95:6a:d7:51:e9:d6:78:81:b2: b6:86:dd:9d:dc:b8:85:cf:a0:62:f2:eb:68:b2:46:b2:07:33: ba:ad:bb:33:ba:b3:c7:4d:7b:9f:63:82:f6:48:6b:63:f4:30: 68:31:e2:12:d7:df:b3:76:1a:af:c2:d7:65:99:bd:f7:16:f0: 03:1a:01:1e:b7:ad:7b:8d:99:b9:90:1f:01:25:61:8b:c0:67: bc:2f:bb:27:97:c4:f2:e1:72:b3:34:70:58:17:f4:35:52:3f: 72:a7:0f:cd:7c:7f:53:18:8a:60:49:49:e2:d9:a4:b1:9e:5c: bb:f0:ed:82:8f:d5:9c:1b:40:90:fc:19:83:b2:e6:38:33:aa: b6:3e:ff:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXax53rcINuIeFiGTapKiLYLD8yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI3MkI3OTk0MDQ0MDcyMTE5MDQyOUFBQkJBNDVCMEJC NTU4OUYzRTAeFw0yNjAxMDIwNjA1MDZaFw0yNjAxMDMwOTQ5MDZaMDMxMTAvBgNV BAMTKEQ4MzNDOUFFQzEwN0Y3Nzk3OEIzMzNEREIyNDJCMkE1QzczNUUwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwiT3TrO1RbTafkEzPpDtFl9wD dp3Mz4zCeDY20wq+xCJpCU1D41aYjPqBejPpZXSJmZx2sxbHEnGuoY4ToxySBiXP X3rBIZroqffAFr0drrVJUIXK6o9jNG/Q2KhorVkTTh5ZW0CLvfrEfNIBAbEi4r0k 6J2A8YSi5Te4UBqFNEiEc8Fzd1GiqoYRU5kRJMO9P4QVDzOfeFQE3a5wDTRSW2Wh ztCnTDmvdAJFCzuYekYIggxrPAr7F8yK8bXmnHyXTRxCy5Gf6dsd5DKeTqjS06r5 QijdvKKp0/IFC3OMEKPzzuOBFv7l3bEUEm2jd2aGZqKcFbsyj75nNZkNeTJDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2DPJrsEH93l4szPdskKypcc14IcwHwYDVR0j BBgwFoAU0nK3mUBEByEZBCmqu6RbC7VYnz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpW d1QvMC9EMjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNzJCNzk5NDA0NDA3MjEx OTA0MjlBQUJCQTQ1QjBCQjU1ODlGM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDV2VjdYQjdmandBdk04UnZGRWc3QzR3VHJpUW53NjdXbkF3UFN5OXpWd1QvMC9E MjcyQjc5OTQwNDQwNzIxMTkwNDI5QUFCQkE0NUIwQkI1NTg5RjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcf9cnVrEgm7EZSMxYqWVzF0WIdEamWtMvHGiIfSDqrshIe2PhPh3nOB1x8z2 K1JymltxAcBsJWuL0nO5ig9uXuG8aj/eu53bo7DvfTl7QLKeoSLVVPYkc46qLqvu ldGVQY73kNXWCc57t1JJaKjagsOX7cj6lWrXUenWeIGytobdndy4hc+gYvLraLJG sgczuq27M7qzx017n2OC9khrY/QwaDHiEtffs3Yar8LXZZm99xbwAxoBHrete42Z uZAfASVhi8BnvC+7J5fE8uFyszRwWBf0NVI/cqcPzXx/UxiKYElJ4tmksZ5cu/Dt go/VnBtAkPwZg7LmODOqtj7/Zg== -----END CERTIFICATE-----Generated at Fri Jan 2 09:55:51 2026 by rpki-client