This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft File: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft (raw, json) Hash identifier: b/zHI4biBCB9pO5fD8UsiIWsREzr4oaMo0lvXjOqpS8= Subject key identifier: 85:AA:99:32:2E:7A:DB:21:3F:E8:B6:F9:BD:25:45:E7:CA:2C:DE:14 Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F Certificate issuer: /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Certificate serial: 70340C7C6F382A55505D6232063D0A2AF22FE341 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft Manifest number: D6 Signing time: Sun 21 Dec 2025 14:52:34 +0000 Manifest this update: Sun 21 Dec 2025 14:47:34 +0000 Manifest next update: Mon 22 Dec 2025 15:44:34 +0000 Files and hashes: 1: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: i/+EMmHFMGqogYrZgaRhva6vg0d98QEkZjKWhP5qXto=) 2: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl (hash: DEHTTau7Gta0j8AA46bc9UOwR29AcMgvhogGIpHv+ig=) 3: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: iFMFtE0y8pLsQ/Cn9J7/m+D9lxMgkKqAt/nEyvjkWXM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 15:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:34:0c:7c:6f:38:2a:55:50:5d:62:32:06:3d:0a:2a:f2:2f:e3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Validity Not Before: Dec 21 14:47:34 2025 GMT Not After : Dec 22 15:44:34 2025 GMT Subject: CN=85AA99322E7ADB213FE8B6F9BD2545E7CA2CDE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:b4:8a:fd:e8:5a:a6:c2:3e:d1:a2:70:2e: 8d:9e:df:f9:5e:81:f8:f3:fd:9b:e8:4c:10:18:47: 0b:26:1f:f3:00:c6:d1:ab:5a:6e:6a:27:a9:2b:2d: e9:53:98:de:bb:7c:3c:01:5c:84:5b:fd:87:d6:0d: ee:a0:75:4e:f5:87:d4:34:c4:15:55:5a:cb:30:33: d0:53:ee:6f:7e:87:27:e7:9f:4c:d5:c0:ba:86:5d: 23:ab:16:93:14:b1:a5:7b:61:ef:0c:bf:2b:53:fb: 03:38:c1:f7:a0:eb:2a:51:9b:e5:d3:c5:9b:46:02: 0c:09:51:69:33:ae:71:85:9e:e3:af:ba:8f:fa:7f: 55:87:24:0a:c7:4c:81:21:04:0d:50:40:b5:d3:d7: 4d:11:64:1b:03:3f:e8:a7:44:69:37:16:db:b1:4a: 6a:41:c2:38:a6:eb:07:37:6b:45:4e:85:6d:77:36: a7:5b:90:2a:be:1c:ac:17:01:0e:95:6a:0d:99:3e: 7c:38:10:0d:3a:63:2e:18:9e:7c:d9:27:c8:80:7a: 0b:3d:e1:ef:78:dd:86:66:69:3d:54:ad:00:cd:d3: 35:2f:96:f2:10:3b:af:cf:b7:15:3e:2c:1c:72:e2: 81:4e:fb:f7:20:af:a6:61:6b:af:9c:a0:ee:8d:c6: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:99:32:2E:7A:DB:21:3F:E8:B6:F9:BD:25:45:E7:CA:2C:DE:14 X509v3 Authority Key Identifier: keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3b:34:34:16:6a:75:04:7d:30:38:00:9a:59:c2:6a:3f:cc: d4:d0:41:42:48:02:9c:0e:f2:6a:bd:d9:75:98:bb:ed:af:4b: a7:3b:54:53:db:e4:24:00:b9:4b:13:6a:9c:78:02:82:4d:25: 7d:e1:46:6e:af:73:d0:f1:49:73:9c:ab:88:b2:32:fd:f8:37: 34:d6:41:f9:ea:68:10:cf:85:aa:aa:c0:2a:14:02:74:50:93: 62:81:db:59:76:04:2a:b9:0d:e0:b4:ba:f1:4d:05:fb:dd:4a: 26:3a:4e:fd:a4:7a:06:fd:f9:c5:ee:3d:3a:43:b9:eb:59:8f: d5:b5:40:1b:6e:4f:8b:05:12:c2:92:d9:98:d8:2f:2f:ab:3b: 22:30:22:e4:cb:39:50:8a:c7:bd:da:a1:ad:66:64:33:c3:a0: 2f:ef:e8:92:b1:32:58:8a:69:ff:eb:ab:37:74:70:d6:ba:06: cd:2f:05:4f:d4:f2:80:9a:88:4a:aa:0b:94:9d:83:5f:13:44: 6b:87:3f:0c:35:79:e5:bf:7f:de:f2:f8:ff:82:ed:98:93:70: 89:92:79:4b:e1:f0:6d:0a:fe:3b:f5:d9:d3:b1:9c:4c:e6:df: 8e:4f:94:32:d9:b0:12:1c:0f:26:e4:a0:c4:5d:48:5d:3e:e1: ea:91:71:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcDQMfG84KlVQXWIyBj0KKvIv40EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRDI2QzVEQjFFRURDNzBBNjI3NTE2Q0MyMjQ2Rjc0 RTkzQkE2RjAeFw0yNTEyMjExNDQ3MzRaFw0yNTEyMjIxNTQ0MzRaMDMxMTAvBgNV BAMTKDg1QUE5OTMyMkU3QURCMjEzRkU4QjZGOUJEMjU0NUU3Q0EyQ0RFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XbSK/ehapsI+0aJwLo2e3/le gfjz/ZvoTBAYRwsmH/MAxtGrWm5qJ6krLelTmN67fDwBXIRb/YfWDe6gdU71h9Q0 xBVVWsswM9BT7m9+hyfnn0zVwLqGXSOrFpMUsaV7Ye8MvytT+wM4wfeg6ypRm+XT xZtGAgwJUWkzrnGFnuOvuo/6f1WHJArHTIEhBA1QQLXT100RZBsDP+inRGk3Ftux SmpBwjim6wc3a0VOhW13NqdbkCq+HKwXAQ6Vag2ZPnw4EA06Yy4YnnzZJ8iAegs9 4e943YZmaT1UrQDN0zUvlvIQO6/PtxU+LBxy4oFO+/cgr6Zha6+coO6NxmfVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhaqZMi562yE/6Lb5vSVF58os3hQwHwYDVR0j BBgwFoAUOv0mxdse7ccKYnUWzCJG906Tum8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZz dUMvMC8zQUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQyNkM1REIxRUVEQzcw QTYyNzUxNkNDMjI0NkY3NEU5M0JBNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZzdUMvMC8z QUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACDs0NBZqdQR9MDgAmlnCaj/M1NBBQkgCnA7yar3ZdZi77a9LpztUU9vkJAC5 SxNqnHgCgk0lfeFGbq9z0PFJc5yriLIy/fg3NNZB+epoEM+FqqrAKhQCdFCTYoHb WXYEKrkN4LS68U0F+91KJjpO/aR6Bv35xe49OkO561mP1bVAG25PiwUSwpLZmNgv L6s7IjAi5Ms5UIrHvdqhrWZkM8OgL+/okrEyWIpp/+urN3Rw1roGzS8FT9TygJqI SqoLlJ2DXxNEa4c/DDV55b9/3vL4/4LtmJNwiZJ5S+HwbQr+O/XZ07GcTObfjk+U MtmwEhwPJuSgxF1IXT7h6pFxvA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:28:30 2025 by rpki-client