This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft File: AF231F74DDE2311E23940DD27C9A363910CAB577.mft (raw, json) Hash identifier: 8VjfmFJq6ewReRkf0xu0xf41Xh0jtipqjRPxzLgoSH4= Subject key identifier: EB:DB:06:94:19:08:31:BA:0D:A5:0F:6A:DD:2A:11:A1:E3:05:C1:C5 Authority key identifier: AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77 Certificate issuer: /CN=AF231F74DDE2311E23940DD27C9A363910CAB577 Certificate serial: 102166A971B3EA33F9FE94A06F6DD5334D96DFBE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft Manifest number: 07 Signing time: Thu 08 Jan 2026 16:10:59 +0000 Manifest this update: Thu 08 Jan 2026 16:05:59 +0000 Manifest next update: Fri 09 Jan 2026 17:04:59 +0000 Files and hashes: 1: 3137302e3233332e35362e302f32322d3332203d3e20323635303837.roa (hash: EYyUElunll6ku9qCWDNirniijbr4tjX9Ij8ARgZeEgo=) 2: 323830343a333239383a3a2f33322d313238203d3e20323635303837.roa (hash: xOwOGSU7wTDhn3QFg+xaq3Te4NGx/6MLJ1r9YwedQNw=) 3: AF231F74DDE2311E23940DD27C9A363910CAB577.crl (hash: ZH8HEQyNlwbwf4mkDMUlhJRu79wJHKEnpE6zFbTqOpc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 Jan 2026 17:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:21:66:a9:71:b3:ea:33:f9:fe:94:a0:6f:6d:d5:33:4d:96:df:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF231F74DDE2311E23940DD27C9A363910CAB577 Validity Not Before: Jan 8 16:05:59 2026 GMT Not After : Jan 9 17:04:59 2026 GMT Subject: CN=EBDB0694190831BA0DA50F6ADD2A11A1E305C1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:7c:5d:a4:69:fb:32:77:cb:c0:99:7e:dd: b1:7d:9c:9f:d1:26:58:ff:91:5b:3b:e6:44:b6:e9: 7c:b9:42:12:08:a1:c1:b6:72:50:a4:15:f5:59:c5: b5:19:50:16:5e:dd:a7:b1:59:fe:85:be:95:cb:73: 2e:f2:47:c8:21:dc:50:04:9a:c9:81:50:78:3e:3a: f7:bf:21:e6:a6:2a:88:1d:ab:dd:48:c4:6d:4e:c3: e5:c5:09:9d:c5:8f:70:02:c2:8b:cb:41:32:87:91: 73:31:0c:61:90:c2:89:f5:de:8c:71:b3:a4:70:7f: 66:9e:39:18:94:bb:59:d1:13:31:03:be:96:a2:b7: 0c:8a:7a:14:f8:61:a5:89:0d:55:a7:9e:64:f6:d1: e5:62:0e:00:39:0a:e1:15:e2:8b:7b:1d:82:a1:95: be:8b:9b:a2:ea:ca:27:03:0f:ff:7a:41:4a:49:fa: d5:01:a8:6f:5d:43:c5:63:a4:76:cd:7f:7f:e7:d3: 9f:6f:36:ad:9a:e1:2b:df:9f:6c:d4:1d:d5:e6:7d: 4d:7a:69:ce:e6:a0:b1:22:ed:43:23:90:84:d5:31: d3:86:ec:f2:8b:17:4a:f5:3c:c8:29:32:ef:ae:d1: eb:9e:a1:be:ce:8a:49:eb:31:7b:bb:4c:f9:5b:ec: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:06:94:19:08:31:BA:0D:A5:0F:6A:DD:2A:11:A1:E3:05:C1:C5 X509v3 Authority Key Identifier: keyid:AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:18:17:cd:75:4e:35:c0:cd:d4:09:35:80:7a:b7:93:5e:16: d1:e1:2f:e3:38:96:3d:0b:e7:d9:b4:d1:35:8b:9e:7a:24:95: a9:b8:3d:96:d1:38:a2:21:d4:fd:b6:d7:75:dc:99:32:d4:d7: 37:28:b4:f4:f2:10:5f:b0:64:af:d1:1b:46:de:f4:64:bd:c6: c2:07:17:b5:fe:2b:02:21:68:22:88:5e:bd:7f:48:fd:c9:45: cc:7d:78:ad:1c:c7:5f:37:61:0c:e9:cb:6c:f4:54:2e:75:f7: 71:a3:ab:6a:20:61:43:86:79:86:b7:61:71:3e:ca:87:31:ca: db:6a:26:50:f7:b5:5f:fc:78:84:85:50:33:2f:f4:cf:dc:fa: 51:45:d1:bf:6d:9e:83:86:12:a7:a8:98:8e:f5:f2:4c:5c:98: 06:d2:56:ce:3c:d6:96:7f:ea:5f:5b:05:76:91:58:78:38:81: a1:40:23:8b:59:32:34:52:10:64:5c:c7:b4:c1:3d:8c:e7:1f: d2:1e:d9:57:e3:0f:28:1b:47:5b:c4:bc:a5:9d:c9:a9:f8:e9: 7b:41:ec:41:1d:9b:62:b9:49:7d:40:e5:21:38:d7:53:34:f9: b7:7f:68:19:a0:0a:f8:6e:36:17:d0:3c:5d:af:f8:03:80:48: dd:b1:ad:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUECFmqXGz6jP5/pSgb23VM02W374wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMzFGNzREREUyMzExRTIzOTQwREQyN0M5QTM2Mzkx MENBQjU3NzAeFw0yNjAxMDgxNjA1NTlaFw0yNjAxMDkxNzA0NTlaMDMxMTAvBgNV BAMTKEVCREIwNjk0MTkwODMxQkEwREE1MEY2QUREMkExMUExRTMwNUMxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe83xdpGn7MnfLwJl+3bF9nJ/R Jlj/kVs75kS26Xy5QhIIocG2clCkFfVZxbUZUBZe3aexWf6FvpXLcy7yR8gh3FAE msmBUHg+Ove/IeamKogdq91IxG1Ow+XFCZ3Fj3ACwovLQTKHkXMxDGGQwon13oxx s6Rwf2aeORiUu1nREzEDvpaitwyKehT4YaWJDVWnnmT20eViDgA5CuEV4ot7HYKh lb6Lm6LqyicDD/96QUpJ+tUBqG9dQ8VjpHbNf3/n059vNq2a4Svfn2zUHdXmfU16 ac7moLEi7UMjkITVMdOG7PKLF0r1PMgpMu+u0eueob7OiknrMXu7TPlb7OYxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU69sGlBkIMboNpQ9q3SoRoeMFwcUwHwYDVR0j BBgwFoAUryMfdN3iMR4jlA3SfJo2ORDKtXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFx dGkvMC9BRjIzMUY3NERERTIzMTFFMjM5NDBERDI3QzlBMzYzOTEwQ0FCNTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMjMxRjc0RERFMjMxMUUy Mzk0MEREMjdDOUEzNjM5MTBDQUI1NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFxdGkvMC9B RjIzMUY3NERERTIzMTFFMjM5NDBERDI3QzlBMzYzOTEwQ0FCNTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApxgXzXVONcDN1Ak1gHq3k14W0eEv4ziWPQvn2bTRNYueeiSVqbg9ltE4oiHU /bbXddyZMtTXNyi09PIQX7Bkr9EbRt70ZL3GwgcXtf4rAiFoIohevX9I/clFzH14 rRzHXzdhDOnLbPRULnX3caOraiBhQ4Z5hrdhcT7KhzHK22omUPe1X/x4hIVQMy/0 z9z6UUXRv22eg4YSp6iYjvXyTFyYBtJWzjzWln/qX1sFdpFYeDiBoUAji1kyNFIQ ZFzHtME9jOcf0h7ZV+MPKBtHW8S8pZ3Jqfjpe0HsQR2bYrlJfUDlITjXUzT5t39o GaAK+G42F9A8Xa/4A4BI3bGt5g== -----END CERTIFICATE-----Generated at Fri Jan 9 05:51:02 2026 by rpki-client