This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: eXYHxud/6ojZmCtzesCC//x5VTjj1jLe0c3cCGU0mnQ= Subject key identifier: 4E:DA:3E:36:34:13:FB:16:54:E4:D2:0D:02:68:50:48:CE:37:32:FE Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 664DD1052096BB5838F5902D780B1AF823A5EC64 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 033F Signing time: Tue 23 Dec 2025 22:16:24 +0000 Manifest this update: Tue 23 Dec 2025 22:11:24 +0000 Manifest next update: Wed 24 Dec 2025 23:06:24 +0000 Files and hashes: 1: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: ipJ01/7GrMqJoU2V4s0twAJAM+PVmTUug0f22AxLstg=) 2: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: IHT+RS/iweARypGzyOff6XPhF2jKh7RDE/V2Q1hN5a8=) 3: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: Xe55nUyv1G9rTdN4F9JJyZ5S73rOm7YPFxNpYGBVW3I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 23:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4d:d1:05:20:96:bb:58:38:f5:90:2d:78:0b:1a:f8:23:a5:ec:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Dec 23 22:11:24 2025 GMT Not After : Dec 24 23:06:24 2025 GMT Subject: CN=4EDA3E363413FB1654E4D20D02685048CE3732FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:2d:c0:5f:9f:b4:a6:ea:09:bc:b1:09:4c: 54:36:bd:ea:65:28:b5:df:75:6d:a6:7c:44:cc:62: 97:c7:25:8d:e4:fc:9a:4e:09:12:3f:45:f1:52:b3: 6e:65:3d:79:b2:08:7e:df:bb:5a:b2:23:5c:8f:19: 3e:27:0a:bd:a2:b3:76:55:55:19:d6:19:68:c6:15: 6d:f5:21:50:a4:48:50:7e:57:8d:4c:79:b4:27:77: e9:b1:1e:7a:85:6d:9a:22:9a:1f:16:90:37:fe:16: ac:d2:75:09:94:38:1e:41:7c:17:4e:8a:9a:90:2a: 31:54:08:4e:51:e4:61:a1:b0:0c:7c:3d:80:cb:43: 8e:1c:4f:bb:f1:5d:93:d4:05:32:e4:de:0b:36:46: f0:a1:f9:c3:86:46:0c:66:0d:ef:7c:20:cf:d7:ba: d3:75:7d:b1:7c:6b:e6:4d:57:ca:68:d9:66:5c:e2: b2:75:a7:1f:4a:a9:0e:f9:74:39:39:9a:db:0d:fb: 02:58:77:2f:f3:f8:22:7a:62:af:9c:79:1d:fe:e8: f1:ab:8c:6f:b4:3f:36:66:fe:e7:f5:8d:e5:5b:14: 30:3e:69:ad:1d:cc:44:fe:67:13:4d:3b:89:bd:36: 9c:51:96:ed:c4:b4:f3:88:8e:a1:4f:89:e1:6f:29: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DA:3E:36:34:13:FB:16:54:E4:D2:0D:02:68:50:48:CE:37:32:FE X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:89:43:f8:66:c1:71:15:d4:47:77:ff:35:a1:12:d4:1d: c5:60:55:4e:e5:05:a4:49:5c:6d:0c:c1:ae:53:29:d6:6c:33: 77:d5:8b:6b:e8:af:b1:bd:22:6f:8b:fe:c5:65:52:a5:5a:1a: b9:3a:ad:85:05:53:e7:7f:ed:24:16:25:ae:f8:99:09:24:45: a8:bd:b9:8b:05:23:f1:69:58:0b:57:ae:92:96:75:dc:3d:7c: d9:97:a9:ae:6e:6a:ea:8e:3c:98:f4:85:37:cf:ce:80:22:88: fb:f2:df:3d:da:75:1f:d6:87:58:02:71:2b:2a:51:c1:24:70: a6:0e:e8:2c:63:31:9d:47:6f:d7:a7:02:62:0c:fa:43:af:ec: 73:8e:7b:b6:e3:42:ab:aa:85:db:bb:6e:29:dc:ff:e9:97:f0: 29:64:dc:98:96:95:59:6d:2b:ec:97:4a:4d:ce:96:07:1f:35: c1:0a:ba:1f:82:4b:72:7a:1d:0b:0f:d9:83:6e:43:27:10:e5: ef:57:02:e4:e5:d4:33:18:e4:14:95:74:b8:35:23:80:5b:35: 09:25:21:a4:1a:2b:91:81:2b:83:70:b3:0b:97:62:4e:6a:7b: 0c:1e:d7:84:89:f3:3b:6e:40:a9:ce:67:96:26:5b:6e:fe:93: 58:f2:b8:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZk3RBSCWu1g49ZAteAsa+COl7GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTEyMjMyMjExMjRaFw0yNTEyMjQyMzA2MjRaMDMxMTAvBgNV BAMTKDRFREEzRTM2MzQxM0ZCMTY1NEU0RDIwRDAyNjg1MDQ4Q0UzNzMyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxy3AX5+0puoJvLEJTFQ2vepl KLXfdW2mfETMYpfHJY3k/JpOCRI/RfFSs25lPXmyCH7fu1qyI1yPGT4nCr2is3ZV VRnWGWjGFW31IVCkSFB+V41MebQnd+mxHnqFbZoimh8WkDf+FqzSdQmUOB5BfBdO ipqQKjFUCE5R5GGhsAx8PYDLQ44cT7vxXZPUBTLk3gs2RvCh+cOGRgxmDe98IM/X utN1fbF8a+ZNV8po2WZc4rJ1px9KqQ75dDk5mtsN+wJYdy/z+CJ6Yq+ceR3+6PGr jG+0PzZm/uf1jeVbFDA+aa0dzET+ZxNNO4m9NpxRlu3EtPOIjqFPieFvKYIjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTto+NjQT+xZU5NINAmhQSM43Mv4wHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANF6JQ/hmwXEV1Ed3/zWhEtQdxWBVTuUFpElcbQzBrlMp1mwzd9WLa+ivsb0i b4v+xWVSpVoauTqthQVT53/tJBYlrviZCSRFqL25iwUj8WlYC1eukpZ13D182Zep rm5q6o48mPSFN8/OgCKI+/LfPdp1H9aHWAJxKypRwSRwpg7oLGMxnUdv16cCYgz6 Q6/sc457tuNCq6qF27tuKdz/6ZfwKWTcmJaVWW0r7JdKTc6WBx81wQq6H4JLcnod Cw/Zg25DJxDl71cC5OXUMxjkFJV0uDUjgFs1CSUhpBorkYErg3CzC5diTmp7DB7X hInzO25Aqc5nliZbbv6TWPK4UQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:25:22 2025 by rpki-client