This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json) Hash identifier: Lgi7fE7t1pz/d2jGIJeGRuRrllUFGjeGq7sRZBV8yzA= Subject key identifier: 02:0F:56:87:5C:D1:17:6E:3C:CB:BF:98:70:8F:48:27:E6:D5:BF:0C Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Certificate serial: 4AB2785290EDD9EBE8AE12BAFA92A9C36D36898C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft Manifest number: 69 Signing time: Tue 23 Dec 2025 07:48:21 +0000 Manifest this update: Tue 23 Dec 2025 07:43:21 +0000 Manifest next update: Wed 24 Dec 2025 09:31:21 +0000 Files and hashes: 1: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=) 2: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: RQpnC9W8RpWq/3Dw7WNYkfZXLgLNVnLQOwVzHwdOc2U=) 3: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 09:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b2:78:52:90:ed:d9:eb:e8:ae:12:ba:fa:92:a9:c3:6d:36:89:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Validity Not Before: Dec 23 07:43:21 2025 GMT Not After : Dec 24 09:31:21 2025 GMT Subject: CN=020F56875CD1176E3CCBBF98708F4827E6D5BF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:34:b4:12:b8:7c:48:d9:6f:d8:15:ea:d5: 69:36:56:8f:e2:06:2b:cb:39:5b:33:fb:e8:e3:2c: d1:04:59:07:0e:88:03:20:32:c2:c4:c7:32:84:f2: aa:34:c3:53:54:78:15:2c:70:2e:d3:17:e5:c3:17: 4b:7b:60:79:8d:2b:a7:fb:c9:c0:17:35:b7:8c:d1: 57:6e:84:1a:64:74:d7:b6:7c:63:05:ad:28:53:8d: d6:fc:79:1c:f4:d9:ac:5e:2d:e6:12:92:a7:04:17: f6:f5:75:5b:37:a1:b7:af:af:0c:2d:73:90:c4:78: 54:b8:a4:22:df:ab:65:9b:57:22:b8:e5:1b:01:97: 84:ff:2e:8a:e0:de:cb:8e:cd:1a:37:4c:74:3e:10: 7d:2e:57:f0:2e:62:9f:5c:73:ae:0f:c5:4e:94:74: 2a:4e:38:5e:be:f8:3f:e8:8a:18:bd:e3:da:42:b6: ad:bc:a4:94:4b:34:bc:19:1c:83:0e:a2:de:43:44: 7f:cb:aa:4c:ca:60:79:25:8b:7d:95:9d:9f:d7:a2: 1c:a0:4d:42:cd:39:7e:56:c6:55:99:bb:d7:92:a9: be:8b:99:b8:aa:b1:fb:49:ad:6a:77:33:1e:82:cf: 20:3a:98:1c:b4:b3:38:d2:a8:f8:d2:50:46:2b:4d: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0F:56:87:5C:D1:17:6E:3C:CB:BF:98:70:8F:48:27:E6:D5:BF:0C X509v3 Authority Key Identifier: keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d7:4b:47:4b:a9:1a:9e:35:b7:26:49:62:19:53:2e:e5:a1: dc:a1:12:04:30:8c:0f:89:d6:0b:09:6a:69:bb:c9:71:3f:c2: 69:47:33:f7:72:ea:a5:56:57:7c:96:27:5d:9c:6a:c3:52:87: 63:9b:87:09:ea:c3:3d:4a:44:b4:94:7e:e7:9b:a5:29:04:3d: ce:36:4a:e5:4b:78:7a:4b:f3:6a:29:20:f2:e2:98:86:d2:d8: 6b:12:08:e3:92:94:c9:75:2b:f4:51:83:47:6e:75:b6:ca:75: 2c:6f:2d:44:01:6c:a3:b4:49:4a:42:08:89:a1:05:32:fc:57: 66:40:1b:9f:57:38:a3:51:f4:05:8d:ee:4a:b5:63:ac:e6:f7: e0:93:e6:79:3c:89:f1:a3:5d:c1:ac:29:a9:f5:78:68:f1:8e: e0:36:23:a7:76:1e:39:fc:01:26:81:8c:30:06:79:e5:87:61: fe:9f:56:ea:fd:7a:2c:89:22:df:d2:7b:56:b7:fb:66:12:72: 11:c4:72:34:c6:fb:c4:0b:1d:48:27:fb:7e:bd:bd:9a:7c:39: 20:37:cc:51:36:d0:1d:ae:96:be:d6:49:85:a8:91:d2:26:17: 22:1d:60:58:36:ef:1a:43:1d:d9:77:e1:09:d7:b9:09:7c:a5: d3:dd:b3:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSrJ4UpDt2evorhK6+pKpw202iYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjVEQkYyOThBQkFBNEY4MDlBNkZENzM1MkJFRjkx RkM3ODU4NTAeFw0yNTEyMjMwNzQzMjFaFw0yNTEyMjQwOTMxMjFaMDMxMTAvBgNV BAMTKDAyMEY1Njg3NUNEMTE3NkUzQ0NCQkY5ODcwOEY0ODI3RTZENUJGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BTS0Erh8SNlv2BXq1Wk2Vo/i BivLOVsz++jjLNEEWQcOiAMgMsLExzKE8qo0w1NUeBUscC7TF+XDF0t7YHmNK6f7 ycAXNbeM0VduhBpkdNe2fGMFrShTjdb8eRz02axeLeYSkqcEF/b1dVs3obevrwwt c5DEeFS4pCLfq2WbVyK45RsBl4T/Lorg3suOzRo3THQ+EH0uV/AuYp9cc64PxU6U dCpOOF6++D/oihi949pCtq28pJRLNLwZHIMOot5DRH/LqkzKYHkli32VnZ/Xohyg TULNOX5WxlWZu9eSqb6LmbiqsftJrWp3Mx6CzyA6mBy0szjSqPjSUEYrTcP3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAg9Wh1zRF248y7+YcI9IJ+bVvwwwHwYDVR0j BBgwFoAUqjtdvymKuqT4Cab9c1K++R/HhYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVF dEovMC9BQTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I1REJGMjk4QUJBQTRG ODA5QTZGRDczNTJCRUY5MUZDNzg1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVFdEovMC9B QTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAitdLR0upGp41tyZJYhlTLuWh3KESBDCMD4nWCwlqabvJcT/CaUcz93LqpVZX fJYnXZxqw1KHY5uHCerDPUpEtJR+55ulKQQ9zjZK5Ut4ekvzaikg8uKYhtLYaxII 45KUyXUr9FGDR251tsp1LG8tRAFso7RJSkIIiaEFMvxXZkAbn1c4o1H0BY3uSrVj rOb34JPmeTyJ8aNdwawpqfV4aPGO4DYjp3YeOfwBJoGMMAZ55Ydh/p9W6v16LIki 39J7Vrf7ZhJyEcRyNMb7xAsdSCf7fr29mnw5IDfMUTbQHa6WvtZJhaiR0iYXIh1g WDbvGkMd2XfhCde5CXyl092zoA== -----END CERTIFICATE-----Generated at Tue Dec 23 11:39:31 2025 by rpki-client