This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: pA65aRlsmlOi7Lx872soh8uZZYYfmYp2vYnA/ibZDjc= Subject key identifier: 80:79:E6:BC:D2:7B:83:44:01:69:6B:A1:6B:FA:21:9D:B2:47:3A:ED Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 4643F52CA78001796E004E0DE745D36331B1D110 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 01EE Signing time: Wed 24 Dec 2025 07:05:31 +0000 Manifest this update: Wed 24 Dec 2025 07:00:31 +0000 Manifest next update: Thu 25 Dec 2025 10:31:31 +0000 Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: GGXHSLGKLyzYDN3cVBEQgcTBpve9XFGRm7QT2JPsRSA=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs=) 3: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 10:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:43:f5:2c:a7:80:01:79:6e:00:4e:0d:e7:45:d3:63:31:b1:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Dec 24 07:00:31 2025 GMT Not After : Dec 25 10:31:31 2025 GMT Subject: CN=8079E6BCD27B834401696BA16BFA219DB2473AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:12:82:67:09:be:06:9e:7c:98:ec:a6:3a: ec:88:dd:0d:2e:d3:fb:c4:81:c5:6d:cb:26:6d:56: 12:d2:a4:9d:81:65:16:be:e8:38:5f:7c:ca:80:19: 65:79:22:7b:f8:2c:3f:8f:18:a7:8d:0c:ab:c3:77: 91:8b:b1:54:4a:23:88:25:f5:1f:cb:fb:79:d7:cd: 22:a4:16:88:66:e0:8b:3e:16:5c:64:93:8f:9f:54: b0:3b:08:e6:a4:f8:6f:07:b2:e3:b9:df:64:44:e7: 40:77:6a:ee:1a:f8:67:75:1c:d0:ee:d8:ae:d2:5b: 44:d6:40:94:97:3e:f8:13:87:d2:68:77:d6:19:a5: 0e:18:73:ee:ae:a7:e9:3f:cc:38:78:c7:11:05:ba: 62:df:81:43:6e:63:a1:f2:fa:d7:5c:2f:cc:b3:08: 6b:f9:ef:29:0d:60:ee:1f:5a:25:d2:75:67:b0:68: b4:e2:b7:4c:f1:5a:88:04:e7:28:cf:fa:19:d7:af: af:de:7c:4b:ce:9e:fb:72:92:b1:7c:bd:3e:fc:87: d7:3e:6c:ed:a8:bf:70:32:ec:1b:56:37:bc:45:b2: 1f:6f:41:88:3e:b2:8b:02:d9:9c:fe:b7:64:10:ec: 8e:79:94:be:7e:d6:e7:63:10:d9:87:d2:bc:19:11: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:E6:BC:D2:7B:83:44:01:69:6B:A1:6B:FA:21:9D:B2:47:3A:ED X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4b:ac:6d:a7:4b:87:94:b6:64:c3:7d:98:f3:64:74:a6:d9: 4d:e2:de:e8:5a:6e:b7:93:51:98:f2:8c:50:80:af:ed:0c:e2: 11:91:0e:4f:72:c4:b3:09:53:b0:c9:11:78:d8:73:81:48:85: 77:b9:d9:2c:e5:cf:3f:8d:6d:53:99:a9:3b:77:b9:89:56:b4: 2c:2f:ce:7d:eb:eb:68:ae:58:ca:e2:72:11:bf:67:01:35:1b: be:78:00:5e:19:71:e6:3c:74:06:62:66:53:3f:24:73:03:89: ab:54:87:5f:4c:4e:8b:31:a4:60:82:d7:b7:7e:9a:4f:48:b7: 34:0e:ce:26:9f:72:b4:42:a1:59:a4:6a:e8:fd:31:df:35:ad: f5:86:f3:f6:93:dd:d4:56:64:e6:aa:96:f8:49:fb:07:a5:d5: a4:ed:e8:fb:31:ae:62:fb:6f:46:bc:aa:f3:dd:d8:39:7a:25: d1:6a:1a:7b:bf:2c:96:7d:62:ab:1c:72:52:53:12:de:cd:ff: 9d:15:3a:3f:64:6a:ca:70:79:85:3b:d8:08:75:ad:c7:f4:24: cc:16:49:65:55:a7:ca:bb:90:a3:40:fc:72:27:44:e3:45:f2: da:eb:fa:8c:26:12:e9:0a:64:6f:68:1b:7e:7d:f5:1b:a5:bb: 11:96:c7:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURkP1LKeAAXluAE4N50XTYzGx0RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTEyMjQwNzAwMzFaFw0yNTEyMjUxMDMxMzFaMDMxMTAvBgNV BAMTKDgwNzlFNkJDRDI3QjgzNDQwMTY5NkJBMTZCRkEyMTlEQjI0NzNBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTpRKCZwm+Bp58mOymOuyI3Q0u 0/vEgcVtyyZtVhLSpJ2BZRa+6DhffMqAGWV5Inv4LD+PGKeNDKvDd5GLsVRKI4gl 9R/L+3nXzSKkFohm4Is+Flxkk4+fVLA7COak+G8HsuO532RE50B3au4a+Gd1HNDu 2K7SW0TWQJSXPvgTh9Jod9YZpQ4Yc+6up+k/zDh4xxEFumLfgUNuY6Hy+tdcL8yz CGv57ykNYO4fWiXSdWewaLTit0zxWogE5yjP+hnXr6/efEvOnvtykrF8vT78h9c+ bO2ov3Ay7BtWN7xFsh9vQYg+sosC2Zz+t2QQ7I55lL5+1udjENmH0rwZEU6vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgHnmvNJ7g0QBaWuha/ohnbJHOu0wHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW0usbadLh5S2ZMN9mPNkdKbZTeLe6Fput5NRmPKMUICv7QziEZEOT3LEswlT sMkReNhzgUiFd7nZLOXPP41tU5mpO3e5iVa0LC/OfevraK5YyuJyEb9nATUbvngA Xhlx5jx0BmJmUz8kcwOJq1SHX0xOizGkYILXt36aT0i3NA7OJp9ytEKhWaRq6P0x 3zWt9Ybz9pPd1FZk5qqW+En7B6XVpO3o+zGuYvtvRryq893YOXol0Woae78sln1i qxxyUlMS3s3/nRU6P2RqynB5hTvYCHWtx/QkzBZJZVWnyruQo0D8cidE40Xy2uv6 jCYS6Qpkb2gbfn31G6W7EZbHhQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:17:21 2025 by rpki-client