This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: 5FE6Xl+A5Fz7nxm98yN/Q4UVSevlhawEmaBlI/wqOV0= Subject key identifier: D2:F8:69:EF:92:AA:4F:08:9C:4A:C1:08:6D:14:18:D5:F2:64:4E:4B Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: 493193C0FE5673BE8F91D0740FF4A8E696C19C2F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 0344 Signing time: Mon 22 Dec 2025 16:44:04 +0000 Manifest this update: Mon 22 Dec 2025 16:39:04 +0000 Manifest next update: Tue 23 Dec 2025 19:50:04 +0000 Files and hashes: 1: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: PcodjXVYLciTspoiL1Ty++dRJisplXTkVCBfvkZV7I0=) 2: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=) 3: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 19:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:31:93:c0:fe:56:73:be:8f:91:d0:74:0f:f4:a8:e6:96:c1:9c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Dec 22 16:39:04 2025 GMT Not After : Dec 23 19:50:04 2025 GMT Subject: CN=D2F869EF92AA4F089C4AC1086D1418D5F2644E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:69:42:52:0d:65:ab:5c:d3:24:fa:25:8b: 77:c7:6a:8d:aa:73:a8:8d:54:d5:20:d0:9c:ed:62: d8:e3:ef:61:08:dd:a5:62:76:06:bd:7c:69:ea:34: 1a:c6:27:04:b5:32:a5:a9:73:09:13:28:04:e1:d0: 81:c3:50:c2:64:7f:e5:90:f3:d1:dd:15:11:f2:62: 76:4e:93:c1:10:dd:50:40:1e:ba:7f:4b:46:dd:6b: 07:9e:e3:b0:89:7a:bc:a1:83:88:8d:1d:05:08:f3: 72:06:4b:1b:a6:f4:e2:76:2c:3c:c4:39:cd:1e:91: bf:34:38:11:af:0c:80:e8:d5:ba:73:a1:1d:c1:85: db:32:26:26:78:aa:4b:dc:eb:8c:d7:5f:27:35:23: 64:ea:5f:1f:49:69:1e:6e:82:33:40:a3:c7:4c:4d: cd:f7:54:6b:31:8f:7b:aa:b8:09:db:1b:f4:4a:b1: fc:1d:1a:6d:0f:56:35:85:9d:c2:18:da:0b:0f:fc: 07:7a:c2:6e:7f:4e:a9:13:a4:dd:01:46:e1:42:8f: 70:14:66:6e:58:74:43:a0:82:1f:f4:d1:45:5f:72: 4d:48:3a:9a:66:a4:9a:de:e3:4a:f0:f6:dc:2c:49: 5a:34:d9:38:60:63:5e:21:f2:06:11:bd:34:38:c4: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:69:EF:92:AA:4F:08:9C:4A:C1:08:6D:14:18:D5:F2:64:4E:4B X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:44:54:fb:ec:d8:58:84:32:46:7a:bf:3d:11:d2:ba:69:81: d8:f9:60:2c:27:38:a0:5b:09:df:8a:b4:f3:a8:de:2a:7c:17: 6b:f9:e6:f9:e5:41:16:c5:09:9e:6b:82:af:54:35:7c:7e:2d: 53:f0:78:d1:ce:14:20:31:33:06:a0:0a:6d:77:2b:24:1b:c9: ec:8f:af:f9:63:18:57:25:b2:3e:41:79:8b:0f:bf:d0:9a:df: b6:99:12:5b:b2:14:50:f2:61:ab:83:83:45:c4:cd:d3:c2:eb: 72:43:6e:a3:84:e3:a7:a9:c8:94:b1:60:32:0e:2f:06:47:df: 2c:d4:22:0e:46:ef:98:a1:14:c4:13:41:9c:78:89:5c:fa:7a: 8c:10:65:f4:91:ec:2b:32:b3:17:93:8b:26:62:2d:86:52:c1: 75:10:84:c9:31:f2:3d:ee:ea:2e:d0:50:48:9e:9e:cb:52:37: d7:46:b3:d7:63:87:7d:f3:52:4e:ed:05:09:8b:08:62:35:9b: 7f:f1:d3:6a:e5:a7:03:c2:57:01:73:ee:58:96:cb:23:ed:cc: 34:ec:71:ee:32:65:eb:89:9d:c0:69:11:22:a9:c0:25:b4:60: 8f:cc:1a:80:c1:73:35:7c:5a:26:19:9b:98:c8:27:c5:7b:f3: 00:08:ca:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSTGTwP5Wc76PkdB0D/So5pbBnC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNTEyMjIxNjM5MDRaFw0yNTEyMjMxOTUwMDRaMDMxMTAvBgNV BAMTKEQyRjg2OUVGOTJBQTRGMDg5QzRBQzEwODZEMTQxOEQ1RjI2NDRFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoc2lCUg1lq1zTJPoli3fHao2q c6iNVNUg0JztYtjj72EI3aVidga9fGnqNBrGJwS1MqWpcwkTKATh0IHDUMJkf+WQ 89HdFRHyYnZOk8EQ3VBAHrp/S0bdawee47CJeryhg4iNHQUI83IGSxum9OJ2LDzE Oc0ekb80OBGvDIDo1bpzoR3BhdsyJiZ4qkvc64zXXyc1I2TqXx9JaR5ugjNAo8dM Tc33VGsxj3uquAnbG/RKsfwdGm0PVjWFncIY2gsP/Ad6wm5/TqkTpN0BRuFCj3AU Zm5YdEOggh/00UVfck1IOppmpJre40rw9twsSVo02ThgY14h8gYRvTQ4xDLxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0vhp75KqTwicSsEIbRQY1fJkTkswHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATURU++zYWIQyRnq/PRHSummB2PlgLCc4oFsJ34q086jeKnwXa/nm+eVBFsUJ nmuCr1Q1fH4tU/B40c4UIDEzBqAKbXcrJBvJ7I+v+WMYVyWyPkF5iw+/0JrftpkS W7IUUPJhq4ODRcTN08LrckNuo4Tjp6nIlLFgMg4vBkffLNQiDkbvmKEUxBNBnHiJ XPp6jBBl9JHsKzKzF5OLJmIthlLBdRCEyTHyPe7qLtBQSJ6ey1I310az12OHffNS Tu0FCYsIYjWbf/HTauWnA8JXAXPuWJbLI+3MNOxx7jJl64mdwGkRIqnAJbRgj8wa gMFzNXxaJhmbmMgnxXvzAAjKuA== -----END CERTIFICATE-----Generated at Tue Dec 23 03:23:26 2025 by rpki-client