This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft File: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft (raw, json) Hash identifier: vCLZbtxEoRZXo8jRe6UAaj1ebmZKNveQdWZXmbaNLxw= Subject key identifier: F8:B1:DE:50:1D:B1:B1:9D:36:33:9D:2C:82:C3:BF:FD:1C:60:18:3A Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F Certificate issuer: /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Certificate serial: 4FE94B81C4F179EE40FE8E88B7D3E31FB536C38A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft Manifest number: 0105 Signing time: Sun 25 Jan 2026 14:46:03 +0000 Manifest this update: Sun 25 Jan 2026 14:41:03 +0000 Manifest next update: Mon 26 Jan 2026 14:46:03 +0000 Files and hashes: 1: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: i/+EMmHFMGqogYrZgaRhva6vg0d98QEkZjKWhP5qXto=) 2: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl (hash: R80xROeq8D3ZEbtVXqODIaeTkFJ5ivSwmHVM79Q/8uU=) 3: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: iFMFtE0y8pLsQ/Cn9J7/m+D9lxMgkKqAt/nEyvjkWXM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 14:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e9:4b:81:c4:f1:79:ee:40:fe:8e:88:b7:d3:e3:1f:b5:36:c3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Validity Not Before: Jan 25 14:41:03 2026 GMT Not After : Jan 26 14:46:03 2026 GMT Subject: CN=F8B1DE501DB1B19D36339D2C82C3BFFD1C60183A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:bf:a1:63:15:04:4a:e8:30:9b:5f:86:b6: f1:45:76:45:aa:70:0b:2b:60:af:13:c2:43:38:40: 4b:18:e0:ef:0d:11:e2:59:8c:4f:84:f2:74:af:ce: 2b:3f:e9:cb:b2:b9:37:63:48:6d:eb:a4:8b:24:e9: 38:5b:49:f6:fa:a6:92:03:89:e5:29:bb:c4:f5:64: 52:06:7f:63:17:66:03:ab:e1:d8:95:6b:36:d9:53: 24:50:50:45:68:9a:2f:7b:f9:33:ed:ae:a9:fd:83: 74:e7:09:ac:30:06:fb:dc:63:ed:59:17:0e:27:b2: 78:15:22:aa:35:7d:b0:c4:24:b7:57:4a:af:1e:81: e9:08:d1:79:e6:80:af:c6:da:e4:a4:f9:66:b0:15: f0:cb:0e:52:12:6b:8c:c9:86:39:6c:27:45:24:83: 44:ea:94:31:b3:97:a6:d3:96:ce:b5:0d:67:ed:cc: 6b:ed:39:d9:92:c9:b3:9e:ba:35:d0:07:43:c8:b3: ef:fc:b6:d0:6d:a0:e0:a3:26:ff:04:75:f9:95:0f: ad:d5:f5:38:57:ab:c4:89:61:dd:87:a4:38:c0:3f: 71:d0:46:5c:74:ef:0c:d3:4a:20:b9:1d:06:fe:cd: e1:f7:7e:9f:dc:5f:62:16:51:51:4b:1e:06:1c:8f: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B1:DE:50:1D:B1:B1:9D:36:33:9D:2C:82:C3:BF:FD:1C:60:18:3A X509v3 Authority Key Identifier: keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f9:59:41:e3:ed:fe:fe:29:23:fe:84:4b:ed:54:97:12:61: 34:a6:11:93:1b:91:db:7e:05:4f:8d:58:91:bd:8f:53:a2:60: 32:a9:ae:fd:71:0f:ed:10:2a:5a:6f:5a:0f:9a:36:74:91:df: ab:0e:2d:a1:62:2f:35:3c:6c:29:21:79:fc:d6:6e:92:7e:46: 3c:68:5b:58:88:bd:98:3a:79:d4:86:28:70:a7:eb:d1:fb:d3: 93:2e:8a:dd:db:53:ac:42:dc:9a:19:a8:a4:66:5c:69:ea:17: aa:17:03:bf:55:58:f4:f8:96:cc:5c:f4:71:a3:25:97:b5:eb: 1c:35:07:a9:51:4d:57:2d:e2:3c:7b:a8:b5:f6:80:48:78:cd: a4:45:a2:bb:d9:cc:44:9a:4c:a8:e0:f7:76:a0:9f:74:a0:27: 50:cc:57:83:dd:29:ce:dd:ca:4f:c6:9f:1f:69:5c:f3:e8:06: c6:3d:11:e6:74:4c:7a:b9:29:a2:69:82:15:18:f3:23:29:b0: 39:e6:2a:a3:7b:89:e2:35:87:cb:98:d6:33:53:db:3b:fa:cf: e4:57:dc:58:a9:3a:d7:87:29:7c:27:e7:a8:29:3a:d4:b7:18: 28:06:32:3a:fc:99:ea:67:41:fe:ab:ad:da:9f:ab:bf:79:7a: 8a:55:d0:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT+lLgcTxee5A/o6It9PjH7U2w4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRDI2QzVEQjFFRURDNzBBNjI3NTE2Q0MyMjQ2Rjc0 RTkzQkE2RjAeFw0yNjAxMjUxNDQxMDNaFw0yNjAxMjYxNDQ2MDNaMDMxMTAvBgNV BAMTKEY4QjFERTUwMURCMUIxOUQzNjMzOUQyQzgyQzNCRkZEMUM2MDE4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cr+hYxUESugwm1+GtvFFdkWq cAsrYK8TwkM4QEsY4O8NEeJZjE+E8nSvzis/6cuyuTdjSG3rpIsk6ThbSfb6ppID ieUpu8T1ZFIGf2MXZgOr4diVazbZUyRQUEVomi97+TPtrqn9g3TnCawwBvvcY+1Z Fw4nsngVIqo1fbDEJLdXSq8egekI0XnmgK/G2uSk+WawFfDLDlISa4zJhjlsJ0Uk g0TqlDGzl6bTls61DWftzGvtOdmSybOeujXQB0PIs+/8ttBtoOCjJv8EdfmVD63V 9ThXq8SJYd2HpDjAP3HQRlx07wzTSiC5HQb+zeH3fp/cX2IWUVFLHgYcjxIjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+LHeUB2xsZ02M50sgsO//RxgGDowHwYDVR0j BBgwFoAUOv0mxdse7ccKYnUWzCJG906Tum8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZz dUMvMC8zQUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQyNkM1REIxRUVEQzcw QTYyNzUxNkNDMjI0NkY3NEU5M0JBNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZzdUMvMC8z QUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo/lZQePt/v4pI/6ES+1UlxJhNKYRkxuR234FT41Ykb2PU6JgMqmu/XEP7RAq Wm9aD5o2dJHfqw4toWIvNTxsKSF5/NZukn5GPGhbWIi9mDp51IYocKfr0fvTky6K 3dtTrELcmhmopGZcaeoXqhcDv1VY9PiWzFz0caMll7XrHDUHqVFNVy3iPHuotfaA SHjNpEWiu9nMRJpMqOD3dqCfdKAnUMxXg90pzt3KT8afH2lc8+gGxj0R5nRMerkp ommCFRjzIymwOeYqo3uJ4jWHy5jWM1PbO/rP5FfcWKk614cpfCfnqCk61LcYKAYy OvyZ6mdB/qut2p+rv3l6ilXQbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:16 2026 by rpki-client