This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft File: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft (raw, json) Hash identifier: wasyi68ne+ZSD6GUtNysvs5ilfQTYCLYV14voSlJKyE= Subject key identifier: E6:76:51:77:CA:A9:84:D2:A2:D5:84:BB:28:59:00:A9:20:A2:61:7B Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F Certificate issuer: /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Certificate serial: 5B99B06FA1ECC2F8D58E80B56FFD31047DCABE6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft Manifest number: C1 Signing time: Fri 05 Dec 2025 22:47:49 +0000 Manifest this update: Fri 05 Dec 2025 22:42:49 +0000 Manifest next update: Sun 07 Dec 2025 00:37:49 +0000 Files and hashes: 1: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl (hash: D1K6HHECT26BiU23g5HTzSMhtUwQU8lO4Unbof1WQKk=) 2: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: iFMFtE0y8pLsQ/Cn9J7/m+D9lxMgkKqAt/nEyvjkWXM=) 3: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: i/+EMmHFMGqogYrZgaRhva6vg0d98QEkZjKWhP5qXto=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 00:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:99:b0:6f:a1:ec:c2:f8:d5:8e:80:b5:6f:fd:31:04:7d:ca:be:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Validity Not Before: Dec 5 22:42:49 2025 GMT Not After : Dec 7 00:37:49 2025 GMT Subject: CN=E6765177CAA984D2A2D584BB285900A920A2617B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:cf:d0:30:0c:5d:6a:69:96:dc:41:6a:46: 1e:d2:a8:da:05:43:2e:6d:18:db:56:a1:fc:6f:1a: 7d:db:e0:d3:78:89:58:88:a0:93:64:55:1a:16:49: 7c:31:92:3c:c7:41:26:23:ec:46:61:13:ad:41:7c: 8c:9b:8d:05:5d:72:74:7f:d5:19:5d:80:f5:34:8e: de:6a:1a:2f:4b:4a:ea:24:46:8e:3f:4a:3b:67:09: 2b:6a:dc:c3:12:cb:1f:d2:a1:09:e3:5c:5d:bc:87: 1b:3b:0b:86:e4:97:dd:ce:7d:95:4a:07:ec:6c:97: aa:dc:b5:34:d8:fd:20:20:d1:31:46:3c:3d:8c:7e: 98:69:e1:2f:18:d8:00:26:94:d5:b3:97:ca:f2:19: 46:50:a2:68:81:48:98:f6:fb:6b:ca:cc:4d:fe:83: 0a:e2:d0:af:d2:10:00:ba:13:ec:6b:41:fd:83:7f: 2e:df:a0:64:c3:7c:91:58:6f:b0:48:35:3e:4d:df: fc:d3:6a:41:80:fd:c7:e1:b7:dd:b6:50:5d:52:c2: c1:88:a5:e0:41:4c:a3:e9:d9:2d:46:4a:7d:fb:11: 78:d5:58:4d:8b:c7:7d:d4:7d:52:bb:6e:cc:ed:e9: 57:d5:56:66:8c:06:b9:e5:39:93:f9:b9:72:35:ef: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:76:51:77:CA:A9:84:D2:A2:D5:84:BB:28:59:00:A9:20:A2:61:7B X509v3 Authority Key Identifier: keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:73:4e:20:ee:f7:85:e1:dc:9b:a6:ff:b3:08:7c:5a:88:5e: 95:67:d6:0b:98:b2:e3:fe:52:64:ce:14:e1:f2:c8:d1:56:58: ac:32:fd:54:8a:35:77:d6:0f:60:74:f2:26:48:8a:71:46:81: fe:9a:3b:07:fe:8e:64:8f:79:b2:51:2a:a0:45:23:d0:54:21: e0:45:36:62:3d:a9:30:fa:4d:f1:13:73:ca:d5:e9:62:a6:0e: 88:8c:93:44:8c:7c:0c:5c:54:3d:5c:35:b8:7b:22:6e:c6:18: f0:a9:95:6d:4d:4a:cf:a9:ab:ce:87:fa:29:00:1c:2c:6d:01: a5:49:f3:35:33:7e:d5:53:3d:55:3e:13:6c:12:07:96:62:1c: bd:b7:1a:6c:07:9f:46:62:41:39:05:95:a1:c8:1b:1b:c0:91: f1:5f:72:9e:86:65:57:5b:c3:ac:88:0a:e3:0d:65:05:f1:6f: 80:e7:5f:72:bb:09:cc:9d:c2:f2:ae:73:2c:58:96:c5:95:90: e5:51:e9:5c:00:60:78:7b:75:99:a8:85:5c:73:c3:0a:6d:6d: dc:01:66:0e:a4:6b:67:c7:fe:47:a7:c0:42:d8:34:72:7a:80: a1:dd:0b:d7:d0:88:ed:42:31:d4:7f:e1:61:a3:65:ca:85:f6: 18:3f:ed:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW5mwb6HswvjVjoC1b/0xBH3KvmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRDI2QzVEQjFFRURDNzBBNjI3NTE2Q0MyMjQ2Rjc0 RTkzQkE2RjAeFw0yNTEyMDUyMjQyNDlaFw0yNTEyMDcwMDM3NDlaMDMxMTAvBgNV BAMTKEU2NzY1MTc3Q0FBOTg0RDJBMkQ1ODRCQjI4NTkwMEE5MjBBMjYxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClU8/QMAxdammW3EFqRh7SqNoF Qy5tGNtWofxvGn3b4NN4iViIoJNkVRoWSXwxkjzHQSYj7EZhE61BfIybjQVdcnR/ 1RldgPU0jt5qGi9LSuokRo4/SjtnCStq3MMSyx/SoQnjXF28hxs7C4bkl93OfZVK B+xsl6rctTTY/SAg0TFGPD2Mfphp4S8Y2AAmlNWzl8ryGUZQomiBSJj2+2vKzE3+ gwri0K/SEAC6E+xrQf2Dfy7foGTDfJFYb7BINT5N3/zTakGA/cfht922UF1SwsGI peBBTKPp2S1GSn37EXjVWE2Lx33UfVK7bszt6VfVVmaMBrnlOZP5uXI171EXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5nZRd8qphNKi1YS7KFkAqSCiYXswHwYDVR0j BBgwFoAUOv0mxdse7ccKYnUWzCJG906Tum8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZz dUMvMC8zQUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQyNkM1REIxRUVEQzcw QTYyNzUxNkNDMjI0NkY3NEU5M0JBNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZzdUMvMC8z QUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFHNOIO73heHcm6b/swh8WohelWfWC5iy4/5SZM4U4fLI0VZYrDL9VIo1d9YP YHTyJkiKcUaB/po7B/6OZI95slEqoEUj0FQh4EU2Yj2pMPpN8RNzytXpYqYOiIyT RIx8DFxUPVw1uHsibsYY8KmVbU1Kz6mrzof6KQAcLG0BpUnzNTN+1VM9VT4TbBIH lmIcvbcabAefRmJBOQWVocgbG8CR8V9ynoZlV1vDrIgK4w1lBfFvgOdfcrsJzJ3C 8q5zLFiWxZWQ5VHpXABgeHt1maiFXHPDCm1t3AFmDqRrZ8f+R6fAQtg0cnqAod0L 19CI7UIx1H/hYaNlyoX2GD/tww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:54:21 2025 by rpki-client