This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: SsdSd/Hkpg0dVKe2QirX+OXbGFMoLVyvoubFcKItyBc= Subject key identifier: DC:64:5F:A9:64:C3:C0:FC:BE:E5:C9:96:CB:D1:09:30:0F:C0:C1:21 Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 627D15C7FBFBEAD7C9FDDAE991ABD8B9C7FEA978 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: 68 Signing time: Fri 05 Dec 2025 21:34:57 +0000 Manifest this update: Fri 05 Dec 2025 21:29:57 +0000 Manifest next update: Sat 06 Dec 2025 21:53:57 +0000 Files and hashes: 1: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: L15Hn1Jumd0mVrYa7EQT6qzKns5TpxAhARFc2IgzlHY=) 2: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) 3: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7d:15:c7:fb:fb:ea:d7:c9:fd:da:e9:91:ab:d8:b9:c7:fe:a9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Dec 5 21:29:57 2025 GMT Not After : Dec 6 21:53:57 2025 GMT Subject: CN=DC645FA964C3C0FCBEE5C996CBD109300FC0C121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:cf:e0:31:0c:2c:51:7c:ed:42:e6:fe:44: 83:9c:b5:a5:ee:37:95:04:2c:aa:4e:c6:66:08:1c: 41:6a:c2:92:7a:6a:db:ca:e2:28:ad:f3:f6:42:00: ed:01:cf:40:78:74:91:52:1f:b2:00:4f:d4:0a:9b: ab:4d:ff:25:40:2c:06:e2:8c:6b:bd:75:ad:b3:d0: 04:bc:f2:e6:23:0e:d2:e9:cc:98:62:ac:a7:a9:e8: 64:af:b7:9f:58:e1:90:86:20:87:d0:e5:fa:46:e4: e8:f8:cf:e0:5e:68:ed:95:6b:28:f6:a7:b0:5f:90: 88:61:27:d6:2d:b8:6c:02:bb:ed:8f:f6:8e:bc:92: 7c:bc:42:dc:8b:87:c0:16:d9:1a:9f:9e:bf:23:66: 3e:8c:c0:bf:96:8c:bc:97:86:cc:f6:28:65:29:26: ad:74:7d:37:77:67:8f:9e:3d:1c:7f:9f:7c:55:26: 6c:1f:b5:f1:f4:4c:b4:12:8f:23:47:1a:ca:7f:e4: 3e:4a:3a:44:33:95:d1:0d:92:77:21:42:45:8a:4a: 14:98:2e:3a:fc:b1:b5:7b:70:68:75:f7:c6:57:c1: c5:42:af:ab:fe:2b:1a:4b:0f:14:7c:82:38:c6:ab: 99:58:56:ad:0e:43:be:69:51:ad:70:81:cd:48:97: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:64:5F:A9:64:C3:C0:FC:BE:E5:C9:96:CB:D1:09:30:0F:C0:C1:21 X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5c:44:af:78:0d:bd:12:ba:97:4f:31:06:1a:3c:81:a2:bb: 48:fb:1f:8c:53:9a:4c:61:1b:6c:8c:63:dc:46:1c:0f:1d:b3: 80:d2:c6:96:8e:01:fa:17:c7:83:79:c7:89:87:f0:ef:83:60: 17:cb:ed:e5:96:5e:f7:7c:11:cb:64:58:94:c3:b5:55:e7:a9: c3:c9:04:91:26:e5:30:4f:8c:3a:f9:fe:49:09:0e:60:ca:0d: 7c:a0:06:08:1e:cc:0d:10:24:32:cf:f1:d7:69:61:60:9e:45: 3a:d8:c2:f4:86:97:6c:20:91:de:a7:47:8a:d9:89:99:29:a8: 0a:ba:ec:62:ec:e0:93:9f:2b:02:d3:e8:64:6e:10:b6:57:fd: 5d:4a:d8:ef:77:f7:f9:fe:f4:2c:44:3b:bf:43:d1:35:09:2b: 52:b0:3c:a2:0e:de:25:4e:5b:e3:d0:43:f0:4c:78:22:a7:e4: bf:c4:18:1a:99:1d:ab:d9:2f:ad:8f:6b:ef:76:98:60:78:ae: 54:28:f5:bc:d7:0b:01:f0:9a:14:12:f8:98:6c:e5:93:48:71: d0:21:8a:1a:15:e9:d8:c6:19:36:46:3b:0c:4d:5f:28:b7:a8: 55:5c:fc:c6:02:7a:c0:5b:70:5f:fb:a8:8c:3c:16:eb:5b:84: c8:a4:15:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYn0Vx/v76tfJ/drpkavYucf+qXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNTEyMDUyMTI5NTdaFw0yNTEyMDYyMTUzNTdaMDMxMTAvBgNV BAMTKERDNjQ1RkE5NjRDM0MwRkNCRUU1Qzk5NkNCRDEwOTMwMEZDMEMxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9s/gMQwsUXztQub+RIOctaXu N5UELKpOxmYIHEFqwpJ6atvK4iit8/ZCAO0Bz0B4dJFSH7IAT9QKm6tN/yVALAbi jGu9da2z0AS88uYjDtLpzJhirKep6GSvt59Y4ZCGIIfQ5fpG5Oj4z+BeaO2Vayj2 p7BfkIhhJ9YtuGwCu+2P9o68kny8QtyLh8AW2Rqfnr8jZj6MwL+WjLyXhsz2KGUp Jq10fTd3Z4+ePRx/n3xVJmwftfH0TLQSjyNHGsp/5D5KOkQzldENknchQkWKShSY Ljr8sbV7cGh198ZXwcVCr6v+KxpLDxR8gjjGq5lYVq0OQ75pUa1wgc1Il0pBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3GRfqWTDwPy+5cmWy9EJMA/AwSEwHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKFxEr3gNvRK6l08xBho8gaK7SPsfjFOaTGEbbIxj3EYcDx2zgNLGlo4B+hfH g3nHiYfw74NgF8vt5ZZe93wRy2RYlMO1Veepw8kEkSblME+MOvn+SQkOYMoNfKAG CB7MDRAkMs/x12lhYJ5FOtjC9IaXbCCR3qdHitmJmSmoCrrsYuzgk58rAtPoZG4Q tlf9XUrY73f3+f70LEQ7v0PRNQkrUrA8og7eJU5b49BD8Ex4Iqfkv8QYGpkdq9kv rY9r73aYYHiuVCj1vNcLAfCaFBL4mGzlk0hx0CGKGhXp2MYZNkY7DE1fKLeoVVz8 xgJ6wFtwX/uojDwW61uEyKQV/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:50 2025 by rpki-client