This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: byy9KtasxGJGzbN3ZIftzcJKGhbP9riAB+y1mDbWX4o= Subject key identifier: 20:7A:94:C3:BB:70:2E:2C:B5:0B:6F:28:04:5A:DD:9D:8F:67:48:6D Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 51FF213AFFA7E7950022A8ABAF0B58A0AAC34156 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: AC Signing time: Sun 25 Jan 2026 21:30:25 +0000 Manifest this update: Sun 25 Jan 2026 21:25:25 +0000 Manifest next update: Mon 26 Jan 2026 23:47:25 +0000 Files and hashes: 1: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: guR8ytE2UhSjmal6ENHDeneR8Dxz8MDFTYw3hC1NOPE=) 2: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) 3: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 26 Jan 2026 23:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ff:21:3a:ff:a7:e7:95:00:22:a8:ab:af:0b:58:a0:aa:c3:41:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Jan 25 21:25:25 2026 GMT Not After : Jan 26 23:47:25 2026 GMT Subject: CN=207A94C3BB702E2CB50B6F28045ADD9D8F67486D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:80:ce:17:01:54:ea:bc:66:64:65:cf:f8: 75:6b:12:9a:da:91:a4:b4:79:54:11:3e:7c:ff:52: 19:cc:77:36:29:f8:d3:fb:6c:4c:77:33:83:5c:bd: 61:84:35:c5:6a:27:be:82:c6:cf:7b:6c:97:cd:b9: 74:27:6a:9b:0c:00:7f:33:c9:3d:84:0f:6c:2b:55: 03:1f:24:87:ab:e0:5b:13:18:37:ec:80:85:7a:22: dd:fd:eb:ef:b1:00:7e:d1:dd:1c:25:34:ed:ca:e6: 21:e7:d1:1e:e0:c2:bc:fe:dc:36:86:19:ad:37:c9: f6:f1:a5:e6:bf:30:2c:05:71:2e:ae:6d:ef:56:43: 08:23:ca:b1:71:e6:ab:98:15:68:e5:5e:ac:0d:38: 87:61:35:25:74:71:8f:96:9e:0c:8d:80:74:8e:0c: c0:aa:90:53:f9:39:3c:62:61:d8:83:a7:e2:3e:19: 00:21:7d:67:d3:e4:2f:00:89:c9:49:e1:1e:30:15: 29:a8:de:27:97:10:a6:da:2d:f8:c9:57:99:69:01: ff:25:62:14:77:92:c6:3b:3b:52:08:80:0c:11:c6: b1:fe:1e:5e:59:de:ed:e3:cc:d8:a4:09:c1:75:63: ac:22:b7:0d:3c:65:79:60:9e:f5:e7:a6:c5:d3:92: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:94:C3:BB:70:2E:2C:B5:0B:6F:28:04:5A:DD:9D:8F:67:48:6D X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d7:75:16:88:2d:8a:dc:e4:19:cc:cd:70:03:c4:46:6e:b0: 2d:19:2e:bd:61:ea:9a:3f:d3:d3:59:34:b4:49:f2:49:04:7c: 28:31:13:4a:d8:95:f5:39:b5:90:d2:a4:85:a5:c0:ba:b5:1b: 39:88:dc:9f:99:18:a6:f0:94:e8:32:b4:10:b2:1d:fc:02:4a: 97:97:84:b0:84:75:ea:77:6e:40:7e:f2:c4:db:7d:28:d0:b0: 52:81:0a:75:59:ee:6b:09:37:da:f9:cd:2a:b6:58:d9:c1:91: 0b:a5:08:f7:8d:f3:9c:61:8f:2e:ec:94:4f:b0:99:02:83:19: f5:ea:06:c1:81:12:b9:18:55:8e:c2:29:75:ca:70:e2:4c:25: 21:5e:77:e3:c1:09:8a:90:cd:8f:17:de:4d:af:a0:2a:df:6e: 02:3c:f2:62:27:d1:47:78:d8:db:9c:4c:63:d5:45:65:fb:63: 10:af:25:00:fc:95:e7:e5:e5:d4:10:f2:ec:f8:ff:94:58:85: bc:8d:74:6e:46:72:12:9d:f4:19:20:17:d0:ca:7b:a0:23:43: 55:ac:30:f7:00:d3:8c:fb:a4:df:6e:bc:47:4d:b8:ac:72:ef: 0d:ac:07:3e:f5:aa:fe:d0:2f:f9:3c:39:84:79:08:13:83:5b: fe:9e:d7:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUf8hOv+n55UAIqirrwtYoKrDQVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNjAxMjUyMTI1MjVaFw0yNjAxMjYyMzQ3MjVaMDMxMTAvBgNV BAMTKDIwN0E5NEMzQkI3MDJFMkNCNTBCNkYyODA0NUFERDlEOEY2NzQ4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcYDOFwFU6rxmZGXP+HVrEpra kaS0eVQRPnz/UhnMdzYp+NP7bEx3M4NcvWGENcVqJ76Cxs97bJfNuXQnapsMAH8z yT2ED2wrVQMfJIer4FsTGDfsgIV6It396++xAH7R3RwlNO3K5iHn0R7gwrz+3DaG Ga03yfbxpea/MCwFcS6ube9WQwgjyrFx5quYFWjlXqwNOIdhNSV0cY+WngyNgHSO DMCqkFP5OTxiYdiDp+I+GQAhfWfT5C8AiclJ4R4wFSmo3ieXEKbaLfjJV5lpAf8l YhR3ksY7O1IIgAwRxrH+Hl5Z3u3jzNikCcF1Y6witw08ZXlgnvXnpsXTkvqFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIHqUw7twLiy1C28oBFrdnY9nSG0wHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAddd1FogtitzkGczNcAPERm6wLRkuvWHqmj/T01k0tEnySQR8KDETStiV9Tm1 kNKkhaXAurUbOYjcn5kYpvCU6DK0ELId/AJKl5eEsIR16nduQH7yxNt9KNCwUoEK dVnuawk32vnNKrZY2cGRC6UI943znGGPLuyUT7CZAoMZ9eoGwYESuRhVjsIpdcpw 4kwlIV5348EJipDNjxfeTa+gKt9uAjzyYifRR3jY25xMY9VFZftjEK8lAPyV5+Xl 1BDy7Pj/lFiFvI10bkZyEp30GSAX0Mp7oCNDVaww9wDTjPuk3268R024rHLvDawH PvWq/tAv+Tw5hHkIE4Nb/p7XEA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:48 2026 by rpki-client