This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft File: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft (raw, json) Hash identifier: FSsgG/l+D54fYIs4e1LcFyDeuprdPX2tdb8rrsOR3aI= Subject key identifier: 92:07:9B:58:67:C3:C1:82:BB:63:C2:39:E8:34:7B:42:B2:20:E3:71 Authority key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 Certificate issuer: /CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Certificate serial: 58034C180F608851F99AE31F9CD88D079EEFECBC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer Subject info access: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft Manifest number: 3C Signing time: Fri 05 Dec 2025 17:03:48 +0000 Manifest this update: Fri 05 Dec 2025 16:58:48 +0000 Manifest next update: Sat 06 Dec 2025 19:45:48 +0000 Files and hashes: 1: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl (hash: 6vAB5XgdQRVPrPcdvwejB+tkZah3izd3PiwcRVACk6I=) 2: 3230302e32332e3131382e302f32342d3234203d3e20323635343439.roa (hash: u0emmR/IrSgxU4xnl7NMDDuW67Pa/pzAKWRg8XfABIw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 19:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:03:4c:18:0f:60:88:51:f9:9a:e3:1f:9c:d8:8d:07:9e:ef:ec:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Validity Not Before: Dec 5 16:58:48 2025 GMT Not After : Dec 6 19:45:48 2025 GMT Subject: CN=92079B5867C3C182BB63C239E8347B42B220E371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2e:6a:14:52:4c:77:71:4d:d0:91:74:9b:d0: ff:e4:08:c0:e6:fd:05:7b:6b:23:8b:8e:58:c7:35: 8d:ec:ed:55:9b:6e:1f:e6:66:9e:67:e7:99:73:f9: e7:7d:cc:10:b2:4c:68:18:19:d6:72:f2:7b:b5:94: c4:3f:db:e7:7c:e7:03:d1:ec:45:59:bb:2c:53:de: de:44:b7:a3:2f:a9:5c:ef:e4:6d:e0:67:41:a7:37: 1b:22:41:60:c4:88:d0:fc:ce:10:ea:ac:53:c8:cd: b1:3e:32:08:8a:1a:2b:e4:61:75:6c:cd:dc:d3:dd: a9:68:a8:28:7c:ee:19:5c:4b:0c:29:3b:96:3a:2d: 52:a9:6d:52:47:f6:53:72:56:d2:29:ba:40:07:be: 21:9c:51:bc:06:e4:92:34:76:de:49:4e:0b:cb:2b: 0a:10:23:21:b3:0b:ba:59:a2:70:a1:98:65:5d:47: 85:5d:28:fb:e4:3c:41:43:db:5a:9b:a4:a2:93:2f: bd:17:ec:2a:89:72:ee:4a:ef:3a:e8:d8:39:2b:bf: 39:45:89:3d:f4:95:f8:c9:15:db:61:3b:36:5f:bb: 3c:98:09:09:17:6c:38:20:e4:8b:72:be:73:5f:c9: 27:3d:b1:bf:52:57:97:2d:4b:de:5d:f0:6c:45:50: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:07:9B:58:67:C3:C1:82:BB:63:C2:39:E8:34:7B:42:B2:20:E3:71 X509v3 Authority Key Identifier: keyid:2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:95:66:28:ca:bc:a7:0c:3c:17:d3:e7:d9:4b:d5:82:a8:a5: c2:a7:b3:fd:28:f9:c4:1e:4c:d9:24:1c:f2:68:85:3f:9a:1f: bd:7e:a0:68:73:88:f3:7c:f7:42:6c:1d:9d:d0:35:2c:4d:6e: d8:b5:90:95:bd:cc:10:4c:89:50:36:af:74:a0:81:e1:94:24: 0c:11:a2:bc:87:e4:84:cf:20:f3:81:95:26:d3:41:6c:f5:ba: 9b:71:f6:ff:0b:13:d0:b2:ea:a3:81:c8:0f:07:46:46:4a:95: 23:e4:0e:d9:b8:0f:48:71:cc:3e:9e:01:17:57:c8:85:21:78: 25:6a:7a:38:26:b5:c8:33:6f:86:36:2b:c2:95:49:ac:d0:ec: 7a:22:f5:51:67:80:85:8d:71:bc:a7:f0:90:55:2d:d8:d0:f3: 66:34:02:d8:f0:c5:db:9a:19:77:e2:db:58:d2:4e:3d:e6:01: 26:0b:6f:fb:86:f8:f2:ca:c2:d7:f7:23:59:6a:95:82:ec:e1: 46:28:f8:b7:3c:de:6f:ef:61:af:62:2d:69:07:02:d3:bb:65: 3c:76:72:6d:9b:6d:a5:4e:6c:4a:3d:f1:f6:13:f9:86:ed:7a: e5:29:ee:ad:3e:62:8b:85:ec:6e:23:68:04:32:a4:74:c9:8d: 0f:44:51:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWANMGA9giFH5muMfnNiNB57v7LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGNEVFOUMxRkFGMTlDQkQ0NENDQjZDNEY4MDNCNTRE QTkzM0U4ODAeFw0yNTEyMDUxNjU4NDhaFw0yNTEyMDYxOTQ1NDhaMDMxMTAvBgNV BAMTKDkyMDc5QjU4NjdDM0MxODJCQjYzQzIzOUU4MzQ3QjQyQjIyMEUzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3LmoUUkx3cU3QkXSb0P/kCMDm /QV7ayOLjljHNY3s7VWbbh/mZp5n55lz+ed9zBCyTGgYGdZy8nu1lMQ/2+d85wPR 7EVZuyxT3t5Et6MvqVzv5G3gZ0GnNxsiQWDEiND8zhDqrFPIzbE+MgiKGivkYXVs zdzT3aloqCh87hlcSwwpO5Y6LVKpbVJH9lNyVtIpukAHviGcUbwG5JI0dt5JTgvL KwoQIyGzC7pZonChmGVdR4VdKPvkPEFD21qbpKKTL70X7CqJcu5K7zro2DkrvzlF iT30lfjJFdthOzZfuzyYCQkXbDgg5ItyvnNfySc9sb9SV5ctS95d8GxFUDAdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkgebWGfDwYK7Y8I56DR7QrIg43EwHwYDVR0j BBgwFoAUL/TunB+vGcvUTMtsT4A7VNqTPogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2lo S1AvMC8yRkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRjRFRTlDMUZBRjE5Q0JE NDRDQ0I2QzRGODAzQjU0REE5MzNFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2loS1AvMC8y RkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJVmKMq8pww8F9Pn2UvVgqilwqez/Sj5xB5M2SQc8miFP5ofvX6gaHOI83z3 QmwdndA1LE1u2LWQlb3MEEyJUDavdKCB4ZQkDBGivIfkhM8g84GVJtNBbPW6m3H2 /wsT0LLqo4HIDwdGRkqVI+QO2bgPSHHMPp4BF1fIhSF4JWp6OCa1yDNvhjYrwpVJ rNDseiL1UWeAhY1xvKfwkFUt2NDzZjQC2PDF25oZd+LbWNJOPeYBJgtv+4b48srC 1/cjWWqVguzhRij4tzzeb+9hr2ItaQcC07tlPHZybZttpU5sSj3x9hP5hu165Snu rT5ii4XsbiNoBDKkdMmND0RRpA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:08:45 2025 by rpki-client