This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json) Hash identifier: Gs6L6zpG5uqy9AEbMUgOXPPxqWEpo1JOVVCZXMAqt5g= Subject key identifier: A0:B7:07:75:A4:3E:D6:A6:37:F5:D0:D9:7D:0B:87:53:69:AD:FF:E0 Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Certificate serial: 282E627BAA430A798FB8058375E5C51E977E615F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft Manifest number: 52 Signing time: Fri 05 Dec 2025 21:08:20 +0000 Manifest this update: Fri 05 Dec 2025 21:03:20 +0000 Manifest next update: Sat 06 Dec 2025 22:39:20 +0000 Files and hashes: 1: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: /34GxBmdgAvf0/AE/ozOxGfbpCTskz4b3i4IjCmU8t8=) 2: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=) 3: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2e:62:7b:aa:43:0a:79:8f:b8:05:83:75:e5:c5:1e:97:7e:61:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Validity Not Before: Dec 5 21:03:20 2025 GMT Not After : Dec 6 22:39:20 2025 GMT Subject: CN=A0B70775A43ED6A637F5D0D97D0B875369ADFFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:01:58:32:09:b9:9a:d8:c9:14:34:bb:54: c4:3b:aa:b6:28:c1:9d:4f:ae:a7:19:a0:b2:fc:c0: d3:fc:3b:45:0a:50:9e:33:0d:3b:06:1f:35:94:7a: c8:b1:64:3f:07:3a:c5:64:da:f2:14:18:04:36:73: ae:d2:b5:21:30:e8:2f:c7:a0:d7:1f:99:81:32:dc: 3e:b8:3c:41:63:b0:fe:10:e8:55:ef:b9:42:be:a9: 91:99:63:c3:96:f4:16:81:60:ab:27:a5:c1:c7:26: a6:c1:54:38:0d:01:fc:bf:94:5a:2f:a8:18:e7:d2: 0e:7a:a5:d5:15:0e:9c:46:98:fb:33:df:67:f2:b7: 33:26:6f:ec:39:1d:0c:3f:a3:12:d8:86:e9:2d:63: 13:5e:a6:8e:51:9e:d3:90:d6:3a:dd:36:a9:16:92: 9b:e5:26:ed:1e:c8:73:77:22:50:5c:52:33:79:c7: 78:12:58:08:ec:8c:2a:86:61:44:c6:1a:87:bb:3d: d8:8e:55:6d:39:e9:f9:9d:ed:24:68:00:62:16:ef: dd:54:54:9f:26:10:48:fc:af:86:94:40:ff:8f:1d: f8:45:c9:53:f3:20:7a:75:48:0f:d1:0f:e7:60:51: 32:1d:dc:b9:f4:7b:b6:e8:6f:1b:20:5a:e4:bc:e0: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:07:75:A4:3E:D6:A6:37:F5:D0:D9:7D:0B:87:53:69:AD:FF:E0 X509v3 Authority Key Identifier: keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:65:2a:3b:e1:e5:2e:eb:07:80:7b:86:c6:82:39:6d:d9:20: 69:68:ee:e8:31:9a:ba:ae:3e:3a:40:0c:13:ab:82:48:31:c1: 5c:53:9f:99:d0:70:08:3d:40:09:5a:7a:f9:41:3a:7b:0b:59: d0:0c:54:ba:c8:4c:f8:7a:c3:68:7f:87:e9:fb:e5:89:1f:85: fc:40:33:df:f0:6a:07:19:dd:00:b7:ea:14:2f:ef:9c:8f:26: e4:ae:60:58:56:0f:8a:3c:b9:8e:ea:69:e8:52:c8:ea:ec:7a: 6b:96:6d:e8:47:82:f7:8c:9c:ad:30:38:b8:64:6f:17:bc:c0: 6a:26:59:ad:c5:cd:fd:ec:db:73:26:e0:52:e8:87:26:e2:d1: e3:66:d1:71:fd:aa:b0:9d:31:51:e5:60:4a:f4:04:07:d1:b2: a1:3f:fa:4e:ef:58:11:f9:34:a7:47:14:1f:4b:49:2d:38:b4: f2:fa:25:5d:5e:86:e2:37:14:24:bb:fc:b7:3d:8d:96:14:91: fc:52:ca:01:95:9a:39:b7:95:08:3f:75:d1:51:64:cf:09:44: 77:70:47:3e:28:af:31:ca:0f:4e:44:94:b7:fd:03:7e:96:e0: d9:c6:fd:93:c4:1e:1f:23:0d:48:44:e8:ff:64:0e:78:5e:71: 21:fa:e0:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKC5ie6pDCnmPuAWDdeXFHpd+YV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjVEQkYyOThBQkFBNEY4MDlBNkZENzM1MkJFRjkx RkM3ODU4NTAeFw0yNTEyMDUyMTAzMjBaFw0yNTEyMDYyMjM5MjBaMDMxMTAvBgNV BAMTKEEwQjcwNzc1QTQzRUQ2QTYzN0Y1RDBEOTdEMEI4NzUzNjlBREZGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLwFYMgm5mtjJFDS7VMQ7qrYo wZ1PrqcZoLL8wNP8O0UKUJ4zDTsGHzWUesixZD8HOsVk2vIUGAQ2c67StSEw6C/H oNcfmYEy3D64PEFjsP4Q6FXvuUK+qZGZY8OW9BaBYKsnpcHHJqbBVDgNAfy/lFov qBjn0g56pdUVDpxGmPsz32fytzMmb+w5HQw/oxLYhuktYxNepo5RntOQ1jrdNqkW kpvlJu0eyHN3IlBcUjN5x3gSWAjsjCqGYUTGGoe7PdiOVW056fmd7SRoAGIW791U VJ8mEEj8r4aUQP+PHfhFyVPzIHp1SA/RD+dgUTId3Ln0e7bobxsgWuS84EXHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoLcHdaQ+1qY39dDZfQuHU2mt/+AwHwYDVR0j BBgwFoAUqjtdvymKuqT4Cab9c1K++R/HhYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVF dEovMC9BQTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I1REJGMjk4QUJBQTRG ODA5QTZGRDczNTJCRUY5MUZDNzg1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVFdEovMC9B QTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArWUqO+HlLusHgHuGxoI5bdkgaWju6DGauq4+OkAME6uCSDHBXFOfmdBwCD1A CVp6+UE6ewtZ0AxUushM+HrDaH+H6fvliR+F/EAz3/BqBxndALfqFC/vnI8m5K5g WFYPijy5jupp6FLI6ux6a5Zt6EeC94ycrTA4uGRvF7zAaiZZrcXN/ezbcybgUuiH JuLR42bRcf2qsJ0xUeVgSvQEB9GyoT/6Tu9YEfk0p0cUH0tJLTi08volXV6G4jcU JLv8tz2NlhSR/FLKAZWaObeVCD910VFkzwlEd3BHPiivMcoPTkSUt/0Dfpbg2cb9 k8QeHyMNSETo/2QOeF5xIfrgzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:53 2025 by rpki-client