This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: 2Lo+Sbs16nKlcaJLOLj+f94ocRLOUg3etW3Kp4Cxsgw= Subject key identifier: 43:8E:B1:02:C3:B7:9B:FE:EA:E6:F6:06:82:E3:0D:3B:F9:55:B8:8F Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: 0E8F549BAEE7AD61939BB5A5B5AD30A6406DF771 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 032F Signing time: Sat 06 Dec 2025 16:02:22 +0000 Manifest this update: Sat 06 Dec 2025 15:57:22 +0000 Manifest next update: Sun 07 Dec 2025 17:52:22 +0000 Files and hashes: 1: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=) 2: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: nmE7CtibAVKsV+xqMGkfGkIedeeGpOscoNKca2Lg9xQ=) 3: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 17:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8f:54:9b:ae:e7:ad:61:93:9b:b5:a5:b5:ad:30:a6:40:6d:f7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Dec 6 15:57:22 2025 GMT Not After : Dec 7 17:52:22 2025 GMT Subject: CN=438EB102C3B79BFEEAE6F60682E30D3BF955B88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:7f:4b:3d:ab:73:a6:87:4e:ed:aa:9f:a5: 9f:07:9e:7d:d1:95:ef:0d:12:2d:ec:87:ac:a0:02: c3:12:e2:93:17:f0:49:85:76:a3:f5:1b:46:85:cb: 02:44:b4:b3:c0:b6:63:7e:a3:01:31:40:31:0e:e8: 2c:5f:21:b8:37:56:cf:ad:11:46:1f:12:9b:11:1d: 91:bd:07:74:5e:68:06:fe:9a:33:9b:a5:6e:eb:ce: 7c:0b:ae:32:19:5f:1c:ab:58:98:0c:c8:88:42:1c: 16:a8:f5:5a:90:0b:e8:d5:2a:fb:a9:d8:f9:30:31: 77:9f:24:d1:ae:f9:3e:3d:eb:54:1b:bc:39:1f:fa: 85:15:b6:a2:8f:72:fd:90:62:c2:9a:4a:fd:90:d1: c9:75:ae:d3:50:e8:fa:08:a6:d0:7e:2c:b5:f8:a7: f2:9b:0f:6c:b3:c8:40:f8:ea:0d:df:7d:b7:f8:47: 81:7a:6d:81:ef:a2:96:6c:af:cb:dc:07:fe:1e:c5: e4:93:a6:12:53:6c:4f:2d:56:69:93:27:18:7a:7d: 6d:54:d6:27:ab:17:47:32:11:0d:40:73:2e:e0:b6: 30:c5:0d:fa:a3:47:bd:d2:60:4b:c4:b1:2f:1a:cc: 70:57:9c:12:6d:7f:f1:40:5a:19:f2:e9:1c:dc:1e: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8E:B1:02:C3:B7:9B:FE:EA:E6:F6:06:82:E3:0D:3B:F9:55:B8:8F X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b7:74:93:1e:97:2f:0c:3d:73:0d:59:38:49:85:99:69:9f: b0:0b:c8:dd:5e:60:4e:8a:89:f7:4b:f5:f6:ed:ee:5b:b7:a7: 91:6f:b6:97:4b:11:69:b0:50:9b:ba:9b:4f:86:56:bd:0f:89: 33:55:b3:ad:b3:9e:56:64:e8:7c:a0:c3:49:e5:74:25:79:b2: 48:67:67:2c:f4:d9:ab:18:84:f8:95:ba:1a:f7:9d:9f:fd:61: 8f:fb:fe:31:bd:85:f4:96:c2:b4:b6:7d:62:53:69:27:40:82: cc:69:0a:31:ba:8f:5c:b1:a4:b4:34:68:77:eb:1c:63:45:92: 44:2e:f1:a8:56:b6:49:d0:d7:7b:3b:74:90:73:ca:6e:6b:eb: 62:12:11:45:6e:88:ff:2d:f6:95:af:9d:59:42:f2:d5:a1:0d: 7f:f3:5e:63:14:d3:34:76:78:47:a2:6f:31:e0:96:b3:5b:9c: fe:a4:8c:5b:08:1a:fb:f9:26:43:bc:d1:04:e9:e0:2c:58:dd: d3:28:7a:53:d3:17:36:79:32:11:72:c9:95:cb:dc:95:da:5f: 07:e7:31:2b:42:90:8d:a5:3b:42:82:2b:88:0e:3b:fb:9d:f7: 7d:95:87:59:57:65:8a:ef:22:f5:24:a1:5e:cb:e8:7a:71:7e: 7f:c1:17:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDo9Um67nrWGTm7Wlta0wpkBt93EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNTEyMDYxNTU3MjJaFw0yNTEyMDcxNzUyMjJaMDMxMTAvBgNV BAMTKDQzOEVCMTAyQzNCNzlCRkVFQUU2RjYwNjgyRTMwRDNCRjk1NUI4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pn9LPatzpodO7aqfpZ8Hnn3R le8NEi3sh6ygAsMS4pMX8EmFdqP1G0aFywJEtLPAtmN+owExQDEO6CxfIbg3Vs+t EUYfEpsRHZG9B3ReaAb+mjObpW7rznwLrjIZXxyrWJgMyIhCHBao9VqQC+jVKvup 2PkwMXefJNGu+T4961QbvDkf+oUVtqKPcv2QYsKaSv2Q0cl1rtNQ6PoIptB+LLX4 p/KbD2yzyED46g3ffbf4R4F6bYHvopZsr8vcB/4exeSTphJTbE8tVmmTJxh6fW1U 1ierF0cyEQ1Acy7gtjDFDfqjR73SYEvEsS8azHBXnBJtf/FAWhny6RzcHsV9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ46xAsO3m/7q5vYGguMNO/lVuI8wHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWbd0kx6XLww9cw1ZOEmFmWmfsAvI3V5gToqJ90v19u3uW7enkW+2l0sRabBQ m7qbT4ZWvQ+JM1WzrbOeVmTofKDDSeV0JXmySGdnLPTZqxiE+JW6Gvedn/1hj/v+ Mb2F9JbCtLZ9YlNpJ0CCzGkKMbqPXLGktDRod+scY0WSRC7xqFa2SdDXezt0kHPK bmvrYhIRRW6I/y32la+dWULy1aENf/NeYxTTNHZ4R6JvMeCWs1uc/qSMWwga+/km Q7zRBOngLFjd0yh6U9MXNnkyEXLJlcvcldpfB+cxK0KQjaU7QoIriA47+533fZWH WVdliu8i9SShXsvoenF+f8EX9g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:21 2025 by rpki-client