This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft File: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft (raw, json) Hash identifier: ZpVkc54fjH0K7YxILqfQJACAYXevtEfKZ7ChOFWpbws= Subject key identifier: F2:A2:9B:D7:F4:BC:65:F7:F9:9B:1B:64:A6:0A:F1:D1:1F:05:87:69 Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F Certificate issuer: /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Certificate serial: 06D1BB56E973335AD1C41CAE73C76CC169B58107 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft Manifest number: D4 Signing time: Sat 20 Dec 2025 02:32:33 +0000 Manifest this update: Sat 20 Dec 2025 02:27:33 +0000 Manifest next update: Sun 21 Dec 2025 05:08:33 +0000 Files and hashes: 1: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: iFMFtE0y8pLsQ/Cn9J7/m+D9lxMgkKqAt/nEyvjkWXM=) 2: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl (hash: GtlXYLXOlUmV5q5BqwdUFr3qZjtp71HGcr1zEgJpzCo=) 3: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: i/+EMmHFMGqogYrZgaRhva6vg0d98QEkZjKWhP5qXto=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 05:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d1:bb:56:e9:73:33:5a:d1:c4:1c:ae:73:c7:6c:c1:69:b5:81:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Validity Not Before: Dec 20 02:27:33 2025 GMT Not After : Dec 21 05:08:33 2025 GMT Subject: CN=F2A29BD7F4BC65F7F99B1B64A60AF1D11F058769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:6f:0a:bf:2f:48:7b:50:18:11:9d:ec:81: 03:06:5c:c2:b8:84:ef:e5:1d:4d:1e:96:76:44:8c: 2b:84:34:03:1e:a9:a1:33:e5:f5:db:19:8b:44:15: 37:db:10:0f:88:26:db:42:01:5d:2a:21:b3:3a:8f: 40:97:06:0e:d4:7d:90:35:3d:8b:12:80:9a:13:d2: 2e:71:70:05:3c:2e:b3:e4:a9:fe:05:46:3d:f4:d8: bd:67:89:c3:17:be:0c:85:f3:5f:38:6e:67:94:36: 5e:7d:91:1c:b2:d4:18:ae:71:87:cb:6d:7c:84:7a: 37:3d:ed:91:4f:b7:da:65:86:14:18:1a:21:de:88: 60:2a:aa:a7:90:92:d5:cb:ec:d5:64:6f:72:71:17: 24:97:86:90:b0:85:f7:2a:0e:a1:c5:f3:59:8e:13: c6:3e:d1:e2:2a:a1:d4:9b:ff:12:85:e4:92:db:77: 49:de:12:3d:c8:36:bb:41:e9:68:6b:a4:b5:ec:df: 78:a0:46:ba:83:e3:96:13:16:c0:58:ba:17:3e:6a: 87:90:40:b5:e4:0a:77:80:d7:ac:84:36:f6:76:b8: 40:ad:06:38:01:cf:ae:10:f5:c2:53:e0:9b:03:29: b7:98:20:da:00:14:1a:a4:d9:73:be:7b:9b:66:e1: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:9B:D7:F4:BC:65:F7:F9:9B:1B:64:A6:0A:F1:D1:1F:05:87:69 X509v3 Authority Key Identifier: keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fe:74:c4:ad:6c:6b:ea:d0:22:60:42:ef:2f:a0:41:3b:a9: 2e:0f:2c:a0:55:6e:d0:7e:9e:cd:9c:3c:42:9f:21:fd:db:30: 77:34:51:76:c5:a0:7d:67:91:7a:cc:eb:be:7a:ea:1b:b7:3e: 02:7b:59:22:b9:70:28:29:7e:e7:c9:e1:a1:e2:97:92:b9:3d: e3:c5:6a:07:d5:c6:ef:6d:bc:59:6e:b1:29:e1:a7:28:ca:f0: 52:4e:cc:d6:75:1f:3d:c8:99:c3:55:f6:8b:b5:3b:2a:de:b7: 7b:71:f4:d9:23:7e:6e:6f:cc:84:33:43:a2:7f:d0:cc:25:9d: ba:80:d7:86:ec:5b:f9:b6:46:e6:a2:3d:88:c9:1a:7e:d2:68: 0c:0e:5a:f7:50:c6:ac:1f:32:8e:96:b9:f8:05:29:9f:49:d2: c1:79:2b:b1:3c:34:84:d3:f2:88:ef:54:d6:16:8d:3e:6f:03: 19:c6:c7:4f:47:45:8c:e4:19:c2:18:d1:2f:98:2d:41:d1:ad: 30:b8:14:b8:8b:2e:a8:33:eb:d0:99:f3:9d:0e:cb:20:cf:cd: 57:f8:e3:c7:2d:6e:59:c1:2b:e7:0d:9c:85:b6:82:b9:78:80: eb:6c:e8:26:96:60:0a:39:d5:ec:57:ab:c4:19:9b:0c:0f:70: f0:e4:11:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBtG7VulzM1rRxByuc8dswWm1gQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRDI2QzVEQjFFRURDNzBBNjI3NTE2Q0MyMjQ2Rjc0 RTkzQkE2RjAeFw0yNTEyMjAwMjI3MzNaFw0yNTEyMjEwNTA4MzNaMDMxMTAvBgNV BAMTKEYyQTI5QkQ3RjRCQzY1RjdGOTlCMUI2NEE2MEFGMUQxMUYwNTg3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvT28Kvy9Ie1AYEZ3sgQMGXMK4 hO/lHU0elnZEjCuENAMeqaEz5fXbGYtEFTfbEA+IJttCAV0qIbM6j0CXBg7UfZA1 PYsSgJoT0i5xcAU8LrPkqf4FRj302L1nicMXvgyF8184bmeUNl59kRyy1BiucYfL bXyEejc97ZFPt9plhhQYGiHeiGAqqqeQktXL7NVkb3JxFySXhpCwhfcqDqHF81mO E8Y+0eIqodSb/xKF5JLbd0neEj3INrtB6WhrpLXs33igRrqD45YTFsBYuhc+aoeQ QLXkCneA16yENvZ2uECtBjgBz64Q9cJT4JsDKbeYINoAFBqk2XO+e5tm4ZzVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8qKb1/S8Zff5mxtkpgrx0R8Fh2kwHwYDVR0j BBgwFoAUOv0mxdse7ccKYnUWzCJG906Tum8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZz dUMvMC8zQUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQyNkM1REIxRUVEQzcw QTYyNzUxNkNDMjI0NkY3NEU5M0JBNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZzdUMvMC8z QUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfv50xK1sa+rQImBC7y+gQTupLg8soFVu0H6ezZw8Qp8h/dswdzRRdsWgfWeR eszrvnrqG7c+AntZIrlwKCl+58nhoeKXkrk948VqB9XG7228WW6xKeGnKMrwUk7M 1nUfPciZw1X2i7U7Kt63e3H02SN+bm/MhDNDon/QzCWduoDXhuxb+bZG5qI9iMka ftJoDA5a91DGrB8yjpa5+AUpn0nSwXkrsTw0hNPyiO9U1haNPm8DGcbHT0dFjOQZ whjRL5gtQdGtMLgUuIsuqDPr0JnznQ7LIM/NV/jjxy1uWcEr5w2chbaCuXiA62zo JpZgCjnV7FerxBmbDA9w8OQRlg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:00:37 2025 by rpki-client