This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft File: AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft (raw, json) Hash identifier: kRYGOZl0y+Act+RjTPbszMABQuhik5wdCfBZ5TvG6BI= Subject key identifier: 4E:F6:20:9B:5B:19:C2:4E:A4:28:22:41:30:B1:12:37:35:59:80:FA Authority key identifier: AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6 Certificate issuer: /CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6 Certificate serial: 3D707C07BE639CA221D9DD987515B45D1D1F5114 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer Subject info access: rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft Manifest number: 01AC Signing time: Thu 01 Jan 2026 06:08:29 +0000 Manifest this update: Thu 01 Jan 2026 06:03:29 +0000 Manifest next update: Fri 02 Jan 2026 09:10:29 +0000 Files and hashes: 1: 34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa (hash: Vsd5QRJjvgtpOCJxhMq6knZBYnpYpxgSgkoH9SpVQ/o=) 2: 323830343a376533343a3a2f33322d3438203d3e20323731363039.roa (hash: Wwy+zWxgBmVi9CrHFR2rVa+/PBim1JXtm5poprqwBgQ=) 3: AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl (hash: OV3z9cL70wxOgts0MraCHAdwK9OhYcLIA79iHB9YSg4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 Jan 2026 09:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:70:7c:07:be:63:9c:a2:21:d9:dd:98:75:15:b4:5d:1d:1f:51:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6 Validity Not Before: Jan 1 06:03:29 2026 GMT Not After : Jan 2 09:10:29 2026 GMT Subject: CN=4EF6209B5B19C24EA428224130B11237355980FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:86:46:ca:1c:a1:13:ce:63:6e:ab:d8:03:c7: 9f:a2:aa:c4:3c:bf:d5:d6:17:9b:4b:1c:a9:85:02: 57:67:12:aa:b9:67:76:f7:95:1b:2b:81:15:56:b5: 79:3b:8d:a6:0b:b7:df:6f:77:64:e1:b1:60:4f:80: 99:d4:d7:9c:08:70:f0:d2:d7:f2:ba:f7:28:7c:c3: a1:90:ed:9c:0e:02:c6:7a:83:81:5a:1f:90:df:96: 55:a3:52:76:19:c8:47:9a:c5:60:94:2f:a8:16:10: 2f:5c:1e:a6:01:1d:59:10:74:d9:7b:02:32:52:d2: dd:ca:04:90:16:d0:46:5e:f7:d4:12:96:08:b6:12: 5c:b0:43:b4:f8:5d:4c:67:1c:ca:05:8c:b6:16:87: 69:14:d3:af:20:21:ed:14:f7:7e:3e:e1:d4:5b:39: c8:ea:28:a2:9d:7b:ee:f6:40:ed:cf:7e:86:0b:85: c4:ac:8a:44:cf:df:cc:73:95:eb:22:48:d6:5d:be: c6:b5:f5:37:58:42:51:76:e4:12:95:26:a9:e2:80: d8:2d:b8:c4:e9:cd:69:5d:aa:66:b7:01:cd:4a:e2: 68:5f:19:49:82:c2:f3:b8:94:d0:0f:8d:ad:ba:2c: 9b:6f:0a:a1:63:a5:44:a8:34:4b:db:fb:20:72:67: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F6:20:9B:5B:19:C2:4E:A4:28:22:41:30:B1:12:37:35:59:80:FA X509v3 Authority Key Identifier: keyid:AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ce:cc:83:17:f5:55:1a:49:ed:2a:e4:1b:0c:db:a6:6d:e0: 12:da:65:8f:80:5a:f7:d7:44:01:fb:39:30:cb:13:53:f0:14: f1:89:cb:3a:2a:bb:4e:67:c0:df:5a:b8:94:2b:5f:d1:4a:41: 5a:38:7c:80:3f:a5:4e:31:a8:ac:27:9d:f6:74:63:c2:0c:db: d5:aa:21:f0:bb:db:12:73:04:b2:b1:08:4e:88:65:c2:0d:ca: 92:41:dc:bf:10:8d:b6:75:4e:f3:4f:7a:fb:df:0a:4f:43:4d: a6:8f:f9:a1:1c:9e:44:83:30:1f:45:bd:8c:5e:9b:3f:b4:0a: e7:16:0c:d7:e3:ed:e6:56:13:e6:74:f4:c0:5f:34:83:60:60: cf:ea:bc:e2:f8:0a:59:d0:09:1e:a1:24:76:da:dc:8d:b8:c6: 2b:8a:6d:33:1e:d1:e1:7c:4a:37:3b:35:d1:db:b1:bb:08:ba: 9b:51:88:a9:6c:fa:d8:2a:ac:40:fe:a8:a8:79:3a:be:06:3e: b3:46:3d:8b:ee:65:58:3b:6f:89:6c:4a:b9:5f:40:cb:85:88: 17:49:62:4d:75:02:4a:1d:ec:d3:30:0c:49:fc:c5:b9:72:eb: 52:d5:7e:3c:e2:0f:f7:03:77:85:c3:9e:b8:c7:d9:4f:ed:2c: f0:5a:29:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPXB8B75jnKIh2d2YdRW0XR0fURQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2OUY5NzdBOEZCNUYxQ0E5NjcwNUQ2MkVCRUVBQ0U0 NkJGRDlENjAeFw0yNjAxMDEwNjAzMjlaFw0yNjAxMDIwOTEwMjlaMDMxMTAvBgNV BAMTKDRFRjYyMDlCNUIxOUMyNEVBNDI4MjI0MTMwQjExMjM3MzU1OTgwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhkbKHKETzmNuq9gDx5+iqsQ8 v9XWF5tLHKmFAldnEqq5Z3b3lRsrgRVWtXk7jaYLt99vd2ThsWBPgJnU15wIcPDS 1/K69yh8w6GQ7ZwOAsZ6g4FaH5DfllWjUnYZyEeaxWCUL6gWEC9cHqYBHVkQdNl7 AjJS0t3KBJAW0EZe99QSlgi2ElywQ7T4XUxnHMoFjLYWh2kU068gIe0U934+4dRb OcjqKKKde+72QO3PfoYLhcSsikTP38xzlesiSNZdvsa19TdYQlF25BKVJqnigNgt uMTpzWldqma3Ac1K4mhfGUmCwvO4lNAPja26LJtvCqFjpUSoNEvb+yByZ5v/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTvYgm1sZwk6kKCJBMLESNzVZgPowHwYDVR0j BBgwFoAUr2n5d6j7XxypZwXWLr7qzka/2dYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHoyNUI2MUtva1MxZVZXVU1UeEJIRlB1NWU0c055QWdBTkRiZmd1VXVL dGovMC9BRjY5Rjk3N0E4RkI1RjFDQTk2NzA1RDYyRUJFRUFDRTQ2QkZEOUQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNjlGOTc3QThGQjVGMUNB OTY3MDVENjJFQkVFQUNFNDZCRkQ5RDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHoyNUI2MUtva1MxZVZXVU1UeEJIRlB1NWU0c055QWdBTkRiZmd1VXVLdGovMC9B RjY5Rjk3N0E4RkI1RjFDQTk2NzA1RDYyRUJFRUFDRTQ2QkZEOUQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXs7Mgxf1VRpJ7SrkGwzbpm3gEtplj4Ba99dEAfs5MMsTU/AU8YnLOiq7TmfA 31q4lCtf0UpBWjh8gD+lTjGorCed9nRjwgzb1aoh8LvbEnMEsrEITohlwg3KkkHc vxCNtnVO8096+98KT0NNpo/5oRyeRIMwH0W9jF6bP7QK5xYM1+Pt5lYT5nT0wF80 g2Bgz+q84vgKWdAJHqEkdtrcjbjGK4ptMx7R4XxKNzs10duxuwi6m1GIqWz62Cqs QP6oqHk6vgY+s0Y9i+5lWDtviWxKuV9Ay4WIF0liTXUCSh3s0zAMSfzFuXLrUtV+ POIP9wN3hcOeuMfZT+0s8Fopzg== -----END CERTIFICATE-----Generated at Thu Jan 1 19:10:33 2026 by rpki-client