This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: RctAjBTZrcVUDoR8Hi79AgzVgD2KIIlrHrLmUQqcwVY= Subject key identifier: 9A:23:66:64:DF:C3:8E:5D:0F:7B:E4:F9:22:23:5F:E8:66:CE:72:4F Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 4373B5BC49B0FBCA5F25B0280668BA57CD73024A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 0343 Signing time: Tue 30 Dec 2025 13:17:08 +0000 Manifest this update: Tue 30 Dec 2025 13:12:08 +0000 Manifest next update: Wed 31 Dec 2025 13:58:08 +0000 Files and hashes: 1: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) 2: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: csjTmAoLoJ6n86+PN8OR04YANL2z99lWX6DTotH+t+w=) 3: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 31 Dec 2025 13:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:73:b5:bc:49:b0:fb:ca:5f:25:b0:28:06:68:ba:57:cd:73:02:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Dec 30 13:12:08 2025 GMT Not After : Dec 31 13:58:08 2025 GMT Subject: CN=9A236664DFC38E5D0F7BE4F922235FE866CE724F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:44:bf:85:b1:25:13:b4:8e:7e:1d:d9:95: d3:f8:e4:21:be:6d:49:bb:d9:99:27:0c:b4:e5:28: 05:8c:a2:08:73:02:f8:f4:de:a6:f6:12:d6:a4:1a: 45:cc:c5:bc:c2:03:64:f2:9d:29:e6:13:a3:14:32: c2:aa:3c:48:58:08:25:42:8a:83:71:c2:39:91:50: cd:2f:c4:14:3d:28:57:cf:70:7a:5e:89:3f:9e:1a: b8:cc:7c:ec:39:c8:bc:06:3b:3c:20:bd:1c:c7:9e: 23:7a:1a:c7:5c:02:44:bd:28:2c:c8:ab:4a:e5:fe: 22:bc:26:92:cb:12:16:8e:e6:9d:67:d1:89:6d:56: 67:ce:70:4e:fa:a3:3f:cb:12:b5:42:cf:0c:5a:9d: 6e:94:ca:59:b0:03:5f:87:48:76:e4:27:fa:9c:1d: e8:39:8d:09:3f:79:1c:9d:88:18:27:a0:55:e2:80: c2:7a:2c:85:6e:23:bc:5a:d4:c1:66:ba:80:f1:0d: ae:fb:02:53:23:61:16:59:99:fe:cd:35:ad:68:c3: df:ae:3c:17:b6:64:f0:09:3c:5a:b6:59:e7:73:a5: 08:af:e4:c1:79:d2:e3:ad:7b:f5:63:ae:55:42:0c: a6:84:ae:65:b6:5f:5f:f7:1a:15:f6:f3:f4:5d:a1: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:23:66:64:DF:C3:8E:5D:0F:7B:E4:F9:22:23:5F:E8:66:CE:72:4F X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ba:a5:16:c1:7e:15:63:95:4f:02:61:6e:b7:30:1d:34:6b: fd:35:b8:e0:ca:18:aa:72:e8:16:73:34:30:99:d0:94:6e:ba: 52:56:20:14:73:02:19:10:fc:a4:9d:83:5e:1a:14:54:88:46: d7:a8:07:d9:a6:e9:18:d0:f1:b9:e7:92:53:25:34:8b:51:e9: 6d:64:a5:a5:03:78:b3:a9:c4:05:81:6e:db:5e:4f:37:03:c1: a1:47:14:5c:d2:6c:7e:a7:c3:7b:9b:23:55:86:f9:76:91:2b: 2b:14:d9:e0:61:06:30:5a:0f:8e:51:a7:a8:95:74:20:07:27: 79:0e:05:f1:db:bf:cb:21:c0:e5:b9:63:ee:43:3d:8b:19:10: 2f:58:09:44:63:21:a0:6f:23:af:34:3a:0f:9a:9e:dd:d7:88: 88:8a:70:02:08:25:1c:48:46:73:1f:75:f8:e1:fd:a8:36:f6: 08:d9:ca:1d:80:71:c0:1f:64:51:4f:f7:8b:36:a4:45:31:b5: 9c:54:55:a6:77:52:b3:71:65:43:31:12:05:2a:b7:20:94:93: 64:fd:27:64:07:b9:93:3b:2e:dc:17:a1:fa:ef:a4:fa:9a:82: c2:35:13:62:56:86:18:c0:56:fc:80:ac:96:45:80:0c:14:d1: 8f:35:28:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ3O1vEmw+8pfJbAoBmi6V81zAkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTEyMzAxMzEyMDhaFw0yNTEyMzExMzU4MDhaMDMxMTAvBgNV BAMTKDlBMjM2NjY0REZDMzhFNUQwRjdCRTRGOTIyMjM1RkU4NjZDRTcyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEES/hbElE7SOfh3ZldP45CG+ bUm72ZknDLTlKAWMoghzAvj03qb2EtakGkXMxbzCA2TynSnmE6MUMsKqPEhYCCVC ioNxwjmRUM0vxBQ9KFfPcHpeiT+eGrjMfOw5yLwGOzwgvRzHniN6GsdcAkS9KCzI q0rl/iK8JpLLEhaO5p1n0YltVmfOcE76oz/LErVCzwxanW6UylmwA1+HSHbkJ/qc Heg5jQk/eRydiBgnoFXigMJ6LIVuI7xa1MFmuoDxDa77AlMjYRZZmf7NNa1ow9+u PBe2ZPAJPFq2WedzpQiv5MF50uOte/VjrlVCDKaErmW2X1/3GhX28/RdoVbhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmiNmZN/Djl0Pe+T5IiNf6GbOck8wHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAorqlFsF+FWOVTwJhbrcwHTRr/TW44MoYqnLoFnM0MJnQlG66UlYgFHMCGRD8 pJ2DXhoUVIhG16gH2abpGNDxueeSUyU0i1HpbWSlpQN4s6nEBYFu215PNwPBoUcU XNJsfqfDe5sjVYb5dpErKxTZ4GEGMFoPjlGnqJV0IAcneQ4F8du/yyHA5blj7kM9 ixkQL1gJRGMhoG8jrzQ6D5qe3deIiIpwAgglHEhGcx91+OH9qDb2CNnKHYBxwB9k UU/3izakRTG1nFRVpndSs3FlQzESBSq3IJSTZP0nZAe5kzsu3Beh+u+k+pqCwjUT YlaGGMBW/ICslkWADBTRjzUo2g== -----END CERTIFICATE-----Generated at Wed Dec 31 02:05:39 2025 by rpki-client