This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: st7dsz1scJxqtaVrtWSwRNJaBKVF5kruEyNqyeQii9Y= Subject key identifier: 18:AE:A4:D5:1D:49:9C:10:96:89:7C:10:B9:85:90:CA:0D:E4:61:83 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 292FDB8E2FA48B51708E0AECEE06FF13D07EBB27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 0340 Signing time: Wed 24 Dec 2025 15:06:24 +0000 Manifest this update: Wed 24 Dec 2025 15:01:24 +0000 Manifest next update: Thu 25 Dec 2025 18:25:24 +0000 Files and hashes: 1: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: IHT+RS/iweARypGzyOff6XPhF2jKh7RDE/V2Q1hN5a8=) 2: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: Xe55nUyv1G9rTdN4F9JJyZ5S73rOm7YPFxNpYGBVW3I=) 3: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: ytHwFMpcYFTxgXnbcfVt9g69ZRjoMLwT9mD7PPtDLt0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 25 Dec 2025 18:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2f:db:8e:2f:a4:8b:51:70:8e:0a:ec:ee:06:ff:13:d0:7e:bb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Dec 24 15:01:24 2025 GMT Not After : Dec 25 18:25:24 2025 GMT Subject: CN=18AEA4D51D499C1096897C10B98590CA0DE46183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:a0:ca:31:2d:40:cd:53:e0:18:b7:de:a1: 57:b7:bf:ff:0c:1e:4d:5a:a9:51:4c:d7:59:97:b2: 77:41:18:26:35:90:ba:da:ac:35:72:28:a1:ce:05: 1c:c1:22:d1:3a:98:1a:3c:2b:04:14:c4:e4:9c:40: 62:ff:38:47:70:50:a8:0c:3f:3b:4f:ec:70:8d:72: 99:a3:85:8e:a4:c5:ef:fc:59:c3:da:2e:d6:80:3f: 1e:4e:a8:ae:ed:fa:17:9b:54:06:34:b5:93:09:b8: 3b:39:c6:90:09:47:7b:76:85:72:e7:a6:b0:be:f2: 45:72:29:ef:17:c1:ab:b7:81:b0:93:e6:2e:0b:e5: 24:72:bc:8e:a2:aa:13:96:a2:d4:1f:ca:49:58:d4: c1:9c:ed:2f:b9:dc:ea:56:bc:d1:f5:7f:8e:4f:49: 0c:c2:bf:6d:bd:e1:cc:4a:97:97:53:44:06:bf:ea: 62:0a:96:7f:0c:82:a1:1c:47:3c:14:7e:d6:f4:68: 5c:45:3f:0a:bb:51:95:4e:5f:3b:32:4e:13:dd:fb: 5e:04:b3:02:95:79:90:9d:7d:62:55:22:77:dd:bd: 52:25:aa:58:b3:f0:4c:e4:75:99:91:c1:55:4b:ae: 0f:f5:08:38:19:f3:71:e9:32:ea:29:4e:e9:83:5f: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:A4:D5:1D:49:9C:10:96:89:7C:10:B9:85:90:CA:0D:E4:61:83 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e3:24:51:9b:52:d3:cb:2d:8b:57:5d:c9:31:9c:da:31:3f: c6:33:2a:b8:5b:10:4a:47:cb:52:a2:27:24:a2:21:68:e7:3b: 8c:30:9d:74:c8:a0:a6:21:72:a3:f4:a8:85:53:b4:e0:84:7b: 9c:28:6f:65:9e:77:b8:c8:13:4c:6a:6b:65:4a:1a:d1:f3:d1: 66:90:41:31:a3:31:e9:d3:66:66:b2:2d:09:37:ac:a1:9f:c3: 64:21:74:a8:86:3e:ca:2d:50:33:e8:44:6e:2c:9f:8f:8c:4d: 98:2f:7f:f3:06:15:d5:c2:cf:fc:7f:e4:05:5b:d2:86:4b:cf: e9:c8:d2:1e:b1:3d:c5:29:6b:9d:b0:d2:32:60:49:65:e8:62: a5:62:3f:11:3c:dc:bf:c3:db:4b:5d:a7:6e:03:b3:1a:dd:6b: 06:9e:78:ae:e8:ea:95:fc:ab:2c:cf:97:84:cc:95:ad:df:43: 7c:25:87:67:62:95:aa:2c:d7:13:a5:44:d8:2f:89:1b:c9:74: 21:83:04:8d:ea:a3:df:cf:dd:2a:8d:df:38:60:29:01:fb:e2: 1d:69:43:f1:c5:4a:3b:a6:1b:7c:67:70:8d:23:7b:3e:fa:48: fe:1d:31:b0:40:e7:4c:09:46:74:8f:dc:7d:07:ef:7f:dd:3c: 65:0a:a2:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKS/bji+ki1Fwjgrs7gb/E9B+uycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTEyMjQxNTAxMjRaFw0yNTEyMjUxODI1MjRaMDMxMTAvBgNV BAMTKDE4QUVBNEQ1MUQ0OTlDMTA5Njg5N0MxMEI5ODU5MENBMERFNDYxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8KDKMS1AzVPgGLfeoVe3v/8M Hk1aqVFM11mXsndBGCY1kLrarDVyKKHOBRzBItE6mBo8KwQUxOScQGL/OEdwUKgM PztP7HCNcpmjhY6kxe/8WcPaLtaAPx5OqK7t+hebVAY0tZMJuDs5xpAJR3t2hXLn prC+8kVyKe8Xwau3gbCT5i4L5SRyvI6iqhOWotQfyklY1MGc7S+53OpWvNH1f45P SQzCv2294cxKl5dTRAa/6mIKln8MgqEcRzwUftb0aFxFPwq7UZVOXzsyThPd+14E swKVeZCdfWJVInfdvVIlqliz8EzkdZmRwVVLrg/1CDgZ83HpMuopTumDX2rLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGK6k1R1JnBCWiXwQuYWQyg3kYYMwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA+MkUZtS08sti1ddyTGc2jE/xjMquFsQSkfLUqInJKIhaOc7jDCddMigpiFy o/SohVO04IR7nChvZZ53uMgTTGprZUoa0fPRZpBBMaMx6dNmZrItCTesoZ/DZCF0 qIY+yi1QM+hEbiyfj4xNmC9/8wYV1cLP/H/kBVvShkvP6cjSHrE9xSlrnbDSMmBJ ZehipWI/ETzcv8PbS12nbgOzGt1rBp54rujqlfyrLM+XhMyVrd9DfCWHZ2KVqizX E6VE2C+JG8l0IYMEjeqj38/dKo3fOGApAfviHWlD8cVKO6YbfGdwjSN7PvpI/h0x sEDnTAlGdI/cfQfvf908ZQqipQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:48 2025 by rpki-client