This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: GOHQIIeIPdYgCFBbrIogEhsT5tekAmFdyuNQyvtvmh0= Subject key identifier: B3:DB:F7:EE:0C:DC:A4:DF:3D:86:EE:B8:0B:CC:1E:B3:3A:20:28:54 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 7BDB9F86418EB35F52A842780B7051E692096185 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 01B4 Signing time: Fri 02 Jan 2026 09:45:29 +0000 Manifest this update: Fri 02 Jan 2026 09:40:29 +0000 Manifest next update: Sat 03 Jan 2026 12:18:29 +0000 Files and hashes: 1: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: 8PnIQmxhwUOBfKWm7jPRexbSuvE6YlA5tzw5TSO+SWc=) 2: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 3: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) 4: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 Jan 2026 12:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:db:9f:86:41:8e:b3:5f:52:a8:42:78:0b:70:51:e6:92:09:61:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Jan 2 09:40:29 2026 GMT Not After : Jan 3 12:18:29 2026 GMT Subject: CN=B3DBF7EE0CDCA4DF3D86EEB80BCC1EB33A202854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:7e:50:6e:11:af:07:cf:4b:81:eb:86:8c: 31:56:dc:55:a0:50:15:dd:5f:a9:f9:e9:6f:21:57: c8:23:06:d2:18:9d:a3:a7:66:9a:50:02:71:97:9e: e9:e2:57:6a:de:af:f9:bc:4d:48:fc:3c:44:63:cc: 55:2f:5d:17:36:8a:fe:6f:32:28:d7:ef:4b:20:36: 69:70:68:95:d0:c1:95:8f:7b:e6:c9:ac:c9:36:88: b5:d5:fc:ee:db:46:4b:3c:de:69:9b:86:50:e5:a1: 8e:76:07:51:59:fa:de:06:cb:9f:e2:e3:e5:30:fc: bb:f7:9b:6f:16:8c:4e:2c:69:95:1c:0f:d8:c7:46: 9c:f8:a8:29:9d:0a:aa:af:f5:5b:f4:82:26:58:28: ac:36:b3:c3:f0:6f:8d:51:9a:ab:46:10:1e:7c:5a: 3a:48:13:9a:40:f3:25:e6:95:60:d7:90:ba:ea:9d: 3d:6e:51:58:76:96:35:fc:e9:df:5f:97:2c:a8:75: bc:6a:8c:00:f4:4e:06:e8:67:3c:5a:52:a6:07:08: 76:07:1e:70:53:a8:46:18:42:24:bf:af:84:07:46: f1:d5:85:98:8b:2a:ca:c5:5c:9b:14:64:2d:ee:36: 8c:d2:94:b8:2f:80:d0:d5:2d:c6:31:a2:30:2e:cc: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DB:F7:EE:0C:DC:A4:DF:3D:86:EE:B8:0B:CC:1E:B3:3A:20:28:54 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6d:a0:fd:cd:7a:18:6b:f1:55:a5:2e:df:e2:3d:92:0f:c0: 36:97:8f:6d:33:94:42:51:53:bf:5e:4a:fd:3a:19:0b:85:6f: 4a:de:dc:95:6d:c1:dc:d9:10:8e:90:46:e8:14:a3:74:35:56: 0d:d4:82:6a:b1:ca:f6:6b:51:84:5a:5c:51:6f:5a:b2:59:eb: 35:13:c9:59:1f:7c:3d:7c:a3:8e:4b:fe:dd:36:24:34:e1:af: c6:c2:ba:d1:52:03:d2:40:e8:fd:50:0f:c0:fa:50:38:cc:f1: a2:37:85:f0:7d:1a:e6:52:22:37:13:02:8f:28:54:cb:2e:98: cd:2b:c8:6d:c7:ae:43:0b:20:0c:61:60:9a:5a:79:66:a9:a7: 45:66:bc:5f:1e:07:00:c1:e8:ac:14:37:c1:3b:db:31:4e:52: 3c:a9:b3:41:bc:50:9d:70:6d:0e:8e:69:cf:f5:a4:74:46:b5: 53:b4:9a:f7:16:f3:63:26:9b:4b:9e:76:df:dc:b1:ce:e9:ed: dd:69:b2:0a:b6:da:ba:c1:bb:3b:bf:f7:c4:e7:1c:56:33:de: 3f:cc:7b:b4:50:d2:bc:be:95:c4:69:83:20:d8:87:d6:ae:7c: 16:42:d6:ec:da:92:99:0a:0d:cd:d9:92:79:b9:69:d0:ce:7c: 8a:30:a7:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe9ufhkGOs19SqEJ4C3BR5pIJYYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNjAxMDIwOTQwMjlaFw0yNjAxMDMxMjE4MjlaMDMxMTAvBgNV BAMTKEIzREJGN0VFMENEQ0E0REYzRDg2RUVCODBCQ0MxRUIzM0EyMDI4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbH5QbhGvB89LgeuGjDFW3FWg UBXdX6n56W8hV8gjBtIYnaOnZppQAnGXnuniV2rer/m8TUj8PERjzFUvXRc2iv5v MijX70sgNmlwaJXQwZWPe+bJrMk2iLXV/O7bRks83mmbhlDloY52B1FZ+t4Gy5/i 4+Uw/Lv3m28WjE4saZUcD9jHRpz4qCmdCqqv9Vv0giZYKKw2s8Pwb41RmqtGEB58 WjpIE5pA8yXmlWDXkLrqnT1uUVh2ljX86d9flyyodbxqjAD0TgboZzxaUqYHCHYH HnBTqEYYQiS/r4QHRvHVhZiLKsrFXJsUZC3uNozSlLgvgNDVLcYxojAuzMjTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs9v37gzcpN89hu64C8weszogKFQwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfW2g/c16GGvxVaUu3+I9kg/ANpePbTOUQlFTv15K/ToZC4VvSt7clW3B3NkQ jpBG6BSjdDVWDdSCarHK9mtRhFpcUW9aslnrNRPJWR98PXyjjkv+3TYkNOGvxsK6 0VID0kDo/VAPwPpQOMzxojeF8H0a5lIiNxMCjyhUyy6YzSvIbceuQwsgDGFgmlp5 ZqmnRWa8Xx4HAMHorBQ3wTvbMU5SPKmzQbxQnXBtDo5pz/WkdEa1U7Sa9xbzYyab S55239yxzunt3WmyCrbausG7O7/3xOccVjPeP8x7tFDSvL6VxGmDINiH1q58FkLW 7NqSmQoNzdmSeblp0M58ijCn3A== -----END CERTIFICATE-----Generated at Fri Jan 2 17:11:55 2026 by rpki-client