This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: 1svIHwnqieQRuFr4sGZNnWNuFVjWkKQ8zQ3/sOKeUPc= Subject key identifier: D1:9F:06:59:FF:FA:2A:25:B1:48:36:EC:B6:18:13:24:74:1F:2F:14 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 05B36BB7C2CB0BF4715833E68718E708A5A305A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 01FA Signing time: Fri 02 Jan 2026 10:52:31 +0000 Manifest this update: Fri 02 Jan 2026 10:47:31 +0000 Manifest next update: Sat 03 Jan 2026 13:02:31 +0000 Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: cX/SMmQG5g009lSi8nYvfKl+8jeiOUpXGPMZ0tpzeY0=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs=) 3: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 Jan 2026 13:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b3:6b:b7:c2:cb:0b:f4:71:58:33:e6:87:18:e7:08:a5:a3:05:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Jan 2 10:47:31 2026 GMT Not After : Jan 3 13:02:31 2026 GMT Subject: CN=D19F0659FFFA2A25B14836ECB6181324741F2F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:a4:3b:7f:1d:9a:ac:be:4c:21:20:b1:a8: 94:4f:e5:a8:dc:0e:5a:64:50:f6:67:cd:74:c2:d5: a2:e8:b6:25:77:4d:09:74:82:b6:40:4a:9e:0b:ab: 94:75:0e:13:25:13:22:44:7f:a9:bb:b4:77:91:70: 9c:a9:e7:49:b4:ba:94:e5:c5:f0:d4:87:5a:e9:41: 7d:f6:5f:af:e4:23:a2:ad:ee:ff:aa:e5:40:d9:cc: 94:d3:4e:9f:8f:ce:39:29:e1:05:92:50:6b:b0:5f: b0:4d:39:e2:18:73:58:59:3e:f0:08:86:ed:fb:7f: e3:2c:29:4a:f4:cc:59:90:94:a4:9b:f2:eb:c3:e4: 7d:68:dd:e9:72:c2:1c:ff:e7:04:db:12:17:cc:24: 96:55:35:c8:70:02:bf:b0:9c:e6:6d:3a:72:69:20: 52:43:0d:c3:86:d3:2d:87:8f:61:b4:fd:ad:4b:5a: 3f:01:5e:cd:5e:f9:10:25:d9:d4:d0:d9:fa:4d:a3: a1:87:8a:9c:bc:f0:51:11:8d:71:a5:6f:64:7d:15: 5e:97:cd:e5:72:9b:a9:6c:b6:69:5d:0c:63:10:df: f2:35:af:d3:13:ac:f4:ff:3b:fd:e4:7d:59:eb:bd: 62:da:4c:ba:57:99:85:60:80:8d:c1:30:54:58:1c: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9F:06:59:FF:FA:2A:25:B1:48:36:EC:B6:18:13:24:74:1F:2F:14 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a1:54:ea:d1:a3:30:62:19:82:34:f9:8c:11:0c:6b:b5:99: 25:07:ec:5a:d6:e7:45:e1:33:dd:94:30:4c:81:a8:ea:d1:79: fb:94:6f:c0:d6:b5:6c:23:2b:74:c2:5d:68:1d:a8:ff:56:8d: 48:15:76:35:40:e0:7d:84:4f:ed:bd:69:4f:62:dc:f5:a2:a7: 91:f9:dd:0f:0a:e9:81:53:74:c0:f8:4c:37:23:f5:3e:e9:9e: bb:17:19:ba:74:73:0b:95:9e:be:76:31:9d:36:2a:99:3f:da: 30:6d:e6:c9:07:cc:84:aa:4d:17:be:61:97:6f:09:e8:e0:44: 8f:69:c6:fb:49:47:79:02:78:e5:f9:00:7e:7c:43:b7:a7:b7: db:a9:77:28:be:96:bf:d9:27:af:49:d1:76:8d:07:8b:75:6c: 7d:cb:10:ca:2c:9a:86:ee:89:ff:30:ed:a4:20:e7:69:21:6a: 56:1d:d9:8b:87:41:15:ea:26:ee:d4:8a:6e:b7:b4:07:99:d2: 46:a0:4c:95:b1:5d:5e:9b:c1:45:1a:d0:69:9c:24:b8:18:82: 97:0d:57:04:8b:36:dd:74:47:59:de:be:2c:fe:c9:bd:a8:76: eb:83:b4:90:75:77:c4:ae:78:bf:33:49:21:58:53:fa:11:e8: c1:29:f4:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBbNrt8LLC/RxWDPmhxjnCKWjBaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNjAxMDIxMDQ3MzFaFw0yNjAxMDMxMzAyMzFaMDMxMTAvBgNV BAMTKEQxOUYwNjU5RkZGQTJBMjVCMTQ4MzZFQ0I2MTgxMzI0NzQxRjJGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzi6Q7fx2arL5MISCxqJRP5ajc DlpkUPZnzXTC1aLotiV3TQl0grZASp4Lq5R1DhMlEyJEf6m7tHeRcJyp50m0upTl xfDUh1rpQX32X6/kI6Kt7v+q5UDZzJTTTp+Pzjkp4QWSUGuwX7BNOeIYc1hZPvAI hu37f+MsKUr0zFmQlKSb8uvD5H1o3elywhz/5wTbEhfMJJZVNchwAr+wnOZtOnJp IFJDDcOG0y2Hj2G0/a1LWj8BXs1e+RAl2dTQ2fpNo6GHipy88FERjXGlb2R9FV6X zeVym6lstmldDGMQ3/I1r9MTrPT/O/3kfVnrvWLaTLpXmYVggI3BMFRYHOuPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0Z8GWf/6KiWxSDbsthgTJHQfLxQwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ6FU6tGjMGIZgjT5jBEMa7WZJQfsWtbnReEz3ZQwTIGo6tF5+5RvwNa1bCMr dMJdaB2o/1aNSBV2NUDgfYRP7b1pT2Lc9aKnkfndDwrpgVN0wPhMNyP1PumeuxcZ unRzC5WevnYxnTYqmT/aMG3myQfMhKpNF75hl28J6OBEj2nG+0lHeQJ45fkAfnxD t6e326l3KL6Wv9knr0nRdo0Hi3VsfcsQyiyahu6J/zDtpCDnaSFqVh3Zi4dBFeom 7tSKbre0B5nSRqBMlbFdXpvBRRrQaZwkuBiClw1XBIs23XRHWd6+LP7Jvah264O0 kHV3xK54vzNJIVhT+hHowSn0xw== -----END CERTIFICATE-----Generated at Fri Jan 2 17:12:20 2026 by rpki-client