This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: UJQpRTeq2hHU1wx8QFfblXKAfw0SxZbg0ERjIahgT8s= Subject key identifier: 68:91:6F:5A:11:AA:98:14:84:11:03:FD:0A:04:19:86:C0:B2:F0:27 Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: 24BC56BC827AC416B4569FBBF718BBED75AC12B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 0341 Signing time: Sat 20 Dec 2025 09:23:02 +0000 Manifest this update: Sat 20 Dec 2025 09:18:02 +0000 Manifest next update: Sun 21 Dec 2025 11:19:02 +0000 Files and hashes: 1: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: imZyXIYOs9Lf3k+w92mxDKZBf6KtgbaOxQluOTu1Yzk=) 2: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=) 3: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 11:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bc:56:bc:82:7a:c4:16:b4:56:9f:bb:f7:18:bb:ed:75:ac:12:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Dec 20 09:18:02 2025 GMT Not After : Dec 21 11:19:02 2025 GMT Subject: CN=68916F5A11AA9814841103FD0A041986C0B2F027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:49:0b:19:66:2e:a8:42:74:c5:91:00:77: 12:e7:a3:d2:71:d4:0f:17:25:66:89:9e:e6:a3:07: 0a:32:b8:90:d8:f9:28:21:ad:5b:88:9a:5f:c5:08: 7a:d8:4e:6e:f6:07:28:60:29:d2:89:5b:ed:6f:32: 35:8b:ef:ce:97:ec:91:1e:97:3e:91:66:cc:98:1a: 49:9b:12:f8:4b:12:c6:96:fe:7d:5f:b2:66:9e:83: 37:3c:42:ed:d2:94:d2:16:b2:78:ae:0e:06:64:9e: 88:33:78:e0:0b:36:5a:e3:54:99:d3:2f:d1:30:b2: b0:55:a5:03:27:b6:63:1f:3e:5e:cc:8e:d0:be:8e: e5:b9:42:7d:bd:c3:25:d7:fe:7f:4a:5b:95:ea:9c: ae:69:37:6e:2d:07:e5:cd:0c:63:16:13:7c:cc:f5: aa:91:bc:5b:b8:18:4d:76:9e:50:9c:7f:53:33:0c: 33:26:11:1a:3f:0a:c8:b2:2e:81:2d:b8:35:03:3b: f4:e0:de:c4:c3:1d:5e:b7:00:2d:ab:09:27:28:74: 84:3b:f3:4c:91:fd:3f:96:82:82:d1:ed:83:06:50: 53:ea:20:ad:c4:7b:ab:f2:6d:d1:cb:21:93:b3:4a: b4:f7:32:64:58:93:08:86:5c:3a:87:dc:ee:5a:2f: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:6F:5A:11:AA:98:14:84:11:03:FD:0A:04:19:86:C0:B2:F0:27 X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:88:89:69:83:4f:4d:4c:8d:bb:44:4e:c9:17:32:f4:a5:07: 00:be:37:5a:58:6d:fe:11:30:7e:6d:85:7a:de:f8:a5:d9:5a: 59:3e:f2:39:47:93:b2:d6:eb:b2:f9:ca:bd:34:80:43:b3:8f: f0:09:46:96:e6:52:e4:c4:6a:5c:ab:d1:09:43:3f:51:f8:2d: 3d:2d:67:a5:f0:14:97:e9:de:23:d1:0a:79:7c:9d:ab:2d:5f: a7:de:42:b9:5d:95:c7:7a:74:e1:96:38:b0:ee:4e:0a:28:ee: 0b:ce:2e:f9:d5:f3:06:98:f8:1e:be:86:9f:12:9a:32:05:37: ae:98:83:8f:07:d1:52:57:9d:05:55:b3:22:90:a3:b2:7d:b1: c0:6b:88:6b:14:0e:5c:1f:6b:d5:0a:1f:c9:b0:f8:1b:ba:29: 2d:5f:7d:db:7f:5c:21:2b:9d:33:c4:e6:09:4a:26:95:35:2c: 9a:42:ab:e2:a9:34:5c:89:28:01:d3:04:28:4d:ae:81:c9:1c: 15:0f:a4:77:15:94:bd:f5:f8:1f:d6:98:f7:e6:00:f7:74:08: d4:fe:e4:32:90:93:6d:ed:f3:91:c6:f3:e2:6a:12:c7:52:95: c8:c2:c3:cb:df:92:3a:31:0a:dd:bd:db:c0:f3:9e:62:6a:3f: ad:08:39:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJLxWvIJ6xBa0Vp+79xi77XWsErQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNTEyMjAwOTE4MDJaFw0yNTEyMjExMTE5MDJaMDMxMTAvBgNV BAMTKDY4OTE2RjVBMTFBQTk4MTQ4NDExMDNGRDBBMDQxOTg2QzBCMkYwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66kkLGWYuqEJ0xZEAdxLno9Jx 1A8XJWaJnuajBwoyuJDY+SghrVuIml/FCHrYTm72ByhgKdKJW+1vMjWL786X7JEe lz6RZsyYGkmbEvhLEsaW/n1fsmaegzc8Qu3SlNIWsniuDgZknogzeOALNlrjVJnT L9EwsrBVpQMntmMfPl7MjtC+juW5Qn29wyXX/n9KW5XqnK5pN24tB+XNDGMWE3zM 9aqRvFu4GE12nlCcf1MzDDMmERo/CsiyLoEtuDUDO/Tg3sTDHV63AC2rCScodIQ7 80yR/T+WgoLR7YMGUFPqIK3Ee6vybdHLIZOzSrT3MmRYkwiGXDqH3O5aL7ZHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaJFvWhGqmBSEEQP9CgQZhsCy8CcwHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg4iJaYNPTUyNu0ROyRcy9KUHAL43Wlht/hEwfm2Fet74pdlaWT7yOUeTstbr svnKvTSAQ7OP8AlGluZS5MRqXKvRCUM/UfgtPS1npfAUl+neI9EKeXydqy1fp95C uV2Vx3p04ZY4sO5OCijuC84u+dXzBpj4Hr6GnxKaMgU3rpiDjwfRUledBVWzIpCj sn2xwGuIaxQOXB9r1QofybD4G7opLV99239cISudM8TmCUomlTUsmkKr4qk0XIko AdMEKE2ugckcFQ+kdxWUvfX4H9aY9+YA93QI1P7kMpCTbe3zkcbz4moSx1KVyMLD y9+SOjEK3b3bwPOeYmo/rQg5YA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:33:33 2025 by rpki-client