This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft File: 334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft (raw, json) Hash identifier: 9RL35ZArSUleHs74Gglc0rOtxFy6L8KmX9+kXtAKRS8= Subject key identifier: 42:63:9B:84:46:F2:23:AA:A2:C5:77:C2:CE:43:A6:DA:2A:CF:FF:A8 Authority key identifier: 33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0 Certificate issuer: /CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0 Certificate serial: 3C8018F8A33C3C80CA8F34EEA39558A0C5A2AF2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft Manifest number: 24 Signing time: Sat 20 Dec 2025 03:08:52 +0000 Manifest this update: Sat 20 Dec 2025 03:03:52 +0000 Manifest next update: Sun 21 Dec 2025 04:36:52 +0000 Files and hashes: 1: 334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl (hash: MX8+OThBRhmC64aOUx8zruJamuU5oSb7vIieTCGJ+4g=) 2: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: qHMRmGzDuhgCeyQmPvOrMZHLmeC/ZMyKBZXqDIAL2GA=) 3: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: 7mw0GkXoVaDbDDT1y79JOed+pwzADcY+g+5vkqR9Qis=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 04:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:80:18:f8:a3:3c:3c:80:ca:8f:34:ee:a3:95:58:a0:c5:a2:af:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0 Validity Not Before: Dec 20 03:03:52 2025 GMT Not After : Dec 21 04:36:52 2025 GMT Subject: CN=42639B8446F223AAA2C577C2CE43A6DA2ACFFFA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:51:a9:b9:5c:f2:8a:8a:6f:5a:7c:5e:ee: 4f:28:90:47:a0:0a:1d:89:cc:70:1e:ec:a7:c4:32: 1d:55:51:7c:8a:c2:51:3c:66:43:b1:e0:c8:fb:bd: f9:a0:54:9c:9f:05:e8:94:58:0e:35:0c:8f:19:f2: a0:32:b2:9c:94:ac:29:e6:06:84:b0:40:73:ce:a2: 0d:40:dd:5a:17:d1:a1:cf:e3:80:43:84:d8:4e:88: ff:e1:5d:d6:02:ab:79:6e:b0:bf:c3:d4:45:e5:2d: 7c:07:31:24:9a:a6:98:2a:4b:2c:17:46:11:2b:04: e6:1d:16:a6:f2:6a:2f:df:98:db:1b:34:df:a6:8d: 46:95:74:80:fd:b1:22:46:0b:a2:92:f3:e7:23:72: ab:d0:92:71:3a:18:be:3e:10:61:54:cf:98:fb:44: 75:fc:e8:a3:c5:7a:03:37:9f:4c:4d:b2:33:7d:16: 46:74:83:a2:ce:a1:f9:93:30:9b:68:88:95:d3:b1: 67:5d:27:04:4e:5e:90:c4:fa:da:9f:74:6e:dc:31: b4:3e:84:55:5e:43:63:a2:82:28:a4:d0:92:14:f9: 34:01:07:b3:f5:a5:c1:8a:21:c3:40:6c:96:43:71: e8:22:96:cd:14:ed:df:fb:ec:80:0d:c2:ef:0f:18: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:63:9B:84:46:F2:23:AA:A2:C5:77:C2:CE:43:A6:DA:2A:CF:FF:A8 X509v3 Authority Key Identifier: keyid:33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0f:99:7e:43:e1:a5:86:81:21:cb:55:7e:70:5e:98:c1:f5: 66:cf:91:62:9b:02:c0:73:d7:72:af:19:52:e3:0b:51:91:a6: ec:21:aa:bf:09:64:a8:64:3b:9b:bc:24:be:63:ff:1a:59:f6: b3:b4:db:1f:38:ed:49:85:2c:e3:32:5c:67:2a:34:55:cb:38: c5:10:ff:4a:4d:7f:9e:75:90:b3:6c:06:d7:6b:ff:ff:20:ac: db:d8:f0:ea:24:08:ff:72:61:06:e9:82:08:e3:b5:97:31:17: 0f:a5:db:2e:a8:2a:78:1f:db:6c:3d:53:e7:e2:c3:cf:8e:b5: e9:ad:f2:6a:92:4b:15:dd:b9:1a:f0:4d:bc:b7:e0:5e:cb:b8: a8:44:51:1b:39:d9:cb:48:a5:b4:78:f8:0e:cc:61:e1:c3:79: 6c:f8:03:be:51:91:10:65:57:75:2b:86:79:72:5a:1f:a4:8b: 91:fe:c6:4e:07:fe:3f:a6:bb:20:9a:9e:43:a8:8b:94:ce:75: 24:9e:a6:d9:13:0b:86:0f:54:a7:53:1a:d3:3a:d3:41:86:02: fd:17:20:41:2f:5c:0d:ab:75:41:18:c6:08:1c:e5:29:4d:24: 71:b0:db:8f:e2:73:82:12:aa:d9:42:78:66:2b:7b:33:fb:04: 77:ae:21:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPIAY+KM8PIDKjzTuo5VYoMWiryswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0REU4OEVEMDBDOEU1RDExMzFFMUVEMzU1MTAzQTIz MkU0MEZFMDAeFw0yNTEyMjAwMzAzNTJaFw0yNTEyMjEwNDM2NTJaMDMxMTAvBgNV BAMTKDQyNjM5Qjg0NDZGMjIzQUFBMkM1NzdDMkNFNDNBNkRBMkFDRkZGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYVGpuVzyiopvWnxe7k8okEeg Ch2JzHAe7KfEMh1VUXyKwlE8ZkOx4Mj7vfmgVJyfBeiUWA41DI8Z8qAyspyUrCnm BoSwQHPOog1A3VoX0aHP44BDhNhOiP/hXdYCq3lusL/D1EXlLXwHMSSappgqSywX RhErBOYdFqbyai/fmNsbNN+mjUaVdID9sSJGC6KS8+cjcqvQknE6GL4+EGFUz5j7 RHX86KPFegM3n0xNsjN9FkZ0g6LOofmTMJtoiJXTsWddJwROXpDE+tqfdG7cMbQ+ hFVeQ2Oigiik0JIU+TQBB7P1pcGKIcNAbJZDcegils0U7d/77IANwu8PGH1rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQmObhEbyI6qixXfCzkOm2irP/6gwHwYDVR0j BBgwFoAUM03ojtAMjl0RMeHtNVEDojLkD+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RL cjQvMC8zMzRERTg4RUQwMEM4RTVEMTEzMUUxRUQzNTUxMDNBMjMyRTQwRkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNERFODhFRDAwQzhFNUQx MTMxRTFFRDM1NTEwM0EyMzJFNDBGRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RLcjQvMC8z MzRERTg4RUQwMEM4RTVEMTEzMUUxRUQzNTUxMDNBMjMyRTQwRkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAng+ZfkPhpYaBIctVfnBemMH1Zs+RYpsCwHPXcq8ZUuMLUZGm7CGqvwlkqGQ7 m7wkvmP/Gln2s7TbHzjtSYUs4zJcZyo0Vcs4xRD/Sk1/nnWQs2wG12v//yCs29jw 6iQI/3JhBumCCOO1lzEXD6XbLqgqeB/bbD1T5+LDz4616a3yapJLFd25GvBNvLfg Xsu4qERRGznZy0iltHj4Dsxh4cN5bPgDvlGREGVXdSuGeXJaH6SLkf7GTgf+P6a7 IJqeQ6iLlM51JJ6m2RMLhg9Up1Ma0zrTQYYC/RcgQS9cDat1QRjGCBzlKU0kcbDb j+JzghKq2UJ4Zit7M/sEd64hwg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:03 2025 by rpki-client