This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: DFFdbotl+bdhdQzfz0ymhXhdwf80SzQf8n/O16E7kHQ= Subject key identifier: DB:A8:8B:28:9C:9E:CA:7D:05:ED:B1:8B:61:7C:C1:ED:D2:60:07:E4 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 10B075819ACB47130EBA6CDDE778986B60BEF1E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 0347 Signing time: Fri 19 Dec 2025 08:27:44 +0000 Manifest this update: Fri 19 Dec 2025 08:22:44 +0000 Manifest next update: Sat 20 Dec 2025 08:56:44 +0000 Files and hashes: 1: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: n0C9/GkCbLbH9WRPksqqAGPaZd17gx9HuxHuav2/O/g=) 2: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: r3EuRhya0SnA8tpCqziL7s8AxSNeEG0Dmoa9wOEQn/A=) 3: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Dec 2025 08:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b0:75:81:9a:cb:47:13:0e:ba:6c:dd:e7:78:98:6b:60:be:f1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Dec 19 08:22:44 2025 GMT Not After : Dec 20 08:56:44 2025 GMT Subject: CN=DBA88B289C9ECA7D05EDB18B617CC1EDD26007E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6c:0b:df:46:03:ba:b8:46:61:77:ed:34:a0: 68:29:2f:23:5b:8a:69:25:fb:1e:b6:8b:8a:b9:a2: 38:c3:08:44:53:d2:9d:80:88:62:41:3e:74:16:67: ed:af:d9:db:bb:6e:d3:b2:98:22:96:f1:f7:14:34: 74:a3:fb:a0:21:1b:30:e2:ff:46:cb:37:a4:85:24: a5:ad:50:02:cf:f0:31:23:f2:5e:94:60:77:87:8a: 26:43:16:5f:75:b7:a4:55:14:5e:3a:56:1f:b2:ca: cb:ea:45:d2:f5:89:ce:11:b2:c4:32:6f:2a:3a:f8: 3d:df:34:c0:92:c7:53:7c:57:82:f2:cf:1b:3e:c5: 34:8b:f6:33:89:59:1f:d6:90:32:c6:fb:58:14:ec: 1c:0c:5b:cf:cd:2d:81:ff:57:fc:95:ae:9e:b1:d4: 0c:a4:8e:6a:12:00:5f:ac:bb:a4:47:de:79:33:7d: 00:31:8b:95:4c:b9:6a:18:e2:54:ad:6e:4f:ef:a4: 90:5e:46:77:f4:fc:b5:aa:80:b8:ef:3b:85:8a:fa: 83:a9:de:5d:a3:72:e2:a3:cd:1d:98:8f:10:6f:82: 20:a7:d9:a9:3f:36:37:9f:e2:2a:c7:8c:5a:5e:e4: a2:34:5a:6c:16:11:27:dd:91:b8:a2:37:3e:3e:3e: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A8:8B:28:9C:9E:CA:7D:05:ED:B1:8B:61:7C:C1:ED:D2:60:07:E4 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:86:35:3d:56:82:c0:57:82:85:33:30:d0:57:14:4e:3c:14: 96:d8:6c:9c:e0:87:f4:2a:a3:61:b8:81:ac:33:38:eb:48:5d: 2b:c8:08:67:ca:01:f8:18:95:2a:21:16:14:8e:b3:32:8f:48: 7c:43:b3:16:e5:c2:9d:4c:f1:9e:91:4f:20:bf:40:d4:aa:d7: 1d:2a:bf:0b:1d:f6:99:e9:32:f8:b6:cf:b5:30:52:49:dd:a0: 9c:ee:3d:4f:d7:be:74:64:cc:7f:55:3a:23:28:0b:a4:f9:7a: 3b:a0:f3:38:12:a5:1a:f4:a5:79:ec:b8:e3:87:74:40:26:64: 73:02:fc:d1:a4:5f:43:c4:c4:ff:a2:f2:56:ed:e0:2a:5c:7d: c0:01:47:13:8a:97:f7:87:27:53:d5:d8:8d:60:bd:55:72:8e: f0:f0:64:44:5c:80:8b:65:23:80:dd:98:83:c5:3f:92:29:d4: bf:d5:5d:0e:ad:b2:21:54:64:aa:30:bb:a3:85:8e:83:d2:32: 51:49:67:e1:8c:47:a9:a0:c6:0b:20:eb:73:5f:e5:89:9b:7b: d8:92:d2:37:1c:ce:be:9b:bb:cf:79:9b:53:7d:70:f3:8b:5a: ed:8b:09:93:c5:c2:a3:42:80:58:77:55:54:27:ff:01:5c:22: 3e:49:3c:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUELB1gZrLRxMOumzd53iYa2C+8egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTEyMTkwODIyNDRaFw0yNTEyMjAwODU2NDRaMDMxMTAvBgNV BAMTKERCQTg4QjI4OUM5RUNBN0QwNUVEQjE4QjYxN0NDMUVERDI2MDA3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibAvfRgO6uEZhd+00oGgpLyNb imkl+x62i4q5ojjDCERT0p2AiGJBPnQWZ+2v2du7btOymCKW8fcUNHSj+6AhGzDi /0bLN6SFJKWtUALP8DEj8l6UYHeHiiZDFl91t6RVFF46Vh+yysvqRdL1ic4RssQy byo6+D3fNMCSx1N8V4Lyzxs+xTSL9jOJWR/WkDLG+1gU7BwMW8/NLYH/V/yVrp6x 1AykjmoSAF+su6RH3nkzfQAxi5VMuWoY4lStbk/vpJBeRnf0/LWqgLjvO4WK+oOp 3l2jcuKjzR2YjxBvgiCn2ak/Njef4irHjFpe5KI0WmwWESfdkbiiNz4+PhPPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU26iLKJyeyn0F7bGLYXzB7dJgB+QwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUoY1PVaCwFeChTMw0FcUTjwUlthsnOCH9CqjYbiBrDM460hdK8gIZ8oB+BiV KiEWFI6zMo9IfEOzFuXCnUzxnpFPIL9A1KrXHSq/Cx32meky+LbPtTBSSd2gnO49 T9e+dGTMf1U6IygLpPl6O6DzOBKlGvSleey444d0QCZkcwL80aRfQ8TE/6LyVu3g Klx9wAFHE4qX94cnU9XYjWC9VXKO8PBkRFyAi2UjgN2Yg8U/kinUv9VdDq2yIVRk qjC7o4WOg9IyUUln4YxHqaDGCyDrc1/liZt72JLSNxzOvpu7z3mbU31w84ta7YsJ k8XCo0KAWHdVVCf/AVwiPkk8uw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:44:31 2025 by rpki-client