This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: c37QsYapXV0nZJSFrKQRz91lq/vsTS/eO0qG1sn2ZrM= Subject key identifier: B3:D7:92:DB:30:10:B1:6D:CB:9F:B1:7C:47:DA:1F:1A:F4:AD:A7:64 Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 724B0ADC2058DFBD7BB193B7ACCBA509B333D608 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: EA Signing time: Tue 23 Dec 2025 05:12:43 +0000 Manifest this update: Tue 23 Dec 2025 05:07:43 +0000 Manifest next update: Wed 24 Dec 2025 07:04:43 +0000 Files and hashes: 1: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: Tmrp5/+mMcHmk+yboavXMWNhMuYMskBzxeyXCRUIZa8=) 2: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 07:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4b:0a:dc:20:58:df:bd:7b:b1:93:b7:ac:cb:a5:09:b3:33:d6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Dec 23 05:07:43 2025 GMT Not After : Dec 24 07:04:43 2025 GMT Subject: CN=B3D792DB3010B16DCB9FB17C47DA1F1AF4ADA764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:0e:af:c4:33:b8:da:44:c4:93:a5:3a:52: cf:0e:48:79:39:fa:af:d4:67:ba:8f:af:50:15:53: 1f:cf:77:83:c1:4b:2f:d7:0d:cd:21:b7:3e:0e:6d: 22:5c:33:4b:33:2b:b2:be:b9:74:07:28:6e:8d:f8: 3b:a9:a1:dd:bd:fc:31:69:56:64:b8:fd:da:57:8e: dd:a4:f0:75:65:50:9c:5d:69:a5:74:6d:96:12:76: 89:4f:c4:bb:dd:2e:4d:78:a1:ac:20:4e:94:4f:09: 05:5c:f7:0e:c4:2a:97:49:d5:3f:f6:69:b0:8c:a0: aa:29:91:c2:7b:e1:47:35:6e:0d:cb:0e:40:61:a9: 00:e7:b8:04:30:33:a5:96:f7:a2:a6:20:53:d5:ec: ca:be:92:5a:0e:04:cd:42:29:84:18:5c:28:72:31: 75:96:52:c4:7c:8a:fb:9c:46:f7:ac:cc:d1:d2:ab: c4:05:72:72:75:9c:28:44:b3:42:db:14:8a:aa:8a: 64:e0:ae:cf:e4:63:3e:76:81:7c:2e:0d:9d:62:bb: 68:11:25:a2:57:83:55:1e:0b:12:46:68:fa:c7:73: a7:27:34:3c:64:9d:e4:6b:fa:9c:c2:ce:78:07:e7: 1d:81:4c:ca:a4:4a:1b:05:d7:c5:3c:3a:db:92:bd: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:92:DB:30:10:B1:6D:CB:9F:B1:7C:47:DA:1F:1A:F4:AD:A7:64 X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d6:37:00:e2:64:1a:de:4c:a9:30:0d:db:b4:89:c5:d7:c3: fa:3d:24:81:24:c9:aa:6d:20:05:e5:e2:85:96:7e:37:88:02: 31:dc:b4:2b:a9:9c:ef:d6:13:01:1d:fe:31:08:fa:e5:07:0b: b1:d6:d8:ac:b2:24:10:5e:e0:ae:d4:4c:09:22:9b:a3:0f:c5: bc:93:e9:1f:0b:33:d1:a2:2b:16:e6:83:ff:ba:f6:71:1f:af: bf:c8:69:3f:62:d7:d0:77:cd:32:fb:d3:d6:23:fd:53:75:d7: d1:eb:dc:9f:31:4e:e2:91:89:25:97:79:ad:97:78:48:61:12: 10:7b:ec:70:96:aa:f4:f0:64:65:60:70:e0:6c:5c:94:20:eb: 66:48:d8:60:22:9e:a1:be:cc:34:d5:94:39:c3:b4:e5:91:f0: ea:cb:9e:fb:c3:cd:7e:bd:79:59:d0:f6:0f:13:6a:76:be:5c: c4:cc:4e:b3:75:43:ac:ba:5d:49:97:2c:01:8a:11:12:90:91: 95:88:00:60:05:03:21:0c:35:08:d1:88:56:e6:68:73:c9:73: 2e:5c:86:fa:8b:da:8f:b7:c8:25:05:03:79:e4:25:92:42:7c: 04:fd:6c:ff:82:12:cd:59:a7:e3:52:b4:b4:cd:36:b9:b3:81: 73:1b:5c:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcksK3CBY3717sZO3rMulCbMz1ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNTEyMjMwNTA3NDNaFw0yNTEyMjQwNzA0NDNaMDMxMTAvBgNV BAMTKEIzRDc5MkRCMzAxMEIxNkRDQjlGQjE3QzQ3REExRjFBRjRBREE3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ow6vxDO42kTEk6U6Us8OSHk5 +q/UZ7qPr1AVUx/Pd4PBSy/XDc0htz4ObSJcM0szK7K+uXQHKG6N+Dupod29/DFp VmS4/dpXjt2k8HVlUJxdaaV0bZYSdolPxLvdLk14oawgTpRPCQVc9w7EKpdJ1T/2 abCMoKopkcJ74Uc1bg3LDkBhqQDnuAQwM6WW96KmIFPV7Mq+kloOBM1CKYQYXChy MXWWUsR8ivucRveszNHSq8QFcnJ1nChEs0LbFIqqimTgrs/kYz52gXwuDZ1iu2gR JaJXg1UeCxJGaPrHc6cnNDxkneRr+pzCzngH5x2BTMqkShsF18U8OtuSvVNFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs9eS2zAQsW3Ln7F8R9ofGvStp2QwHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVtY3AOJkGt5MqTAN27SJxdfD+j0kgSTJqm0gBeXihZZ+N4gCMdy0K6mc79YT AR3+MQj65QcLsdbYrLIkEF7grtRMCSKbow/FvJPpHwsz0aIrFuaD/7r2cR+vv8hp P2LX0HfNMvvT1iP9U3XX0evcnzFO4pGJJZd5rZd4SGESEHvscJaq9PBkZWBw4Gxc lCDrZkjYYCKeob7MNNWUOcO05ZHw6sue+8PNfr15WdD2DxNqdr5cxMxOs3VDrLpd SZcsAYoREpCRlYgAYAUDIQw1CNGIVuZoc8lzLlyG+ovaj7fIJQUDeeQlkkJ8BP1s /4ISzVmn41K0tM02ubOBcxtcNQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:40:36 2025 by rpki-client