This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft File: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json) Hash identifier: tpYvhPwN0shIjL4o5h4QCozs0A2tkH6u+PPbuXalwHM= Subject key identifier: 50:28:98:5B:7D:E0:06:60:DF:43:D7:92:25:5E:6C:DF:24:8D:2C:2F Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 Certificate issuer: /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Certificate serial: 2F390EAE7E0F9C5DA43EA7227BE3BBF573685830 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft Manifest number: 5F Signing time: Mon 22 Dec 2025 19:59:36 +0000 Manifest this update: Mon 22 Dec 2025 19:54:36 +0000 Manifest next update: Tue 23 Dec 2025 22:52:36 +0000 Files and hashes: 1: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=) 2: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=) 3: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: RpIVoTR1SWW3M/+vECMSTrBDYxbwa12z53KahaaSjl8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 22:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:39:0e:ae:7e:0f:9c:5d:a4:3e:a7:22:7b:e3:bb:f5:73:68:58:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Validity Not Before: Dec 22 19:54:36 2025 GMT Not After : Dec 23 22:52:36 2025 GMT Subject: CN=5028985B7DE00660DF43D792255E6CDF248D2C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:c8:f8:f8:bd:3e:40:f6:d5:f2:9a:4e:60: d2:8f:be:be:65:6f:c3:90:45:c8:98:61:02:74:ed: 19:15:bb:54:9f:59:0b:f6:3c:70:21:f6:5f:fd:76: 9c:3d:5e:21:69:ba:ec:b9:6f:6d:bd:46:df:d9:37: 51:33:ce:a6:92:5b:59:35:45:d7:3a:85:16:4d:1e: 8e:d5:64:a7:ed:1c:1a:9c:0b:d9:0e:77:ac:73:07: 69:79:fa:ab:17:c9:56:fb:dc:12:12:a0:de:59:14: b3:8c:1d:c7:c4:64:08:c2:9f:69:33:9a:dd:b6:fa: 63:97:f1:48:2b:42:bb:da:f3:d5:e4:aa:d3:6e:ca: 35:93:ee:99:6d:7b:e2:a5:e9:dc:50:a0:2a:af:8a: 06:9e:c4:b7:99:21:cf:c2:41:d9:56:bd:62:8d:02: d0:32:b0:5b:0e:30:ea:7f:2e:c8:0d:cd:22:58:3f: 51:cf:79:82:84:ec:9e:6a:85:cd:83:15:b3:4c:77: f8:85:e4:49:2e:d6:74:e4:9c:51:7d:2b:24:01:b6: 80:10:c4:a4:5d:07:74:7b:7e:2c:41:94:9a:d9:45: ed:2e:d0:3c:4f:fd:f9:16:7e:f0:f2:74:f1:b1:3b: 9f:69:c4:06:ed:b2:10:69:76:1d:25:99:b4:a7:64: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:28:98:5B:7D:E0:06:60:DF:43:D7:92:25:5E:6C:DF:24:8D:2C:2F X509v3 Authority Key Identifier: keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:09:5f:05:22:52:02:e3:65:a8:b4:85:73:79:4f:a3:cd:b7: f6:89:58:5d:be:69:de:58:d5:87:13:70:4e:d2:c0:48:c3:88: 22:28:5c:29:49:50:f8:5c:6e:af:99:5d:40:a6:34:b3:74:c5: db:03:99:46:fe:7b:fc:84:3b:cf:2d:54:86:89:62:5d:52:4a: f1:8a:39:be:fc:f7:24:95:2e:a1:20:b8:1c:7c:54:01:db:2a: c6:40:78:07:5a:7c:02:ac:a3:58:72:73:76:20:48:a0:b1:7c: 65:e0:36:db:f9:f3:9a:1c:a7:32:8f:30:e5:5d:26:22:47:0f: a8:09:57:c1:b3:2a:9b:98:e7:0e:0c:a8:10:67:ad:b8:15:9c: d5:92:63:00:c7:a1:33:e8:8b:db:9c:c4:e6:3f:c1:a5:59:ab: 95:a2:5f:c9:c4:87:b9:49:3f:08:f5:a2:fb:31:88:7e:44:e5: 02:90:6e:b7:f0:36:4e:51:83:7e:18:e7:11:32:1d:bd:36:d3: 51:5d:1a:bd:8c:dc:74:37:bb:c3:5f:31:9c:54:16:c6:23:0f: c8:55:02:3c:e4:8a:17:8d:99:7c:33:8d:ea:5d:fd:cb:47:1b: 15:8e:f9:a5:94:65:f9:c2:6f:a5:fc:93:f4:c4:f6:a6:e3:76: b7:05:9e:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULzkOrn4PnF2kPqcie+O79XNoWDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMzZFQTJBMjE2NUNFQ0FDNDBFQjVGMjlFMTRCRjBB MURERjBCOTAeFw0yNTEyMjIxOTU0MzZaFw0yNTEyMjMyMjUyMzZaMDMxMTAvBgNV BAMTKDUwMjg5ODVCN0RFMDA2NjBERjQzRDc5MjI1NUU2Q0RGMjQ4RDJDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3R8j4+L0+QPbV8ppOYNKPvr5l b8OQRciYYQJ07RkVu1SfWQv2PHAh9l/9dpw9XiFpuuy5b229Rt/ZN1EzzqaSW1k1 Rdc6hRZNHo7VZKftHBqcC9kOd6xzB2l5+qsXyVb73BISoN5ZFLOMHcfEZAjCn2kz mt22+mOX8UgrQrva89XkqtNuyjWT7plte+Kl6dxQoCqvigaexLeZIc/CQdlWvWKN AtAysFsOMOp/LsgNzSJYP1HPeYKE7J5qhc2DFbNMd/iF5Eku1nTknFF9KyQBtoAQ xKRdB3R7fixBlJrZRe0u0DxP/fkWfvDydPGxO59pxAbtshBpdh0lmbSnZLELAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUCiYW33gBmDfQ9eSJV5s3ySNLC8wHwYDVR0j BBgwFoAUyjNuoqIWXOysQOtfKeFL8KHd8LkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQ U1AvMC9DQTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMzM2RUEyQTIxNjVDRUNB QzQwRUI1RjI5RTE0QkYwQTFEREYwQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQU1AvMC9D QTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOAlfBSJSAuNlqLSFc3lPo8239olYXb5p3ljVhxNwTtLASMOIIihcKUlQ+Fxu r5ldQKY0s3TF2wOZRv57/IQ7zy1UholiXVJK8Yo5vvz3JJUuoSC4HHxUAdsqxkB4 B1p8AqyjWHJzdiBIoLF8ZeA22/nzmhynMo8w5V0mIkcPqAlXwbMqm5jnDgyoEGet uBWc1ZJjAMehM+iL25zE5j/BpVmrlaJfycSHuUk/CPWi+zGIfkTlApBut/A2TlGD fhjnETIdvTbTUV0avYzcdDe7w18xnFQWxiMPyFUCPOSKF42ZfDON6l39y0cbFY75 pZRl+cJvpfyT9MT2puN2twWekA== -----END CERTIFICATE-----Generated at Tue Dec 23 08:43:02 2025 by rpki-client