This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: 9F8OjMjFkcjd4U7jE7iUgsMbZ/CvW778ksqybHhmQMg= Subject key identifier: D2:6C:08:2A:D7:1E:2D:14:CE:D6:6D:89:23:C4:B7:C5:DC:E2:94:F8 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 7F5D2D970BF9DC6218C024E07B1831B4A2292FE9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 034A Signing time: Sun 21 Dec 2025 15:02:44 +0000 Manifest this update: Sun 21 Dec 2025 14:57:44 +0000 Manifest next update: Mon 22 Dec 2025 18:49:44 +0000 Files and hashes: 1: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) 2: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: ytrdIhNNVcsvuDrHZsW9NICcEf1YtB3VD7Eb8tycMvU=) 3: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: n0C9/GkCbLbH9WRPksqqAGPaZd17gx9HuxHuav2/O/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Dec 2025 18:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5d:2d:97:0b:f9:dc:62:18:c0:24:e0:7b:18:31:b4:a2:29:2f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Dec 21 14:57:44 2025 GMT Not After : Dec 22 18:49:44 2025 GMT Subject: CN=D26C082AD71E2D14CED66D8923C4B7C5DCE294F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:9e:a0:8e:65:d9:97:a8:b9:2e:6c:ed:2c: c9:36:da:5f:65:48:b0:80:56:81:2e:89:0d:81:ef: 0e:54:23:92:95:27:c4:74:1c:4e:f2:4e:34:77:21: 3f:fb:5b:53:fd:e9:5c:f7:31:26:e2:7e:28:5a:24: 20:06:ac:5f:ab:55:93:ac:33:62:8c:04:11:9f:a1: 5b:f8:f8:ed:5d:6f:bb:65:b7:16:a1:86:ca:6b:f9: 3b:75:19:92:ab:68:2b:6c:ce:12:ed:34:40:bd:64: 00:56:04:f8:b1:e7:64:64:30:84:cb:99:d5:2b:22: 38:53:96:86:e5:e3:f2:07:4f:15:b9:7d:bd:e7:55: 8e:5c:ed:0a:8f:a8:20:05:0d:60:5d:56:ec:98:53: 84:52:d1:04:ad:54:3c:8c:e4:31:df:52:7d:81:5d: 08:f9:5e:17:ac:76:fc:f2:e5:c4:97:ac:40:5b:d6: 77:f8:15:d2:c9:6e:6a:29:1c:90:ea:a5:82:fa:cf: 67:95:87:45:21:1b:c2:cd:c8:c9:25:75:02:b9:68: 8e:18:49:0c:e3:5e:92:57:29:6f:a2:2b:10:d8:2a: 30:fc:7b:51:e0:8c:53:75:9e:6c:37:3f:a5:8e:d1: 2e:a6:dd:c5:7a:ab:ab:50:e4:ed:19:e7:76:56:0a: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:08:2A:D7:1E:2D:14:CE:D6:6D:89:23:C4:B7:C5:DC:E2:94:F8 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a8:6d:01:4c:81:63:6a:14:44:03:66:71:c7:12:f1:f2:07: 71:04:9a:60:a0:57:b1:52:78:2e:1f:b7:f1:90:5c:df:1f:d2: 76:5a:70:8c:16:81:5a:d0:34:09:e0:d5:67:a3:6d:ed:d1:6d: 5e:e7:10:bd:f7:16:3a:a1:0f:1d:f5:a5:cf:16:17:bf:c2:67: fe:a1:c7:09:14:82:06:ee:52:62:75:f5:cb:6e:e5:3b:ee:4b: 06:1f:95:fd:04:18:d4:7e:7f:0e:20:53:6d:45:03:69:35:00: 90:a8:f0:8f:b0:76:20:88:38:6b:ce:cc:28:4e:fe:9b:3d:3a: 73:0d:63:ff:13:bb:e0:26:f5:b4:5d:83:35:34:39:7e:f7:c3: 78:bc:c1:b7:9d:26:c7:9d:bf:2e:93:83:1f:5a:e0:ac:d9:1b: a9:2e:58:68:0a:13:e8:45:83:c4:7e:de:0d:45:e4:b1:ca:2c: 21:57:20:69:21:39:b0:66:a2:58:95:68:60:f1:00:18:69:a9: 6d:55:13:24:61:0b:a8:66:e9:3d:7e:14:cd:a2:1f:e4:d4:a8: a4:33:63:e5:c3:59:b4:16:97:86:7b:a6:60:84:a4:9e:4d:55: 93:82:17:52:1e:ad:88:70:61:f9:08:5a:26:84:10:18:d9:a6: 16:fd:18:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf10tlwv53GIYwCTgexgxtKIpL+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTEyMjExNDU3NDRaFw0yNTEyMjIxODQ5NDRaMDMxMTAvBgNV BAMTKEQyNkMwODJBRDcxRTJEMTRDRUQ2NkQ4OTIzQzRCN0M1RENFMjk0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0Z6gjmXZl6i5LmztLMk22l9l SLCAVoEuiQ2B7w5UI5KVJ8R0HE7yTjR3IT/7W1P96Vz3MSbifihaJCAGrF+rVZOs M2KMBBGfoVv4+O1db7tltxahhspr+Tt1GZKraCtszhLtNEC9ZABWBPix52RkMITL mdUrIjhTlobl4/IHTxW5fb3nVY5c7QqPqCAFDWBdVuyYU4RS0QStVDyM5DHfUn2B XQj5Xhesdvzy5cSXrEBb1nf4FdLJbmopHJDqpYL6z2eVh0UhG8LNyMkldQK5aI4Y SQzjXpJXKW+iKxDYKjD8e1HgjFN1nmw3P6WO0S6m3cV6q6tQ5O0Z53ZWCnlhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0mwIKtceLRTO1m2JI8S3xdzilPgwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH6htAUyBY2oURANmcccS8fIHcQSaYKBXsVJ4Lh+38ZBc3x/SdlpwjBaBWtA0 CeDVZ6Nt7dFtXucQvfcWOqEPHfWlzxYXv8Jn/qHHCRSCBu5SYnX1y27lO+5LBh+V /QQY1H5/DiBTbUUDaTUAkKjwj7B2IIg4a87MKE7+mz06cw1j/xO74Cb1tF2DNTQ5 fvfDeLzBt50mx52/LpODH1rgrNkbqS5YaAoT6EWDxH7eDUXkscosIVcgaSE5sGai WJVoYPEAGGmpbVUTJGELqGbpPX4UzaIf5NSopDNj5cNZtBaXhnumYISknk1Vk4IX Uh6tiHBh+QhaJoQQGNmmFv0YRA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:36:40 2025 by rpki-client