This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft File: 33D444D18668AFF627287DE909F4EDC258CA9CC3.mft (raw, json) Hash identifier: 8MbybheFIb0RN0s51DsLUmRmyts3gn8/LeyEvp/BPmY= Subject key identifier: DA:6C:89:4F:16:32:90:CB:99:2D:E0:6D:43:F7:43:9E:0C:F3:B9:FC Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3 Certificate issuer: /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3 Certificate serial: 5462FBC4EC90CC3AF9034007F6647866C989E731 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft Manifest number: 032E Signing time: Sun 21 Dec 2025 22:45:59 +0000 Manifest this update: Sun 21 Dec 2025 22:40:59 +0000 Manifest next update: Tue 23 Dec 2025 01:16:59 +0000 Files and hashes: 1: 3137372e33382e36382e302f32322d3234203d3e203532373838.roa (hash: LsIbEV6d/qkd5SrbHcy8LV68KD6GkOp3U3cHfi9raVk=) 2: 323830343a6238343a3a2f33322d3438203d3e203532373838.roa (hash: hl/5OxGOU0JH6btmx6NDigAj4IAqY8I+wrvb5DixlD0=) 3: 33D444D18668AFF627287DE909F4EDC258CA9CC3.crl (hash: OMrR8SEFo56uSE46m/wQJo/RDSgToxkp1/CR0nnfSjw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 01:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:62:fb:c4:ec:90:cc:3a:f9:03:40:07:f6:64:78:66:c9:89:e7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3 Validity Not Before: Dec 21 22:40:59 2025 GMT Not After : Dec 23 01:16:59 2025 GMT Subject: CN=DA6C894F163290CB992DE06D43F7439E0CF3B9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:25:10:a3:ef:57:6e:1d:f9:6c:7b:13:a6: ec:fa:a3:f4:52:c9:9d:fc:6d:c4:4d:4b:05:d5:ba: c7:87:94:8c:67:3d:8e:d4:76:20:43:16:43:23:da: 32:c1:25:ad:b3:58:37:29:ea:63:78:fb:60:c3:7e: 5e:6d:cd:6d:fe:90:80:b0:b7:34:4d:f0:62:5d:a2: 2f:82:70:10:0f:b5:de:85:c5:6d:27:98:a1:b1:42: 44:3d:74:1b:8b:c5:ae:04:e0:6c:9e:42:53:fb:02: 7d:37:1c:51:af:00:86:db:30:8b:51:04:cf:fa:67: 77:d9:42:b1:6d:ce:0a:3b:2c:58:33:29:49:66:bf: 37:87:31:7e:30:e5:d6:44:1d:03:84:47:49:af:cd: bf:52:f2:d2:39:4c:7f:63:52:9f:af:1b:26:a1:b7: 84:7d:1a:c2:a0:3d:d6:6a:94:77:6e:33:4b:fc:04: e5:32:80:3b:39:c0:33:31:d3:cc:55:fa:f4:0e:64: fc:d6:24:6c:7c:9f:71:a4:1f:70:77:d0:18:8b:4f: 9a:15:9b:6d:29:8d:6c:9f:37:91:14:75:4d:74:70: 8d:78:4b:e4:aa:37:53:7d:74:bf:a0:fd:f5:5d:6a: c8:c5:c3:66:8b:24:ee:22:1b:cc:aa:2a:ba:f8:04: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:89:4F:16:32:90:CB:99:2D:E0:6D:43:F7:43:9E:0C:F3:B9:FC X509v3 Authority Key Identifier: keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:79:6f:cd:53:b7:ab:ab:7b:0c:7a:91:ce:ca:e5:23:72:f2: 5d:b9:c9:36:60:c1:00:fd:c7:90:48:0d:ce:54:5f:75:f2:9f: af:2f:f8:02:fa:91:e4:80:c6:5a:4e:9b:e7:97:ae:0d:bf:a0: 06:35:40:e9:27:fd:c7:38:60:fa:fd:2f:ea:3d:60:c9:d9:e1: 2a:43:28:88:42:f0:f2:73:66:a6:65:6e:09:2a:93:a2:a3:20: 87:58:90:8b:56:b7:96:e6:08:7e:11:65:af:19:b7:50:74:3d: ce:b6:f0:5a:aa:9f:b3:67:63:33:32:c0:6f:81:bf:25:b1:ac: c6:1c:7d:99:8b:a9:d8:bc:36:09:2a:0a:70:ec:d2:da:23:07: 03:d4:4c:e0:54:62:a1:86:9b:cb:ac:22:7a:02:69:a6:74:d5: 49:fc:fc:8e:7d:bf:a7:ab:7f:56:f0:c4:10:96:7a:7d:52:ab: 7a:06:6d:85:69:59:73:36:d4:4f:b8:44:ab:65:c4:22:5e:38: dc:f8:a4:84:d1:a4:7b:62:ae:97:c0:21:4b:4d:d7:3c:c5:6f: 04:03:f0:35:9d:df:3a:74:18:d6:b4:f3:71:aa:9d:81:86:47: 21:04:a2:f5:97:5f:24:b7:71:e4:6e:2b:d3:46:8e:e4:bd:20: 2a:72:1c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVGL7xOyQzDr5A0AH9mR4ZsmJ5zEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNENDQ0RDE4NjY4QUZGNjI3Mjg3REU5MDlGNEVEQzI1 OENBOUNDMzAeFw0yNTEyMjEyMjQwNTlaFw0yNTEyMjMwMTE2NTlaMDMxMTAvBgNV BAMTKERBNkM4OTRGMTYzMjkwQ0I5OTJERTA2RDQzRjc0MzlFMENGM0I5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUyUQo+9Xbh35bHsTpuz6o/RS yZ38bcRNSwXVuseHlIxnPY7UdiBDFkMj2jLBJa2zWDcp6mN4+2DDfl5tzW3+kICw tzRN8GJdoi+CcBAPtd6FxW0nmKGxQkQ9dBuLxa4E4GyeQlP7An03HFGvAIbbMItR BM/6Z3fZQrFtzgo7LFgzKUlmvzeHMX4w5dZEHQOER0mvzb9S8tI5TH9jUp+vGyah t4R9GsKgPdZqlHduM0v8BOUygDs5wDMx08xV+vQOZPzWJGx8n3GkH3B30BiLT5oV m20pjWyfN5EUdU10cI14S+SqN1N9dL+g/fVdasjFw2aLJO4iG8yqKrr4BORrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2myJTxYykMuZLeBtQ/dDngzzufwwHwYDVR0j BBgwFoAUM9RE0YZor/YnKH3pCfTtwljKnMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpq Qk0vMC8zM0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDQ0NEQxODY2OEFGRjYy NzI4N0RFOTA5RjRFREMyNThDQTlDQzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpqQk0vMC8z M0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp3lvzVO3q6t7DHqRzsrlI3LyXbnJNmDBAP3HkEgNzlRfdfKfry/4AvqR5IDG Wk6b55euDb+gBjVA6Sf9xzhg+v0v6j1gydnhKkMoiELw8nNmpmVuCSqToqMgh1iQ i1a3luYIfhFlrxm3UHQ9zrbwWqqfs2djMzLAb4G/JbGsxhx9mYup2Lw2CSoKcOzS 2iMHA9RM4FRioYaby6wiegJppnTVSfz8jn2/p6t/VvDEEJZ6fVKregZthWlZczbU T7hEq2XEIl443PikhNGke2Kul8AhS03XPMVvBAPwNZ3fOnQY1rTzcaqdgYZHIQSi 9ZdfJLdx5G4r00aO5L0gKnIc/w== -----END CERTIFICATE-----Generated at Mon Dec 22 03:34:33 2025 by rpki-client