This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft File: 33D444D18668AFF627287DE909F4EDC258CA9CC3.mft (raw, json) Hash identifier: lzesqBTW6uULqjURMyfLUkgCZFT0/kYCsvWhemz4Yfw= Subject key identifier: 9D:7C:ED:E7:58:FC:E8:08:AE:59:5C:CA:5E:C3:09:AB:17:BE:1D:28 Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3 Certificate issuer: /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3 Certificate serial: 43E8E84C7799D76C2E2CCF8DCAB31C1EC733B160 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft Manifest number: 034B Signing time: Mon 12 Jan 2026 15:28:51 +0000 Manifest this update: Mon 12 Jan 2026 15:23:51 +0000 Manifest next update: Tue 13 Jan 2026 16:39:51 +0000 Files and hashes: 1: 33D444D18668AFF627287DE909F4EDC258CA9CC3.crl (hash: LHHv1f8ljabvmKjkeDVadvEeStJd7tGwjN5JhwD+i0o=) 2: 3137372e33382e36382e302f32322d3234203d3e203532373838.roa (hash: LsIbEV6d/qkd5SrbHcy8LV68KD6GkOp3U3cHfi9raVk=) 3: 323830343a6238343a3a2f33322d3438203d3e203532373838.roa (hash: hl/5OxGOU0JH6btmx6NDigAj4IAqY8I+wrvb5DixlD0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Jan 2026 16:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e8:e8:4c:77:99:d7:6c:2e:2c:cf:8d:ca:b3:1c:1e:c7:33:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3 Validity Not Before: Jan 12 15:23:51 2026 GMT Not After : Jan 13 16:39:51 2026 GMT Subject: CN=9D7CEDE758FCE808AE595CCA5EC309AB17BE1D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:f6:d7:ca:15:a3:bb:c6:7e:3a:e0:e6:9a: da:22:32:4f:d1:e4:0e:ea:16:ef:11:f6:29:0b:be: c7:46:d7:2f:c7:80:6e:bf:5e:8c:a8:bf:51:90:2e: 6f:18:42:71:c8:30:91:bc:fe:1c:29:db:3c:5b:15: d0:39:56:c0:26:ee:78:b3:e2:50:c9:07:7e:87:e5: f1:b7:d0:44:24:e1:50:65:bf:dd:c0:19:7f:94:5c: 89:37:97:8d:f3:50:ee:44:e8:e0:65:ef:ed:62:4c: 0e:db:c8:8c:55:f4:ea:a9:49:b7:7a:bc:26:35:09: 31:94:52:be:af:36:00:0d:19:f9:3d:e2:f8:c7:44: dd:0c:98:3e:90:4c:51:31:e6:93:a7:62:23:24:06: 47:64:a9:57:45:8e:97:20:47:8b:2c:b5:1b:42:73: 00:55:a5:29:74:21:f6:74:51:f0:c5:6d:93:58:29: 07:8e:12:d0:16:f2:41:c5:bb:14:1a:b8:a5:73:4a: fc:2d:c3:29:1a:67:3b:96:78:d9:80:78:c7:ba:f6: 74:a0:10:17:d5:e7:58:c3:70:d9:88:d4:97:e2:60: 49:a1:ef:54:58:4e:cd:a1:b2:30:23:7b:02:ab:3b: 13:82:6f:ec:4f:a9:8e:cc:a0:e4:2d:12:d8:62:d2: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7C:ED:E7:58:FC:E8:08:AE:59:5C:CA:5E:C3:09:AB:17:BE:1D:28 X509v3 Authority Key Identifier: keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f9:db:26:25:17:fa:69:36:2f:7c:70:81:c0:8b:15:3f:f3: 3d:e6:a3:d0:e6:f7:84:c0:f3:4a:f5:80:09:14:a1:fb:cf:da: 85:fa:86:69:ac:45:83:eb:7c:91:2b:90:ff:a7:be:38:9d:58: 89:bc:d0:a7:97:40:96:6c:bc:33:31:39:6b:c4:80:13:e7:d3: 61:7b:7d:86:38:5e:8e:38:98:d5:00:77:59:86:7f:62:0e:f9: fa:2f:aa:3d:60:29:32:f8:1b:be:06:25:45:dc:92:9b:f1:91: 66:dc:47:9c:ae:82:11:d0:0c:d8:74:10:a0:d2:f3:de:a1:74: 74:b0:15:33:ff:36:ba:13:57:45:4c:c0:9b:b4:ca:b3:e4:f8: 04:77:fb:1a:d5:42:8d:d9:85:4f:b2:f0:8e:39:d7:c1:09:4d: e2:9d:b9:60:01:cb:5a:2f:cc:62:aa:35:6c:19:19:0c:c4:b1: 63:3d:ce:2a:2d:79:74:bd:11:38:37:a1:ad:3b:ab:6d:05:a9: 2e:a4:40:7a:76:f8:74:ba:d5:04:7f:b5:20:d8:0f:63:b2:d4: f9:e9:fa:15:1d:1b:bc:17:28:d3:aa:73:9c:df:47:94:30:e0: 56:ba:f4:7a:6b:82:c0:8c:a8:16:e4:e5:84:b2:a3:87:30:93: 2e:3f:9b:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ+joTHeZ12wuLM+NyrMcHsczsWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNENDQ0RDE4NjY4QUZGNjI3Mjg3REU5MDlGNEVEQzI1 OENBOUNDMzAeFw0yNjAxMTIxNTIzNTFaFw0yNjAxMTMxNjM5NTFaMDMxMTAvBgNV BAMTKDlEN0NFREU3NThGQ0U4MDhBRTU5NUNDQTVFQzMwOUFCMTdCRTFEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kPbXyhWju8Z+OuDmmtoiMk/R 5A7qFu8R9ikLvsdG1y/HgG6/Xoyov1GQLm8YQnHIMJG8/hwp2zxbFdA5VsAm7niz 4lDJB36H5fG30EQk4VBlv93AGX+UXIk3l43zUO5E6OBl7+1iTA7byIxV9OqpSbd6 vCY1CTGUUr6vNgANGfk94vjHRN0MmD6QTFEx5pOnYiMkBkdkqVdFjpcgR4sstRtC cwBVpSl0IfZ0UfDFbZNYKQeOEtAW8kHFuxQauKVzSvwtwykaZzuWeNmAeMe69nSg EBfV51jDcNmI1JfiYEmh71RYTs2hsjAjewKrOxOCb+xPqY7MoOQtEthi0mq1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnXzt51j86AiuWVzKXsMJqxe+HSgwHwYDVR0j BBgwFoAUM9RE0YZor/YnKH3pCfTtwljKnMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpq Qk0vMC8zM0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDQ0NEQxODY2OEFGRjYy NzI4N0RFOTA5RjRFREMyNThDQTlDQzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpqQk0vMC8z M0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbPnbJiUX+mk2L3xwgcCLFT/zPeaj0Ob3hMDzSvWACRSh+8/ahfqGaaxFg+t8 kSuQ/6e+OJ1YibzQp5dAlmy8MzE5a8SAE+fTYXt9hjhejjiY1QB3WYZ/Yg75+i+q PWApMvgbvgYlRdySm/GRZtxHnK6CEdAM2HQQoNLz3qF0dLAVM/82uhNXRUzAm7TK s+T4BHf7GtVCjdmFT7LwjjnXwQlN4p25YAHLWi/MYqo1bBkZDMSxYz3OKi15dL0R ODehrTurbQWpLqRAenb4dLrVBH+1INgPY7LU+en6FR0bvBco06pznN9HlDDgVrr0 emuCwIyoFuTlhLKjhzCTLj+bwA== -----END CERTIFICATE-----Generated at Tue Jan 13 03:23:44 2026 by rpki-client