This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft File: 33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft (raw, json) Hash identifier: hA2GeugRVpNO1xqf/Zzcsirz+ihFkq7ETtur2389ph4= Subject key identifier: CE:12:04:D7:74:E0:02:48:66:5A:3A:DF:99:B2:16:5A:14:0E:67:32 Authority key identifier: 33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44 Certificate issuer: /CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544 Certificate serial: 44DDC19F443E821AD290DDEFFF0DA30AAD20CC91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft Manifest number: 03 Signing time: Mon 22 Dec 2025 13:29:42 +0000 Manifest this update: Mon 22 Dec 2025 13:24:42 +0000 Manifest next update: Tue 23 Dec 2025 14:15:42 +0000 Files and hashes: 1: 33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl (hash: EKrbn1qoMxxjSYTlIss1v6QRaTft9YaVfEQ9XhKE6Kw=) 2: 323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (hash: tDvuoyt9lPgo5jemTMcolNsz8MHK+9xyqLPEnLKEBTY=) 3: 3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (hash: seOef9NW89j1IL2/t8Ibsw6pheCDikQdCsR06ZCcFxc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 14:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:dd:c1:9f:44:3e:82:1a:d2:90:dd:ef:ff:0d:a3:0a:ad:20:cc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B5534F9EC51CE84AFB461BED294ABBE0B81544 Validity Not Before: Dec 22 13:24:42 2025 GMT Not After : Dec 23 14:15:42 2025 GMT Subject: CN=CE1204D774E00248665A3ADF99B2165A140E6732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:52:5f:89:20:a4:19:0e:54:f7:cc:d9:8f: 5c:45:fa:fb:86:53:e1:2d:52:1b:e5:98:08:25:bc: 98:f7:ef:fb:e8:72:ef:52:f8:1c:6d:04:d5:0c:80: c9:36:bb:e4:62:4a:14:f4:58:5c:d9:24:db:3e:59: 7e:d4:64:98:7b:ff:86:32:e0:b3:ed:1e:c8:40:b4: e3:ac:87:3c:84:e2:9b:95:65:b7:aa:23:4b:c6:55: 0d:73:f4:ef:a9:84:1c:05:bb:31:b2:05:85:f3:90: 43:42:88:99:a4:60:5c:46:56:14:19:cb:07:ea:e7: c0:fd:ad:e7:27:72:cb:fd:7a:e0:fe:f2:01:ab:8c: 38:83:c2:7b:d6:11:4a:7c:4a:aa:80:16:33:b2:47: d9:09:5a:19:18:5d:f7:18:f6:9f:4c:62:ca:f1:2c: 8e:d5:1b:05:8a:6c:be:aa:6d:41:d5:af:55:d3:19: 25:e5:ae:b3:a8:fb:ef:ca:f0:76:fb:ab:31:91:52: 83:36:3f:8d:00:75:de:3c:04:13:87:a3:7e:45:1f: bd:78:03:d3:aa:20:84:d2:a8:dc:7a:c0:b1:b9:0b: 08:0f:02:cc:1e:7b:eb:d2:56:04:57:48:d4:fc:c3: b6:43:88:7a:86:82:80:6e:d9:8b:7e:92:29:0c:ab: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:12:04:D7:74:E0:02:48:66:5A:3A:DF:99:B2:16:5A:14:0E:67:32 X509v3 Authority Key Identifier: keyid:33:B5:53:4F:9E:C5:1C:E8:4A:FB:46:1B:ED:29:4A:BB:E0:B8:15:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B5534F9EC51CE84AFB461BED294ABBE0B81544.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/33B5534F9EC51CE84AFB461BED294ABBE0B81544.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:26:1f:5a:63:76:6b:70:94:c5:b5:93:cd:db:d6:d2:d2:6a: 61:62:3f:53:30:e4:03:83:05:b5:7b:a5:22:cd:28:c6:98:73: 40:ec:b4:0e:7a:d2:42:bb:6e:4c:ce:ba:40:a9:83:83:a5:c0: 0c:69:bb:90:e7:a0:fb:a6:a5:9d:99:e2:d8:d8:42:48:19:a0: 4d:ab:37:ba:fc:69:7f:e5:f3:c9:22:e7:03:8c:dd:c1:ff:63: 55:0f:06:b9:b7:a5:46:24:ee:cd:bf:58:fb:12:c2:8e:e0:01: dc:ee:d7:fa:f8:c1:36:c9:38:b4:78:0e:b8:55:d0:60:f8:14: 5a:8a:e1:7b:38:57:de:97:96:75:a5:83:0a:20:92:aa:9a:c6: 35:b1:bf:03:5f:8b:e3:67:bd:0f:e9:15:e2:73:12:0d:29:80: 42:cd:fd:6c:0f:2e:46:fd:76:f2:9a:48:eb:07:18:80:59:b5: b6:57:b3:69:08:dd:f5:3e:58:bd:cd:2b:5a:6e:38:be:b8:12: c3:b8:78:21:f1:61:52:23:1a:b0:a9:ea:0a:b8:7f:d5:17:9e: cd:5d:1d:36:02:da:6d:30:b2:84:83:16:4d:d7:e9:1f:be:b6: f4:6b:d7:e0:2b:f1:4e:13:a3:59:ee:a1:5d:a9:a6:e3:a9:79: 68:82:cd:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURN3Bn0Q+ghrSkN3v/w2jCq0gzJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNTUzNEY5RUM1MUNFODRBRkI0NjFCRUQyOTRBQkJF MEI4MTU0NDAeFw0yNTEyMjIxMzI0NDJaFw0yNTEyMjMxNDE1NDJaMDMxMTAvBgNV BAMTKENFMTIwNEQ3NzRFMDAyNDg2NjVBM0FERjk5QjIxNjVBMTQwRTY3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSCFJfiSCkGQ5U98zZj1xF+vuG U+EtUhvlmAglvJj37/vocu9S+BxtBNUMgMk2u+RiShT0WFzZJNs+WX7UZJh7/4Yy 4LPtHshAtOOshzyE4puVZbeqI0vGVQ1z9O+phBwFuzGyBYXzkENCiJmkYFxGVhQZ ywfq58D9recncsv9euD+8gGrjDiDwnvWEUp8SqqAFjOyR9kJWhkYXfcY9p9MYsrx LI7VGwWKbL6qbUHVr1XTGSXlrrOo++/K8Hb7qzGRUoM2P40Add48BBOHo35FH714 A9OqIITSqNx6wLG5CwgPAswee+vSVgRXSNT8w7ZDiHqGgoBu2Yt+kikMq/bPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzhIE13TgAkhmWjrfmbIWWhQOZzIwHwYDVR0j BBgwFoAUM7VTT57FHOhK+0Yb7SlKu+C4FUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEpKeFJwOXJrSDR5TUpKNnJEdTFUTnFLanBBemFTbW1ZN3MzenBiZ0RQ NlgvMC8zM0I1NTM0RjlFQzUxQ0U4NEFGQjQ2MUJFRDI5NEFCQkUwQjgxNTQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjU1MzRGOUVDNTFDRTg0 QUZCNDYxQkVEMjk0QUJCRTBCODE1NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEpKeFJwOXJrSDR5TUpKNnJEdTFUTnFLanBBemFTbW1ZN3MzenBiZ0RQNlgvMC8z M0I1NTM0RjlFQzUxQ0U4NEFGQjQ2MUJFRDI5NEFCQkUwQjgxNTQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASiYfWmN2a3CUxbWTzdvW0tJqYWI/UzDkA4MFtXulIs0oxphzQOy0DnrSQrtu TM66QKmDg6XADGm7kOeg+6alnZni2NhCSBmgTas3uvxpf+XzySLnA4zdwf9jVQ8G ubelRiTuzb9Y+xLCjuAB3O7X+vjBNsk4tHgOuFXQYPgUWorhezhX3peWdaWDCiCS qprGNbG/A1+L42e9D+kV4nMSDSmAQs39bA8uRv128ppI6wcYgFm1tlezaQjd9T5Y vc0rWm44vrgSw7h4IfFhUiMasKnqCrh/1ReezV0dNgLabTCyhIMWTdfpH7629GvX 4CvxThOjWe6hXamm46l5aILNVg== -----END CERTIFICATE-----Generated at Mon Dec 22 19:06:45 2025 by rpki-client