This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: 9wplRo2iBSS6vKvi0IMG/5+rz1Ifij0BJmB6lseiugY= Subject key identifier: C4:05:E7:5B:6B:39:DA:95:0B:E6:D0:1B:75:61:B3:FC:E2:A0:7A:6F Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 7A8E07C2E89278CA35B0121E265C3D5B77A6A590 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 0335 Signing time: Fri 05 Dec 2025 18:52:43 +0000 Manifest this update: Fri 05 Dec 2025 18:47:43 +0000 Manifest next update: Sat 06 Dec 2025 21:59:43 +0000 Files and hashes: 1: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: FZM5FQ4/OPIue7Ee0cvKydi3sn0aOVt5AW+0FKgUMWs=) 2: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) 3: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: n0C9/GkCbLbH9WRPksqqAGPaZd17gx9HuxHuav2/O/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 21:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8e:07:c2:e8:92:78:ca:35:b0:12:1e:26:5c:3d:5b:77:a6:a5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Dec 5 18:47:43 2025 GMT Not After : Dec 6 21:59:43 2025 GMT Subject: CN=C405E75B6B39DA950BE6D01B7561B3FCE2A07A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:2c:bb:93:7e:d0:59:5b:e5:f2:b4:49:2e: fe:5c:78:89:55:39:53:b8:cc:72:b0:28:9e:48:f3: d2:4c:3a:81:97:bd:f0:7d:be:4c:1e:1c:90:7b:7d: 75:8e:9d:be:c8:ce:82:e9:1a:b3:6e:82:9d:23:8e: b1:02:43:34:4b:7b:33:af:92:ba:d2:88:82:c9:48: e8:06:ee:01:7f:aa:96:59:f6:9c:0f:12:f4:6a:8f: 42:f5:10:13:3b:4d:a1:cd:14:0b:91:65:7d:12:c1: 6f:75:a0:4f:69:c0:e4:0b:be:5d:c9:4f:f9:44:88: 19:2d:68:1b:80:f1:43:4f:4e:31:57:63:bf:49:14: cd:c0:73:6c:8b:e4:d8:c1:c6:bf:9f:87:21:ce:76: 5b:38:5a:89:b7:82:3b:0b:e5:04:d1:6e:dd:de:ac: fd:bf:38:99:17:1f:1c:f4:23:fe:92:09:13:02:42: ce:52:93:ba:47:ee:77:9a:39:92:5f:82:84:bb:44: e1:07:96:20:fa:06:63:80:a8:f6:e2:11:c6:d5:e1: 01:1f:3d:23:da:54:81:77:cb:77:b7:8d:b6:b6:36: 37:c9:69:fb:95:40:62:dc:75:89:8c:e2:1d:ed:a0: 36:3c:d6:72:c4:22:39:78:a3:22:ff:63:b1:29:a2: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:05:E7:5B:6B:39:DA:95:0B:E6:D0:1B:75:61:B3:FC:E2:A0:7A:6F X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f1:bc:cd:3d:84:57:2e:dd:0a:35:9a:c3:21:e1:89:91:4a: 07:74:d1:a7:68:8b:f5:0a:c9:06:ea:3a:ac:75:cb:a4:58:20: 73:0c:76:74:f0:74:56:03:94:37:57:d9:79:de:ac:00:0f:da: 16:30:a3:33:94:1d:44:3a:39:ac:a7:c0:20:f4:15:f8:96:de: b2:a7:af:05:fc:3c:b1:13:60:34:9a:58:6c:71:76:dd:9a:30: 69:89:9c:4e:88:6c:98:9e:af:69:d2:96:39:23:85:17:67:78: 7d:d2:de:8c:45:13:05:81:d3:1d:06:70:7a:c7:78:81:cd:64: 8e:44:b3:39:f0:3b:21:64:af:2a:94:5f:23:f1:43:bb:df:86: a8:d1:8d:db:58:c2:28:f2:41:96:e1:22:8d:aa:37:e3:ee:5b: f8:c3:71:4b:f7:4d:23:33:ac:2e:7d:3d:a2:df:c3:c3:53:c3: 27:c4:41:21:90:a2:35:d5:d3:9f:b5:a2:32:af:60:e5:7a:0a: d8:3f:19:37:52:43:8b:c4:ae:c2:9f:a5:b4:29:7b:7e:46:f9: f1:4b:ef:4d:ed:14:08:84:e9:55:b5:f6:d9:c6:48:03:6b:40: fe:7d:61:de:80:1e:6f:79:33:2e:df:eb:75:5e:66:0e:45:b9: 20:ff:98:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeo4HwuiSeMo1sBIeJlw9W3empZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTEyMDUxODQ3NDNaFw0yNTEyMDYyMTU5NDNaMDMxMTAvBgNV BAMTKEM0MDVFNzVCNkIzOURBOTUwQkU2RDAxQjc1NjFCM0ZDRTJBMDdBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIyy7k37QWVvl8rRJLv5ceIlV OVO4zHKwKJ5I89JMOoGXvfB9vkweHJB7fXWOnb7IzoLpGrNugp0jjrECQzRLezOv krrSiILJSOgG7gF/qpZZ9pwPEvRqj0L1EBM7TaHNFAuRZX0SwW91oE9pwOQLvl3J T/lEiBktaBuA8UNPTjFXY79JFM3Ac2yL5NjBxr+fhyHOdls4Wom3gjsL5QTRbt3e rP2/OJkXHxz0I/6SCRMCQs5Sk7pH7neaOZJfgoS7ROEHliD6BmOAqPbiEcbV4QEf PSPaVIF3y3e3jba2NjfJafuVQGLcdYmM4h3toDY81nLEIjl4oyL/Y7EpogABAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxAXnW2s52pUL5tAbdWGz/OKgem8wHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAivG8zT2EVy7dCjWawyHhiZFKB3TRp2iL9QrJBuo6rHXLpFggcwx2dPB0VgOU N1fZed6sAA/aFjCjM5QdRDo5rKfAIPQV+JbesqevBfw8sRNgNJpYbHF23ZowaYmc TohsmJ6vadKWOSOFF2d4fdLejEUTBYHTHQZwesd4gc1kjkSzOfA7IWSvKpRfI/FD u9+GqNGN21jCKPJBluEijao34+5b+MNxS/dNIzOsLn09ot/Dw1PDJ8RBIZCiNdXT n7WiMq9g5XoK2D8ZN1JDi8Suwp+ltCl7fkb58UvvTe0UCITpVbX22cZIA2tA/n1h 3oAeb3kzLt/rdV5mDkW5IP+YbA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:49 2025 by rpki-client