This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: SA+1+T10VtoBp04J2CzyDe1vpylGy/J0ngC/8lxe6Z4= Subject key identifier: 73:E4:46:D2:85:E9:5D:5C:24:0C:98:F0:50:C8:37:27:95:6E:1F:02 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 15883F575611B16200AAD69E9702DFA0AE542F56 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 034F Signing time: Sat 20 Dec 2025 19:05:34 +0000 Manifest this update: Sat 20 Dec 2025 19:00:34 +0000 Manifest next update: Sun 21 Dec 2025 20:41:34 +0000 Files and hashes: 1: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: 8lP1sjqG0Hz+Ksi3RyniiWHblUSG01LoxW5LEGnjdl0=) 2: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=) 3: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: 65XCz7a3MWKVs7zGaFWxzye5qGPakmiAev6OY53gaHU=) 4: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Dec 2025 20:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:88:3f:57:56:11:b1:62:00:aa:d6:9e:97:02:df:a0:ae:54:2f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Dec 20 19:00:34 2025 GMT Not After : Dec 21 20:41:34 2025 GMT Subject: CN=73E446D285E95D5C240C98F050C83727956E1F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:3d:c7:27:38:b8:de:fd:f8:7e:12:ef:fd: bf:7f:14:00:fe:a0:29:08:04:ba:8d:ec:37:fc:99: 7c:04:a7:92:3d:e3:8e:75:65:bb:27:c4:98:15:0e: 12:32:65:8f:57:25:37:5d:1a:e2:89:c5:a8:42:37: 12:d8:31:fe:61:5d:2d:6f:b4:10:27:45:14:ab:b0: 1b:a5:d7:c5:18:46:43:98:6d:f9:60:5d:ac:fd:47: dd:11:bd:a0:e2:b8:c0:80:ff:06:a4:9a:3a:69:10: 30:3d:14:fe:c7:9b:c9:18:1f:df:82:b5:ab:af:c9: 3f:61:92:ff:95:f6:ff:e0:73:05:71:56:93:6c:7d: 7e:80:a9:17:8a:dc:84:ef:9b:5e:de:91:af:d2:84: d6:70:8b:a7:6f:c1:a7:d5:69:51:34:bd:57:77:6f: d9:e3:42:23:ce:e0:46:1c:b1:2f:1b:45:fb:3b:e7: fb:cd:50:bf:2a:7d:25:77:d2:08:c5:f5:84:ab:35: f2:48:66:69:45:53:ee:62:5a:22:58:e8:99:91:40: 49:39:a1:8a:04:12:73:d9:e5:63:ec:59:9b:00:48: 80:85:3c:08:96:dc:fe:0f:ca:9e:d5:39:85:a4:f6: a7:f6:4f:e1:0b:d2:fb:fb:2d:af:3a:70:19:d6:81: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E4:46:D2:85:E9:5D:5C:24:0C:98:F0:50:C8:37:27:95:6E:1F:02 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:72:2d:56:64:df:90:75:18:9c:16:21:a9:02:9a:64:4c:4d: ae:10:f4:ac:8f:c7:b2:bd:9e:f9:03:21:32:72:0d:bb:8e:45: 93:be:62:4d:73:fb:1f:e6:98:4c:57:e9:93:ce:96:e6:9e:1a: a4:69:9b:48:0f:ed:cb:95:37:92:5b:c5:c3:8e:05:82:6b:c8: c5:a3:b1:3d:75:27:fb:cd:37:b4:7a:a3:21:80:bf:6b:25:f1: 49:c5:29:b8:65:8d:b1:f5:b9:f7:be:11:6b:95:31:1f:d0:5e: df:c4:6d:9f:3e:8b:b1:b3:cc:23:0a:fb:7f:2d:2e:8a:28:67: aa:53:07:45:b5:e9:34:33:33:3e:b2:ed:60:9d:b6:09:38:ad: a4:07:0d:76:fd:fa:1d:d8:36:bd:ae:1b:0e:b3:a1:38:c4:4f: 9b:c4:90:8c:0a:33:fd:19:2c:32:76:fb:0f:91:ec:2d:ee:c7: d4:a9:30:66:45:0b:25:73:d9:a2:dd:52:6a:0f:f5:13:52:27: 13:cc:81:c0:04:b2:af:92:d0:7b:ad:37:2f:9a:24:bc:20:68: 95:69:67:f9:68:e3:15:53:27:bb:33:53:1d:e0:54:5e:05:0a: b5:02:0b:90:61:89:48:9e:48:a8:0e:49:ba:28:c4:24:b0:69: d6:b2:b6:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFYg/V1YRsWIAqtaelwLfoK5UL1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTEyMjAxOTAwMzRaFw0yNTEyMjEyMDQxMzRaMDMxMTAvBgNV BAMTKDczRTQ0NkQyODVFOTVENUMyNDBDOThGMDUwQzgzNzI3OTU2RTFGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeT3HJzi43v34fhLv/b9/FAD+ oCkIBLqN7Df8mXwEp5I94451ZbsnxJgVDhIyZY9XJTddGuKJxahCNxLYMf5hXS1v tBAnRRSrsBul18UYRkOYbflgXaz9R90RvaDiuMCA/wakmjppEDA9FP7Hm8kYH9+C tauvyT9hkv+V9v/gcwVxVpNsfX6AqReK3ITvm17eka/ShNZwi6dvwafVaVE0vVd3 b9njQiPO4EYcsS8bRfs75/vNUL8qfSV30gjF9YSrNfJIZmlFU+5iWiJY6JmRQEk5 oYoEEnPZ5WPsWZsASICFPAiW3P4Pyp7VOYWk9qf2T+EL0vv7La86cBnWgfhlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc+RG0oXpXVwkDJjwUMg3J5VuHwIwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWHItVmTfkHUYnBYhqQKaZExNrhD0rI/Hsr2e+QMhMnINu45Fk75iTXP7H+aY TFfpk86W5p4apGmbSA/ty5U3klvFw44FgmvIxaOxPXUn+803tHqjIYC/ayXxScUp uGWNsfW5974Ra5UxH9Be38Rtnz6LsbPMIwr7fy0uiihnqlMHRbXpNDMzPrLtYJ22 CTitpAcNdv36Hdg2va4bDrOhOMRPm8SQjAoz/RksMnb7D5HsLe7H1KkwZkULJXPZ ot1Sag/1E1InE8yBwASyr5LQe603L5okvCBolWln+WjjFVMnuzNTHeBUXgUKtQIL kGGJSJ5IqA5JuijEJLBp1rK2lg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:24:33 2025 by rpki-client