This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft File: BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft (raw, json) Hash identifier: rH8S1acdUo304j4fRTVlzYrYxiGdCe1ALfcz3VRdxi0= Subject key identifier: 9D:27:37:C3:54:B2:EB:22:CA:DB:86:47:BE:C3:27:02:03:2D:4C:43 Authority key identifier: BD:33:22:3E:F2:A3:73:94:67:5D:7D:34:B5:C8:F3:27:DA:58:A7:6E Certificate issuer: /CN=BD33223EF2A37394675D7D34B5C8F327DA58A76E Certificate serial: 0890042DC49F51D1AC173F65BAF0F7B4FDE6FFBC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer Subject info access: rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft Manifest number: 29 Signing time: Fri 05 Dec 2025 16:48:56 +0000 Manifest this update: Fri 05 Dec 2025 16:43:56 +0000 Manifest next update: Sat 06 Dec 2025 20:20:56 +0000 Files and hashes: 1: BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl (hash: MeiwNV/15F1ykUa+ztt8+Odt9G9XIjg9CMPpUP2+dJc=) 2: 323830343a386630633a3a2f33322d313238203d3e20323733343634.roa (hash: yYw47TgaVmtOmfFRpM4vizV4A19jVR0QOmN2wiNSI7M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 20:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:90:04:2d:c4:9f:51:d1:ac:17:3f:65:ba:f0:f7:b4:fd:e6:ff:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD33223EF2A37394675D7D34B5C8F327DA58A76E Validity Not Before: Dec 5 16:43:56 2025 GMT Not After : Dec 6 20:20:56 2025 GMT Subject: CN=9D2737C354B2EB22CADB8647BEC32702032D4C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:95:ac:6b:ad:dd:20:14:14:d6:96:78:d8: e7:fe:a8:c0:54:fa:7b:46:0e:31:c2:fa:f1:32:45: 36:9c:3e:19:b1:e5:87:e7:43:66:01:ac:3e:fd:91: fc:1b:fc:75:f6:24:fe:99:7c:c6:64:65:d8:1e:35: 00:3f:c7:f6:7e:a1:c5:c5:d2:d0:ec:c2:6f:74:52: 86:56:2d:b7:0b:b8:96:0c:6d:00:94:db:4e:56:bf: 29:4d:37:d7:99:ac:58:f9:13:2e:15:1c:7a:f3:ef: 6e:10:d5:79:bf:a7:3d:8a:6d:48:84:c6:26:7a:0b: 2f:79:7f:f9:7a:8c:bc:6d:17:e4:66:d6:26:90:e7: 1c:d0:e6:43:45:f3:c6:07:5f:ca:64:77:6d:39:8e: 17:c0:74:e0:15:29:21:36:51:c9:a6:64:49:67:d0: 07:19:d5:fe:30:66:df:65:a0:5d:32:fe:33:7a:88: ab:b4:a0:d9:5c:a5:d8:ac:7f:76:f4:65:61:53:bb: c8:33:7d:9c:3c:4c:8b:11:bb:09:8d:f0:4e:be:f8: 82:05:a7:e9:fd:16:45:b9:de:63:f8:d2:ca:1b:10: ca:8a:ad:5e:8d:1c:79:c6:4a:38:fc:86:03:06:8a: da:fe:b0:c9:a9:3b:10:cb:e4:fa:94:34:cf:15:6d: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:27:37:C3:54:B2:EB:22:CA:DB:86:47:BE:C3:27:02:03:2D:4C:43 X509v3 Authority Key Identifier: keyid:BD:33:22:3E:F2:A3:73:94:67:5D:7D:34:B5:C8:F3:27:DA:58:A7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:19:6c:a4:3a:70:aa:6d:4a:a1:4f:8b:5b:97:35:77:95:99: 32:f9:83:04:12:bc:9c:b3:d9:70:7e:d9:ff:ed:40:31:fe:0a: 4b:42:0d:50:01:09:5a:a6:f2:ee:b2:03:47:54:d8:92:3c:8c: a9:12:ca:73:c0:c4:ce:a3:17:10:22:de:e9:f9:d5:3b:47:67: 6e:aa:1a:1f:2b:95:cb:9c:02:6a:9a:01:d5:a0:e5:7b:fd:f3: 9d:62:73:21:ea:bc:4d:96:ae:7d:19:7e:77:0d:09:b2:fd:d5: 61:c6:ba:b5:86:02:53:51:bd:5d:1f:6b:35:d3:11:22:32:fa: 2e:d1:da:aa:a2:2e:66:01:16:6f:c2:d0:02:b2:06:7e:4b:1e: 34:6e:d2:c6:7b:2c:01:d8:f6:fa:1b:46:24:96:4d:fb:8e:5d: d8:f5:46:59:0b:6d:3e:e0:68:49:5f:29:1e:51:19:b3:41:1a: 91:84:5e:fe:4d:51:92:6e:8f:f5:05:90:5a:f9:4b:4b:86:13: 58:bf:c2:26:c0:f0:41:60:f2:7c:6d:50:0b:de:f5:1a:37:4c: a5:d0:5e:16:ad:ac:d3:c7:b7:f1:a3:bd:a5:24:3d:14:48:bc: 7e:85:73:3e:34:d8:f4:b6:d5:ac:1e:21:9a:c1:43:9d:a4:98: 50:42:18:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCJAELcSfUdGsFz9luvD3tP3m/7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQzMzIyM0VGMkEzNzM5NDY3NUQ3RDM0QjVDOEYzMjdE QTU4QTc2RTAeFw0yNTEyMDUxNjQzNTZaFw0yNTEyMDYyMDIwNTZaMDMxMTAvBgNV BAMTKDlEMjczN0MzNTRCMkVCMjJDQURCODY0N0JFQzMyNzAyMDMyRDRDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3JWsa63dIBQU1pZ42Of+qMBU +ntGDjHC+vEyRTacPhmx5YfnQ2YBrD79kfwb/HX2JP6ZfMZkZdgeNQA/x/Z+ocXF 0tDswm90UoZWLbcLuJYMbQCU205WvylNN9eZrFj5Ey4VHHrz724Q1Xm/pz2KbUiE xiZ6Cy95f/l6jLxtF+Rm1iaQ5xzQ5kNF88YHX8pkd205jhfAdOAVKSE2UcmmZEln 0AcZ1f4wZt9loF0y/jN6iKu0oNlcpdisf3b0ZWFTu8gzfZw8TIsRuwmN8E6++IIF p+n9FkW53mP40sobEMqKrV6NHHnGSjj8hgMGitr+sMmpOxDL5PqUNM8VbZFtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnSc3w1Sy6yLK24ZHvsMnAgMtTEMwHwYDVR0j BBgwFoAUvTMiPvKjc5RnXX00tcjzJ9pYp24wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRThGMWdaYXZVWmUxdjJXRmRKb3R1S29NUGpHNXpMZ2RmekZEaE1WQmdn VGQvMC9CRDMzMjIzRUYyQTM3Mzk0Njc1RDdEMzRCNUM4RjMyN0RBNThBNzZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMzMyMjNFRjJBMzczOTQ2 NzVEN0QzNEI1QzhGMzI3REE1OEE3NkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RThGMWdaYXZVWmUxdjJXRmRKb3R1S29NUGpHNXpMZ2RmekZEaE1WQmdnVGQvMC9C RDMzMjIzRUYyQTM3Mzk0Njc1RDdEMzRCNUM4RjMyN0RBNThBNzZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxlspDpwqm1KoU+LW5c1d5WZMvmDBBK8nLPZcH7Z/+1AMf4KS0INUAEJWqby 7rIDR1TYkjyMqRLKc8DEzqMXECLe6fnVO0dnbqoaHyuVy5wCapoB1aDle/3znWJz Ieq8TZaufRl+dw0Jsv3VYca6tYYCU1G9XR9rNdMRIjL6LtHaqqIuZgEWb8LQArIG fkseNG7SxnssAdj2+htGJJZN+45d2PVGWQttPuBoSV8pHlEZs0EakYRe/k1Rkm6P 9QWQWvlLS4YTWL/CJsDwQWDyfG1QC971GjdMpdBeFq2s08e38aO9pSQ9FEi8foVz PjTY9LbVrB4hmsFDnaSYUEIYXg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:10 2025 by rpki-client