This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft File: 33D444D18668AFF627287DE909F4EDC258CA9CC3.mft (raw, json) Hash identifier: roY7jGu3Q49g+YJv6iaPUEp50QDJMdfrCbmQzIfhdB4= Subject key identifier: AA:0B:BC:A4:2D:0D:BF:A6:69:85:DF:67:DA:78:84:0D:28:59:7E:88 Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3 Certificate issuer: /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3 Certificate serial: 783423D7969273A03A1A16B10101CFC08E97C2E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft Manifest number: 031A Signing time: Sat 06 Dec 2025 16:14:00 +0000 Manifest this update: Sat 06 Dec 2025 16:09:00 +0000 Manifest next update: Sun 07 Dec 2025 19:38:00 +0000 Files and hashes: 1: 323830343a6238343a3a2f33322d3438203d3e203532373838.roa (hash: hl/5OxGOU0JH6btmx6NDigAj4IAqY8I+wrvb5DixlD0=) 2: 3137372e33382e36382e302f32322d3234203d3e203532373838.roa (hash: LsIbEV6d/qkd5SrbHcy8LV68KD6GkOp3U3cHfi9raVk=) 3: 33D444D18668AFF627287DE909F4EDC258CA9CC3.crl (hash: ZlU0LXNPHGJEDhtsylWLShqNOKKejz5TIDczfqqmCco=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 07 Dec 2025 19:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:34:23:d7:96:92:73:a0:3a:1a:16:b1:01:01:cf:c0:8e:97:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3 Validity Not Before: Dec 6 16:09:00 2025 GMT Not After : Dec 7 19:38:00 2025 GMT Subject: CN=AA0BBCA42D0DBFA66985DF67DA78840D28597E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ae:ae:6c:d6:b8:97:c0:71:c8:40:05:d2:45: 28:48:4d:38:8f:60:3d:bc:7b:88:74:3d:80:c5:cd: f4:86:95:06:56:94:ea:59:d6:e2:3c:81:bd:76:53: 75:b0:7b:72:a3:a7:32:c6:20:89:05:40:e1:99:84: 4f:d2:92:35:d3:f8:26:8c:24:f6:82:a4:17:7d:ac: 2b:a7:4e:1e:8b:c6:44:d0:fa:2d:85:2e:b9:ce:81: ef:d8:0a:3d:b1:0e:eb:dc:c7:7d:19:56:66:a7:24: 0b:ac:ba:f3:52:f0:f2:0c:78:02:cd:28:bb:57:64: 4a:f2:c4:bd:83:e0:e4:50:8e:99:1a:62:ab:1e:9b: 90:6a:90:f1:48:e4:0d:9a:b0:3f:82:16:df:76:a4: 48:8c:15:f7:6f:7d:0f:c1:ad:56:08:31:cf:34:e3: 3a:34:46:25:59:98:8f:e8:fc:88:85:b2:9f:36:42: ae:0b:fb:18:26:60:b7:86:fc:76:65:ca:7e:22:5e: ad:c5:5e:3d:2e:8e:44:db:72:44:a5:7f:0f:b1:5e: a6:96:e4:e2:bb:16:30:13:08:56:b5:44:de:96:79: ef:0a:4b:83:97:d8:bc:8c:54:0b:2e:43:ee:49:fc: ae:95:93:3e:6c:b1:13:4d:e3:a5:e9:dd:32:2f:ba: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0B:BC:A4:2D:0D:BF:A6:69:85:DF:67:DA:78:84:0D:28:59:7E:88 X509v3 Authority Key Identifier: keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1c:11:0e:6a:23:e7:30:02:79:cf:13:9d:c9:ee:6f:50:3d: d0:fa:ce:87:6b:47:f2:40:eb:9a:3b:73:d0:01:be:3e:0a:90: f4:fd:aa:90:f7:53:d0:8f:7d:f5:7b:62:91:76:85:89:b0:3d: 52:20:17:14:d5:a1:76:e5:27:ec:d4:e5:d2:de:7c:07:b1:d6: 8a:69:b9:c2:c5:89:4f:dc:fd:83:ca:7a:a1:13:0e:75:84:f0: ed:65:0d:38:9e:f2:7e:32:b1:ad:84:0c:a7:a8:bf:c9:1c:0a: ad:f6:2b:60:60:b5:4a:23:9b:f5:56:ed:d8:71:39:cd:7b:36: 04:f8:5d:b8:96:20:18:6a:57:b4:c9:87:d9:3d:b9:d1:fd:da: c0:bb:95:e2:7b:f7:36:08:9a:69:b8:10:f0:df:57:3a:3b:9f: 02:b2:4a:b3:3f:1c:76:bc:46:24:04:3e:5d:fe:5e:6d:0a:0d: 75:37:4f:7a:a0:a8:ad:ed:0a:97:d3:46:02:97:31:8a:18:f3: ef:7d:66:67:e9:8e:91:0d:10:1e:32:6b:b8:c3:59:53:3a:27: f5:95:e1:7a:54:d7:b7:09:86:3d:70:9d:87:77:97:e5:e7:6a: b4:f3:6a:88:48:65:c6:ac:4d:67:49:e5:d5:84:54:c7:f6:1e: dd:05:77:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeDQj15aSc6A6GhaxAQHPwI6XwuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNENDQ0RDE4NjY4QUZGNjI3Mjg3REU5MDlGNEVEQzI1 OENBOUNDMzAeFw0yNTEyMDYxNjA5MDBaFw0yNTEyMDcxOTM4MDBaMDMxMTAvBgNV BAMTKEFBMEJCQ0E0MkQwREJGQTY2OTg1REY2N0RBNzg4NDBEMjg1OTdFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwrq5s1riXwHHIQAXSRShITTiP YD28e4h0PYDFzfSGlQZWlOpZ1uI8gb12U3Wwe3KjpzLGIIkFQOGZhE/SkjXT+CaM JPaCpBd9rCunTh6LxkTQ+i2FLrnOge/YCj2xDuvcx30ZVmanJAusuvNS8PIMeALN KLtXZEryxL2D4ORQjpkaYqsem5BqkPFI5A2asD+CFt92pEiMFfdvfQ/BrVYIMc80 4zo0RiVZmI/o/IiFsp82Qq4L+xgmYLeG/HZlyn4iXq3FXj0ujkTbckSlfw+xXqaW 5OK7FjATCFa1RN6Wee8KS4OX2LyMVAsuQ+5J/K6Vkz5ssRNN46Xp3TIvujfrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqgu8pC0Nv6Zphd9n2niEDShZfogwHwYDVR0j BBgwFoAUM9RE0YZor/YnKH3pCfTtwljKnMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpq Qk0vMC8zM0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDQ0NEQxODY2OEFGRjYy NzI4N0RFOTA5RjRFREMyNThDQTlDQzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpqQk0vMC8z M0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAixwRDmoj5zACec8Tncnub1A90PrOh2tH8kDrmjtz0AG+PgqQ9P2qkPdT0I99 9XtikXaFibA9UiAXFNWhduUn7NTl0t58B7HWimm5wsWJT9z9g8p6oRMOdYTw7WUN OJ7yfjKxrYQMp6i/yRwKrfYrYGC1SiOb9Vbt2HE5zXs2BPhduJYgGGpXtMmH2T25 0f3awLuV4nv3NgiaabgQ8N9XOjufArJKsz8cdrxGJAQ+Xf5ebQoNdTdPeqCore0K l9NGApcxihjz731mZ+mOkQ0QHjJruMNZUzon9ZXhelTXtwmGPXCdh3eX5edqtPNq iEhlxqxNZ0nl1YRUx/Ye3QV3zg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:00 2025 by rpki-client