This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft File: 33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json) Hash identifier: M13Tg/9ORgu90to+XpyHwIQpmaa47NiXoz0TDDOtRzc= Subject key identifier: 8F:77:04:E7:D3:88:64:92:91:19:2F:A8:D0:05:4E:8C:AA:B7:62:CC Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 Certificate issuer: /CN=33B6EA309A04207739CA6004EC33B135FCE12550 Certificate serial: 40A40288C06D8980CAA7463E64995725D858F5D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft Manifest number: D3 Signing time: Fri 05 Dec 2025 20:31:06 +0000 Manifest this update: Fri 05 Dec 2025 20:26:06 +0000 Manifest next update: Sat 06 Dec 2025 22:29:06 +0000 Files and hashes: 1: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: +IBeCPC6ST334TJiuvxhpYGFjNa8HyxQrt3QqbXm7eE=) 2: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: ePRPqLdmr119D6e9US4AGeHsziHti7XrOw2kC8hx0d0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 06 Dec 2025 22:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:02:88:c0:6d:89:80:ca:a7:46:3e:64:99:57:25:d8:58:f5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550 Validity Not Before: Dec 5 20:26:06 2025 GMT Not After : Dec 6 22:29:06 2025 GMT Subject: CN=8F7704E7D388649291192FA8D0054E8CAAB762CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:80:23:75:fd:31:10:ea:dc:47:50:e3:83: c9:20:b5:e4:5e:d5:75:11:ca:ef:a0:ef:b9:4e:63: 5b:9f:e0:09:fb:1d:68:47:ff:d7:81:89:96:fc:84: 4c:d7:8e:f3:d2:89:4c:d5:3b:dc:01:ea:1b:c7:b6: 54:35:5d:00:a3:43:83:f1:1a:43:cb:84:05:bc:10: 20:68:0a:61:86:20:34:a5:3b:40:ea:b0:3e:4e:75: 33:9a:50:b3:40:5e:e3:4f:fb:4a:c9:e3:18:73:d6: 9b:83:af:76:ba:cf:05:df:59:a6:01:c0:e0:52:4f: ac:0e:bb:66:34:01:57:47:98:f9:9e:81:78:be:4a: db:92:36:78:54:0a:b2:ec:e5:f2:8a:b3:bb:54:d8: 19:45:60:b6:d8:d4:03:7b:43:6f:99:e0:3e:6c:b7: 85:04:62:08:35:4f:bf:a2:dd:2c:e0:eb:a2:d8:89: 39:4f:6b:89:77:4e:11:85:13:22:0e:61:b8:e2:fe: 1f:be:d9:44:ba:9d:4a:20:6b:3d:ca:bf:1f:00:a0: 42:49:e9:7b:94:63:64:6e:a6:47:02:85:40:27:39: 60:5d:6e:ae:62:a5:3f:4e:3e:66:72:9c:d4:30:be: 35:cd:bf:3e:44:a5:52:ec:82:d6:d2:f8:db:59:ab: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:77:04:E7:D3:88:64:92:91:19:2F:A8:D0:05:4E:8C:AA:B7:62:CC X509v3 Authority Key Identifier: keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:73:84:32:ec:39:2d:d1:85:c7:cd:5e:ad:44:c6:d8:f0:00: 78:cf:90:20:0c:b7:4b:1f:02:15:f8:c5:fa:ca:e7:b4:30:68: 2c:0b:e2:ec:89:52:2e:06:a7:7b:f6:a7:98:30:eb:07:ca:27: 8d:d6:f0:01:c0:88:35:e7:11:a1:17:92:6d:5b:d6:98:de:7f: af:ee:0d:90:71:e8:cc:20:7c:b7:83:77:2a:56:10:7d:b7:da: 9f:ca:9d:28:2e:8c:26:d5:cb:16:f7:9a:6a:9c:69:48:84:1c: da:44:2d:aa:46:70:60:4b:82:49:5d:65:d5:21:74:4c:39:4a: 29:88:53:b1:f4:20:95:0c:78:54:86:00:ca:87:26:6b:a7:34: 43:af:67:fb:17:fc:d3:68:5c:e2:1c:c1:96:fc:ee:ee:88:25: f0:d0:69:7e:92:de:c4:6f:75:fe:b1:72:85:ac:34:76:82:39: 6c:6f:81:b1:28:0c:10:bc:29:86:aa:e5:fa:03:a1:63:2a:a8: 05:2b:db:a7:f1:e3:74:0d:7f:30:74:4a:88:78:5f:2e:89:8c: 74:bf:66:a7:63:27:38:d7:90:08:04:94:f0:d2:23:dd:4b:ce: d2:a6:4b:07:d9:0b:1b:47:84:20:f1:dc:4a:f2:16:a6:4b:4b: 45:29:02:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQKQCiMBtiYDKp0Y+ZJlXJdhY9dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG Q0UxMjU1MDAeFw0yNTEyMDUyMDI2MDZaFw0yNTEyMDYyMjI5MDZaMDMxMTAvBgNV BAMTKDhGNzcwNEU3RDM4ODY0OTI5MTE5MkZBOEQwMDU0RThDQUFCNzYyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTr4Ajdf0xEOrcR1Djg8kgteRe 1XURyu+g77lOY1uf4An7HWhH/9eBiZb8hEzXjvPSiUzVO9wB6hvHtlQ1XQCjQ4Px GkPLhAW8ECBoCmGGIDSlO0DqsD5OdTOaULNAXuNP+0rJ4xhz1puDr3a6zwXfWaYB wOBST6wOu2Y0AVdHmPmegXi+StuSNnhUCrLs5fKKs7tU2BlFYLbY1AN7Q2+Z4D5s t4UEYgg1T7+i3Szg66LYiTlPa4l3ThGFEyIOYbji/h++2US6nUogaz3Kvx8AoEJJ 6XuUY2RupkcChUAnOWBdbq5ipT9OPmZynNQwvjXNvz5EpVLsgtbS+NtZq8g9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj3cE59OIZJKRGS+o0AVOjKq3YswwHwYDVR0j BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5 MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmnOEMuw5LdGFx81erUTG2PAAeM+QIAy3Sx8CFfjF+srntDBoLAvi7IlSLgan e/anmDDrB8onjdbwAcCINecRoReSbVvWmN5/r+4NkHHozCB8t4N3KlYQfbfan8qd KC6MJtXLFveaapxpSIQc2kQtqkZwYEuCSV1l1SF0TDlKKYhTsfQglQx4VIYAyocm a6c0Q69n+xf802hc4hzBlvzu7ogl8NBpfpLexG91/rFyhaw0doI5bG+BsSgMELwp hqrl+gOhYyqoBSvbp/HjdA1/MHRKiHhfLomMdL9mp2MnONeQCASU8NIj3UvO0qZL B9kLG0eEIPHcSvIWpktLRSkCWw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:12 2025 by rpki-client