This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
File:                     CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json)
Hash identifier:          O4WetstcCTZsHRv/OEh/Hm5143QzGkSgymuZ11dsK5M=
Subject key identifier:   C8:6B:36:A1:D8:50:38:6F:90:E0:FE:6E:1E:0D:AA:F9:F1:77:45:44
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Certificate issuer:       /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial:       5DF9D31994D2940E4D6B644530BAD017EE24D8B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
Manifest number:          033D
Signing time:             Fri 19 Dec 2025 17:52:18 +0000
Manifest this update:     Fri 19 Dec 2025 17:47:18 +0000
Manifest next update:     Sat 20 Dec 2025 21:07:18 +0000
Files and hashes:         1: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: mc7zyxlcDWTpf8MHBgckQ6SrkcbI0QSEbJyTbgaFwFE=)
                          2: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: QYDoawxNmjaSvX+VBoU23ceBKkUAOMjpc+ID6NiZ1/4=)
                          3: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: VBCnHU5TBlO8GQbvm38yaXyrz4vjADhjKHV3unpcPFM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
                          rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f9:d3:19:94:d2:94:0e:4d:6b:64:45:30:ba:d0:17:ee:24:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
        Validity
            Not Before: Dec 19 17:47:18 2025 GMT
            Not After : Dec 20 21:07:18 2025 GMT
        Subject: CN=C86B36A1D850386F90E0FE6E1E0DAAF9F1774544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:92:d6:d7:8b:2c:8f:97:96:e1:9d:5b:5a:
                    8a:84:75:6c:86:30:ca:d2:e2:22:74:bf:ec:2f:26:
                    5b:cb:52:57:d1:c9:d7:99:28:7a:28:13:5f:1a:f6:
                    f6:f9:23:1c:d2:97:8c:e2:68:0e:29:c2:7a:6f:63:
                    c5:b7:51:1b:33:f0:c2:f1:f3:4c:38:e4:d1:05:34:
                    a8:00:03:f0:70:e3:52:22:2d:07:9c:22:44:aa:d3:
                    c6:3a:16:ef:14:9d:b7:5c:db:d8:ed:1e:8d:51:c7:
                    a8:cd:dc:0f:a3:63:11:1a:f6:07:3c:bb:97:18:a3:
                    0a:67:9a:4e:f1:66:34:58:c4:8a:e9:03:11:79:b6:
                    53:03:d7:7e:b4:70:65:28:18:31:f5:83:6b:cf:81:
                    51:6f:6e:a6:12:14:02:24:e8:89:4d:d7:b7:83:b4:
                    12:a0:2c:06:7c:63:91:a9:41:2d:7b:10:99:d8:0e:
                    69:6f:71:7f:48:bf:ab:48:09:84:d1:40:5c:70:73:
                    73:c8:60:e6:36:fc:b7:13:4e:8a:89:f4:69:ee:d5:
                    16:50:d2:2a:6a:db:9f:82:90:eb:e3:4e:c3:56:89:
                    20:85:ae:f5:15:97:93:f5:1a:25:e9:8b:1f:df:91:
                    80:f1:51:0b:70:1c:80:54:b6:36:ce:cb:8c:16:fc:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6B:36:A1:D8:50:38:6F:90:E0:FE:6E:1E:0D:AA:F9:F1:77:45:44
            X509v3 Authority Key Identifier:
                keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:10:3c:c8:5e:75:c9:7a:70:e2:9c:4f:e6:62:b2:40:68:a1:
         0d:3f:0e:e5:76:ac:b2:9c:d1:33:1b:34:5a:bc:45:45:e0:32:
         60:cf:9c:83:fb:db:2b:ae:43:1c:fd:7f:fb:e4:af:55:74:f5:
         e3:36:de:ab:cd:f5:d1:92:57:8c:a6:39:d8:3e:09:28:5b:a3:
         9d:b5:2d:36:ac:3a:f3:6b:08:0b:2d:0e:74:0e:45:a7:6c:de:
         5a:84:45:92:26:d5:4a:e5:24:31:65:49:a6:57:25:14:56:91:
         65:8c:af:3f:ff:6d:0c:3d:83:c1:b5:3f:8d:1d:59:5c:c8:4f:
         f5:46:ba:b6:2b:2a:8b:97:0d:38:e4:c0:35:72:81:b1:bc:ab:
         9f:6d:26:06:06:51:b0:8e:74:d5:74:89:55:bd:62:23:9b:f0:
         21:38:fc:fe:08:f4:63:74:b8:0e:82:2d:80:c6:5b:8d:27:83:
         95:9f:39:d3:e5:6a:c0:5e:c2:a8:33:2c:4b:55:53:06:57:53:
         a3:d5:92:f5:45:e3:f2:3a:8f:9f:95:de:23:15:46:cf:72:89:
         30:3b:30:0f:16:f9:d7:db:a1:ba:28:5b:92:2c:34:7c:01:a8:
         56:ba:ac:9e:4b:bc:2d:01:33:25:ee:b0:c2:6f:4b:51:b8:33:
         01:4f:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:22:30 2025 by rpki-client