This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
File:                     FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft (raw, json)
Hash identifier:          waNJk34uYaxquC5Nf1NB+uLRUfxLtE4f38YL1HVLXv4=
Subject key identifier:   CD:B7:80:B9:C3:FC:F8:BC:61:4A:33:ED:5D:49:60:A3:60:2A:AB:1D
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       44B872F0F03C3CF4DAB1A5B5F75221785BEB2116
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
Manifest number:          033C
Signing time:             Mon 22 Dec 2025 21:06:00 +0000
Manifest this update:     Mon 22 Dec 2025 21:01:00 +0000
Manifest next update:     Wed 24 Dec 2025 01:02:00 +0000
Files and hashes:         1: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl (hash: D+JfApTpWiLBF2EExyPsxmcGR+DE6o53EaOqwejyZ0w=)
                          2: 3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (hash: gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=)
                          3: 323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (hash: TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
                          rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 23:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b8:72:f0:f0:3c:3c:f4:da:b1:a5:b5:f7:52:21:78:5b:eb:21:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Dec 22 21:01:00 2025 GMT
            Not After : Dec 24 01:02:00 2025 GMT
        Subject: CN=CDB780B9C3FCF8BC614A33ED5D4960A3602AAB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:f7:bc:21:21:77:60:9b:d3:7e:d6:ce:23:
                    0f:04:f0:24:ca:d2:bc:00:1e:d6:3e:33:b8:cc:79:
                    11:d4:fb:c4:81:46:16:38:48:d6:f6:f3:17:92:fb:
                    26:85:8d:16:1f:8b:91:be:f1:6d:7d:a7:28:49:40:
                    c0:66:56:50:54:1f:f7:95:9d:af:0d:bf:b3:3c:fd:
                    30:7f:7f:3a:8a:87:ce:7d:6e:e3:90:00:d2:d3:a1:
                    6d:84:3e:4c:7c:6b:4f:c3:87:a0:14:9a:75:2e:9c:
                    d3:4e:aa:3e:21:33:a1:a2:30:21:58:22:cc:db:73:
                    79:34:26:fc:a4:8a:69:5f:cf:a3:8f:d7:39:3f:47:
                    9a:e0:6b:44:ec:86:f6:cc:9f:66:f6:c9:c5:4f:a8:
                    e0:5e:a7:8b:a6:5c:78:29:18:b9:b7:a2:f7:30:79:
                    fc:a1:75:29:a1:6a:52:39:de:ad:c9:37:57:d4:6d:
                    67:59:93:5d:92:d5:cf:06:d0:52:04:34:b1:58:85:
                    72:cb:53:7b:a9:60:5c:33:0e:7f:74:93:41:70:0c:
                    41:fc:9c:49:64:82:48:3f:65:8b:b5:28:0b:73:f9:
                    ab:53:e0:96:cd:7c:33:48:9a:81:4b:22:6b:0c:68:
                    01:9b:50:1c:d1:f2:7b:d1:9a:8a:fd:e5:b4:39:35:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:80:B9:C3:FC:F8:BC:61:4A:33:ED:5D:49:60:A3:60:2A:AB:1D
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:41:fa:54:54:2c:ac:32:12:20:3d:fc:a5:6f:e9:0d:cc:7c:
         9d:c3:94:2e:a7:a5:a0:50:c6:68:6a:5d:c6:89:95:b5:b3:8a:
         fc:6f:ed:37:88:f7:ea:bc:3a:0c:3d:be:e8:4a:84:9a:f1:1c:
         2f:ad:9b:08:89:bf:f1:f9:99:ad:53:21:8f:59:3d:28:4f:ce:
         f8:87:0b:90:53:56:6d:27:ee:b7:31:9a:dc:1b:04:76:64:d1:
         a2:90:14:ec:cb:03:37:a6:fd:7c:db:f2:51:86:64:b6:3e:11:
         84:87:8a:bc:00:33:9c:4c:75:db:b9:2f:66:1c:8e:99:d1:fb:
         70:18:35:21:7e:11:af:e9:62:45:2e:ba:2c:aa:82:ad:4e:8c:
         74:ec:a6:d9:c4:a1:b3:d6:7e:a1:6f:2d:3f:ee:c7:e4:e4:65:
         26:44:85:c3:b4:eb:30:bc:ff:b1:3f:f9:19:7b:1b:a5:19:8a:
         84:a8:e8:bb:da:af:bc:28:bd:9a:30:8a:9d:67:ba:cd:77:63:
         d5:4b:bf:5f:cb:92:ee:14:bb:27:5d:08:e5:33:da:f9:68:7e:
         eb:39:d6:bb:b8:d8:89:3a:41:3b:18:ba:78:63:77:6e:3f:d4:
         ba:4d:f4:d1:ba:55:94:f8:27:a0:9b:4e:43:1a:5d:e5:87:4f:
         da:0d:aa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:32:09 2025 by rpki-client