This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
File:                     40636332B02FA344DE75686E874C7425B2C58624.mft (raw, json)
Hash identifier:          sb5wORXou+TakyW/1bz6S0xlwD6iQeLjtIoY7+9nUFI=
Subject key identifier:   7F:EA:E8:2D:FF:A1:CC:A6:40:03:28:C7:3C:CF:27:65:75:ED:83:7C
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       704EFC744753C14BE98832441E06F2437D91B150
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
Manifest number:          0339
Signing time:             Tue 16 Dec 2025 13:16:22 +0000
Manifest this update:     Tue 16 Dec 2025 13:11:22 +0000
Manifest next update:     Wed 17 Dec 2025 16:36:22 +0000
Files and hashes:         1: 3137372e3132352e3235342e302f32332d3233203d3e20323633333936.roa (hash: jAiQg/xbs2seV+bOWkGuP8zbg7RylwF1lY5L4h4IuLs=)
                          2: 323830343a313539343a3a2f33332d3333203d3e20323633333936.roa (hash: YKmVNFRSP/O9W205jrH5NGVPcObu3Z2KcYqsPNWrn04=)
                          3: 323830343a313539343a3a2f33322d3332203d3e20323633333936.roa (hash: 1d/tMV5kqtuEUbaOXU5rSJUuY/QmjTTh32uxWrwmASI=)
                          4: 3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa (hash: XEGEbaFtKTg8/SjG6MuFH3nlo1JXpXA9CWutYpshO1Y=)
                          5: 3137372e3132352e3235342e302f32342d3234203d3e20323633333936.roa (hash: ViaLBm/au1l+dJYtCRvIR8ineqO6UdN06kUrCSLc9Mg=)
                          6: 323830343a313539343a383030303a3a2f33332d3333203d3e20323633333936.roa (hash: 64nBKP8aQBNq8ZtzbnhuDG8M2SKbKxMpqLx4zgPwKgA=)
                          7: 3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa (hash: I7IrraKtIQgW0ngX0dXFa/C36wu427K7vErtnZKnJ5E=)
                          8: 40636332B02FA344DE75686E874C7425B2C58624.crl (hash: ltEMOu6IO28rDMjH8SgyrQ044i5NVa3zWyZmxtUBJ9A=)
                          9: 3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa (hash: AYHgYInvzVHvMPtaFzD8rQEmEMJ54kd/cONS2jDJTA8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Dec 2025 16:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4e:fc:74:47:53:c1:4b:e9:88:32:44:1e:06:f2:43:7d:91:b1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Dec 16 13:11:22 2025 GMT
            Not After : Dec 17 16:36:22 2025 GMT
        Subject: CN=7FEAE82DFFA1CCA6400328C73CCF276575ED837C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:f5:bb:b2:0a:08:87:fe:eb:e2:20:6f:b3:
                    bf:6f:76:f4:03:30:e0:72:7b:e6:1f:26:41:b5:af:
                    aa:0d:c2:5a:09:e3:c2:32:29:0d:20:8b:1d:97:7a:
                    3f:4b:b8:01:6d:a1:88:42:1b:65:b2:5e:d4:13:75:
                    05:37:68:92:91:d9:69:25:7c:6f:33:9c:f2:55:09:
                    fb:8b:2d:40:88:ff:02:e8:2b:b9:dd:c2:f1:f7:1c:
                    f6:7f:ad:f8:59:ad:51:9a:5b:6d:81:a7:1c:9f:af:
                    12:b6:ea:e1:65:83:c8:7a:7a:c5:88:c0:4f:bf:4e:
                    68:21:a9:3d:2d:f0:f4:79:1b:7b:29:48:5a:95:0f:
                    9f:9d:44:df:e0:e7:1d:b2:b1:ed:58:b9:9d:99:d0:
                    1f:ca:96:41:8f:28:27:ea:a0:8f:4a:09:4f:0d:48:
                    81:af:dc:2a:5f:4d:c2:3c:a1:b4:b1:b1:5a:7e:82:
                    de:48:94:28:a4:6c:f7:0b:8a:9d:c9:28:29:11:b0:
                    9d:ab:1a:5b:29:f0:77:16:f9:47:0d:bc:fa:28:a9:
                    32:f6:27:2c:2f:c2:93:72:e9:29:75:ef:bd:fb:45:
                    16:47:b2:70:28:0e:39:2f:7e:db:c6:f6:e3:97:c9:
                    08:8e:66:7b:10:fa:4d:7b:f7:05:1a:9f:19:d3:e5:
                    cc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EA:E8:2D:FF:A1:CC:A6:40:03:28:C7:3C:CF:27:65:75:ED:83:7C
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:73:5e:52:72:86:eb:77:8e:38:d8:3e:4e:21:69:08:63:39:
         3b:1a:77:cb:cb:ec:62:d5:fe:aa:51:45:2f:65:a7:91:33:71:
         99:c0:ea:7e:9b:8f:e9:53:a1:e3:4a:d0:e9:30:7b:c0:09:34:
         ec:5e:09:2e:8c:53:18:0d:ac:10:e5:c1:1c:44:99:3e:94:df:
         aa:68:8f:ad:9a:eb:22:33:3d:47:6f:25:e5:8b:fd:26:d4:66:
         f4:c6:fc:ce:47:76:a2:34:c3:f2:5d:36:30:68:33:eb:91:0f:
         2b:79:22:92:1b:81:61:21:6c:a7:c2:cc:95:92:62:c0:4f:8c:
         51:ab:53:ce:65:26:01:85:3b:b2:b7:4a:80:88:97:aa:90:c7:
         28:ae:73:28:6e:92:40:1d:42:a7:67:48:13:dd:a9:1d:8f:26:
         ab:ee:91:36:82:29:1e:94:27:34:4f:7a:18:df:6a:59:a4:9a:
         91:55:31:7b:54:f4:4b:53:a9:7a:c2:bd:5d:c3:a1:10:1b:9e:
         98:ef:89:5f:1b:d0:18:34:d9:23:89:0a:ac:7a:48:65:2d:4a:
         90:f2:f6:8e:9a:1e:08:83:f5:1a:c8:b3:c9:4f:78:99:82:8e:
         77:26:0b:6f:cc:ba:90:73:e1:3b:75:c6:f8:57:09:bc:f8:e3:
         54:40:f5:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcE78dEdTwUvpiDJEHgbyQ32RsVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2MzYzMzJCMDJGQTM0NERFNzU2ODZFODc0Qzc0MjVC
MkM1ODYyNDAeFw0yNTEyMTYxMzExMjJaFw0yNTEyMTcxNjM2MjJaMDMxMTAvBgNV
BAMTKDdGRUFFODJERkZBMUNDQTY0MDAzMjhDNzNDQ0YyNzY1NzVFRDgzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeHvW7sgoIh/7r4iBvs79vdvQD
MOBye+YfJkG1r6oNwloJ48IyKQ0gix2Xej9LuAFtoYhCG2WyXtQTdQU3aJKR2Wkl
fG8znPJVCfuLLUCI/wLoK7ndwvH3HPZ/rfhZrVGaW22BpxyfrxK26uFlg8h6esWI
wE+/TmghqT0t8PR5G3spSFqVD5+dRN/g5x2yse1YuZ2Z0B/KlkGPKCfqoI9KCU8N
SIGv3CpfTcI8obSxsVp+gt5IlCikbPcLip3JKCkRsJ2rGlsp8HcW+UcNvPooqTL2
JywvwpNy6Sl17737RRZHsnAoDjkvftvG9uOXyQiOZnsQ+k179wUanxnT5cwPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUf+roLf+hzKZAAyjHPM8nZXXtg3wwHwYDVR0j
BBgwFoAUQGNjMrAvo0TedWhuh0x0JbLFhiQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN01KeThqVkVqVTZjYzJTUUVmcFh4enRWSlJqaGtvVjlEczY0TXFtZTJT
RVIvMS80MDYzNjMzMkIwMkZBMzQ0REU3NTY4NkU4NzRDNzQyNUIyQzU4NjI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjM2MzMyQjAyRkEzNDRE
RTc1Njg2RTg3NEM3NDI1QjJDNTg2MjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N01KeThqVkVqVTZjYzJTUUVmcFh4enRWSlJqaGtvVjlEczY0TXFtZTJTRVIvMS80
MDYzNjMzMkIwMkZBMzQ0REU3NTY4NkU4NzRDNzQyNUIyQzU4NjI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz3NeUnKG63eOONg+TiFpCGM5Oxp3y8vsYtX+qlFFL2WnkTNxmcDqfpuP6VOh
40rQ6TB7wAk07F4JLoxTGA2sEOXBHESZPpTfqmiPrZrrIjM9R28l5Yv9JtRm9Mb8
zkd2ojTD8l02MGgz65EPK3kikhuBYSFsp8LMlZJiwE+MUatTzmUmAYU7srdKgIiX
qpDHKK5zKG6SQB1Cp2dIE92pHY8mq+6RNoIpHpQnNE96GN9qWaSakVUxe1T0S1Op
esK9XcOhEBuemO+JXxvQGDTZI4kKrHpIZS1KkPL2jpoeCIP1GsizyU94mYKOdyYL
b8y6kHPhO3XG+FcJvPjjVED13Q==
-----END CERTIFICATE-----
Generated at Wed Dec 17 01:25:23 2025 by rpki-client