This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
File:                     3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json)
Hash identifier:          5cdiGDvdhAzoyp7N5T2WlAc+ugTH9Eobp9KmXO1dXfM=
Subject key identifier:   CE:3C:BC:A5:AD:7C:D0:5F:1D:F5:37:A2:07:78:FF:25:F2:C7:C0:9A
Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Certificate issuer:       /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
Certificate serial:       7BBCBE51AC45D00F3500E656F1339D33E9FE303B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
Manifest number:          016E
Signing time:             Fri 19 Dec 2025 13:18:24 +0000
Manifest this update:     Fri 19 Dec 2025 13:13:24 +0000
Manifest next update:     Sat 20 Dec 2025 16:25:24 +0000
Files and hashes:         1: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=)
                          2: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: KbTUQPbl4G/kOMhiHcOojN9GvjIm8xcAsFejSxjAHNs=)
                          3: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 16:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bc:be:51:ac:45:d0:0f:35:00:e6:56:f1:33:9d:33:e9:fe:30:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
        Validity
            Not Before: Dec 19 13:13:24 2025 GMT
            Not After : Dec 20 16:25:24 2025 GMT
        Subject: CN=CE3CBCA5AD7CD05F1DF537A20778FF25F2C7C09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:f9:44:b1:d1:96:ba:c1:f1:28:12:c3:51:
                    b4:ed:f6:2d:9a:89:86:2c:de:3b:db:7f:58:6f:2b:
                    de:48:83:f4:80:44:8e:55:8a:01:7d:e1:24:64:5d:
                    52:b8:06:a5:3e:9a:6c:81:c3:75:f7:3d:fc:88:61:
                    63:84:23:cf:f3:ce:63:04:92:12:b6:4f:f8:21:11:
                    93:09:df:10:05:98:74:8f:03:f2:29:5f:fd:c0:47:
                    fa:ba:7b:f3:c6:9c:dd:0c:3d:bb:c9:91:0e:75:c2:
                    65:d2:dc:4e:89:e2:01:46:2c:6f:cb:4b:95:20:7b:
                    90:0d:90:cf:a8:49:a0:21:cd:c3:8d:e8:f6:ef:c1:
                    fd:45:45:6f:32:54:28:a2:9e:7f:61:d5:41:70:53:
                    89:be:ee:22:65:13:f2:f7:e8:b2:4a:08:92:7e:ee:
                    f1:0a:ca:00:dc:60:0e:3e:85:20:55:98:5b:bc:9e:
                    e1:9d:08:04:ed:5d:ad:2a:6a:01:f0:b2:ab:5e:77:
                    d8:b3:93:04:71:a9:3c:13:37:8d:e0:56:4e:35:c0:
                    5e:17:88:e0:e3:7f:13:e2:68:66:29:de:c7:12:35:
                    be:e8:a6:b7:a7:3b:82:83:6c:2c:09:f1:4c:aa:2e:
                    0e:0b:84:5c:4f:f7:31:1a:65:62:a8:54:2c:9f:41:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:BC:A5:AD:7C:D0:5F:1D:F5:37:A2:07:78:FF:25:F2:C7:C0:9A
            X509v3 Authority Key Identifier:
                keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f9:e0:4c:fe:e4:25:48:f9:3c:d6:ff:a3:ca:b3:4b:92:ab:
         6d:4c:0d:57:f3:67:23:e4:b7:59:44:5b:fe:39:ab:97:ad:ad:
         bf:c8:2f:cd:2f:c2:53:72:1d:53:da:12:63:4a:67:0a:7b:4a:
         27:b0:3d:65:4d:46:86:ef:c1:b1:75:79:a1:db:6a:04:d6:b2:
         79:37:48:42:23:0f:ec:4b:b2:a6:f8:8c:5f:32:bd:2d:7a:80:
         bb:f8:77:2f:a7:06:70:91:22:c6:a0:89:c1:68:15:ac:c0:9a:
         6b:35:85:22:80:13:9e:71:d0:6c:12:d6:f5:e8:53:ea:b7:69:
         7a:a6:fe:e3:ce:82:23:37:dd:61:e0:f7:6e:22:c3:ee:3d:06:
         b8:37:20:ae:49:58:4b:7e:57:b3:a2:8b:71:dc:f0:5b:e8:b3:
         f7:e0:dd:52:e5:c4:b4:f6:c4:df:15:e4:ff:e5:fc:46:76:17:
         65:50:01:56:c2:50:1c:23:1a:09:15:68:d4:da:ef:e0:d8:dc:
         62:91:b6:a5:11:c9:c0:e9:f9:26:db:c7:c4:74:23:ff:88:29:
         d3:85:fc:71:11:f4:52:03:ff:f8:77:8d:48:c1:d4:fc:89:e8:
         72:0e:ca:b1:1e:d9:eb:5f:a7:ca:3a:8e:bc:76:51:f4:77:84:
         b0:64:67:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe7y+UaxF0A81AOZW8TOdM+n+MDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E1QTFGQkRGQkFDM0IwRTQ3MUQ4MDczQkE0NjM1RjE3
QjI2NjA0ODAeFw0yNTEyMTkxMzEzMjRaFw0yNTEyMjAxNjI1MjRaMDMxMTAvBgNV
BAMTKENFM0NCQ0E1QUQ3Q0QwNUYxREY1MzdBMjA3NzhGRjI1RjJDN0MwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jvlEsdGWusHxKBLDUbTt9i2a
iYYs3jvbf1hvK95Ig/SARI5VigF94SRkXVK4BqU+mmyBw3X3PfyIYWOEI8/zzmME
khK2T/ghEZMJ3xAFmHSPA/IpX/3AR/q6e/PGnN0MPbvJkQ51wmXS3E6J4gFGLG/L
S5Uge5ANkM+oSaAhzcON6Pbvwf1FRW8yVCiinn9h1UFwU4m+7iJlE/L36LJKCJJ+
7vEKygDcYA4+hSBVmFu8nuGdCATtXa0qagHwsqted9izkwRxqTwTN43gVk41wF4X
iODjfxPiaGYp3scSNb7oprenO4KDbCwJ8UyqLg4LhFxP9zEaZWKoVCyfQdObAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzjy8pa180F8d9TeiB3j/JfLHwJowHwYDVR0j
BBgwFoAUOlofvfusOw5HHYBzukY18XsmYEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5
aWsvMC8zQTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNUExRkJERkJBQzNCMEU0
NzFEODA3M0JBNDYzNUYxN0IyNjYwNDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5aWsvMC8z
QTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmPngTP7kJUj5PNb/o8qzS5KrbUwNV/NnI+S3WURb/jmrl62tv8gvzS/CU3Id
U9oSY0pnCntKJ7A9ZU1Ghu/BsXV5odtqBNayeTdIQiMP7EuypviMXzK9LXqAu/h3
L6cGcJEixqCJwWgVrMCaazWFIoATnnHQbBLW9ehT6rdpeqb+486CIzfdYeD3biLD
7j0GuDcgrklYS35Xs6KLcdzwW+iz9+DdUuXEtPbE3xXk/+X8RnYXZVABVsJQHCMa
CRVo1Nrv4NjcYpG2pRHJwOn5JtvHxHQj/4gp04X8cRH0UgP/+HeNSMHU/Inocg7K
sR7Z61+nyjqOvHZR9HeEsGRnrg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:21:13 2025 by rpki-client