This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/63D1FA6FFE59805996E652617C2BD79E3B2FE933.mft
File:                     63D1FA6FFE59805996E652617C2BD79E3B2FE933.mft (raw, json)
Hash identifier:          xzuXyg8qfNPwr/3CA/4dHoHv+1I69UUCHm0a9+M4MfA=
Subject key identifier:   2B:9B:20:71:73:2B:2A:2C:00:A1:DB:BB:0B:96:C6:12:7F:9C:49:EB
Authority key identifier: 63:D1:FA:6F:FE:59:80:59:96:E6:52:61:7C:2B:D7:9E:3B:2F:E9:33
Certificate issuer:       /CN=63D1FA6FFE59805996E652617C2BD79E3B2FE933
Certificate serial:       2033BF71AFBC3A7F6C458FE901D435ADA6F96797
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D1FA6FFE59805996E652617C2BD79E3B2FE933.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/63D1FA6FFE59805996E652617C2BD79E3B2FE933.mft
Manifest number:          42
Signing time:             Sat 20 Dec 2025 22:35:37 +0000
Manifest this update:     Sat 20 Dec 2025 22:30:37 +0000
Manifest next update:     Mon 22 Dec 2025 00:56:37 +0000
Files and hashes:         1: 3138362e3232372e38322e302f32342d3234203d3e203533313835.roa (hash: vaxIAdTzpGsz5f8nqjBjq1FLccLr/KIyCi3mKl8s8C4=)
                          2: 3138362e3232372e38302e302f32322d3233203d3e203533313835.roa (hash: 2fE74hXq4FcsztFvZRG4i9kAdZ/f0AuNEwv7YZhqBEA=)
                          3: 3138362e3232372e38302e302f32312d3231203d3e203533313835.roa (hash: H8MK/PLz7Gh22l/iqm+cVfQdEK40L6YfITjn4CJNz1U=)
                          4: 63D1FA6FFE59805996E652617C2BD79E3B2FE933.crl (hash: 3sUy4etUYFK1TdkEN2fhejcwIOotdXG4p4AqbzKWJ5g=)
                          5: 3138362e3232372e38362e302f32342d3234203d3e203533313835.roa (hash: xx6Q0FPbJ1iiWLNrjGkuILV7o4F9FyUP6hYmW4qNuXo=)
                          6: 3138362e3232372e38312e302f32342d3234203d3e203533313835.roa (hash: l/sWLu0f4no23uSIHR3K7sKIW+dcGNzEOkC4/0qJgx0=)
                          7: 3138362e3232372e38342e302f32342d3234203d3e203533313835.roa (hash: cNZ5AKmcVfTTS1fSTHMcxGUuVklJL0Yo3bq4fJXJnjA=)
                          8: 3138362e3232372e38342e302f32322d3232203d3e203533313835.roa (hash: Va6pfSQCjzfoCxY9SdCEDjBUJ8sBW3CbchWSKq6MrFY=)
                          9: 3138362e3232372e38352e302f32342d3234203d3e203533313835.roa (hash: cwh+oMvC098/LJXrEXwBTJgqNejsgVJnag1WiiGrPNQ=)
                          10: 3138362e3232372e38332e302f32342d3234203d3e203533313835.roa (hash: +HxcVuMIj0ZqM0Zck0KLBAOxP3a84A2K0S2FI4uj8kA=)
                          11: 3138362e3232372e38372e302f32342d3234203d3e203533313835.roa (hash: Ht4BxXBY7DgFE6cx28Ek37fo1rvy9yYMtxRgnrWHxWQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/63D1FA6FFE59805996E652617C2BD79E3B2FE933.crl
                          rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/63D1FA6FFE59805996E652617C2BD79E3B2FE933.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D1FA6FFE59805996E652617C2BD79E3B2FE933.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:33:bf:71:af:bc:3a:7f:6c:45:8f:e9:01:d4:35:ad:a6:f9:67:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D1FA6FFE59805996E652617C2BD79E3B2FE933
        Validity
            Not Before: Dec 20 22:30:37 2025 GMT
            Not After : Dec 22 00:56:37 2025 GMT
        Subject: CN=2B9B2071732B2A2C00A1DBBB0B96C6127F9C49EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:36:13:89:4c:4c:d1:9f:b1:47:4d:0b:fb:
                    c9:fb:48:fd:18:0c:56:bd:24:c5:bf:28:95:21:fa:
                    a0:db:ea:35:71:35:3e:52:4f:0c:dc:d6:8b:58:0d:
                    0b:3e:b7:e1:3c:2c:e1:2c:e3:b2:6b:df:7a:5b:69:
                    fd:31:ef:9b:b9:93:95:37:2e:79:dd:ba:ba:62:f4:
                    5f:da:24:6c:3c:8a:c2:cc:ba:50:e9:2f:01:1e:77:
                    36:8d:91:0d:ca:49:25:62:33:d2:13:9b:05:de:aa:
                    78:8d:da:05:a7:63:71:c3:10:55:9d:e0:1d:da:2c:
                    f5:e1:54:85:9e:cc:e7:1f:94:68:68:82:3a:0f:0a:
                    18:04:5a:a5:33:6e:75:90:fe:a5:32:0b:97:ab:34:
                    1d:ee:67:0b:42:f7:ab:df:38:60:51:c6:6b:0e:99:
                    2d:35:8b:16:cf:fa:79:d3:8b:29:d0:cc:19:32:71:
                    38:47:62:92:cf:a8:26:c9:a9:7c:27:43:ee:49:cb:
                    cb:5c:e0:20:a6:22:f2:e9:05:c7:76:d0:9b:13:f1:
                    ad:ec:cc:0e:f2:df:a3:84:fc:17:a3:0c:10:b1:59:
                    b5:c8:df:e6:d5:01:20:90:2c:d4:8f:0c:08:2b:8b:
                    f2:82:bb:2b:1a:83:10:66:ee:4b:be:53:be:4c:38:
                    80:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:20:71:73:2B:2A:2C:00:A1:DB:BB:0B:96:C6:12:7F:9C:49:EB
            X509v3 Authority Key Identifier:
                keyid:63:D1:FA:6F:FE:59:80:59:96:E6:52:61:7C:2B:D7:9E:3B:2F:E9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/63D1FA6FFE59805996E652617C2BD79E3B2FE933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D1FA6FFE59805996E652617C2BD79E3B2FE933.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjCpTQxTGQazKvpXpqBA1HfsBV3aM6PmTo2fzJhyB37Y/0/63D1FA6FFE59805996E652617C2BD79E3B2FE933.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:dc:37:6d:d9:49:f8:bc:ea:fb:94:58:61:0e:11:df:e0:
         9e:50:d0:9c:81:05:01:2d:d9:de:49:43:22:d9:74:c1:96:4b:
         2c:a6:25:32:6e:06:1b:fe:11:e1:e8:72:a2:2b:8e:98:be:d7:
         31:e0:d2:4a:cf:70:28:3e:b2:d0:52:4d:f7:1e:1c:d6:65:3b:
         5c:1a:14:74:68:0e:94:c9:b9:81:4d:55:47:c0:8d:ca:cd:83:
         53:5a:18:d4:e6:28:81:29:38:50:a6:96:4b:83:b0:a9:0b:30:
         68:51:f7:a0:88:19:43:87:55:33:df:0a:77:0d:67:60:59:cf:
         e3:f7:15:56:02:82:61:9b:01:bb:bd:a6:bf:35:d5:fa:f8:6e:
         31:db:4c:dd:06:cb:34:15:ae:8a:a2:3c:2c:54:a7:6c:b4:76:
         6a:60:4d:81:55:9e:e7:0c:b6:b6:fd:e2:43:39:2c:3b:cf:61:
         b7:fd:71:89:b8:46:79:dd:14:d4:34:25:0d:9e:14:52:49:1f:
         b4:7b:b8:3d:c4:43:c0:0a:c3:7e:d6:18:b9:10:11:c8:a4:06:
         1c:f3:94:41:55:c2:d8:91:a9:16:05:ca:af:b7:7a:88:b4:fc:
         16:ed:04:17:e6:ba:82:95:ee:a5:23:a7:2b:ce:ee:d6:7a:a7:
         9e:6d:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:52:14 2025 by rpki-client