This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
File:                     3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft (raw, json)
Hash identifier:          32L0pGU1GPATZkGNnx5yzSIAJJ72qw09J4JfczAqaME=
Subject key identifier:   1E:42:50:FF:D0:15:A7:87:22:3C:F2:36:CF:54:34:7A:A1:73:75:CA
Authority key identifier: 3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75
Certificate issuer:       /CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
Certificate serial:       684E8BA8E6E5388849D85C613D4D3661BB9988EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 20:39:41 +0000
Manifest this update:     Fri 19 Dec 2025 20:34:41 +0000
Manifest next update:     Sat 20 Dec 2025 23:05:41 +0000
Files and hashes:         1: 323830343a373339303a3a2f33322d3438203d3e20323730393233.roa (hash: Iq5WCwuvz0rLCwvWBiWtBI9QmiixD6hDdHX1VCgdhF0=)
                          2: 3138362e32362e36382e302f32322d3234203d3e20323730393233.roa (hash: 3JoJ7nxLjZvn6ezW2u+Ab54zGDHRl8hQrUOiQXrz9RQ=)
                          3: 3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl (hash: mP9GQYtO2A2m/AcuvJeT51/JomRJ4hisM5gS2nJVyKk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl
                          rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4e:8b:a8:e6:e5:38:88:49:d8:5c:61:3d:4d:36:61:bb:99:88:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
        Validity
            Not Before: Dec 19 20:34:41 2025 GMT
            Not After : Dec 20 23:05:41 2025 GMT
        Subject: CN=1E4250FFD015A787223CF236CF54347AA17375CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:6a:4b:df:bf:b5:ca:6d:65:34:d6:a7:d2:
                    5a:ac:28:b7:f8:aa:4c:fd:22:9d:57:27:50:33:22:
                    5e:f1:34:1d:50:48:7c:d3:0c:db:95:fc:5e:07:c5:
                    43:2c:5d:a6:48:7e:b6:86:26:55:c3:55:60:2e:74:
                    29:0c:7a:d0:0a:85:1d:61:86:93:35:fd:65:fc:2d:
                    c4:df:51:4d:cd:f2:b1:6a:61:1d:b9:a9:ba:80:82:
                    7c:48:ba:c2:23:de:b7:30:ae:da:d9:53:30:c8:e8:
                    60:60:3c:40:79:a4:5d:13:fc:df:a1:e8:39:07:c7:
                    91:79:18:c1:17:a3:15:c8:47:f0:80:72:0c:65:40:
                    33:a2:8c:40:63:11:5c:3f:34:ff:ca:41:89:61:54:
                    1b:f4:83:2d:7f:86:2d:e1:76:ef:c6:43:11:1b:dc:
                    89:fd:b0:1c:5d:5c:49:56:aa:13:85:4d:c7:32:d7:
                    b9:eb:36:10:7f:38:73:fe:ea:b8:de:f5:70:09:cb:
                    48:54:a2:57:32:e2:7f:01:aa:04:c1:d6:0a:9a:a7:
                    1c:96:a3:47:04:69:65:57:6c:d2:6b:ea:a7:07:c0:
                    a6:14:47:66:32:78:6d:95:d2:c8:82:a0:f0:c9:06:
                    53:2a:7d:ef:8a:4e:49:eb:d0:50:e3:dc:ba:cd:d1:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:42:50:FF:D0:15:A7:87:22:3C:F2:36:CF:54:34:7A:A1:73:75:CA
            X509v3 Authority Key Identifier:
                keyid:3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:58:93:17:98:27:49:7f:7d:dc:38:d4:1b:8f:51:22:f7:a4:
         06:fb:46:64:2d:64:cf:26:c4:21:aa:b1:73:1c:23:93:ed:cf:
         ee:e9:0d:79:46:0a:d2:10:4a:f6:50:b1:52:19:6d:9b:4c:dd:
         2f:6e:2b:fd:12:9b:c2:bd:05:df:27:58:e1:ee:16:38:7e:19:
         2a:5a:c6:95:ae:b9:01:65:1b:88:ac:9c:90:96:38:10:9d:91:
         db:6d:30:a6:cf:75:d7:d6:14:77:06:ca:03:d0:48:ee:51:de:
         af:ca:97:5c:d6:12:bf:a5:bb:30:4d:ae:51:8b:6d:62:48:46:
         b8:11:de:ac:3d:4a:ef:6b:c0:f9:f4:66:c2:f3:bf:32:79:f5:
         f7:43:38:15:d8:ce:0f:af:1f:2e:f6:e7:fc:4e:b8:15:b3:3e:
         79:eb:84:bd:08:6b:25:0b:84:2f:8e:85:97:33:46:68:c8:63:
         e8:6b:ca:9b:a1:a5:58:5f:7e:85:45:ff:39:93:37:0b:df:37:
         a1:58:89:00:4b:0f:8d:29:c0:c1:65:63:75:21:af:4f:45:36:
         de:15:34:c9:51:02:72:28:0b:a7:a5:06:94:ef:ad:08:85:f2:
         8f:3c:cb:a2:8d:aa:94:78:ff:cd:d9:be:21:ed:29:81:9e:79:
         4f:3e:92:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:11:10 2025 by rpki-client