This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
File:                     3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft (raw, json)
Hash identifier:          r+XsowOBFAB9JLLnTASaxImdpe3EpwshM6yK6wbJXQs=
Subject key identifier:   87:0B:28:E8:0C:71:4D:AD:1D:34:28:4C:EE:77:26:10:FB:13:DA:02
Authority key identifier: 34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60
Certificate issuer:       /CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
Certificate serial:       78C697BED539E8DE5040C1CCB193E2E1ECB9FA70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
Manifest number:          1E
Signing time:             Sun 21 Dec 2025 04:25:09 +0000
Manifest this update:     Sun 21 Dec 2025 04:20:09 +0000
Manifest next update:     Mon 22 Dec 2025 07:02:09 +0000
Files and hashes:         1: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: tO3ng5ssl7OXoRcbQLn/q2hJzoTtQtHd+JHRdfRMwYU=)
                          2: 3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl (hash: 5wyUTQyvFcRwPqa228gy6GdlZj+o5khOCn5U3IxhhKg=)
                          3: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: 7l6dXdKV/Qxm67y6Yp+xmZNlo7Mb3/J+6Jrg7LuDGnM=)
                          4: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: nlTw0GIIpp6SyPsVEPHRac40g2ydnw4rzlurpGEhgGU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 07:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c6:97:be:d5:39:e8:de:50:40:c1:cc:b1:93:e2:e1:ec:b9:fa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
        Validity
            Not Before: Dec 21 04:20:09 2025 GMT
            Not After : Dec 22 07:02:09 2025 GMT
        Subject: CN=870B28E80C714DAD1D34284CEE772610FB13DA02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:ca:3e:13:af:29:d8:b4:ab:f6:32:17:b4:
                    75:72:04:aa:36:61:dc:24:79:a6:03:a5:b2:c5:07:
                    30:ed:8a:85:73:a2:92:58:b7:97:85:dd:07:a5:79:
                    dc:95:bb:6e:9d:88:fe:47:82:50:83:1d:54:37:34:
                    ab:fb:f8:ad:25:1a:63:2a:82:c7:73:64:e8:9e:d9:
                    08:67:3a:6c:1c:5c:45:85:94:ff:77:17:41:93:25:
                    9a:1d:65:57:66:72:17:67:22:86:39:c9:b0:a6:6e:
                    55:d8:28:d7:da:e0:ac:21:e9:7e:de:6b:84:e6:8f:
                    98:a8:96:42:50:c5:b7:79:b1:e0:27:3c:7c:64:44:
                    f9:b0:cc:71:f2:88:bf:be:3f:44:96:8a:ec:7d:9d:
                    ae:e0:f1:49:4e:71:67:e3:c6:80:21:e7:95:87:92:
                    9d:f8:e3:20:9a:83:04:bd:85:c9:31:c0:63:05:5a:
                    2f:55:d5:9a:3b:06:66:d6:f9:0b:fa:76:54:77:cc:
                    5c:ca:e3:b7:e8:df:a9:45:4d:d8:60:c8:7c:3e:39:
                    d5:22:49:ef:92:ab:74:05:67:4c:39:d6:ad:1e:42:
                    4d:28:2f:af:99:e5:b9:af:e5:43:58:fc:d6:ad:67:
                    ad:48:b3:fb:56:4a:85:87:f4:75:d8:2c:56:62:d2:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:28:E8:0C:71:4D:AD:1D:34:28:4C:EE:77:26:10:FB:13:DA:02
            X509v3 Authority Key Identifier:
                keyid:34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:64:a6:5c:1c:eb:ef:87:51:0a:82:db:c8:10:04:da:06:b4:
         d0:06:9b:53:57:61:69:8a:2b:54:85:e8:b5:ef:bb:12:9b:56:
         a2:85:dd:26:22:10:e2:63:ea:a9:9e:12:b3:fd:b3:47:56:37:
         be:ea:c9:75:41:ef:50:86:00:2f:34:cf:f4:cf:0b:8d:d1:79:
         9f:7d:ed:dd:29:3d:f0:85:96:08:8b:0a:94:06:3d:ec:0b:3f:
         d7:8c:f6:a7:4f:4a:a9:c8:55:65:96:28:28:c3:cb:b1:3d:9c:
         e0:05:e4:90:21:be:33:85:35:0d:2d:e3:7e:08:dc:08:9e:f7:
         c8:b0:f7:c0:bd:36:db:2d:43:9b:ba:81:d6:ce:e4:31:72:29:
         b1:71:15:5f:a7:a7:af:44:02:f9:7e:d8:5d:5b:7b:28:ea:40:
         a5:39:a3:77:44:18:ef:06:96:6c:da:7c:90:5c:4b:af:79:82:
         a0:84:5d:7c:b6:5d:ea:bf:3b:aa:b7:e6:d4:87:40:5b:ff:08:
         3c:6d:f0:e3:f8:67:36:4e:d8:f0:10:bb:82:87:12:62:11:5e:
         dd:cc:e5:ed:81:0b:36:4c:8d:c3:f8:93:59:37:e7:e1:b2:5f:
         d4:5d:d6:bf:3a:23:62:86:fb:21:d3:5d:b9:05:30:22:43:f4:
         20:f7:04:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeMaXvtU56N5QQMHMsZPi4ey5+nAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3N0YxQTM0RUM0QTU3MEQ5MjM2MkEzQjE2NUNCMDNG
QTFBODU2MDAeFw0yNTEyMjEwNDIwMDlaFw0yNTEyMjIwNzAyMDlaMDMxMTAvBgNV
BAMTKDg3MEIyOEU4MEM3MTREQUQxRDM0Mjg0Q0VFNzcyNjEwRkIxM0RBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsOco+E68p2LSr9jIXtHVyBKo2
YdwkeaYDpbLFBzDtioVzopJYt5eF3QeledyVu26diP5HglCDHVQ3NKv7+K0lGmMq
gsdzZOie2QhnOmwcXEWFlP93F0GTJZodZVdmchdnIoY5ybCmblXYKNfa4Kwh6X7e
a4Tmj5iolkJQxbd5seAnPHxkRPmwzHHyiL++P0SWiux9na7g8UlOcWfjxoAh55WH
kp344yCagwS9hckxwGMFWi9V1Zo7BmbW+Qv6dlR3zFzK47fo36lFTdhgyHw+OdUi
Se+Sq3QFZ0w51q0eQk0oL6+Z5bmv5UNY/NatZ61Is/tWSoWH9HXYLFZi0gbtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhwso6AxxTa0dNChM7ncmEPsT2gIwHwYDVR0j
BBgwFoAUNHfxo07EpXDZI2KjsWXLA/oahWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh
blkvMC8zNDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0NzdGMUEzNEVDNEE1NzBE
OTIzNjJBM0IxNjVDQjAzRkExQTg1NjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC8z
NDc3RjFBMzRFQzRBNTcwRDkyMzYyQTNCMTY1Q0IwM0ZBMUE4NTYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmGSmXBzr74dRCoLbyBAE2ga00AabU1dhaYorVIXote+7EptWooXdJiIQ4mPq
qZ4Ss/2zR1Y3vurJdUHvUIYALzTP9M8LjdF5n33t3Sk98IWWCIsKlAY97As/14z2
p09KqchVZZYoKMPLsT2c4AXkkCG+M4U1DS3jfgjcCJ73yLD3wL022y1Dm7qB1s7k
MXIpsXEVX6enr0QC+X7YXVt7KOpApTmjd0QY7waWbNp8kFxLr3mCoIRdfLZd6r87
qrfm1IdAW/8IPG3w4/hnNk7Y8BC7gocSYhFe3czl7YELNkyNw/iTWTfn4bJf1F3W
vzojYob7IdNduQUwIkP0IPcEQw==
-----END CERTIFICATE-----