This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
File:                     95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json)
Hash identifier:          jEWMcD7+rCEGWp4sG4miudSzcs8rUYxMuSwoE4LSDAM=
Subject key identifier:   5D:36:45:7C:63:5A:28:83:CD:DC:36:57:4C:FE:3C:F1:7F:91:A2:B8
Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62
Certificate issuer:       /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62
Certificate serial:       7A6F0037C0D39C89D155A6161B1E9C12B23B83EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
Manifest number:          0342
Signing time:             Wed 24 Dec 2025 15:55:41 +0000
Manifest this update:     Wed 24 Dec 2025 15:50:41 +0000
Manifest next update:     Thu 25 Dec 2025 19:16:41 +0000
Files and hashes:         1: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=)
                          2: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: u8C/snKMg9yFwVktqvcUgDGUff4CgWuXqg2NJwQPZrE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl
                          rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 19:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6f:00:37:c0:d3:9c:89:d1:55:a6:16:1b:1e:9c:12:b2:3b:83:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62
        Validity
            Not Before: Dec 24 15:50:41 2025 GMT
            Not After : Dec 25 19:16:41 2025 GMT
        Subject: CN=5D36457C635A2883CDDC36574CFE3CF17F91A2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:ad:83:92:5d:ea:01:6c:60:fe:9f:d1:a1:
                    e2:26:2a:cd:26:31:cc:8f:40:04:6d:b7:f3:fd:d9:
                    56:80:2b:57:9f:89:ba:a8:f4:96:12:3c:96:30:8a:
                    16:47:f0:ec:00:12:6d:53:0e:38:a4:0e:ab:88:40:
                    2e:26:13:91:18:1e:46:35:00:67:01:c4:5f:4c:ba:
                    ed:0c:1c:57:8a:98:58:0a:c5:e0:29:5f:ac:ba:79:
                    6a:28:00:f2:52:02:e1:1c:af:3b:dc:d3:8e:81:28:
                    65:e1:6d:90:d9:5d:4b:21:02:96:07:fe:72:90:a0:
                    98:c4:c0:5a:70:c7:24:80:53:e1:88:7c:ce:21:e9:
                    e7:af:3b:bc:ef:e0:f4:87:ef:f7:29:ea:9e:08:61:
                    21:d1:35:94:08:e8:47:c1:2a:4b:00:76:a2:04:73:
                    61:d0:c9:ac:18:29:84:38:e7:33:39:cb:47:3f:b2:
                    7e:a8:8b:5a:46:20:69:7d:02:c6:f0:99:32:bc:07:
                    12:cf:dd:f0:68:93:ba:6b:ee:cb:30:68:f4:12:9d:
                    4d:cc:e6:6c:80:e8:0f:77:f1:04:df:57:ee:ce:cb:
                    4a:cb:84:1e:2f:22:97:d1:9c:78:8b:9c:f3:36:5f:
                    6b:4a:79:29:5d:fa:90:e1:23:fa:82:92:59:4d:67:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:36:45:7C:63:5A:28:83:CD:DC:36:57:4C:FE:3C:F1:7F:91:A2:B8
            X509v3 Authority Key Identifier:
                keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b6:47:3e:22:3a:5d:5c:80:c4:55:f3:14:dd:23:a3:b6:25:
         b7:27:ee:1e:9d:6a:c6:8b:f9:63:1b:0b:df:00:ff:fa:01:26:
         cd:4a:f3:6d:7c:ca:4f:f0:bb:65:97:e4:28:d3:07:69:34:88:
         56:3f:da:40:85:87:d6:61:1c:c5:b4:ac:18:6a:9b:4a:c0:a2:
         81:a3:e5:9f:7f:06:98:b8:90:8c:7a:34:69:1e:7c:aa:d5:9c:
         b8:a9:4d:7f:57:4a:1d:de:79:41:5a:2e:57:db:f3:a1:fd:2d:
         f9:c6:3d:50:ae:39:eb:8c:b9:99:41:cf:35:2f:55:6e:2e:1c:
         03:77:d3:b7:54:96:9b:11:3a:aa:ba:9f:7e:60:8b:2f:9f:00:
         d8:fc:96:4f:73:a7:30:73:30:f5:4d:b7:c6:11:aa:76:37:f9:
         60:ca:b5:0b:5a:78:b7:11:0e:bb:1c:d4:cb:08:d9:24:9e:81:
         2b:fd:8d:29:87:9b:0f:e4:33:12:a2:8a:09:05:af:3f:31:27:
         14:e9:e5:72:f6:e7:2d:d1:67:c7:23:35:bd:a2:01:42:fa:c6:
         15:44:cf:53:e2:e1:d4:08:d8:37:ef:3b:ab:d8:a4:f6:70:ed:
         0c:3b:b3:71:ba:46:95:8e:ec:44:81:76:04:42:0e:75:c9:eb:
         15:9c:68:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUem8AN8DTnInRVaYWGx6cErI7g+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGQjRGNzk1NEE3OUMzRUFFQjkxNTVDQjVGNEYyNDdE
MkIwNkQ2MjAeFw0yNTEyMjQxNTUwNDFaFw0yNTEyMjUxOTE2NDFaMDMxMTAvBgNV
BAMTKDVEMzY0NTdDNjM1QTI4ODNDRERDMzY1NzRDRkUzQ0YxN0Y5MUEyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48a2Dkl3qAWxg/p/RoeImKs0m
McyPQARtt/P92VaAK1efibqo9JYSPJYwihZH8OwAEm1TDjikDquIQC4mE5EYHkY1
AGcBxF9Muu0MHFeKmFgKxeApX6y6eWooAPJSAuEcrzvc046BKGXhbZDZXUshApYH
/nKQoJjEwFpwxySAU+GIfM4h6eevO7zv4PSH7/cp6p4IYSHRNZQI6EfBKksAdqIE
c2HQyawYKYQ45zM5y0c/sn6oi1pGIGl9AsbwmTK8BxLP3fBok7pr7sswaPQSnU3M
5myA6A938QTfV+7Oy0rLhB4vIpfRnHiLnPM2X2tKeSld+pDhI/qCkllNZ401AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXTZFfGNaKIPN3DZXTP488X+RorgwHwYDVR0j
BBgwFoAUlftPeVSnnD6uuRVctfTyR9KwbWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFC
S2EvMS85NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RkI0Rjc5NTRBNzlDM0VB
RUI5MTU1Q0I1RjRGMjQ3RDJCMDZENjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMS85
NUZCNEY3OTU0QTc5QzNFQUVCOTE1NUNCNUY0RjI0N0QyQjA2RDYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArLZHPiI6XVyAxFXzFN0jo7YltyfuHp1qxov5YxsL3wD/+gEmzUrzbXzKT/C7
ZZfkKNMHaTSIVj/aQIWH1mEcxbSsGGqbSsCigaPln38GmLiQjHo0aR58qtWcuKlN
f1dKHd55QVouV9vzof0t+cY9UK4564y5mUHPNS9Vbi4cA3fTt1SWmxE6qrqffmCL
L58A2PyWT3OnMHMw9U23xhGqdjf5YMq1C1p4txEOuxzUywjZJJ6BK/2NKYebD+Qz
EqKKCQWvPzEnFOnlcvbnLdFnxyM1vaIBQvrGFUTPU+Lh1AjYN+87q9ik9nDtDDuz
cbpGlY7sRIF2BEIOdcnrFZxofQ==
-----END CERTIFICATE-----