This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.mft
File:                     22F9EC8EF5C308D20DE0899FD2022E6A462A6271.mft (raw, json)
Hash identifier:          jyVuZm7MoHI8gk6Xp2P8EfSAaWDvxkMn/sBLaiqIoBU=
Subject key identifier:   36:68:A2:09:91:C5:36:18:91:D1:F0:9E:D7:77:5A:6F:81:69:07:D7
Authority key identifier: 22:F9:EC:8E:F5:C3:08:D2:0D:E0:89:9F:D2:02:2E:6A:46:2A:62:71
Certificate issuer:       /CN=22F9EC8EF5C308D20DE0899FD2022E6A462A6271
Certificate serial:       1E6F9CF875E0BDE6A83BE8832F52D72A9D5B53D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.mft
Manifest number:          3C
Signing time:             Fri 19 Dec 2025 20:26:40 +0000
Manifest this update:     Fri 19 Dec 2025 20:21:40 +0000
Manifest next update:     Sat 20 Dec 2025 22:25:40 +0000
Files and hashes:         1: 3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (hash: 4NAth/BJ7mnwlWxAhWf2iOI2SQnHQ2WRFjF7Paee2/M=)
                          2: 3139302e3131312e3132382e302f32322d3234203d3e20323632363735.roa (hash: XUOumE/I+IimOMk3GJCfiVX5mMNBIDT0de4zXxRbt4Y=)
                          3: 3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa (hash: uQGGpJ74TBl93q365s98CyMgLiJ+4/sF0Rch2rKps9g=)
                          4: 22F9EC8EF5C308D20DE0899FD2022E6A462A6271.crl (hash: lkDXWQ8Kha0v0+xuUb2br+IhVe/W1KN4BlxOsQ4QzcE=)
                          5: 323830343a6134343a3a2f33322d3438203d3e20323632363735.roa (hash: Elq+uGvvzz+pEwCAubEwOqq4U/WCMtsAQi4plfXRu2U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.crl
                          rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6f:9c:f8:75:e0:bd:e6:a8:3b:e8:83:2f:52:d7:2a:9d:5b:53:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22F9EC8EF5C308D20DE0899FD2022E6A462A6271
        Validity
            Not Before: Dec 19 20:21:40 2025 GMT
            Not After : Dec 20 22:25:40 2025 GMT
        Subject: CN=3668A20991C5361891D1F09ED7775A6F816907D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:6c:0a:46:6f:a6:fc:ca:af:2e:07:8b:de:
                    00:27:09:3d:67:b3:e4:f5:2c:ba:da:56:06:2b:46:
                    51:18:d1:26:04:c7:89:ac:ce:9f:15:f8:08:14:26:
                    9c:70:2f:c1:e7:0e:9a:61:15:a6:50:c9:dc:8f:b1:
                    65:3b:b4:2f:c4:5d:ad:7f:1f:06:77:9a:e9:94:bb:
                    d2:ae:58:f4:55:98:3e:55:a1:be:de:47:86:2f:34:
                    35:2e:02:a3:c3:62:c4:06:e2:9e:03:99:b9:d8:2c:
                    b5:1f:d6:bd:e3:d5:80:2b:81:29:c5:01:e0:01:e6:
                    df:15:77:61:fd:2c:24:10:d7:61:a8:48:da:03:42:
                    46:6d:6d:a0:57:88:de:20:b2:f9:07:d0:41:91:c6:
                    7e:3d:35:c3:b7:34:1f:51:20:c1:3c:1d:47:87:f9:
                    5c:21:f9:1b:6d:0a:26:4e:e3:79:56:29:64:23:5a:
                    fd:ea:72:de:f8:19:fb:fa:db:da:f0:17:e0:c5:fc:
                    89:80:86:7d:80:76:72:62:ac:33:45:03:b0:59:3a:
                    3d:b4:67:47:4c:58:66:33:d2:d0:d9:7c:23:2a:50:
                    f8:d0:93:f4:d5:a0:45:fc:69:5e:ad:cc:ff:75:5c:
                    cd:18:9a:c9:59:17:05:ee:bd:19:5e:59:a8:7e:fc:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:A2:09:91:C5:36:18:91:D1:F0:9E:D7:77:5A:6F:81:69:07:D7
            X509v3 Authority Key Identifier:
                keyid:22:F9:EC:8E:F5:C3:08:D2:0D:E0:89:9F:D2:02:2E:6A:46:2A:62:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/22F9EC8EF5C308D20DE0899FD2022E6A462A6271.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c2:23:a4:42:a6:c7:cf:d8:86:1b:0b:1c:e2:ad:c4:86:3f:
         70:e1:a3:1f:8d:73:45:af:0a:0a:7a:5d:60:70:9f:a8:58:bd:
         45:58:2d:c1:24:93:5e:0e:f0:98:43:80:df:07:f6:14:29:da:
         d2:e4:5a:49:68:cc:c0:ed:eb:c3:28:9e:8a:8a:cc:43:57:5d:
         a6:80:29:f9:22:40:b9:b7:c4:50:e3:a7:1a:79:de:73:ed:09:
         f1:36:e1:c6:9c:dd:6a:d6:35:e1:68:ec:7e:24:9f:cd:f1:ee:
         49:55:64:a3:60:dd:93:c3:82:4b:16:a5:37:cd:07:49:93:c4:
         ab:58:27:dd:0f:24:7a:a4:4e:dc:61:68:13:76:79:7d:e2:2b:
         8c:53:39:f0:7b:7d:1e:d8:d7:be:95:2f:63:3d:9f:5d:67:17:
         b8:af:65:ad:2f:b3:74:45:e9:33:01:8b:05:0f:48:9c:29:33:
         49:6e:ab:6d:df:2e:6c:a1:07:6d:38:55:b6:ba:d6:59:08:c9:
         24:e3:1a:5b:f0:fa:85:ef:f1:e6:af:c7:18:00:4c:18:5d:4a:
         59:52:a0:b0:1d:67:2c:5c:28:ed:b6:4f:14:83:89:96:d2:b3:
         e9:84:f5:94:8c:8a:a5:04:d1:17:5a:8b:1b:43:dc:af:b1:a1:
         a8:c9:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:34:42 2025 by rpki-client