This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
File:                     19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft (raw, json)
Hash identifier:          z2pj7GCVtokiOjvRuskgMXEzqxt787MqC2Y4eb9c3SI=
Subject key identifier:   0E:CA:FB:C5:E2:78:58:A2:88:38:19:E2:BF:51:FF:9E:A4:8E:D1:66
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       6B0C707D67E1629F6886B7076F366B0F45178C41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 02:03:13 +0000
Manifest this update:     Fri 19 Dec 2025 01:58:13 +0000
Manifest next update:     Sat 20 Dec 2025 04:39:13 +0000
Files and hashes:         1: 3137372e31312e3130312e302f32342d3234203d3e203631363732.roa (hash: fif3P2KblGSC9742DeFyLU801vn7xtCRdanop6N/f3Y=)
                          2: 323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa (hash: ltgzZhUIT9HoOwlseQqtI60tPnh2d/I30qApzdd9HvA=)
                          3: 19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl (hash: spPQbAVNYlodI0jDRHfbj4wE462IYG4r+7J+U8B/3Sg=)
                          4: 3137372e31312e3130302e302f32332d3233203d3e203631363732.roa (hash: sphsamzsN+3v6rf42OTo2kyi8M4pQtLKOm7aevrbVRI=)
                          5: 323830343a316362633a3a2f33322d3332203d3e203631363732.roa (hash: uvpONzrk/yz3w41DwZmbLX5n8qWU1SDy8fP7wXbZhwU=)
                          6: 3137372e31312e3130302e302f32322d3232203d3e203631363732.roa (hash: 3XmuzqGkYYwtYc3f9LmVkGE1+E3Cy9pZ3wciUB2eptk=)
                          7: 323830343a316362633a3a2f33342d3334203d3e203631363732.roa (hash: s1g79dL1845KkFvMy37+/sOS0W7HuGOP2o5Bcu5jiPE=)
                          8: 3137372e31312e3130332e302f32342d3234203d3e203631363732.roa (hash: C/G1fkd3CGtqVZqURcftM69Vf/GLYGZUQZN5m3vLEVY=)
                          9: 3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa (hash: aDum0iNczvjusgbY9AgJXNEipEe+IzVqmJzzKJ0j8Co=)
                          10: 3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa (hash: 9ylID6de0fYzjQvUXLDML69F8xeoBWWPFB2esctZ7K8=)
                          11: 3137372e31312e3130322e302f32332d3233203d3e203631363732.roa (hash: eqXYU+Cf0EskKDk+rCtu3ITdPgiHJoKecNU3oGBjZ3A=)
                          12: 3133312e3130382e3130302e302f32332d3233203d3e203631363732.roa (hash: bNfBDWYF0LHVedEiO74pYs6hbzMs3J0n/oA+iiyrX0c=)
                          13: 323830343a316362633a383030303a3a2f33342d3334203d3e203631363732.roa (hash: 5Tswsw5LtxXzv2UihF+CQ4hV38Hp/I4/1HulIHFOM98=)
                          14: 3133312e3130382e3130302e302f32322d3232203d3e203631363732.roa (hash: MTW9Z5NMn/GsitqWYjerJdidcfu3nSWgmFrSREGcAws=)
                          15: 3137372e31312e3130322e302f32342d3234203d3e203631363732.roa (hash: DKFd/+hUP/Jv95CqP74XPNhUD1Zszu0tUcebd2JnH88=)
                          16: 3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa (hash: yJoS4ptPCZNhJZrzpKcAGNluKjR5verpUFWQSSGRflk=)
                          17: 323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa (hash: nhX4B8aSDA8N3nChVqRois6aRPNIMOFYJ3V9PMCJyK8=)
                          18: 3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa (hash: xK3uSwaZ6MbEZKo+ZV3fhpNpsscdktB1oCRMnKbkcVo=)
                          19: 3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa (hash: z5nA7m6WGn/QXSkX60ATQBgXUW3yzKPaYy/4sBHvcys=)
                          20: 3137372e31312e3130302e302f32342d3234203d3e203631363732.roa (hash: KRGsW5+5GdOUvg+9B1o3UxZixOEO7i67V/n2dVxqNV4=)
                          21: 323830343a316362633a343030303a3a2f33342d3334203d3e203631363732.roa (hash: xb/G6HhIVSO7m3+3eLTVZYp7oMrR0aCtYXIDfwY0VwU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 04:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0c:70:7d:67:e1:62:9f:68:86:b7:07:6f:36:6b:0f:45:17:8c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Dec 19 01:58:13 2025 GMT
            Not After : Dec 20 04:39:13 2025 GMT
        Subject: CN=0ECAFBC5E27858A2883819E2BF51FF9EA48ED166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:96:c4:fe:12:d2:52:70:66:f1:9f:43:80:
                    67:aa:14:8a:27:7c:25:cb:cc:fa:4d:20:3a:94:2b:
                    da:b4:0f:f0:84:fa:29:0b:17:c2:fe:fb:a3:93:ec:
                    d9:79:1e:f7:7b:27:54:4e:43:6c:28:8e:8b:a7:65:
                    c4:de:45:3b:72:6c:b9:81:31:77:85:2b:3f:ce:c6:
                    d1:3f:ed:d2:c3:f3:00:59:d4:8a:e7:41:9c:33:9b:
                    f7:9f:1d:71:9e:d5:ab:8f:d8:03:af:85:1b:91:6e:
                    d9:47:0d:a6:2c:b9:9a:04:2b:b7:9b:87:54:0b:3c:
                    9e:1a:34:b0:e2:60:29:f0:04:dd:04:af:19:8d:2f:
                    fb:70:72:a1:5e:b1:24:68:50:5d:2d:e2:ba:c7:2c:
                    68:26:8f:e7:bc:55:ff:8c:77:f5:a8:1c:12:d8:55:
                    d7:75:bd:7a:48:fa:50:e5:77:64:56:b1:ac:91:c8:
                    79:1b:2c:5e:d0:0e:c4:38:3f:97:21:8c:0c:d7:f2:
                    28:3a:6e:38:ea:f9:f9:1a:7d:a7:22:58:0d:a2:22:
                    40:ec:b5:8a:f3:a7:e0:da:61:4b:ae:bc:c7:e7:8c:
                    bf:34:d8:f0:6b:f1:cd:86:75:9b:48:a8:79:e4:58:
                    78:9d:00:61:f0:27:a9:7f:eb:41:c7:87:2b:df:5e:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:FB:C5:E2:78:58:A2:88:38:19:E2:BF:51:FF:9E:A4:8E:D1:66
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:de:05:fa:b3:9c:56:f6:48:f4:04:ba:1f:de:e0:2e:a8:60:
         c3:90:c6:cb:c6:59:c7:12:82:cc:00:d9:5b:c2:4d:be:83:02:
         80:03:56:a3:f0:ab:da:da:1a:9b:b1:01:b9:c8:bf:f2:87:79:
         dd:2c:de:13:57:10:2d:52:78:40:ac:20:dd:7a:d8:ea:8a:b5:
         1b:32:55:1c:89:bb:48:52:a2:30:fd:dd:b1:da:6f:f2:99:3a:
         ff:5a:65:a6:e1:7d:eb:59:94:ce:d9:9d:df:9e:bb:2c:7a:d5:
         27:03:82:64:88:8b:08:28:39:cb:3e:f5:f4:ff:ff:25:16:d1:
         7c:0e:06:e2:56:f1:fe:ee:ac:eb:bf:ba:11:0a:3a:64:67:41:
         21:fa:32:2b:02:08:e3:47:28:5d:46:b1:b9:20:39:fc:36:f9:
         94:59:67:1d:64:ee:1e:7f:35:6e:11:a3:2e:06:e8:a7:f5:77:
         fa:3e:76:ae:8c:7d:e2:d6:c3:df:00:1f:fb:1f:02:c2:d8:80:
         49:67:0f:3e:c0:01:18:c9:90:ae:e2:d2:33:00:a2:f4:66:c2:
         8c:f2:f4:4c:9a:64:35:4f:c8:dc:51:5f:d8:26:9b:ed:e4:2b:
         25:d5:bf:18:15:a7:71:02:bc:06:8d:b9:e7:c0:da:92:39:ca:
         fc:f8:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:09:18 2025 by rpki-client