This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
File:                     3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft (raw, json)
Hash identifier:          vmPhwdwuHcHZVD1axD77WJD/zlCjoYwQCcoAmGRSNbU=
Subject key identifier:   BC:F5:32:31:DC:1B:39:07:D9:56:C3:C4:64:6A:C7:80:8B:BA:81:BF
Authority key identifier: 3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30
Certificate issuer:       /CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
Certificate serial:       0FC93C223F5E8C4002805AA2A2E5438F6F6295CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
Manifest number:          02C4
Signing time:             Mon 22 Dec 2025 07:59:04 +0000
Manifest this update:     Mon 22 Dec 2025 07:54:04 +0000
Manifest next update:     Tue 23 Dec 2025 11:47:04 +0000
Files and hashes:         1: 3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl (hash: 06Vx7ocMjdj6eR6wka3ilLEs9/cGeqPPl4apHbzO2Po=)
                          2: 34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (hash: cwW732GIsVo8A0Kc08lus9H96AnrSy4tEEaHAL65/dQ=)
                          3: 323830343a356530383a3a2f33322d3438203d3e20323639303037.roa (hash: XNfpe29wpSD5Jq68F4ol5Kh5+JZ+3Y9vJwAd+o17mgY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl
                          rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 11:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c9:3c:22:3f:5e:8c:40:02:80:5a:a2:a2:e5:43:8f:6f:62:95:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30
        Validity
            Not Before: Dec 22 07:54:04 2025 GMT
            Not After : Dec 23 11:47:04 2025 GMT
        Subject: CN=BCF53231DC1B3907D956C3C4646AC7808BBA81BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:3b:a5:26:5e:3a:08:44:17:a6:fa:1b:89:
                    02:c5:5d:1b:ea:61:da:52:48:b0:c0:a9:a8:e1:f7:
                    37:7a:8f:7d:b2:91:b3:43:1b:1e:6d:c1:32:2d:9c:
                    06:ce:4a:13:ad:2d:c3:cf:dc:13:f6:14:7c:db:5e:
                    ce:e4:76:17:67:ff:77:87:a7:35:4f:83:8c:ad:90:
                    83:90:0a:73:4d:41:02:ec:60:82:a0:b7:93:52:ac:
                    47:f1:84:3a:58:63:1f:b4:80:d8:b1:97:ac:e2:8e:
                    ad:20:5b:ce:4a:05:4b:03:14:b5:84:16:4f:8b:ce:
                    25:12:5f:b6:1a:66:3e:1d:68:44:35:d1:a3:e8:b0:
                    2a:e7:40:aa:30:cd:41:c0:d6:a2:ab:c1:15:19:46:
                    54:de:de:97:ed:0e:17:01:c5:79:7d:37:08:cf:de:
                    85:eb:47:a8:52:13:86:a3:04:eb:1c:e0:35:ac:8d:
                    ea:65:a7:14:e0:95:d3:be:c7:37:9c:58:36:58:15:
                    a8:9b:63:aa:cb:d4:46:56:a2:c5:f2:3f:b2:95:eb:
                    69:7d:f7:18:e1:b3:56:0d:ed:1d:b4:a0:ea:c8:02:
                    7f:5d:c8:c7:fd:fd:48:c8:da:4b:8e:65:d5:19:69:
                    92:47:b6:fd:8c:74:cc:e8:8d:d4:c6:54:3e:a7:a2:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:32:31:DC:1B:39:07:D9:56:C3:C4:64:6A:C7:80:8B:BA:81:BF
            X509v3 Authority Key Identifier:
                keyid:3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6e:1b:a2:8e:5a:66:57:c8:59:5e:7e:d3:cc:53:ba:b8:1b:
         8c:4d:40:6c:d1:30:87:4f:ea:21:4b:98:2f:2d:46:52:9d:44:
         3d:d8:6c:75:1b:ac:b8:1e:c8:2f:ee:f2:7c:b1:65:ab:15:f3:
         4a:e4:e3:96:8e:49:5e:51:a7:48:c8:2b:e7:06:a0:39:3e:25:
         19:12:68:eb:2b:8d:e1:d7:de:00:ea:93:cf:a3:b7:0c:a6:dd:
         d7:33:0d:6c:42:db:08:ac:2a:11:75:bb:c2:76:9c:bd:e8:a4:
         0c:fa:8d:48:d4:a6:29:a4:02:70:91:d6:d1:83:85:39:e6:77:
         e7:2a:2b:9f:34:75:cd:17:f1:85:d2:78:00:0d:6a:1a:58:63:
         38:0a:6f:74:a2:6f:bb:78:bc:fd:aa:8a:4b:da:c4:9a:9f:c4:
         51:85:0b:b7:95:49:b3:ac:ce:59:e8:3e:42:20:b9:45:18:40:
         1b:3d:2a:77:20:09:e7:c3:b1:af:5b:8b:78:1c:f1:e4:62:51:
         5b:e9:dd:34:c1:0a:64:67:db:46:55:b6:f6:ee:66:2c:6b:7d:
         3e:6d:3d:7e:2c:33:7d:03:12:78:4d:9c:b7:c1:a1:16:22:de:
         b2:84:28:e7:fb:19:65:94:e9:60:9d:4b:e6:e8:d9:ef:d8:88:
         82:31:56:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD8k8Ij9ejEACgFqiouVDj29ilcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IxOEI3REM5RTNBOUVFODJCRUQ4MEREMDlCNTdEMjAw
NDVCMEMzMDAeFw0yNTEyMjIwNzU0MDRaFw0yNTEyMjMxMTQ3MDRaMDMxMTAvBgNV
BAMTKEJDRjUzMjMxREMxQjM5MDdEOTU2QzNDNDY0NkFDNzgwOEJCQTgxQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQzulJl46CEQXpvobiQLFXRvq
YdpSSLDAqajh9zd6j32ykbNDGx5twTItnAbOShOtLcPP3BP2FHzbXs7kdhdn/3eH
pzVPg4ytkIOQCnNNQQLsYIKgt5NSrEfxhDpYYx+0gNixl6zijq0gW85KBUsDFLWE
Fk+LziUSX7YaZj4daEQ10aPosCrnQKowzUHA1qKrwRUZRlTe3pftDhcBxXl9NwjP
3oXrR6hSE4ajBOsc4DWsjeplpxTgldO+xzecWDZYFaibY6rL1EZWosXyP7KV62l9
9xjhs1YN7R20oOrIAn9dyMf9/UjI2kuOZdUZaZJHtv2MdMzojdTGVD6noosxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUvPUyMdwbOQfZVsPEZGrHgIu6gb8wHwYDVR0j
BBgwFoAUOxi33J46nugr7YDdCbV9IARbDDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVy
QUUvMC8zQjE4QjdEQzlFM0E5RUU4MkJFRDgwREQwOUI1N0QyMDA0NUIwQzMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCMThCN0RDOUUzQTlFRTgy
QkVEODBERDA5QjU3RDIwMDQ1QjBDMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVyQUUvMC8z
QjE4QjdEQzlFM0E5RUU4MkJFRDgwREQwOUI1N0QyMDA0NUIwQzMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbG4boo5aZlfIWV5+08xTurgbjE1AbNEwh0/qIUuYLy1GUp1EPdhsdRusuB7I
L+7yfLFlqxXzSuTjlo5JXlGnSMgr5wagOT4lGRJo6yuN4dfeAOqTz6O3DKbd1zMN
bELbCKwqEXW7wnacveikDPqNSNSmKaQCcJHW0YOFOeZ35yornzR1zRfxhdJ4AA1q
GlhjOApvdKJvu3i8/aqKS9rEmp/EUYULt5VJs6zOWeg+QiC5RRhAGz0qdyAJ58Ox
r1uLeBzx5GJRW+ndNMEKZGfbRlW29u5mLGt9Pm09fiwzfQMSeE2ct8GhFiLesoQo
5/sZZZTpYJ1L5ujZ79iIgjFWyQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 11:58:28 2025 by rpki-client