This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
File:                     32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft (raw, json)
Hash identifier:          dsny0YUYtmQflU6HuQd7FkKgfUEqecOaYZWezkF8pnM=
Subject key identifier:   A7:DF:7A:26:5B:33:26:46:8D:EA:31:1C:80:1B:DD:E5:69:D7:DC:59
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Certificate issuer:       /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial:       1363A8B65646670C5FD96A8E5868B275AB575FC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
Manifest number:          01B5
Signing time:             Tue 23 Dec 2025 10:49:34 +0000
Manifest this update:     Tue 23 Dec 2025 10:44:34 +0000
Manifest next update:     Wed 24 Dec 2025 13:20:34 +0000
Files and hashes:         1: 323830343a363033303a3a2f33322d3438203d3e20323639313531.roa (hash: bustMz7M+5CMeM9CRQbzDoUPI+6nwA7yTMNCHpORS1E=)
                          2: 34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (hash: xKpccbO2wzlbHbDV3ZJO8ATedkukSYGdQvi151j6L2o=)
                          3: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl (hash: mrvrgJnYSIx0Bo8sblJ1msyoRxnthPb7B24Xx+1SPcI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
                          rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 13:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:63:a8:b6:56:46:67:0c:5f:d9:6a:8e:58:68:b2:75:ab:57:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
        Validity
            Not Before: Dec 23 10:44:34 2025 GMT
            Not After : Dec 24 13:20:34 2025 GMT
        Subject: CN=A7DF7A265B3326468DEA311C801BDDE569D7DC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:f7:bd:0e:71:e3:34:d0:1b:ea:8d:e8:83:
                    1f:33:77:09:61:f3:74:3b:3c:f2:54:1f:4b:02:0d:
                    4d:2d:ef:5d:f4:c9:65:e5:5d:e9:f4:e4:dd:ed:61:
                    21:e2:31:11:7c:ce:2a:36:9e:13:ce:cc:9f:32:8a:
                    0c:ab:ce:72:01:fb:c2:e7:94:da:b2:49:83:f5:b8:
                    51:6b:58:75:09:03:88:ab:20:05:be:75:95:b7:6a:
                    8a:5c:e0:39:74:4b:49:84:ba:8e:51:6b:45:75:99:
                    59:ec:2a:f7:7e:32:8d:80:bb:c8:be:fb:95:ce:ba:
                    02:b3:14:85:d1:c8:46:a9:da:c7:fe:66:df:4c:f8:
                    ca:ce:9f:f7:bc:62:f6:36:b1:ee:28:52:41:13:41:
                    21:05:e4:ba:de:1e:b0:62:dc:70:bb:15:7b:2b:11:
                    57:2a:f5:1c:48:30:e3:8d:42:99:21:e6:91:09:87:
                    ee:f3:2f:4a:55:d5:cd:4b:01:b1:61:8a:00:65:3d:
                    ae:80:fa:e3:aa:ce:ae:ef:43:08:c0:2f:2a:a2:5c:
                    a8:b5:92:53:97:93:eb:d4:02:1b:55:da:fd:a8:d0:
                    25:4a:a0:4c:40:61:9a:e2:75:1a:41:df:0a:a2:c2:
                    58:9c:33:f9:c4:9a:9c:65:a8:4a:ea:0f:00:37:d6:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DF:7A:26:5B:33:26:46:8D:EA:31:1C:80:1B:DD:E5:69:D7:DC:59
            X509v3 Authority Key Identifier:
                keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:f1:af:ac:fa:ef:a2:e2:cc:7e:05:94:ac:47:6f:59:4b:
         f0:03:ed:50:33:99:72:12:b9:9e:46:78:c3:13:b5:fb:51:55:
         80:6a:ae:7c:2e:7d:ef:49:d0:2a:32:c1:6a:a0:f0:c7:e3:1f:
         14:d8:44:a6:9a:d1:c4:ec:04:f6:1d:0b:af:d1:c1:72:f1:d6:
         1b:43:1e:0d:e9:d8:6d:5d:34:fa:28:b2:af:87:75:1a:fc:42:
         65:24:0c:73:fe:8b:d5:f3:de:28:48:e3:21:ca:a0:40:21:7c:
         05:c9:83:c0:0e:43:9b:3c:81:7c:c4:34:e8:8f:e3:7d:bb:b8:
         d2:de:91:d8:85:ca:f2:87:af:52:e6:71:1c:c4:72:e9:47:b1:
         df:9c:fd:a6:ef:e5:5c:7a:61:a4:e5:43:1b:b6:be:54:f7:ee:
         7b:5f:f5:94:ca:37:ba:79:66:82:a5:ba:50:89:02:43:66:ff:
         dd:40:fa:05:95:d4:fa:a5:41:32:aa:b5:b8:bb:bc:c6:c2:27:
         05:0a:b2:43:aa:9b:d9:f1:83:9b:72:55:9f:37:bd:93:dd:25:
         b7:47:5b:df:bb:d8:4d:4b:ab:ef:88:12:d0:e6:58:e6:72:94:
         26:da:4f:d9:7f:2c:43:30:f5:d5:43:5c:0a:44:a1:81:aa:d6:
         8f:a3:04:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUE2OotlZGZwxf2WqOWGiydatXX8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI1MjdFODJENjAzRkZCRTZEQTJFRjhFRDgyQzdCQjFG
N0EzOUI4OTAeFw0yNTEyMjMxMDQ0MzRaFw0yNTEyMjQxMzIwMzRaMDMxMTAvBgNV
BAMTKEE3REY3QTI2NUIzMzI2NDY4REVBMzExQzgwMUJEREU1NjlEN0RDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6Pe9DnHjNNAb6o3ogx8zdwlh
83Q7PPJUH0sCDU0t7130yWXlXen05N3tYSHiMRF8zio2nhPOzJ8yigyrznIB+8Ln
lNqySYP1uFFrWHUJA4irIAW+dZW3aopc4Dl0S0mEuo5Ra0V1mVnsKvd+Mo2Au8i+
+5XOugKzFIXRyEap2sf+Zt9M+MrOn/e8YvY2se4oUkETQSEF5LreHrBi3HC7FXsr
EVcq9RxIMOONQpkh5pEJh+7zL0pV1c1LAbFhigBlPa6A+uOqzq7vQwjALyqiXKi1
klOXk+vUAhtV2v2o0CVKoExAYZridRpB3wqiwlicM/nEmpxlqErqDwA31t43AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUp996JlszJkaN6jEcgBvd5WnX3FkwHwYDVR0j
BBgwFoAUMlJ+gtYD/75tou+O2Cx7sfejm4kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBrQ05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05q
UHYvMC8zMjUyN0U4MkQ2MDNGRkJFNkRBMkVGOEVEODJDN0JCMUY3QTM5Qjg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyNTI3RTgyRDYwM0ZGQkU2
REEyRUY4RUQ4MkM3QkIxRjdBMzlCODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHBrQ05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05qUHYvMC8z
MjUyN0U4MkQ2MDNGRkJFNkRBMkVGOEVEODJDN0JCMUY3QTM5Qjg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaxbxr6z676LizH4FlKxHb1lL8APtUDOZchK5nkZ4wxO1+1FVgGqufC5970nQ
KjLBaqDwx+MfFNhEpprRxOwE9h0Lr9HBcvHWG0MeDenYbV00+iiyr4d1GvxCZSQM
c/6L1fPeKEjjIcqgQCF8BcmDwA5DmzyBfMQ06I/jfbu40t6R2IXK8oevUuZxHMRy
6Uex35z9pu/lXHphpOVDG7a+VPfue1/1lMo3unlmgqW6UIkCQ2b/3UD6BZXU+qVB
Mqq1uLu8xsInBQqyQ6qb2fGDm3JVnze9k90lt0db37vYTUur74gS0OZY5nKUJtpP
2X8sQzD11UNcCkShgarWj6MEYQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 13:05:32 2025 by rpki-client