This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.mft
File:                     3A55A7A362ADF15C86D4B0D6061AA702693389A4.mft (raw, json)
Hash identifier:          ayKVKD+seDhaSXdARRtsTpL0CiVQckzWQ2PRGUqL8Zk=
Subject key identifier:   E2:22:30:53:C7:99:93:8E:6A:C1:CD:C3:74:E9:19:ED:14:F6:55:20
Authority key identifier: 3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
Certificate issuer:       /CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Certificate serial:       4B103E1B7ADBF830D29358F65ABAF39F1686E609
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.mft
Manifest number:          0108
Signing time:             Tue 23 Dec 2025 18:18:35 +0000
Manifest this update:     Tue 23 Dec 2025 18:13:35 +0000
Manifest next update:     Wed 24 Dec 2025 22:04:35 +0000
Files and hashes:         1: 3136302e32302e39312e302f32342d3332203d3e20323636313837.roa (hash: 75dR2JEW5fKQZ657kx47wKTP2VDUR/Yi3LeDwDsUxH0=)
                          2: 3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl (hash: fkThVuenU138OFHacaLFjJ1VyDAnse3hYQ61x7JZN14=)
                          3: 3136302e32302e38392e302f32342d3332203d3e20323636313837.roa (hash: CWa6d891yJ27BoKLyjKWnoGFQ1zrWUZHWTU1EGO6PVo=)
                          4: 3136302e32302e38382e302f32342d3332203d3e20323636313837.roa (hash: 5RArIxPKWDN1UVKPx9/vJUHs4rpEPRxLK8Tj4b+bWik=)
                          5: 323830343a336330633a3a2f33322d313238203d3e20323636313837.roa (hash: zq5yr6kw/41rOGqOIZQDjB4ChzblkJqSebJMzansRNE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:10:3e:1b:7a:db:f8:30:d2:93:58:f6:5a:ba:f3:9f:16:86:e6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
        Validity
            Not Before: Dec 23 18:13:35 2025 GMT
            Not After : Dec 24 22:04:35 2025 GMT
        Subject: CN=E2223053C799938E6AC1CDC374E919ED14F65520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:3a:bf:28:5b:0b:30:91:9b:7c:1d:9e:03:
                    94:de:1b:00:f3:c6:19:43:9a:7a:be:d0:c5:ef:a8:
                    70:47:95:7f:24:da:c8:82:90:61:85:be:d3:57:4e:
                    b4:93:9b:55:e7:95:e4:fb:84:2b:bf:df:96:a0:79:
                    b3:d3:e6:c0:cc:75:ec:50:78:b9:61:d3:d0:95:3e:
                    9a:85:57:46:5d:2a:d8:9f:50:d7:62:c8:6b:93:cc:
                    61:1c:2e:db:e7:60:02:b4:c8:f3:65:a7:03:60:f2:
                    52:14:b4:09:d1:00:bd:b4:2d:af:2b:c6:94:14:e6:
                    bd:3f:8e:8a:44:a7:9c:f3:0c:9f:be:e0:81:e5:96:
                    a5:fe:0a:91:45:d5:3d:98:2e:94:d3:4e:a9:98:86:
                    48:62:3f:45:c7:17:a3:4d:d7:69:20:32:79:7e:d9:
                    f1:be:1d:89:ec:6e:e1:3f:2a:da:d4:d4:ab:ab:e4:
                    5c:13:50:20:e8:35:44:9c:9c:25:8d:bd:21:6c:a4:
                    d4:f0:50:cf:e9:d1:e2:41:d2:8e:bf:59:1b:06:17:
                    21:41:d0:68:67:f6:44:09:e8:d3:62:d3:b8:73:5e:
                    d5:c6:95:00:5e:66:25:4e:61:ba:78:99:2f:54:39:
                    44:ff:23:6d:4d:6d:e2:a9:70:2f:91:3b:fc:c7:13:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:30:53:C7:99:93:8E:6A:C1:CD:C3:74:E9:19:ED:14:F6:55:20
            X509v3 Authority Key Identifier:
                keyid:3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:a1:96:3f:54:eb:b2:62:26:b0:31:d7:fe:71:f6:ef:f9:
         2b:a7:99:af:34:ca:09:35:f6:bd:f6:92:55:e5:5a:c7:d0:ef:
         d9:e7:7f:56:11:9a:34:67:3d:14:5b:47:0b:68:80:dd:c0:48:
         cf:28:a9:ce:37:5c:a9:e0:55:07:f2:71:63:3b:5a:6b:c7:62:
         c8:84:79:c9:d9:08:7b:47:41:63:45:8b:f9:4a:52:7f:d9:84:
         ad:9b:df:24:2d:ea:56:b8:67:20:e3:9f:a9:91:4c:78:c8:cf:
         da:2b:7c:e6:46:f5:c2:27:07:6d:f0:47:14:7d:76:76:bb:1e:
         1e:b1:82:c9:f1:18:3e:4f:c9:50:ea:fe:b8:71:1a:eb:de:91:
         9f:db:11:9f:b6:b9:76:03:77:27:5f:f3:78:09:52:f0:f6:af:
         29:5b:80:cc:47:f9:22:50:85:4a:a0:f2:8d:9d:e2:33:7e:7d:
         2f:b0:7e:e9:79:d2:73:bc:0d:e6:e9:9c:10:3f:f1:96:f3:cf:
         69:30:75:90:b3:29:74:d2:cd:6a:e2:b5:38:32:87:cc:95:3e:
         ce:33:1f:be:02:41:8f:94:e0:bd:d2:b3:75:49:a0:07:1d:fb:
         e5:75:98:b0:96:ab:62:19:76:5a:43:18:fd:e2:ba:b6:6e:e3:
         6c:5f:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:42 2025 by rpki-client