This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft
File:                     3EB8F32F868764375318F9AF4199127B28A8178E.mft (raw, json)
Hash identifier:          MpnjWA6u+3+khckQtT/2b618pquQKB9NNP4akePtulE=
Subject key identifier:   E3:88:89:11:3C:10:ED:80:73:2F:F3:FA:76:BA:B9:F3:37:32:85:F3
Authority key identifier: 3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E
Certificate issuer:       /CN=3EB8F32F868764375318F9AF4199127B28A8178E
Certificate serial:       40118491638A12E6E90931CC2D32234DE35EF838
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft
Manifest number:          2B
Signing time:             Wed 24 Dec 2025 11:04:01 +0000
Manifest this update:     Wed 24 Dec 2025 10:59:01 +0000
Manifest next update:     Thu 25 Dec 2025 14:02:01 +0000
Files and hashes:         1: 3EB8F32F868764375318F9AF4199127B28A8178E.crl (hash: +0MJYyAUKU9aJgOQChyqIbCZh90nKjSJkh+kAXt2Sdw=)
                          2: 3230312e37312e3230302e302f32322d3234203d3e20323730333031.roa (hash: bMaZFU6eTV4J8KyhJsYqEXDpoT4TyfYUZ/Sa0qHbE90=)
                          3: 323830343a363966303a3a2f33322d3438203d3e20323730333031.roa (hash: vceFRLcssuyZkrkMU5zJUm8ZoW/HgWMIgq+8EIbES+0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl
                          rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 14:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:11:84:91:63:8a:12:e6:e9:09:31:cc:2d:32:23:4d:e3:5e:f8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EB8F32F868764375318F9AF4199127B28A8178E
        Validity
            Not Before: Dec 24 10:59:01 2025 GMT
            Not After : Dec 25 14:02:01 2025 GMT
        Subject: CN=E38889113C10ED80732FF3FA76BAB9F3373285F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:45:cb:c6:f4:d5:47:64:8a:71:ea:b8:ea:
                    e4:89:cd:c9:2b:2d:bf:6d:5d:58:95:36:a3:5f:dd:
                    c8:7a:ce:01:6f:d3:65:2a:eb:c6:1e:6a:9d:c9:70:
                    3e:c0:28:48:7c:55:b8:c3:d7:47:55:3f:64:52:dd:
                    6b:07:af:42:48:d9:ae:0b:80:25:dc:e6:61:1c:5b:
                    d0:6b:07:a1:df:fe:8c:f5:41:bb:99:a4:62:4a:75:
                    9a:4e:9b:6e:0e:45:e1:fd:3f:69:09:f4:b0:95:8e:
                    c5:b0:e1:6a:2e:56:1a:b9:0f:70:6d:fe:c6:2e:5a:
                    16:6b:2d:dd:3a:a4:ad:98:aa:35:dc:01:d4:d5:26:
                    8e:19:70:17:fd:e3:94:81:89:d4:ff:5b:4b:05:aa:
                    93:d2:94:cb:ff:f5:73:4f:37:13:f3:42:f1:8f:af:
                    eb:92:74:e2:d7:eb:2e:7c:24:75:fa:c2:86:41:96:
                    c6:35:45:cc:e6:63:06:b9:ee:23:59:58:27:a4:72:
                    b9:3e:ec:53:a4:3b:06:83:28:fe:5b:61:98:e0:84:
                    07:42:25:85:e1:33:66:f7:74:e7:d5:03:1b:32:8d:
                    76:62:68:f0:a0:5c:91:31:d2:b9:c4:2e:b1:37:47:
                    4a:8c:af:fb:4e:3c:41:1b:12:94:a9:ad:d9:0e:1e:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:89:11:3C:10:ED:80:73:2F:F3:FA:76:BA:B9:F3:37:32:85:F3
            X509v3 Authority Key Identifier:
                keyid:3E:B8:F3:2F:86:87:64:37:53:18:F9:AF:41:99:12:7B:28:A8:17:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB8F32F868764375318F9AF4199127B28A8178E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62o4wHqbX72D99VcHL6pDPpkHxRBx6N12STC7z63pdgM/0/3EB8F32F868764375318F9AF4199127B28A8178E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:37:32:2c:24:63:d1:cd:9e:7a:ae:78:a4:ab:04:ce:f5:
         af:4c:e0:bc:d8:50:b8:22:83:49:aa:69:b1:11:07:d8:3b:bb:
         3b:1f:7d:96:e0:f3:68:10:0f:d4:cc:08:f8:52:5e:79:a7:bc:
         72:d0:ad:2a:4f:4f:9e:50:ce:69:cc:08:1b:01:1e:f4:c7:05:
         fb:e9:a3:d1:bc:e4:f8:66:43:31:b0:de:13:24:95:00:53:2b:
         a1:0e:54:c3:bb:63:cc:40:a7:80:91:df:0f:f9:03:a7:b4:ae:
         19:72:38:f0:2a:02:f3:76:70:b2:ec:80:8d:d1:b8:93:41:1d:
         f1:6b:ed:15:5f:81:c5:10:36:86:0c:5e:9c:66:b5:48:65:a6:
         4e:ad:02:0b:74:23:2c:e3:81:7b:ab:a9:4c:da:65:fe:45:8c:
         51:bc:eb:0b:44:e0:32:f4:c0:c3:7e:e5:66:d9:25:26:9d:90:
         f9:84:ff:06:c7:69:a0:95:6d:6e:ae:20:d0:f4:bc:90:b2:57:
         99:b8:d8:4c:d0:90:7e:cb:e4:4f:0b:06:52:b2:be:15:70:6f:
         0d:64:72:cb:7d:61:f3:2f:19:17:a8:2f:91:c6:66:dd:cb:52:
         77:4b:f3:e5:54:8f:ef:e0:20:83:dc:3c:32:67:8e:4a:73:dd:
         b7:df:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----