This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
File:                     10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft (raw, json)
Hash identifier:          5zj4cvOVANJAq8dfI84BEsXFs+Y/l+JguqVhKVLkTas=
Subject key identifier:   34:13:9D:FB:4F:F0:8B:36:9C:FF:D9:D1:49:73:18:7E:95:58:4E:02
Authority key identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F
Certificate issuer:       /CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
Certificate serial:       23B29D7659EB45F3667D69298D72D187938BBC61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
Manifest number:          0340
Signing time:             Thu 18 Dec 2025 09:12:59 +0000
Manifest this update:     Thu 18 Dec 2025 09:07:59 +0000
Manifest next update:     Fri 19 Dec 2025 11:14:59 +0000
Files and hashes:         1: 323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (hash: 7t8yhV0k/bA1AjqvPjiCZxRA/tJx1nCk2/dyeg5pwiU=)
                          2: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl (hash: xtpa0n+woKb/GQf57RTsf7z3FxDNlV9H9a9D3PbZrWI=)
                          3: 3137302e3234342e3231322e302f32322d3234203d3e20323636353038.roa (hash: Cf2cMmebdvqPZ/KmztmmSY2nBbCIFr1Er8I0Jm6TuIE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl
                          rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 11:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:9d:76:59:eb:45:f3:66:7d:69:29:8d:72:d1:87:93:8b:bc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
        Validity
            Not Before: Dec 18 09:07:59 2025 GMT
            Not After : Dec 19 11:14:59 2025 GMT
        Subject: CN=34139DFB4FF08B369CFFD9D14973187E95584E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:60:91:73:8a:ad:01:2e:ed:fe:9a:c7:d3:
                    b4:00:4e:56:2a:6a:b3:0a:36:ce:b9:0f:06:64:3b:
                    ae:87:e6:eb:a2:50:4a:f2:a4:0b:ff:8c:e5:b6:6c:
                    41:28:29:2e:63:89:2b:66:6f:eb:89:53:dc:fa:bc:
                    d8:91:d6:e0:94:bb:05:5b:14:28:78:b4:6c:36:22:
                    14:ba:a2:55:12:1b:60:bb:dc:ce:89:27:61:cc:53:
                    1c:75:aa:90:a2:f3:13:ba:b8:2c:61:83:ac:0b:d7:
                    03:cd:d8:54:78:ca:1b:94:a0:f3:0e:9d:9b:6a:4c:
                    2c:53:86:60:ca:41:13:aa:53:36:da:b3:1c:f8:18:
                    e1:d8:50:6e:d6:10:6c:12:b4:0b:aa:dc:ec:43:ea:
                    e1:84:9f:ff:56:ea:ab:96:4f:47:01:0d:38:fe:05:
                    21:f4:13:81:8b:77:12:cc:34:ee:8c:27:22:fa:81:
                    ea:4b:56:dc:18:35:fb:c6:60:fc:da:b2:83:d6:f0:
                    32:d3:47:c2:ae:18:de:37:80:fb:d5:a1:4f:9d:15:
                    ff:ec:8b:78:78:d9:1f:e3:6d:60:20:c2:c2:01:08:
                    5d:9f:03:f0:21:0e:0f:fe:21:89:ab:3e:ce:43:5f:
                    fe:d5:04:79:8e:52:d6:14:40:05:32:61:c0:f6:2e:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:13:9D:FB:4F:F0:8B:36:9C:FF:D9:D1:49:73:18:7E:95:58:4E:02
            X509v3 Authority Key Identifier:
                keyid:10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:59:81:41:dc:b8:a2:a7:ad:b3:f8:24:77:0f:b0:c5:72:
         39:c8:08:02:bc:9a:89:fa:c1:4d:e0:66:bd:91:5b:5a:26:24:
         51:c0:a7:9c:61:5e:ae:2b:93:76:7e:cb:d0:6b:97:ca:1f:a7:
         c6:03:73:4b:1d:66:35:01:a9:72:ab:97:7f:16:b3:e9:d1:20:
         b3:a8:af:1b:c1:a0:2f:c7:2e:74:4b:3a:c9:76:26:31:c9:b0:
         72:60:c2:77:36:9f:f1:9a:0a:bd:5b:f3:42:9e:26:5f:ec:4a:
         31:40:92:e9:d0:e4:f2:22:a1:75:6e:1e:ca:20:33:e9:4e:f4:
         56:c4:91:a5:13:50:a3:f2:ca:6f:35:a0:94:1e:65:a6:f0:61:
         c9:92:aa:c2:7f:4b:12:4d:f5:42:51:5c:55:86:5e:83:a0:25:
         37:2f:e4:be:38:26:54:af:64:a2:c2:e9:cf:2d:15:52:68:e2:
         9d:1e:a1:91:bf:b8:9c:cd:9e:71:54:4b:ed:59:5a:73:9a:8c:
         4a:06:56:2b:47:40:9f:99:62:03:5e:84:3b:16:47:cd:25:e1:
         54:24:05:13:77:50:8f:db:ee:c9:db:31:92:68:0f:89:7c:aa:
         f2:8f:62:1c:7e:ff:93:e1:a6:6e:c6:9b:26:34:04:97:07:08:
         24:5c:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:35:35 2025 by rpki-client