This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
File:                     B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft (raw, json)
Hash identifier:          8ddwtrqsY4U/w0QvDoi5buAdR0djZlTsOcpkyMo9QNQ=
Subject key identifier:   A3:8B:E6:EE:02:77:F8:12:03:D7:E0:07:27:0E:1F:05:27:99:5E:35
Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
Certificate issuer:       /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Certificate serial:       2C4BFA72156DDFE4333743BAE49E0B9023E11579
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
Manifest number:          0345
Signing time:             Tue 23 Dec 2025 16:29:43 +0000
Manifest this update:     Tue 23 Dec 2025 16:24:43 +0000
Manifest next update:     Wed 24 Dec 2025 20:11:43 +0000
Files and hashes:         1: 323830343a336131383a3a2f33322d3334203d3e20323636303730.roa (hash: 5jChHZu/vFi+LLiu8tTfwWKXqbT78LjUfm2ELx1+iX8=)
                          2: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl (hash: f/WuGMW0IgTCIpyfbd9A2GTAjWUDooy1tVdcCfJsIXo=)
                          3: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (hash: CImzxX+rkL1rxYW2A+TXCoq1LL7u0k8unKss9z1G3Xo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl
                          rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 20:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4b:fa:72:15:6d:df:e4:33:37:43:ba:e4:9e:0b:90:23:e1:15:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
        Validity
            Not Before: Dec 23 16:24:43 2025 GMT
            Not After : Dec 24 20:11:43 2025 GMT
        Subject: CN=A38BE6EE0277F81203D7E007270E1F0527995E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:31:4a:94:77:0e:c3:64:c3:b0:7d:2c:35:
                    57:9e:35:5e:44:55:c7:77:67:b5:1e:31:c5:32:fe:
                    68:00:20:ee:bf:b1:b4:fa:51:69:ff:24:b2:e8:21:
                    c8:a6:73:67:af:d8:e2:c2:0e:e9:bf:14:f9:dc:7c:
                    3b:df:ff:c6:5f:ca:37:73:a5:34:32:fb:10:af:0c:
                    55:42:a6:e9:bb:f4:18:63:b1:f8:07:58:02:4b:07:
                    aa:45:1d:1c:ed:15:bf:f0:5e:18:8b:5a:9d:80:8f:
                    16:43:fa:8e:77:98:96:a2:3e:d0:03:bd:22:d9:d5:
                    14:d1:91:e4:93:ab:e6:92:da:93:17:a3:f8:3c:1d:
                    a7:48:55:65:31:1d:d2:28:40:d5:a5:10:fc:db:f2:
                    e5:35:35:bb:fd:8b:2e:16:c5:32:fb:82:76:cd:5b:
                    ab:41:dd:be:85:fd:99:19:ed:81:18:27:6a:65:8e:
                    0a:44:86:70:27:07:fc:e3:5f:6d:27:4a:6f:c1:68:
                    01:da:e7:8c:31:f8:59:ee:42:1e:4f:7f:3e:c8:50:
                    12:a7:26:f2:77:ed:0e:4d:c6:9c:a5:07:1d:a0:fb:
                    c7:98:5d:b1:32:80:cc:fa:83:cd:71:9e:51:ea:02:
                    c3:6d:b2:1d:8d:64:b8:fd:fe:91:25:fc:27:e2:cc:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:E6:EE:02:77:F8:12:03:D7:E0:07:27:0E:1F:05:27:99:5E:35
            X509v3 Authority Key Identifier:
                keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:31:1f:79:af:40:db:fa:1b:2c:82:a1:3e:53:9f:9d:ac:
         ea:82:e6:c7:18:ff:66:00:e9:8e:7d:dd:fe:57:78:69:0e:f9:
         84:08:2f:e9:a4:5e:47:f0:e9:23:ed:cd:b2:0a:7a:8e:4f:3b:
         74:cc:8c:07:19:1e:cb:d9:b6:2e:94:56:cc:4f:d4:1c:95:2e:
         0a:40:f8:45:23:0b:42:35:c2:8c:09:a1:7d:cb:fa:2f:44:08:
         6b:c7:5c:68:e2:fe:95:71:cf:9a:82:c9:7d:ae:95:73:01:de:
         4a:71:62:b4:24:88:00:07:92:79:a2:6d:7f:39:d5:e8:9c:95:
         cb:20:18:b4:61:30:33:39:d9:e5:e3:f8:02:75:45:d7:d0:61:
         79:3a:35:63:c2:f5:01:f8:c3:6c:36:ef:51:1b:e5:b4:08:d0:
         54:21:3e:b2:49:a2:8f:08:7a:7f:99:27:b4:29:51:9d:6f:1c:
         37:73:e5:b5:71:48:a7:93:cf:3f:ca:8d:b4:74:c2:3c:36:00:
         fb:85:06:b4:42:85:0c:58:c8:4a:3a:be:54:47:dc:95:a5:f0:
         cf:ed:2d:c1:63:74:c7:15:9b:04:33:0c:af:22:63:17:0c:de:
         d7:b8:27:af:17:3b:ab:55:56:67:9e:66:90:4c:89:a2:aa:35:
         43:07:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 19:44:10 2025 by rpki-client