This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
File:                     1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft (raw, json)
Hash identifier:          s3f8Cw77OQMRbaf2vSBZHQ3wphMxZWVZNQQ+YgOB9kE=
Subject key identifier:   4F:67:99:FD:9C:6D:AC:EC:AA:34:F4:21:53:4D:3A:04:5C:C0:AC:A4
Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Certificate issuer:       /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Certificate serial:       242DC9E8E3B424AC2EFBBDEC1E29565281EF8CEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
Manifest number:          0335
Signing time:             Mon 22 Dec 2025 04:36:00 +0000
Manifest this update:     Mon 22 Dec 2025 04:31:00 +0000
Manifest next update:     Tue 23 Dec 2025 08:14:00 +0000
Files and hashes:         1: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: CtlsUAFWjImlwZWNz6P/jVFD3JBP5hLeswnSXTvh7E4=)
                          2: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: V4pr7EMRf7I7ElOQ2jaIag3WW0+6k23seAgpv3kqk1E=)
                          3: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl (hash: 9GFnXhRTFGGI127C6pKA+ub9OcAlduCArFnuRUF4kis=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl
                          rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 08:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2d:c9:e8:e3:b4:24:ac:2e:fb:bd:ec:1e:29:56:52:81:ef:8c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
        Validity
            Not Before: Dec 22 04:31:00 2025 GMT
            Not After : Dec 23 08:14:00 2025 GMT
        Subject: CN=4F6799FD9C6DACECAA34F421534D3A045CC0ACA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:c2:eb:81:93:8c:75:19:e8:4f:20:52:90:
                    90:37:df:5a:c2:42:13:33:5f:6d:18:42:86:88:c0:
                    a5:21:c9:91:84:ba:40:85:37:98:d2:20:ef:71:84:
                    49:14:f3:ad:8a:c0:a5:27:58:ce:c4:6b:1c:6b:34:
                    dc:cd:5e:fa:af:f9:7f:55:14:31:41:00:35:f2:95:
                    fe:c6:61:8a:0f:cd:8b:ba:b8:f7:c6:b7:7f:f4:cf:
                    8e:83:09:27:fa:50:e4:f3:61:70:e0:bc:41:5a:63:
                    fa:38:a8:3a:0f:dd:5d:35:65:19:d4:de:48:76:12:
                    51:56:8b:b4:66:8b:b8:97:33:e2:e1:6a:d7:ed:bb:
                    d4:cc:35:44:6f:46:0f:33:35:de:a9:0b:a6:3a:f0:
                    ce:18:49:85:53:78:1a:49:ae:ed:90:30:0e:56:9a:
                    04:be:1d:76:d6:8a:be:62:ff:4f:20:b8:95:08:59:
                    0a:17:44:68:e4:40:60:ae:ee:03:42:6f:e9:af:e0:
                    cc:2e:53:6e:db:13:c0:cb:ab:c4:67:39:17:3e:19:
                    3a:30:61:75:e1:eb:44:fb:b4:3e:3b:76:08:6c:78:
                    23:43:d1:d1:79:21:a6:5b:71:3b:c8:49:51:75:92:
                    3c:1a:ef:6a:47:2e:9b:11:f6:9b:9a:3d:45:c9:cf:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:67:99:FD:9C:6D:AC:EC:AA:34:F4:21:53:4D:3A:04:5C:C0:AC:A4
            X509v3 Authority Key Identifier:
                keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:59:f0:75:1e:2f:28:79:8c:8a:e2:36:2e:5d:bc:11:61:76:
         31:db:20:2b:ac:fc:fd:8b:86:23:b2:8c:76:da:16:47:a8:d8:
         5d:6f:d7:03:33:b6:95:b5:f1:05:ef:95:02:ee:bd:a4:22:75:
         22:51:26:36:d3:39:41:8d:1b:83:91:9c:ae:7f:a0:50:5f:f6:
         2d:c5:4e:f2:7e:d5:1d:fc:b6:cf:e9:7e:b7:9f:86:a0:78:ad:
         70:c5:95:4b:36:0a:52:12:89:c0:72:fa:ba:06:55:c1:54:2a:
         f6:df:9d:bf:e7:e3:23:24:76:9e:4d:80:61:71:a3:6b:dc:a4:
         33:5a:e3:97:47:27:8f:97:2a:e0:6a:e7:42:41:45:38:86:c6:
         9a:fd:8a:59:21:cc:8b:e6:c9:06:3f:74:4f:1a:ce:27:8e:8f:
         4e:1e:e8:aa:03:31:44:a7:73:9b:7a:68:fd:91:e1:80:22:97:
         ce:2a:3a:8f:d9:a2:19:6f:61:5c:36:ad:c6:13:d2:e0:fe:e6:
         cd:0f:31:c5:53:f8:02:7a:72:58:d2:05:b6:4a:6e:27:2c:60:
         5b:52:d5:7e:fe:82:0d:c8:ea:89:ac:59:ac:1b:f0:d5:1b:56:
         64:78:63:71:ba:87:5a:ac:96:36:9f:1e:8e:55:71:c2:86:58:
         10:9c:23:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJC3J6OO0JKwu+73sHilWUoHvjOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZENTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0
RDQwRkU5MjAeFw0yNTEyMjIwNDMxMDBaFw0yNTEyMjMwODE0MDBaMDMxMTAvBgNV
BAMTKDRGNjc5OUZEOUM2REFDRUNBQTM0RjQyMTUzNEQzQTA0NUNDMEFDQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMO8LrgZOMdRnoTyBSkJA331rC
QhMzX20YQoaIwKUhyZGEukCFN5jSIO9xhEkU862KwKUnWM7EaxxrNNzNXvqv+X9V
FDFBADXylf7GYYoPzYu6uPfGt3/0z46DCSf6UOTzYXDgvEFaY/o4qDoP3V01ZRnU
3kh2ElFWi7Rmi7iXM+Lhatftu9TMNURvRg8zNd6pC6Y68M4YSYVTeBpJru2QMA5W
mgS+HXbWir5i/08guJUIWQoXRGjkQGCu7gNCb+mv4MwuU27bE8DLq8RnORc+GTow
YXXh60T7tD47dghseCND0dF5IaZbcTvISVF1kjwa72pHLpsR9puaPUXJz+enAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT2eZ/ZxtrOyqNPQhU006BFzArKQwHwYDVR0j
BBgwFoAUH9U77JdmwLT4EVUec4XOLk1A/pIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN
WUMvMC8xRkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRDUzQkVDOTc2NkMwQjRG
ODExNTUxRTczODVDRTJFNEQ0MEZFOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8x
RkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVVnwdR4vKHmMiuI2Ll28EWF2MdsgK6z8/YuGI7KMdtoWR6jYXW/XAzO2lbXx
Be+VAu69pCJ1IlEmNtM5QY0bg5Gcrn+gUF/2LcVO8n7VHfy2z+l+t5+GoHitcMWV
SzYKUhKJwHL6ugZVwVQq9t+dv+fjIyR2nk2AYXGja9ykM1rjl0cnj5cq4GrnQkFF
OIbGmv2KWSHMi+bJBj90TxrOJ46PTh7oqgMxRKdzm3po/ZHhgCKXzio6j9miGW9h
XDatxhPS4P7mzQ8xxVP4AnpyWNIFtkpuJyxgW1LVfv6CDcjqiaxZrBvw1RtWZHhj
cbqHWqyWNp8ejlVxwoZYEJwj0Q==
-----END CERTIFICATE-----
Generated at Mon Dec 22 08:49:53 2025 by rpki-client