This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
File:                     3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft (raw, json)
Hash identifier:          1CtWxvvLh2/iqulKQLq9wqQGcKR2wXvvP1FMhuYFZmg=
Subject key identifier:   F5:85:A3:AF:DD:B1:49:88:88:E7:3B:09:8D:C1:57:24:A2:00:20:1D
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       255B050B3AC28F87171E85E0FECD3B7E9F1D8C96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
Manifest number:          0235
Signing time:             Thu 18 Dec 2025 22:32:55 +0000
Manifest this update:     Thu 18 Dec 2025 22:27:55 +0000
Manifest next update:     Sat 20 Dec 2025 01:35:55 +0000
Files and hashes:         1: 3133382e39342e3132342e302f32322d3232203d3e20323639303733.roa (hash: GeGl0uL7NKEpl5Lz3Lytp0fmoB1/IHq/5WFTZhB6xos=)
                          2: 3138372e38362e3139342e302f32342d3234203d3e20323639303733.roa (hash: KOjRjTD/+UnfDxVSRlrqsd2qFvja+ddD6QmFGF8HhVA=)
                          3: 3136382e3132312e3133322e302f32322d3232203d3e20323639303733.roa (hash: W8cbFMK47vP9ltILM6V7PHcnYyPyx6vVg3pLirNLPl0=)
                          4: 3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl (hash: fj624fH2sMaFAlIvF16ObysCIeprbwO7fJP5qZkS4YE=)
                          5: 3138372e3131302e3134342e302f32312d3231203d3e20323639303733.roa (hash: 4RNfkt84yyBdr3M6G3j6XF6OeSX6SEkaqPmacjvwdfA=)
                          6: 3138372e31372e33322e302f32302d3230203d3e20323639303733.roa (hash: 3yU+px4p5Mp6xJyKDQPtI4SPOWQ5+sdcG/NYn2BbRCM=)
                          7: 3230312e3135302e3134342e302f32322d3234203d3e20323639303733.roa (hash: FFLOLys8OFPEdVs9QJu540uNFy4kcQu3XaAlHM8uT9c=)
                          8: 3138372e31372e33322e302f32312d3231203d3e20323639303733.roa (hash: Ue1NeeoUUUVszJEWzoVW74TJcjniUNwwqkGrmFV/keo=)
                          9: 3138372e38362e3139322e302f32332d3233203d3e20323639303733.roa (hash: kAU/uvXUubPGvjQctrFwsQp+McY8QXbZUZlQVlfMe40=)
                          10: 3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa (hash: /BvWRiblHzPoJo5E9Y8tZeenZX3uj+rM1bXI7M5sCDQ=)
                          11: 3138372e31372e34302e302f32312d3231203d3e20323639303733.roa (hash: IJUj+FqsSmp2Dzs4+0+akz91FKPXbot85b8ayVLaK24=)
                          12: 323830343a356630633a3a2f33322d3332203d3e20323639303733.roa (hash: BvonjstbFxEaI5k1u/yWxXBHu1xAIxX9va5t4Z3stQk=)
                          13: 34352e3137392e33362e302f32322d3232203d3e20323639303733.roa (hash: hW+r+tp3dzXO15NOyDHUE3HmEGCqvykktpAptBhT3oY=)
                          14: 3138372e3131302e3134342e302f32312d3234203d3e20323639303733.roa (hash: yaEL7KeOOiZsGFhK9GOm8q/9vPPrYnuNHor+PcFaFNw=)
                          15: 3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa (hash: E7W7kxgTAjDK6y94RL8vGRNSybT1UCArzsP+rSZqRvE=)
                          16: 3133382e39372e3132302e302f32322d3232203d3e20323639303733.roa (hash: VbziN+JO6/eD2Kg3qRVaWrJGjJUjyjYE/zwRm1hUtTI=)
                          17: 34352e3137392e33362e302f32342d3234203d3e20323639303733.roa (hash: /McNxK5flM/B5/fJ7iPiae/d0RZ980Ip3N+49Yj6GJk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 01:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5b:05:0b:3a:c2:8f:87:17:1e:85:e0:fe:cd:3b:7e:9f:1d:8c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Dec 18 22:27:55 2025 GMT
            Not After : Dec 20 01:35:55 2025 GMT
        Subject: CN=F585A3AFDDB1498888E73B098DC15724A200201D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:64:c9:9c:e7:a7:3a:fa:36:5b:02:d4:09:
                    4c:b0:7d:8f:cb:ce:a2:bc:e5:d7:39:bf:e0:6c:1d:
                    a5:0b:c1:9b:ef:95:97:b2:7c:f7:9c:a2:90:db:97:
                    e6:dd:34:35:18:b3:eb:9a:3b:3a:39:04:1f:fe:6d:
                    ed:35:36:a6:1c:82:9b:c3:01:f1:63:4e:e0:78:f2:
                    be:d2:e5:2c:8b:67:2d:f0:0e:08:ad:3f:fb:b4:9c:
                    d8:8b:35:7b:27:93:f8:98:82:f4:e7:63:a0:f2:97:
                    ba:0c:38:62:86:aa:fe:05:d1:8d:52:05:62:33:e3:
                    d1:ec:a4:f9:0f:b0:3d:9b:9c:d3:bf:6a:93:b3:6c:
                    5a:58:1c:1e:54:8a:7c:7a:94:31:23:bb:69:72:fc:
                    74:06:02:0d:5b:ee:f2:4c:ef:2c:81:65:5a:1d:58:
                    80:cd:8e:c8:a0:4a:57:00:06:64:29:39:a3:9f:70:
                    ed:47:7b:a9:55:c7:77:e4:b7:bb:d0:cf:19:97:91:
                    48:25:b3:e0:6f:69:a4:bf:c2:89:45:15:a4:c1:77:
                    68:5f:bd:ce:5f:c3:87:a4:a5:32:9f:f6:36:84:7d:
                    24:81:b5:be:97:5c:4a:a7:13:9b:30:64:d9:e1:13:
                    19:d2:1b:8f:d7:80:a7:45:b6:ad:25:6b:7b:84:4d:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:85:A3:AF:DD:B1:49:88:88:E7:3B:09:8D:C1:57:24:A2:00:20:1D
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fa:27:05:d3:34:59:ec:65:73:06:85:e3:67:cf:7c:96:72:
         f3:ff:8d:55:c2:3b:d8:9f:64:93:38:23:b8:8d:fc:68:3b:6e:
         99:68:2c:69:92:4a:72:b3:e6:4a:09:c4:87:9b:50:20:f9:39:
         ac:0c:f4:ee:38:8c:88:b1:10:bd:53:2a:d0:04:81:4f:64:b2:
         f0:c0:a3:3d:3e:c7:74:68:db:be:73:c3:da:be:f5:11:d9:ec:
         61:e0:53:ba:e2:65:4b:23:85:1c:63:f1:c0:72:f1:06:05:3b:
         1d:5d:d8:3e:a9:ef:13:85:4a:2a:13:73:f3:fe:8e:fd:e4:66:
         97:21:5b:8c:de:95:1f:84:06:a9:6b:2d:b9:17:aa:a3:06:90:
         81:44:7e:a3:b6:a5:4b:52:04:20:8b:f8:bd:b0:57:b6:c6:a2:
         b1:b3:19:df:35:9b:80:b7:3b:3f:53:5b:9b:11:7b:fa:38:8c:
         96:2c:7e:63:01:a9:1e:5d:ba:c2:be:d9:10:41:61:50:06:82:
         67:1a:b2:f2:da:36:a2:c0:9d:17:ca:d2:a5:56:3c:43:68:d9:
         0c:e8:43:b9:10:3a:03:a6:70:62:36:94:fd:95:23:29:9f:68:
         18:56:82:98:e2:eb:68:c9:87:39:00:79:ab:65:ad:9b:c7:38:
         90:66:63:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:48:06 2025 by rpki-client