This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
File:                     37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft (raw, json)
Hash identifier:          n1QRRZt3eQrDwT8RjjTIH3asJuim+BdueSnQQDII+ss=
Subject key identifier:   9F:6D:1D:A8:92:D5:ED:35:C8:99:D6:49:87:A2:D7:D0:6A:F5:22:3E
Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
Certificate issuer:       /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Certificate serial:       52D1DE6D690DF0E2F15B6F0839CD20077788C2D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
Manifest number:          0343
Signing time:             Mon 22 Dec 2025 21:19:21 +0000
Manifest this update:     Mon 22 Dec 2025 21:14:21 +0000
Manifest next update:     Wed 24 Dec 2025 00:29:21 +0000
Files and hashes:         1: 323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (hash: wcI0ieNyQdQrVcqiR6SjIzVgQugca+WqF9vNkOhZw68=)
                          2: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl (hash: nMKkWC5b/VsO3zeJ7TZsM1eFVpkjrWe74Z1X1Ffta0Y=)
                          3: 3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa (hash: P911MJb8bo8zJ2j5fIGU+UADWHGgL9jZ2aBW0Bz91k4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl
                          rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 00:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d1:de:6d:69:0d:f0:e2:f1:5b:6f:08:39:cd:20:07:77:88:c2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
        Validity
            Not Before: Dec 22 21:14:21 2025 GMT
            Not After : Dec 24 00:29:21 2025 GMT
        Subject: CN=9F6D1DA892D5ED35C899D64987A2D7D06AF5223E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:72:0e:a1:ee:c8:e1:b3:5c:bd:2a:3a:c7:
                    44:13:0b:cd:0e:3a:8f:15:81:67:05:b7:62:ac:95:
                    ab:cd:2b:59:23:b4:a4:5c:5c:1c:e7:04:55:c2:a7:
                    b7:92:a8:8f:83:8f:7f:ea:f4:ec:2b:bf:0f:a0:f5:
                    3f:73:00:9c:69:b6:66:c1:17:2c:7b:1e:a3:1f:46:
                    0f:75:74:b5:7d:1d:94:dd:58:27:d2:7a:81:b6:17:
                    9d:6e:e0:e2:91:2f:05:fa:56:3e:14:49:c9:ee:ff:
                    57:77:9b:1d:d1:4a:2e:14:b3:e9:4f:25:e4:a1:c8:
                    66:58:25:b4:cf:17:f5:54:de:23:59:e5:52:dc:f5:
                    db:10:13:81:79:bb:38:b7:67:19:4c:c2:0e:0d:ca:
                    8d:36:89:5c:dd:0b:9c:c5:e9:a1:c1:26:5f:d6:14:
                    f6:60:ea:8e:bf:23:2b:f5:a2:e6:81:83:ed:0c:4d:
                    d9:96:f6:48:ee:3d:b7:49:9d:b5:cd:41:e6:d6:dc:
                    e5:70:4d:7d:5c:f1:59:c1:d3:d1:f5:80:e8:6a:fb:
                    97:56:d3:b4:42:7c:c9:13:80:a9:8a:8c:f0:c0:0f:
                    fc:ef:4a:dc:34:2a:2a:c2:ed:5a:bb:12:aa:d4:66:
                    13:5d:48:60:d8:b4:46:b3:04:9e:1f:fc:c8:ec:6d:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:1D:A8:92:D5:ED:35:C8:99:D6:49:87:A2:D7:D0:6A:F5:22:3E
            X509v3 Authority Key Identifier:
                keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:c9:fd:2a:ff:7a:f7:fc:48:33:dc:a2:07:6d:32:1a:af:
         ff:6c:5a:0c:92:67:0a:d2:0c:5b:9b:88:66:cb:44:65:fa:41:
         fe:fa:d8:25:ba:0a:c1:14:a9:de:26:83:1e:c1:cf:90:ae:f0:
         3b:21:7f:74:af:6b:87:53:70:fa:f3:bd:87:9f:cc:06:47:dd:
         73:3f:51:9e:9c:5a:90:f0:8c:34:a4:ea:05:9b:ac:46:02:22:
         9d:52:7e:1f:57:c1:ef:8d:65:23:ce:5c:f0:e0:7d:aa:19:57:
         3f:43:69:fb:82:48:2a:a2:10:da:72:95:db:9a:9c:e0:c5:5e:
         a0:c0:aa:d4:62:97:ed:82:51:60:26:b5:19:96:13:9a:f4:01:
         4e:9d:0f:a6:16:31:d2:ce:ee:ae:76:2b:89:80:a0:64:f6:de:
         f1:1e:e5:9c:5c:2d:0c:21:a7:1f:49:39:ca:ca:11:cd:4b:e0:
         ed:90:c1:d5:ea:94:c9:39:c2:c7:3b:df:da:d4:6f:fd:dc:b3:
         d5:d6:9d:0c:4c:9c:7a:b4:a9:d7:45:a6:45:4a:a0:c6:90:00:
         b5:1c:6a:02:a6:81:a8:79:94:07:41:7b:48:74:46:7a:00:db:
         0a:d1:9f:ba:7b:6c:db:67:11:3e:bd:7d:72:9b:c3:d9:43:1a:
         76:02:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:42:47 2025 by rpki-client