This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
File:                     EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft (raw, json)
Hash identifier:          mqKCjxRUfx7zeURx/FjxXA/x7LxMShrr1pSwWC7hUHY=
Subject key identifier:   18:8A:66:F9:A0:5A:C1:05:33:A0:FF:C9:F9:7E:F1:41:24:18:0A:CC
Authority key identifier: EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
Certificate issuer:       /CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Certificate serial:       4C593EB71EEF2952656E18AA1D2399DC1A81CD59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
Manifest number:          0341
Signing time:             Tue 23 Dec 2025 20:32:16 +0000
Manifest this update:     Tue 23 Dec 2025 20:27:16 +0000
Manifest next update:     Wed 24 Dec 2025 22:04:16 +0000
Files and hashes:         1: 3137372e38362e39362e302f32312d3332203d3e20323632353036.roa (hash: zNEO5VjdUssSmDnatKQ0risH9GIqrvSntMswWswg8RI=)
                          2: 323830343a373235633a3a2f33322d313238203d3e20323632353036.roa (hash: DxpqrHeHTS5oYOfPy5TSY37lPlsXFR/7xTA1lwITK78=)
                          3: EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl (hash: VvH4fKbFDTuqioOcYoEo9C9C6iKcM8RpAYZBJ3/ddgE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl
                          rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:59:3e:b7:1e:ef:29:52:65:6e:18:aa:1d:23:99:dc:1a:81:cd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
        Validity
            Not Before: Dec 23 20:27:16 2025 GMT
            Not After : Dec 24 22:04:16 2025 GMT
        Subject: CN=188A66F9A05AC10533A0FFC9F97EF14124180ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:31:76:9d:ea:5e:4e:cb:70:c2:05:c8:93:
                    10:f1:2b:e4:d7:f9:8b:20:cb:62:be:d0:5d:4a:90:
                    d0:ba:4b:9d:58:1d:c5:9e:b5:e7:0c:91:c9:4d:f1:
                    29:02:c2:cd:55:40:89:bd:cd:1b:43:36:b0:16:78:
                    79:74:f6:21:75:67:ca:e6:c4:32:f9:6a:91:04:27:
                    74:0f:74:1b:4f:71:86:a8:33:65:4e:f9:4b:9b:38:
                    17:c7:b8:37:6a:33:4d:34:52:a5:1d:96:a9:f2:54:
                    d6:11:47:97:31:cd:ca:57:46:7e:7e:10:90:f0:da:
                    d7:31:fd:64:bd:04:ec:19:5a:f0:05:b1:f6:bd:40:
                    72:a4:1e:63:34:09:79:98:cf:9a:79:4d:2c:dd:1c:
                    d9:94:68:3a:cf:35:d1:49:0a:13:6f:b0:1f:c0:ac:
                    a2:a7:77:d3:d9:01:93:c2:c1:23:8d:02:2e:48:54:
                    3d:fd:82:15:7b:d6:88:ab:9d:4d:92:ca:e2:f3:75:
                    3f:0c:43:ad:23:05:1f:0e:d6:49:ad:c0:5d:6e:46:
                    43:57:67:79:37:f8:6b:ff:e0:b4:4f:a9:01:04:96:
                    d8:6d:c6:68:1f:01:0e:90:e3:a2:1a:09:c8:5c:bf:
                    58:5f:cf:a9:4e:fb:d9:22:f3:fd:70:a5:0f:fb:b6:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:66:F9:A0:5A:C1:05:33:A0:FF:C9:F9:7E:F1:41:24:18:0A:CC
            X509v3 Authority Key Identifier:
                keyid:EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:89:2a:f7:17:66:c9:91:4a:84:ab:59:c6:82:20:73:0d:f2:
         55:32:24:5a:22:83:11:d1:b5:1e:0d:91:5a:21:0a:b3:7f:47:
         31:03:6b:17:87:4d:97:30:2d:6e:da:74:2c:2c:d4:79:7a:00:
         8b:07:24:5c:ee:16:4e:a7:ec:8f:a1:d1:6b:ab:81:ba:8c:98:
         16:16:ed:53:eb:be:de:68:e3:3c:6f:8d:e0:59:94:4f:72:cd:
         a0:d8:28:ea:d3:da:65:d3:83:1d:75:11:fd:bd:8d:9e:26:19:
         32:17:7a:00:d4:8a:92:a1:94:91:dc:f9:26:2b:b7:52:93:8b:
         25:60:90:e4:09:0f:69:e2:56:d2:9b:5e:92:9d:d4:25:9a:3e:
         c1:38:2b:ba:3c:fe:7d:16:ae:ad:8b:96:5e:d6:28:92:35:eb:
         f4:c8:62:18:60:b5:21:c4:b5:aa:4b:7d:3a:3f:af:87:ca:4e:
         93:9e:b0:d5:90:3f:18:bc:80:19:43:4b:72:59:81:71:46:14:
         1e:10:20:9b:b1:7f:ab:e5:4d:cc:fa:5e:e4:66:c5:c9:c6:05:
         37:12:a6:7e:9f:60:89:48:8e:da:76:62:bd:42:f5:c6:f6:7a:
         90:bb:eb:7e:32:25:9d:6a:cc:5c:db:da:78:b7:7e:2a:05:ca:
         dd:38:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:25:20 2025 by rpki-client