This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
File:                     34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft (raw, json)
Hash identifier:          udjI6LxAzb5mVYJ8FUD7k58cU2QwuTbXaCSAM5SCOv0=
Subject key identifier:   EF:71:77:53:72:F6:73:43:79:D4:C0:2E:0D:AE:9A:76:58:6F:93:BA
Authority key identifier: 34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B
Certificate issuer:       /CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
Certificate serial:       3855601D454DEDEEC9AFC3524601B52519B1D83A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
Manifest number:          0342
Signing time:             Tue 23 Dec 2025 06:46:19 +0000
Manifest this update:     Tue 23 Dec 2025 06:41:19 +0000
Manifest next update:     Wed 24 Dec 2025 07:44:19 +0000
Files and hashes:         1: 34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (hash: k8WHvroGzNVDRDKZ/1KYZipIDUsh8phyDXftCUcck54=)
                          2: 323830343a356438343a3a2f33322d3332203d3e20323638393737.roa (hash: kJL4BKrGU+ViLgLCeJPXRmj51oXTbtFUkkanJ7vnSyU=)
                          3: 34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl (hash: gxEH8qua92Chl+Lza+4gbtoCfwyTYQdWkBe0+kS37WU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl
                          rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:55:60:1d:45:4d:ed:ee:c9:af:c3:52:46:01:b5:25:19:b1:d8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
        Validity
            Not Before: Dec 23 06:41:19 2025 GMT
            Not After : Dec 24 07:44:19 2025 GMT
        Subject: CN=EF71775372F6734379D4C02E0DAE9A76586F93BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:ae:54:ac:f8:80:dc:2c:b9:88:00:aa:5e:
                    76:d5:0c:6d:86:82:a4:33:54:18:87:65:ce:1f:dd:
                    8f:8a:7b:20:22:95:79:87:a8:1f:17:13:66:6d:7d:
                    83:07:6c:30:99:3d:b1:18:5b:d2:17:eb:8b:0e:70:
                    15:bc:35:7a:ee:e6:c1:34:2e:6b:0a:51:b9:bf:3f:
                    bf:87:91:aa:51:b6:87:d7:53:7b:1c:a7:f2:f5:8d:
                    c0:55:36:97:09:75:9b:d1:2d:76:e4:82:c5:00:4a:
                    0d:6f:61:ae:11:6c:3a:20:eb:01:60:50:2a:54:a2:
                    62:4b:d3:27:14:10:d9:cc:5b:9c:e6:bf:26:7d:94:
                    5e:99:d9:77:09:1c:92:35:8f:15:df:79:7b:6a:e8:
                    06:0c:99:44:31:a1:77:a7:65:a4:e4:0f:02:25:02:
                    73:be:2f:05:85:d9:d9:76:19:8a:c4:31:ac:39:37:
                    79:33:fc:68:9f:3c:41:fb:12:61:dc:98:95:d3:35:
                    a6:38:91:e6:b3:e7:3c:c2:9d:00:dd:e7:8a:6b:77:
                    fe:03:a6:6d:fd:7e:5f:33:4c:6e:35:d2:20:a3:29:
                    8f:70:bd:ff:4c:6e:e1:7d:c1:31:f8:33:78:76:69:
                    c4:b8:c1:5b:bd:cf:b3:b0:19:9e:66:4e:5e:84:c8:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:77:53:72:F6:73:43:79:D4:C0:2E:0D:AE:9A:76:58:6F:93:BA
            X509v3 Authority Key Identifier:
                keyid:34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2a:15:30:28:62:5c:2e:61:7b:9a:1f:53:c0:30:8c:11:2d:
         44:3e:b3:74:2e:5e:7e:ae:af:ac:c6:aa:fc:fd:c6:fc:e4:b5:
         69:b4:f3:fd:68:27:99:26:92:9e:83:45:83:34:bd:fc:b6:81:
         79:dd:5e:b3:6b:84:e1:20:7a:8d:38:c8:63:68:e5:5c:4a:0f:
         76:f8:a2:b5:32:29:10:47:14:03:1a:46:91:a2:b5:ed:6c:a6:
         4b:7c:0e:1d:34:0e:7d:71:77:3f:e7:f4:a2:89:12:0d:3a:0e:
         99:0b:f0:c5:1a:d1:3b:e9:56:41:0f:43:da:8b:34:a2:56:08:
         3b:3c:37:58:21:8d:73:95:92:57:ee:4e:51:94:8a:8f:b7:f8:
         4a:0d:f4:c9:69:21:38:ea:cc:a2:64:9d:34:a9:81:bf:5d:01:
         0e:97:80:da:a6:9a:d6:8a:a8:02:fc:e2:a7:de:25:19:a0:46:
         fe:8a:03:f7:be:82:84:c0:07:8e:91:3e:e6:50:cb:be:34:17:
         1c:eb:2d:95:78:a6:0a:0e:5e:81:24:40:85:1c:70:8e:9c:bb:
         a1:e8:e9:71:52:37:82:9b:f0:0f:f3:d1:0e:c1:95:61:3d:50:
         3d:55:f1:96:41:47:6a:68:19:c3:ab:b8:ab:6d:1a:65:41:2c:
         b5:2f:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:22:05 2025 by rpki-client