This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft
File:                     3924B516E35165FE5C42CA81DECF7024E08B60F5.mft (raw, json)
Hash identifier:          ajsztz/wSCuQH8cLKH0bIxQ1zUCARlgvSFivExUDw24=
Subject key identifier:   92:FA:76:BC:F0:EE:B3:CC:D7:2E:7B:0F:84:C1:DC:BD:BE:58:29:82
Authority key identifier: 39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5
Certificate issuer:       /CN=3924B516E35165FE5C42CA81DECF7024E08B60F5
Certificate serial:       5A23D0B80B613AC4120E81B7862A93CB63F8C847
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft
Manifest number:          0335
Signing time:             Mon 22 Dec 2025 21:15:14 +0000
Manifest this update:     Mon 22 Dec 2025 21:10:14 +0000
Manifest next update:     Tue 23 Dec 2025 21:15:14 +0000
Files and hashes:         1: 323830343a376662343a3a2f33322d313238203d3e20323731373034.roa (hash: uXxw0eaYe/IPT8weYD7z1pq/JJmMkHNNoif0E+WU82I=)
                          2: 34352e3232372e3232382e302f32322d3332203d3e20323731373034.roa (hash: DEhnwHFSs1NvcHFXVYwTNEhwXAraDqc8OLTOxQKjJMc=)
                          3: 3924B516E35165FE5C42CA81DECF7024E08B60F5.crl (hash: BDTXeXbynW8rMRyHGS020/Y5a4DiYhr3FmIHOANMzXs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl
                          rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 21:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:23:d0:b8:0b:61:3a:c4:12:0e:81:b7:86:2a:93:cb:63:f8:c8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3924B516E35165FE5C42CA81DECF7024E08B60F5
        Validity
            Not Before: Dec 22 21:10:14 2025 GMT
            Not After : Dec 23 21:15:14 2025 GMT
        Subject: CN=92FA76BCF0EEB3CCD72E7B0F84C1DCBDBE582982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:40:23:a8:6e:9e:66:d2:10:51:c4:82:54:
                    58:1c:7a:2d:51:43:09:ee:e6:0d:64:fd:f6:b1:85:
                    73:92:9f:53:ce:38:af:08:18:53:32:d5:16:d3:f1:
                    41:e2:d8:df:4f:55:95:82:20:5c:48:bb:09:57:72:
                    c8:42:56:18:5b:b9:00:d4:d7:02:b0:5f:e5:06:0a:
                    02:9e:ff:db:8d:8e:e2:50:b8:06:2b:09:fb:e2:58:
                    1d:bd:87:44:ad:8a:29:d8:23:42:40:81:58:05:31:
                    56:03:1e:2e:a8:5d:6d:ad:4f:5c:ff:bb:4e:66:55:
                    af:fb:6f:48:07:42:10:ef:b3:09:33:23:40:0a:0c:
                    a8:39:67:49:b6:69:e7:67:e2:bc:ff:59:87:d6:11:
                    a0:a7:94:20:a0:6a:1b:37:5c:c8:f1:89:68:89:98:
                    ef:39:80:23:3c:98:cd:b9:1e:1d:0e:3d:de:bd:1e:
                    b6:15:d9:88:c9:47:33:f2:78:dc:be:a4:c2:54:13:
                    de:af:f5:60:3e:ba:04:e0:a3:f5:6a:66:26:95:c2:
                    21:00:3a:f8:f3:c7:00:f3:a6:26:f6:fd:f6:62:12:
                    b7:ed:b4:09:55:13:db:b5:43:df:e3:97:1e:50:c9:
                    a4:0a:a1:51:9c:a6:4a:e7:a6:a9:aa:80:8f:ee:3d:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FA:76:BC:F0:EE:B3:CC:D7:2E:7B:0F:84:C1:DC:BD:BE:58:29:82
            X509v3 Authority Key Identifier:
                keyid:39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:84:42:10:3a:39:24:1f:71:a4:7d:72:c8:98:a9:27:30:
         32:30:e0:b7:8f:76:09:14:f6:ff:c8:83:13:39:0f:6c:1e:3d:
         f7:1f:0e:bf:a9:fa:13:63:65:02:54:54:ad:23:0b:38:39:bd:
         ea:10:06:5d:9c:f9:8a:59:d3:4b:e6:59:c2:31:36:16:2f:96:
         f5:d8:3d:b9:11:05:69:5d:f9:07:fc:62:68:f3:0d:a4:90:a3:
         0f:a8:e5:15:2a:ca:21:6c:11:ff:be:56:4d:1a:85:a6:1d:c0:
         e1:34:92:23:22:02:8e:ff:80:e9:a3:56:4e:cc:88:6d:7e:cb:
         07:d5:90:0e:df:72:d6:87:63:e9:9f:ee:45:4a:7b:e9:4a:eb:
         0c:f2:e5:35:89:d4:45:ab:7e:55:8a:24:45:1d:1f:c8:66:07:
         c9:e9:51:fd:09:ab:d5:3a:cb:ef:97:85:5b:d3:58:ad:45:f1:
         66:a6:56:84:b0:21:24:aa:ee:4b:e3:e6:02:c8:0f:a5:07:5c:
         e1:cc:bd:ff:ec:80:74:d7:1f:1d:bc:9d:c1:66:93:57:4a:72:
         c5:32:9c:49:42:2f:cf:75:6d:4b:d7:4e:2f:60:32:db:2e:ae:
         c7:36:6c:09:5e:1d:85:a3:bc:9c:de:fe:dd:81:68:5f:4b:c7:
         a9:cf:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:16:10 2025 by rpki-client