This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
File:                     F3C1884EB710220FE356655B73CBC129A38E910B.mft (raw, json)
Hash identifier:          NqQf4InZZ/HlHn323YLFeKT4XISb60tKrQYmbH6KMSs=
Subject key identifier:   74:17:16:9A:86:F4:30:FC:CE:B0:9E:67:44:F5:F4:D7:65:C5:20:E8
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       0F949D784DAAD7521193E65C7CC854076DB9CC64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
Manifest number:          0355
Signing time:             Mon 22 Dec 2025 07:33:44 +0000
Manifest this update:     Mon 22 Dec 2025 07:28:44 +0000
Manifest next update:     Tue 23 Dec 2025 11:11:44 +0000
Files and hashes:         1: 3137392e302e36382e302f32322d3234203d3e20323635323037.roa (hash: qkytaEbZu8RDfTJiCrCQ1j69QPIH5JfZxK0Y3+MeCeo=)
                          2: 323830343a326334343a3a2f33322d3334203d3e20323635323037.roa (hash: /TQHZ6DsQztJ6+UvDNAhwVDFzBpjFCd46NWXPzGQkGQ=)
                          3: 3136372e3235302e3136302e302f32322d3234203d3e20323635323037.roa (hash: bhRsi8bBy4p1SEP95nLFUUXzVNzx7WmbZyGRCXz8Sb8=)
                          4: 3138372e38362e31362e302f32322d3234203d3e20323635323037.roa (hash: 43G0f/X/NDnLpAYbAfldczaXBcF+PLTkbsFHBTh1+WM=)
                          5: F3C1884EB710220FE356655B73CBC129A38E910B.crl (hash: SKdC3TpFvy13ekX7tFn2j2Np23zQ02ZpumBc9YQYng4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 11:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:94:9d:78:4d:aa:d7:52:11:93:e6:5c:7c:c8:54:07:6d:b9:cc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Dec 22 07:28:44 2025 GMT
            Not After : Dec 23 11:11:44 2025 GMT
        Subject: CN=7417169A86F430FCCEB09E6744F5F4D765C520E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:e5:22:e3:34:99:d6:b0:6c:65:c2:57:cd:
                    63:46:a1:4f:72:90:0c:84:75:7d:d4:3c:8c:2d:fe:
                    23:19:50:ce:ab:12:53:02:d5:63:3c:d6:12:cf:ce:
                    ea:79:cb:b5:98:5e:80:fc:b4:61:28:6e:30:ec:aa:
                    05:93:3a:d0:df:00:66:ff:ec:46:0f:a3:27:8d:5e:
                    ef:46:71:08:f6:bd:9c:d4:19:83:0f:d9:b7:f2:1a:
                    f1:ee:ad:5a:23:c6:81:52:f4:2c:e2:b0:5a:ff:00:
                    51:c0:5c:95:97:41:cc:aa:61:93:bb:d6:31:c5:8f:
                    42:65:34:dc:d3:29:1d:76:e2:e4:3a:6e:35:f4:cc:
                    ba:c1:aa:96:a3:11:51:fc:4c:43:d8:59:a3:ff:39:
                    10:0d:a0:c3:62:53:e9:cb:2d:ba:7a:24:69:39:5c:
                    fb:c3:85:e8:10:4b:21:d2:e9:c0:e6:49:16:5f:9c:
                    25:a4:5f:2f:eb:56:01:34:87:6b:26:ea:43:14:bd:
                    5b:e1:b0:49:b8:13:94:03:9b:fa:b9:ef:a2:68:60:
                    1b:a0:b9:c3:bb:58:9c:c0:25:1a:e3:54:37:fb:fe:
                    3e:22:62:99:24:c5:d9:10:71:b3:5a:6f:9f:d8:f1:
                    e0:a2:05:b1:79:4f:cb:6d:bb:c3:4b:30:2c:5b:5e:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:16:9A:86:F4:30:FC:CE:B0:9E:67:44:F5:F4:D7:65:C5:20:E8
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4b:0d:eb:e4:9c:1e:63:94:33:83:48:c7:7a:a9:ea:b7:bf:
         e2:d4:50:28:8b:e7:d5:02:7a:79:62:9a:b8:f4:bf:b0:d7:72:
         2f:85:19:69:80:f4:72:2d:ab:1e:ec:20:cb:68:88:4b:e5:75:
         da:66:ae:24:22:8e:13:be:dd:08:26:75:1a:96:15:65:30:fa:
         bf:c7:6d:e5:00:39:02:8f:cb:47:2a:9d:62:c3:8d:2f:4c:02:
         62:67:e0:0d:5a:e1:8b:fa:3a:2f:7a:d4:ef:f1:c2:9a:23:3e:
         d1:6f:54:b2:e5:59:14:82:4f:9d:af:34:7e:e9:d2:83:0f:a7:
         c6:22:64:63:b4:d2:01:83:6d:49:6a:0e:53:1a:a1:39:fa:03:
         b8:0c:23:80:00:c6:b2:05:15:75:f8:e7:c6:aa:17:54:27:25:
         15:67:54:68:73:97:2f:9c:a2:19:f2:ce:aa:5c:cb:90:c8:d6:
         e6:66:b3:7d:ee:ef:f5:0f:1e:d4:bf:38:70:e5:9b:58:0e:53:
         22:bc:cf:e5:82:09:c1:c7:21:c8:5e:c0:08:e5:98:d3:90:2c:
         be:01:56:27:f7:ca:41:5d:63:71:b9:c4:3e:92:d8:e1:90:ed:
         ee:e6:58:2c:51:7e:2f:f2:9e:d2:a7:e4:98:b4:7b:29:68:b5:
         1d:61:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:47:35 2025 by rpki-client