This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft
File:                     FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft (raw, json)
Hash identifier:          sKcKy4HIm+CSwYx6xfirlKbarmSVjIwD/ZZmKR4sW18=
Subject key identifier:   3F:C2:1A:09:ED:FA:66:0A:77:BD:23:D5:1D:86:1D:DA:BD:ED:AF:8A
Authority key identifier: FD:13:51:B4:E9:6D:AA:C0:9E:E4:56:EE:97:B2:95:D0:E0:AC:D8:F4
Certificate issuer:       /CN=FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4
Certificate serial:       111A3EE2C6C71358FA166F026A052573ECF8F46E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft
Manifest number:          DD
Signing time:             Wed 24 Dec 2025 07:55:21 +0000
Manifest this update:     Wed 24 Dec 2025 07:50:21 +0000
Manifest next update:     Thu 25 Dec 2025 11:53:21 +0000
Files and hashes:         1: FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.crl (hash: EJpncKhsWYe92AAPAhcbCjFlgEn3ohwTytTf2iw3LVA=)
                          2: 3133382e302e32382e302f32322d3234203d3e20323634353239.roa (hash: YGubbphgy4hQeQ8oD2CFOu2JeUo1pExHAoHhokuzFgE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.crl
                          rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 11:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1a:3e:e2:c6:c7:13:58:fa:16:6f:02:6a:05:25:73:ec:f8:f4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4
        Validity
            Not Before: Dec 24 07:50:21 2025 GMT
            Not After : Dec 25 11:53:21 2025 GMT
        Subject: CN=3FC21A09EDFA660A77BD23D51D861DDABDEDAF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:83:a9:63:c6:ac:c9:30:e1:4e:a6:1d:bf:
                    37:0e:a1:65:14:bd:3f:74:05:55:52:19:7d:c7:06:
                    97:d3:7f:ab:74:a3:98:81:8c:4b:8f:e4:3e:6b:d5:
                    28:e9:6b:94:94:da:d5:8f:b0:4d:4e:eb:47:60:23:
                    f1:c8:5a:90:f8:07:c7:09:b0:d6:e9:31:3b:87:78:
                    71:bc:e1:7e:70:a1:7b:f1:aa:12:58:37:c1:a1:f0:
                    e3:f4:3a:47:a4:e0:52:15:49:83:89:bf:1b:83:d2:
                    54:70:50:50:01:ea:20:97:68:25:5a:a1:1a:96:8f:
                    0d:36:d0:13:2f:ca:5e:e8:55:2c:0a:40:ec:f8:2d:
                    d3:b5:e2:af:ad:18:95:7e:a1:7c:a6:2a:d2:15:72:
                    74:82:fd:81:d1:e3:35:7a:d1:99:61:df:27:75:d7:
                    1d:87:76:a2:7e:0b:1f:7f:8f:9e:57:06:9d:99:a6:
                    e0:4c:79:e2:b1:ef:32:56:6e:36:bd:c2:8d:31:3c:
                    65:d5:6d:10:9b:01:74:f3:98:5b:8b:71:21:da:fd:
                    e1:69:a1:8f:75:09:48:ae:b7:47:cb:d4:68:83:3f:
                    6e:25:70:89:42:4f:20:13:62:df:48:61:59:83:32:
                    37:1e:f6:73:56:2d:d7:bd:ce:13:66:e0:6c:44:94:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C2:1A:09:ED:FA:66:0A:77:BD:23:D5:1D:86:1D:DA:BD:ED:AF:8A
            X509v3 Authority Key Identifier:
                keyid:FD:13:51:B4:E9:6D:AA:C0:9E:E4:56:EE:97:B2:95:D0:E0:AC:D8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4QBSVrFvFjV7y2UPSLM7iHePPucC5fS6oasZ84CBDVb/0/FD1351B4E96DAAC09EE456EE97B295D0E0ACD8F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:65:e2:c0:03:b6:bf:18:48:ca:50:fc:c4:2e:88:3c:74:
         92:ce:19:3b:c9:df:e4:53:91:b4:13:ca:2c:51:03:4c:f9:bb:
         21:8d:80:62:cb:05:b8:5c:b4:71:5e:3c:d8:38:19:c9:c6:48:
         ec:b8:6e:b8:fd:c1:3b:43:da:50:0a:70:20:ae:3c:7e:53:47:
         ea:51:54:67:4b:66:2f:03:cc:b2:0a:ef:40:8d:d1:03:ef:80:
         be:71:96:b8:8a:e4:8f:d4:64:f1:73:85:72:2e:aa:9f:e0:32:
         53:5d:51:92:a4:c7:50:98:bc:ae:87:d7:20:98:32:d9:dd:d3:
         0b:f3:cc:b8:51:2b:ff:41:3f:8c:4d:34:0b:b4:6d:d8:3e:35:
         8e:b8:8e:d9:9d:74:b5:e3:87:68:b7:ca:e1:bf:c0:ec:d9:a5:
         a4:37:5a:5c:5f:e2:db:2d:07:f6:f9:40:dc:2d:c1:b0:c9:a7:
         e2:c4:e9:be:02:28:5f:2f:3b:5f:1a:d9:b9:2d:c7:65:86:76:
         ab:19:fb:24:2f:33:09:50:fd:ad:06:09:05:4a:ba:35:10:b9:
         d6:e8:a3:03:1e:bb:bf:23:2c:48:a7:d7:b1:17:4b:34:0a:17:
         a5:a5:d9:37:1c:eb:aa:57:14:ed:63:72:aa:7d:5b:85:e2:21:
         38:69:fd:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUERo+4sbHE1j6Fm8CagUlc+z49G4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQxMzUxQjRFOTZEQUFDMDlFRTQ1NkVFOTdCMjk1RDBF
MEFDRDhGNDAeFw0yNTEyMjQwNzUwMjFaFw0yNTEyMjUxMTUzMjFaMDMxMTAvBgNV
BAMTKDNGQzIxQTA5RURGQTY2MEE3N0JEMjNENTFEODYxRERBQkRFREFGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPYOpY8asyTDhTqYdvzcOoWUU
vT90BVVSGX3HBpfTf6t0o5iBjEuP5D5r1Sjpa5SU2tWPsE1O60dgI/HIWpD4B8cJ
sNbpMTuHeHG84X5woXvxqhJYN8Gh8OP0Okek4FIVSYOJvxuD0lRwUFAB6iCXaCVa
oRqWjw020BMvyl7oVSwKQOz4LdO14q+tGJV+oXymKtIVcnSC/YHR4zV60Zlh3yd1
1x2HdqJ+Cx9/j55XBp2ZpuBMeeKx7zJWbja9wo0xPGXVbRCbAXTzmFuLcSHa/eFp
oY91CUiut0fL1GiDP24lcIlCTyATYt9IYVmDMjce9nNWLde9zhNm4GxElOLfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUP8IaCe36Zgp3vSPVHYYd2r3tr4owHwYDVR0j
BBgwFoAU/RNRtOltqsCe5Fbul7KV0OCs2PQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTRRQlNWckZ2RmpWN3kyVVBTTE03aUhlUFB1Y0M1ZlM2b2FzWjg0Q0JE
VmIvMC9GRDEzNTFCNEU5NkRBQUMwOUVFNDU2RUU5N0IyOTVEMEUwQUNEOEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMTM1MUI0RTk2REFBQzA5
RUU0NTZFRTk3QjI5NUQwRTBBQ0Q4RjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTRRQlNWckZ2RmpWN3kyVVBTTE03aUhlUFB1Y0M1ZlM2b2FzWjg0Q0JEVmIvMC9G
RDEzNTFCNEU5NkRBQUMwOUVFNDU2RUU5N0IyOTVEMEUwQUNEOEY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIKRl4sADtr8YSMpQ/MQuiDx0ks4ZO8nf5FORtBPKLFEDTPm7IY2AYssFuFy0
cV482DgZycZI7LhuuP3BO0PaUApwIK48flNH6lFUZ0tmLwPMsgrvQI3RA++AvnGW
uIrkj9Rk8XOFci6qn+AyU11RkqTHUJi8rofXIJgy2d3TC/PMuFEr/0E/jE00C7Rt
2D41jriO2Z10teOHaLfK4b/A7NmlpDdaXF/i2y0H9vlA3C3BsMmn4sTpvgIoXy87
XxrZuS3HZYZ2qxn7JC8zCVD9rQYJBUq6NRC51uijAx67vyMsSKfXsRdLNAoXpaXZ
NxzrqlcU7WNyqn1bheIhOGn9RQ==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:17:47 2025 by rpki-client