This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
File:                     294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json)
Hash identifier:          jygvP75atM3wudrUUg+/J2xm+S3z5yBhUkJhmLQoD3A=
Subject key identifier:   93:F8:D6:4A:28:F3:8F:E6:80:44:75:BC:37:DD:3D:77:E1:B2:75:FD
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       D5550D63466BC98F1FB06A46DC291104F7A064
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
Manifest number:          034D
Signing time:             Sun 21 Dec 2025 02:20:05 +0000
Manifest this update:     Sun 21 Dec 2025 02:15:05 +0000
Manifest next update:     Mon 22 Dec 2025 04:35:05 +0000
Files and hashes:         1: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: kP3yuOziQGvTs7gAqbrCAHPzpnd0+PYYuQOkH5wNORA=)
                          2: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: 9AM72G0oInDYQY3lqjWdz/C1fL1qp16Mt4yeVs1Eu3o=)
                          3: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: 27TRK43DvGzctvUwTwZoruKts8GvTaqt7quiQch6ar4=)
                          4: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 04:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:55:0d:63:46:6b:c9:8f:1f:b0:6a:46:dc:29:11:04:f7:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Dec 21 02:15:05 2025 GMT
            Not After : Dec 22 04:35:05 2025 GMT
        Subject: CN=93F8D64A28F38FE6804475BC37DD3D77E1B275FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:15:c6:80:4d:2a:01:e9:7d:bf:67:73:d1:37:
                    27:b5:3c:31:b6:3e:19:79:e4:05:7e:f7:5f:c6:8d:
                    44:6a:48:e9:b6:82:0b:22:58:8d:c4:19:fa:de:57:
                    fd:ba:47:b2:4d:5e:93:ff:71:94:49:fd:51:a8:24:
                    05:ce:48:5a:12:f0:27:ec:f3:91:a0:63:84:1f:6f:
                    b7:5f:b9:60:d7:db:cf:e3:d2:82:20:49:c9:85:31:
                    dd:06:90:0f:56:a6:45:18:55:c3:ee:56:84:09:9f:
                    b6:18:bb:de:22:69:30:3f:a1:eb:72:0a:fd:3e:2a:
                    da:88:09:e3:95:22:5b:0a:8a:0a:f7:42:44:d4:4e:
                    52:6b:17:bc:3f:41:d5:04:48:cf:e6:6a:0a:a2:35:
                    44:b3:4d:bb:fa:b0:16:bc:4e:27:65:9d:d7:9d:46:
                    6c:f3:be:4a:57:43:03:bf:1f:f0:f9:e3:14:fd:73:
                    da:91:b1:71:f0:f7:39:4f:4d:99:5c:c0:77:02:8d:
                    28:d2:c9:fc:74:bf:e9:2c:9f:a0:40:9e:ee:42:53:
                    84:44:2c:36:78:32:d9:bb:a1:98:39:a9:76:66:d4:
                    f5:48:69:85:04:da:a2:3b:c9:59:9e:9b:cc:c1:4a:
                    93:54:64:fe:35:c6:f0:0e:fb:a2:fa:50:88:ed:91:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:D6:4A:28:F3:8F:E6:80:44:75:BC:37:DD:3D:77:E1:B2:75:FD
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:f1:58:15:84:26:2e:50:ec:5b:87:f2:d0:d2:cc:af:53:
         24:9a:65:16:54:d8:71:37:6c:d2:1b:f6:55:de:8e:1c:d6:62:
         60:02:76:c2:7c:15:21:7b:7a:b2:93:8f:21:7f:b8:3a:eb:f8:
         a7:82:ab:55:6a:7a:46:ee:cf:87:e4:21:89:44:bb:91:38:d8:
         53:cd:af:66:78:15:51:0c:5b:8d:47:49:0f:f8:a1:a7:b5:ad:
         76:b9:51:48:61:b9:09:22:ca:98:87:14:a9:06:33:6e:68:7d:
         6f:e0:c2:df:5c:4b:87:00:cc:f7:a0:97:36:0d:cc:2c:9b:31:
         27:49:d1:aa:db:47:5d:85:ea:26:ac:55:88:3a:4e:8b:e3:60:
         71:24:fb:b3:e0:a6:6d:f8:7c:25:73:76:70:a3:be:74:24:01:
         fa:17:b1:bf:06:51:6a:3b:c9:69:a4:5f:cb:19:d7:e7:c6:4d:
         ee:a7:1f:cb:09:e5:2e:43:f2:b2:bc:32:14:de:f9:f6:ed:c0:
         c8:06:0e:16:d4:c7:aa:0d:a6:78:66:3f:37:60:f8:89:35:f8:
         ad:18:d4:b1:22:b3:06:72:c7:a9:80:d9:aa:ef:a9:a4:b4:82:
         99:2e:c7:c1:a1:3c:0c:9c:bc:0f:f1:9a:a0:6d:7e:13:ab:72:
         04:fe:e6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:28:41 2025 by rpki-client