This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft
File:                     45FC107BB0B6654452677B1D69CD570ED537BDB4.mft (raw, json)
Hash identifier:          CM1HfS1OUILYLDFsH4yFY4xEwBsDsP+rGyKGEe+qu50=
Subject key identifier:   CD:55:BC:CB:8F:50:D3:6D:A1:6E:F8:5B:34:FC:C9:FE:4F:60:BF:F4
Authority key identifier: 45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4
Certificate issuer:       /CN=45FC107BB0B6654452677B1D69CD570ED537BDB4
Certificate serial:       3A2F0C272E5BC833A8870D1FC8666326E4C15C41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft
Manifest number:          033E
Signing time:             Tue 23 Dec 2025 22:36:51 +0000
Manifest this update:     Tue 23 Dec 2025 22:31:51 +0000
Manifest next update:     Thu 25 Dec 2025 02:29:51 +0000
Files and hashes:         1: 323830343a326364633a3a2f33322d3438203d3e20323633303639.roa (hash: wzIvjbNgLaJk3lbJfyn+JEuHO0/6JaTbJATnDd6oGdw=)
                          2: 3138362e3233332e35362e302f32322d3234203d3e20323633303639.roa (hash: OKK6wIbmP9p6692IkMTXWwnyyXwXH6h/PklgbCBfx9E=)
                          3: 45FC107BB0B6654452677B1D69CD570ED537BDB4.crl (hash: C/7fwW6PzSoNLdkfa+JUvGeBEh8G/8RXhPasBky42eU=)
                          4: 3136382e302e3132382e302f32322d3234203d3e20323633303639.roa (hash: slK6BDUo+S4KYuMkXgrqWUayruLAmHD7Gf737hqUw5k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.crl
                          rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:0c:27:2e:5b:c8:33:a8:87:0d:1f:c8:66:63:26:e4:c1:5c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45FC107BB0B6654452677B1D69CD570ED537BDB4
        Validity
            Not Before: Dec 23 22:31:51 2025 GMT
            Not After : Dec 25 02:29:51 2025 GMT
        Subject: CN=CD55BCCB8F50D36DA16EF85B34FCC9FE4F60BFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:e1:11:33:ce:0e:5f:0d:b4:7b:62:8a:7c:
                    88:bb:64:06:4c:20:34:b7:9c:b9:c0:29:a1:cf:d7:
                    b6:37:ae:46:f4:68:b9:a6:4c:52:17:b2:7f:29:4b:
                    5a:c4:92:65:f7:ba:d5:fd:52:bc:46:bd:66:11:e6:
                    54:06:9b:05:22:91:d9:10:fa:f5:b4:af:8e:ed:fe:
                    bd:b3:d4:e2:5f:b9:09:16:2d:9c:0b:96:ed:6f:a5:
                    bb:9a:32:2d:47:6d:c7:09:02:d1:8f:59:a9:58:53:
                    85:a5:b4:15:e1:b4:aa:1c:22:b3:45:c7:23:6c:a2:
                    01:ec:a4:99:50:f2:da:4a:9b:ff:30:b5:18:01:1b:
                    c9:f2:c8:e9:9e:b7:0b:83:b9:c8:9c:bf:61:ec:46:
                    a7:4e:da:3f:1a:39:1c:df:ea:ce:e6:0b:7b:a6:2d:
                    59:a9:83:b0:89:05:b3:91:8a:5d:d7:ba:5b:03:ae:
                    1a:12:27:29:3c:0a:60:6e:8e:e7:24:eb:a7:81:1a:
                    9b:8f:d2:46:3d:56:78:f2:48:bd:83:18:58:e5:89:
                    63:0a:39:22:c3:f9:c2:b7:c5:85:96:74:b5:f7:9e:
                    7b:0e:7a:3d:2e:e5:0d:f3:b7:7e:40:6d:2a:e9:5a:
                    ea:77:e5:1a:23:00:62:39:6e:a6:e9:8f:33:91:74:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:55:BC:CB:8F:50:D3:6D:A1:6E:F8:5B:34:FC:C9:FE:4F:60:BF:F4
            X509v3 Authority Key Identifier:
                keyid:45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:95:d4:32:1d:b2:f2:0f:b8:30:35:fc:52:21:a2:cc:05:ff:
         ce:93:34:9e:7a:c7:0f:2c:aa:4d:23:cb:01:73:78:80:82:0e:
         1e:d0:71:6f:9c:c2:0a:dc:e3:14:98:8e:69:1f:17:bf:b6:fb:
         69:b9:45:19:39:0e:db:bc:f3:6a:0b:98:f2:6c:ec:60:ab:e7:
         a4:b0:b9:36:b2:8f:e9:f8:b3:1f:7a:a5:72:32:12:6c:3b:f7:
         82:d6:5a:df:75:fc:7a:66:d3:cf:b8:ab:ee:29:8f:e6:34:c4:
         4d:66:a5:9c:17:4d:f5:02:9d:89:dc:6f:76:04:7f:86:51:91:
         d9:18:e8:63:ea:ba:5e:04:42:24:98:f6:69:96:3b:43:b8:d3:
         88:f1:8d:94:6f:57:64:1a:0c:04:41:7d:fc:34:de:60:94:8c:
         2c:08:09:1f:ee:f3:17:5a:2c:06:2c:c4:2c:ef:a6:66:1f:72:
         a4:4e:1b:b2:dc:b5:16:4c:b8:b2:d7:df:90:29:dd:59:74:7f:
         2b:c9:1a:9b:3d:c7:8b:68:cd:a2:91:f7:20:62:db:a2:9f:7c:
         b7:b0:c2:de:e5:d4:77:8c:31:33:80:0f:6b:c9:e4:01:53:aa:
         43:58:2e:66:f2:ea:7a:45:f0:63:6e:60:2e:78:e4:aa:c1:6d:
         e7:4b:f9:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOi8MJy5byDOohw0fyGZjJuTBXEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVGQzEwN0JCMEI2NjU0NDUyNjc3QjFENjlDRDU3MEVE
NTM3QkRCNDAeFw0yNTEyMjMyMjMxNTFaFw0yNTEyMjUwMjI5NTFaMDMxMTAvBgNV
BAMTKENENTVCQ0NCOEY1MEQzNkRBMTZFRjg1QjM0RkNDOUZFNEY2MEJGRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/eERM84OXw20e2KKfIi7ZAZM
IDS3nLnAKaHP17Y3rkb0aLmmTFIXsn8pS1rEkmX3utX9UrxGvWYR5lQGmwUikdkQ
+vW0r47t/r2z1OJfuQkWLZwLlu1vpbuaMi1HbccJAtGPWalYU4WltBXhtKocIrNF
xyNsogHspJlQ8tpKm/8wtRgBG8nyyOmetwuDucicv2HsRqdO2j8aORzf6s7mC3um
LVmpg7CJBbORil3XulsDrhoSJyk8CmBujuck66eBGpuP0kY9VnjySL2DGFjliWMK
OSLD+cK3xYWWdLX3nnsOej0u5Q3zt35AbSrpWup35RojAGI5bqbpjzORdN8RAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzVW8y49Q022hbvhbNPzJ/k9gv/QwHwYDVR0j
BBgwFoAURfwQe7C2ZURSZ3sdac1XDtU3vbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRldBWWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2da
WDEvMS80NUZDMTA3QkIwQjY2NTQ0NTI2NzdCMUQ2OUNENTcwRUQ1MzdCREI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RkMxMDdCQjBCNjY1NDQ1
MjY3N0IxRDY5Q0Q1NzBFRDUzN0JEQjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RldBWWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2daWDEvMS80
NUZDMTA3QkIwQjY2NTQ0NTI2NzdCMUQ2OUNENTcwRUQ1MzdCREI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcpXUMh2y8g+4MDX8UiGizAX/zpM0nnrHDyyqTSPLAXN4gIIOHtBxb5zCCtzj
FJiOaR8Xv7b7ablFGTkO27zzaguY8mzsYKvnpLC5NrKP6fizH3qlcjISbDv3gtZa
33X8embTz7ir7imP5jTETWalnBdN9QKdidxvdgR/hlGR2RjoY+q6XgRCJJj2aZY7
Q7jTiPGNlG9XZBoMBEF9/DTeYJSMLAgJH+7zF1osBizELO+mZh9ypE4bsty1Fky4
stffkCndWXR/K8kamz3Hi2jNopH3IGLbop98t7DC3uXUd4wxM4APa8nkAVOqQ1gu
ZvLqekXwY25gLnjkqsFt50v5fg==
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:30:14 2025 by rpki-client