This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft
File:                     23A45196211651E8A4484F360D708F4E265B4320.mft (raw, json)
Hash identifier:          CLzrasnhsJwNFYv7Xx4DTP9ayn2fz9QkeTRSEE3+OUM=
Subject key identifier:   DB:E7:F1:81:E6:EA:31:92:C8:AC:35:DC:BF:58:C0:35:BD:C8:91:87
Authority key identifier: 23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20
Certificate issuer:       /CN=23A45196211651E8A4484F360D708F4E265B4320
Certificate serial:       330050558771B5DA743DA7051EDA124746CE5223
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft
Manifest number:          A3
Signing time:             Tue 23 Dec 2025 18:32:30 +0000
Manifest this update:     Tue 23 Dec 2025 18:27:30 +0000
Manifest next update:     Wed 24 Dec 2025 21:55:30 +0000
Files and hashes:         1: 23A45196211651E8A4484F360D708F4E265B4320.crl (hash: zy4VZr9C/navrNrdy0IZ/vpddKzPCJPGXC6U/4+0l+Q=)
                          2: 323830343a356566633a3a2f33322d313238203d3e20323639303639.roa (hash: lzP0xeUMLoX9dWyjd9n03TrAU0arlK1Lb4gv3Lt8koM=)
                          3: 34352e3137392e38342e302f32332d3332203d3e20323639303639.roa (hash: aUWjQTk0hgYIXtz5YpZP+Ar4U41t37b6UXQIDro6NCw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl
                          rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 21:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:50:55:87:71:b5:da:74:3d:a7:05:1e:da:12:47:46:ce:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A45196211651E8A4484F360D708F4E265B4320
        Validity
            Not Before: Dec 23 18:27:30 2025 GMT
            Not After : Dec 24 21:55:30 2025 GMT
        Subject: CN=DBE7F181E6EA3192C8AC35DCBF58C035BDC89187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:08:2b:ec:c6:0d:47:28:e1:00:a8:b9:50:
                    57:ec:aa:9e:0b:2a:20:5d:70:82:c2:d7:2f:f1:b6:
                    a9:ae:15:66:23:64:4c:5f:04:6b:9c:24:0d:65:48:
                    ff:63:21:15:4c:ea:39:63:e7:6c:0e:3b:77:f5:79:
                    97:13:4b:59:0b:e1:d1:f2:82:19:22:2f:fe:b4:af:
                    02:24:19:a4:f9:8f:a5:b5:35:af:17:9d:9a:af:3d:
                    45:b0:a6:ea:f9:dd:0a:de:82:c8:3d:d9:a5:e1:82:
                    68:1d:f3:ca:76:7c:51:56:60:9a:fa:97:8b:13:0d:
                    c8:ee:9e:70:3b:3c:9e:dd:6f:58:83:a3:97:8f:9e:
                    ae:43:11:92:7d:63:4e:4b:d4:41:6e:f2:8a:87:35:
                    00:02:53:be:33:aa:3b:51:fa:8f:10:46:87:33:fb:
                    d1:d1:a8:4c:93:5d:97:03:88:f0:a9:3e:32:b9:5f:
                    66:97:27:fe:d0:d2:3b:dc:2a:d5:67:13:e5:df:34:
                    bd:ab:22:ee:c6:cd:45:8c:36:b2:ad:9f:90:e3:26:
                    64:aa:91:4b:69:dd:a8:25:a7:65:51:ec:ed:67:56:
                    40:bd:9b:7e:23:9c:2f:25:80:49:a9:eb:96:4c:27:
                    e2:f5:87:c2:34:4f:d8:0c:bc:48:e6:c3:36:0b:34:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:F1:81:E6:EA:31:92:C8:AC:35:DC:BF:58:C0:35:BD:C8:91:87
            X509v3 Authority Key Identifier:
                keyid:23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:fe:36:b6:7c:7c:c9:75:d0:af:bb:1a:6a:8b:6a:a0:f7:
         28:65:5f:05:7a:14:c4:ff:5a:e5:7e:ba:08:e2:25:dc:79:a9:
         7d:be:d9:67:2d:23:cc:89:e5:a1:eb:96:8d:2d:0f:2c:e0:8d:
         66:a3:28:e5:dd:4f:32:3e:9d:03:ac:95:4d:38:ae:74:08:54:
         84:92:6e:88:8f:66:d7:d7:88:e1:2e:ef:29:a1:40:7f:d4:4e:
         a8:8f:41:3e:e9:70:0e:00:e9:ff:b0:c6:c0:69:1c:dc:7e:93:
         5f:80:f7:f1:0c:1b:13:c9:ed:c4:db:6b:0f:72:43:a4:18:1a:
         3b:83:75:46:5f:19:51:92:60:1c:9b:b2:f9:cf:ed:14:81:c5:
         5d:df:32:46:05:33:0d:b4:6b:a5:05:24:3d:7a:fd:73:31:7c:
         5f:c2:8b:50:68:ca:a0:4a:a8:9b:f1:19:3c:e1:3d:ed:e0:bb:
         06:05:a3:b9:2b:f2:b3:22:1d:68:87:1e:94:c1:af:55:27:69:
         b9:f4:25:62:85:7e:c7:81:11:c5:81:43:d6:6e:f8:80:fc:3b:
         dd:d4:c8:1a:4e:8e:52:be:1f:83:d1:b0:e5:19:e6:e4:7d:c8:
         97:ab:ce:83:df:f1:50:8f:56:3b:4c:04:39:ee:39:03:80:fc:
         d9:65:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:24:50 2025 by rpki-client