This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
File:                     33D444D18668AFF627287DE909F4EDC258CA9CC3.mft (raw, json)
Hash identifier:          Uz2mKG6dKa6EowIxLthZHaymzMALxvjKVRJCNxMQSKk=
Subject key identifier:   F6:BA:B3:8E:C3:6D:EC:A3:C8:F8:73:5C:6A:1B:AF:96:D0:40:9F:A0
Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
Certificate issuer:       /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Certificate serial:       010775918DF386ADB8089D14CA215FB3070ACC3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
Manifest number:          0331
Signing time:             Wed 24 Dec 2025 06:51:16 +0000
Manifest this update:     Wed 24 Dec 2025 06:46:16 +0000
Manifest next update:     Thu 25 Dec 2025 09:14:16 +0000
Files and hashes:         1: 323830343a6238343a3a2f33322d3438203d3e203532373838.roa (hash: hl/5OxGOU0JH6btmx6NDigAj4IAqY8I+wrvb5DixlD0=)
                          2: 3137372e33382e36382e302f32322d3234203d3e203532373838.roa (hash: LsIbEV6d/qkd5SrbHcy8LV68KD6GkOp3U3cHfi9raVk=)
                          3: 33D444D18668AFF627287DE909F4EDC258CA9CC3.crl (hash: X7d4oQye5Fvlm7wpyFVA3WW1usonSWA0wUffbt6SS8M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl
                          rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:07:75:91:8d:f3:86:ad:b8:08:9d:14:ca:21:5f:b3:07:0a:cc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
        Validity
            Not Before: Dec 24 06:46:16 2025 GMT
            Not After : Dec 25 09:14:16 2025 GMT
        Subject: CN=F6BAB38EC36DECA3C8F8735C6A1BAF96D0409FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:40:2c:6d:6a:10:3b:41:cd:eb:38:2d:6b:
                    c4:5a:a9:20:aa:56:a4:57:c8:29:d7:07:b4:e5:80:
                    54:7c:d3:5b:79:f0:89:3e:68:42:32:54:7a:5f:35:
                    71:f3:29:77:15:6d:3d:00:cb:62:81:15:08:3e:63:
                    62:af:76:dd:0d:b4:15:af:55:6a:8e:33:2c:70:ef:
                    b0:cd:ec:24:8f:37:3a:88:1a:a0:46:09:0a:a7:93:
                    37:47:0b:72:10:51:d2:c6:e8:28:72:7f:39:86:a2:
                    30:fa:c3:b5:90:a5:27:3a:2c:cd:b1:22:9a:d9:4d:
                    91:d0:8e:f9:61:65:dd:87:8c:73:a5:af:42:2b:09:
                    d9:7e:02:07:ff:ab:d9:87:b4:78:b8:e7:bf:d8:32:
                    62:aa:10:c0:4c:89:b8:60:08:40:35:9f:d8:b5:ac:
                    96:7e:5a:c4:4c:d2:82:66:a7:54:82:9e:6e:e1:3b:
                    86:74:79:a0:b5:a7:ab:11:36:e2:c0:5b:e3:c5:75:
                    b5:64:37:14:56:e0:18:4f:4f:ed:72:d5:71:3c:65:
                    08:0d:0f:ea:52:c4:91:f8:5e:e7:04:5c:c9:70:fb:
                    14:3a:a7:5b:f8:6d:4c:99:b9:2f:90:ca:d1:8e:01:
                    e3:4a:d6:5f:f8:ef:f1:cc:8c:1a:fc:66:88:33:23:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:B3:8E:C3:6D:EC:A3:C8:F8:73:5C:6A:1B:AF:96:D0:40:9F:A0
            X509v3 Authority Key Identifier:
                keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:f6:13:65:ce:ab:00:f1:23:93:67:9a:35:87:4a:3a:33:
         06:20:8c:91:4a:cf:b9:c4:fe:3f:96:14:35:c8:43:82:ed:52:
         cb:03:d5:a9:95:11:9d:e9:6f:78:0a:dd:8c:0a:7a:9f:e3:3e:
         c9:60:e1:6d:8e:e8:0d:62:67:17:8e:94:eb:12:d4:98:47:5c:
         f1:9d:19:32:b1:74:e2:d4:3b:e6:22:6a:b7:65:49:6e:e8:69:
         22:e0:ed:d5:5b:ad:59:83:cb:da:89:48:75:aa:bf:10:f0:a6:
         f1:2d:e9:1b:fd:22:55:c0:44:fa:0f:43:11:7c:75:bd:9c:58:
         90:58:da:23:2f:46:92:1b:1b:97:6d:76:1c:17:48:4f:68:18:
         04:9a:e9:72:7f:56:ec:ea:68:8a:94:97:fe:ab:1a:67:40:5a:
         9d:30:67:1c:e6:23:ad:d1:9f:cd:9a:96:5f:0f:ac:e6:a3:7b:
         9e:62:c5:ef:1b:87:76:4e:13:66:b1:4c:82:59:40:9c:de:cf:
         e6:d0:7a:eb:12:04:4b:40:dc:66:c3:52:8b:c0:6b:d5:0a:38:
         75:ba:72:d1:e9:1b:27:7c:5b:32:0c:1d:f0:94:0d:40:61:41:
         f2:89:30:12:36:0d:ec:59:72:b9:d8:6c:e0:83:c7:89:80:ed:
         45:aa:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:26 2025 by rpki-client