This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          jcJYIrc2JZo2VOKOI8dDpD3jjMRU3626AkgtXyZvnPc=
Subject key identifier:   6B:C2:3A:FB:BB:25:C9:91:4F:76:50:EE:5A:94:A7:20:7D:D7:B1:79
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       44913BA11BD79727FF99197B025A69F37EAC32D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          033D
Signing time:             Fri 19 Dec 2025 19:02:50 +0000
Manifest this update:     Fri 19 Dec 2025 18:57:50 +0000
Manifest next update:     Sat 20 Dec 2025 22:09:50 +0000
Files and hashes:         1: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=)
                          2: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=)
                          3: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=)
                          4: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=)
                          5: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: NP4IS2P+4uIuWgMi1aEVs7MEn0kVLx7YrMaLfThhvfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:91:3b:a1:1b:d7:97:27:ff:99:19:7b:02:5a:69:f3:7e:ac:32:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Dec 19 18:57:50 2025 GMT
            Not After : Dec 20 22:09:50 2025 GMT
        Subject: CN=6BC23AFBBB25C9914F7650EE5A94A7207DD7B179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:e0:46:53:c1:46:05:fb:90:c6:40:fc:a0:
                    ae:2d:21:36:05:d6:3c:84:75:a5:7f:ac:c2:77:de:
                    a3:a8:eb:0e:d0:7b:bd:1d:66:29:66:d1:2f:da:56:
                    68:1f:c2:2c:93:64:50:04:7a:1a:9c:c7:ae:97:f6:
                    71:44:cd:c3:91:fa:7c:c3:94:a4:ce:ba:94:cc:cc:
                    99:13:40:a6:ef:88:be:f4:71:fb:de:2c:54:0d:36:
                    b1:6d:0e:f8:50:cb:98:37:26:90:1f:e1:b6:cd:63:
                    1a:e3:16:24:b7:e8:91:13:cf:9f:42:2f:fe:65:6c:
                    02:64:43:ef:20:29:fc:ac:6b:df:06:fa:8f:d1:1a:
                    d1:98:29:5c:42:b6:d7:de:8b:98:13:82:ec:7c:84:
                    ff:d2:60:a6:ea:8e:b6:ad:ce:87:91:64:9f:fa:c6:
                    af:64:96:0f:22:9b:39:dd:04:ac:af:56:72:52:31:
                    3e:51:27:a6:cd:ec:fa:0d:7c:86:52:82:aa:d8:8a:
                    a0:70:8c:f2:ee:14:e9:e1:41:dd:32:5c:ee:93:5b:
                    9d:fe:b5:61:b6:37:fd:81:2c:3b:6c:c0:60:5f:35:
                    bd:37:d9:96:63:ee:d6:0e:7e:8c:1d:35:4e:27:f1:
                    62:3f:7c:da:a8:aa:2b:f2:50:b7:fb:21:ca:03:b8:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:3A:FB:BB:25:C9:91:4F:76:50:EE:5A:94:A7:20:7D:D7:B1:79
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:1c:26:09:c7:30:da:dc:a8:76:5d:59:f7:1c:65:78:54:
         d2:61:59:cb:f4:ff:0f:1f:85:48:ae:59:83:2f:8d:42:88:5f:
         ec:fe:b9:3a:56:58:4b:8c:c4:45:53:0a:fd:0d:fb:e2:14:c5:
         8f:79:01:06:9b:26:d0:3b:d8:51:b6:e8:a2:46:45:1e:25:23:
         e3:12:cd:96:53:14:b3:67:fb:32:48:73:ed:4b:0f:c4:a8:bd:
         e9:47:38:1e:6f:bf:d7:6c:61:44:c6:a2:98:24:19:ee:9a:43:
         04:02:3d:da:57:b7:2e:69:eb:44:c8:fe:15:f7:60:c2:4f:fa:
         c6:1f:6d:44:e0:16:b9:a1:02:b7:66:93:0f:28:c8:ae:e8:bf:
         63:e5:c9:57:d4:45:ee:5c:38:50:26:9e:4a:e2:62:a1:bf:47:
         13:ee:1e:74:dc:81:5d:8e:17:db:23:cc:d0:46:9e:d0:71:d5:
         c3:e3:67:65:87:5b:23:e8:cc:a9:2f:99:59:70:26:b7:6e:f0:
         73:d7:67:07:5c:91:dc:ef:1a:f4:72:70:d4:ce:80:ac:81:13:
         49:92:14:07:05:95:00:c4:1a:1f:5e:7f:66:72:8e:2a:48:36:
         8c:64:27:fc:44:c8:54:75:ed:ff:80:9b:0c:de:fc:4b:fe:84:
         f4:4a:41:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURJE7oRvXlyf/mRl7Alpp836sMtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QxMTk0NDNBMjY4OUJBNEZDNjE2QkNENjkyOUU2MzZC
NTAzMkZDMDAeFw0yNTEyMTkxODU3NTBaFw0yNTEyMjAyMjA5NTBaMDMxMTAvBgNV
BAMTKDZCQzIzQUZCQkIyNUM5OTE0Rjc2NTBFRTVBOTRBNzIwN0REN0IxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodOBGU8FGBfuQxkD8oK4tITYF
1jyEdaV/rMJ33qOo6w7Qe70dZilm0S/aVmgfwiyTZFAEehqcx66X9nFEzcOR+nzD
lKTOupTMzJkTQKbviL70cfveLFQNNrFtDvhQy5g3JpAf4bbNYxrjFiS36JETz59C
L/5lbAJkQ+8gKfysa98G+o/RGtGYKVxCttfei5gTgux8hP/SYKbqjratzoeRZJ/6
xq9klg8imzndBKyvVnJSMT5RJ6bN7PoNfIZSgqrYiqBwjPLuFOnhQd0yXO6TW53+
tWG2N/2BLDtswGBfNb032ZZj7tYOfowdNU4n8WI/fNqoqivyULf7IcoDuFNvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUa8I6+7slyZFPdlDuWpSnIH3XsXkwHwYDVR0j
BBgwFoAUzRGUQ6Jom6T8YWvNaSnmNrUDL8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW
RkUvMS9DRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMTE5NDQzQTI2ODlCQTRG
QzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdWRkUvMS9D
RDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjS0cJgnHMNrcqHZdWfccZXhU0mFZy/T/Dx+FSK5Zgy+NQohf7P65OlZYS4zE
RVMK/Q374hTFj3kBBpsm0DvYUbbookZFHiUj4xLNllMUs2f7Mkhz7UsPxKi96Uc4
Hm+/12xhRMaimCQZ7ppDBAI92le3LmnrRMj+Ffdgwk/6xh9tROAWuaECt2aTDyjI
rui/Y+XJV9RF7lw4UCaeSuJiob9HE+4edNyBXY4X2yPM0Eae0HHVw+NnZYdbI+jM
qS+ZWXAmt27wc9dnB1yR3O8a9HJw1M6ArIETSZIUBwWVAMQaH15/ZnKOKkg2jGQn
/ETIVHXt/4CbDN78S/6E9EpBgg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:24:29 2025 by rpki-client