This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
File:                     17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft (raw, json)
Hash identifier:          QVEt6chgSg4lY5BBSqtbI7aTj3U6Yr3KuQSqf5n9cYg=
Subject key identifier:   36:34:77:64:35:1E:73:EB:88:EF:E7:7E:66:56:AC:24:D7:0E:CF:A9
Authority key identifier: 17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74
Certificate issuer:       /CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
Certificate serial:       2E7F2FBD4AD297F10D26A51BC6624EEF09B924E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
Manifest number:          3A
Signing time:             Tue 23 Dec 2025 05:48:29 +0000
Manifest this update:     Tue 23 Dec 2025 05:43:29 +0000
Manifest next update:     Wed 24 Dec 2025 08:16:29 +0000
Files and hashes:         1: 17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl (hash: Gk3mAOd1oTypcIwnLqEDUB7T9QlenGxHYs9V1VbDb4o=)
                          2: 323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (hash: 9ovo1Ce+Kis2wysgBAJ4x6E8k6WfsbCS+XtsnXzHmKQ=)
                          3: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (hash: OiITny8zStKi99clxFBl95eHbHhrZOZx2Hm59TUh/J8=)
                          4: 323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (hash: COWKDSQhuaAF4gJ0m/7anqtCjlNwnedaihs743KUS7A=)
                          5: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (hash: saP2raSwjjUMU6Gw2e967qD4bKy9XfiBZPNhMImeILc=)
                          6: 323830343a386235633a383030303a3a2f33332d3333203d3e20323733373238.roa (hash: VD96TvPCp3SeL42OsYoY5+GO1kpY5AFXvlXy6dpyetY=)
                          7: 323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (hash: +itUekAudTfPqrbwZYglvWAvg+MEQn69yjFaPTNeb3Y=)
                          8: 323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (hash: 8nnQ2cSDGENSqOLrTybnBDhnfQN9OkhA6Did4soByeA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 08:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7f:2f:bd:4a:d2:97:f1:0d:26:a5:1b:c6:62:4e:ef:09:b9:24:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AA64EB8D0084CFEE89BF619371BDCDB41FDB74
        Validity
            Not Before: Dec 23 05:43:29 2025 GMT
            Not After : Dec 24 08:16:29 2025 GMT
        Subject: CN=36347764351E73EB88EFE77E6656AC24D70ECFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:4e:dd:9a:8a:94:3d:ce:90:e5:bc:dc:0f:
                    55:bf:50:ce:b2:6e:4e:a4:9d:c2:0d:cb:67:5b:1f:
                    1f:97:82:f9:f4:7a:9b:5e:71:da:e3:e2:e4:4a:14:
                    cf:e1:e5:86:2a:e3:7c:63:90:4e:3c:59:a9:e1:e1:
                    ad:1f:ed:27:ee:e7:d1:c3:fe:7e:54:d4:06:b6:1e:
                    3f:50:3f:95:87:f5:bf:2a:c2:1f:49:ea:09:b3:97:
                    2e:f4:95:31:7f:83:6c:bb:53:95:14:87:cb:ec:05:
                    4f:48:ca:56:45:03:e1:f4:a7:9e:f1:6e:d9:36:17:
                    37:ce:eb:69:46:5d:d1:f4:cc:91:7f:85:1c:4b:37:
                    fb:d2:05:28:de:ae:6d:31:80:27:97:49:5c:b4:a7:
                    85:56:ae:e0:42:42:83:eb:45:fb:97:ae:2a:24:f2:
                    3e:95:d4:cd:cf:28:df:10:03:44:32:58:05:54:8c:
                    ef:51:62:d0:28:41:6b:16:57:ec:69:3e:4b:36:af:
                    d7:8f:d0:a4:cf:46:5e:d0:a6:9d:6b:e4:36:9d:96:
                    e1:bb:b0:07:db:f6:44:16:a5:44:73:4d:20:ab:7b:
                    22:ec:f8:c9:d7:e2:82:58:eb:90:86:15:cb:d2:9b:
                    77:19:21:c0:48:1f:b3:b7:79:75:0a:14:a9:fc:15:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:77:64:35:1E:73:EB:88:EF:E7:7E:66:56:AC:24:D7:0E:CF:A9
            X509v3 Authority Key Identifier:
                keyid:17:AA:64:EB:8D:00:84:CF:EE:89:BF:61:93:71:BD:CD:B4:1F:DB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/17AA64EB8D0084CFEE89BF619371BDCDB41FDB74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:59:eb:ca:1a:e4:e5:79:99:74:77:0f:c5:e1:fc:bb:06:f6:
         86:ea:f5:1b:df:df:27:d1:0e:2d:d3:f9:f3:8f:2d:a8:ae:27:
         4d:00:a4:65:eb:ed:ec:d7:b0:06:c8:0b:2c:33:49:25:38:52:
         0e:7f:b6:d1:f6:7d:f3:30:10:a5:d2:b1:fa:3b:cf:13:d8:9b:
         f2:c0:51:0e:1c:a1:57:97:60:da:e8:31:a1:85:c7:e5:03:fe:
         0a:ff:82:d2:ac:36:2c:c9:d7:97:90:7a:de:0a:99:44:de:37:
         db:01:6f:fd:f9:7e:0c:07:c4:72:19:14:9a:5e:7f:67:47:fa:
         41:3e:54:63:94:d9:ef:26:1a:e7:22:00:f1:9f:9e:96:14:82:
         46:08:0f:29:5c:86:ad:2d:cc:b1:71:ba:c8:49:6a:d7:5a:76:
         30:dd:fa:88:74:11:88:cf:5e:0b:55:7c:6b:54:5a:83:91:a6:
         e4:51:14:a4:fd:f2:6a:62:05:08:c5:8f:e3:8b:69:6a:5b:1c:
         ad:bd:29:43:11:7f:28:c4:2f:3c:b5:37:fb:94:fa:4c:87:18:
         2f:2a:06:ca:2a:d3:a6:be:4c:47:4b:b4:96:b7:99:91:a2:8a:
         4d:55:25:7a:43:f4:24:0d:ac:66:a6:83:9d:75:e3:4c:95:19:
         fc:39:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:27:49 2025 by rpki-client