This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.mft
File:                     FF84FC3D85F0914743832D0A76268570ECB7043C.mft (raw, json)
Hash identifier:          gxgnW41TLkUbHlacTf2vqYe/ITo6xMEIg0+Xc6gy1cI=
Subject key identifier:   BB:A1:B8:6D:E2:34:4D:E5:91:AD:C5:55:F0:D0:4E:C7:50:99:0A:9B
Authority key identifier: FF:84:FC:3D:85:F0:91:47:43:83:2D:0A:76:26:85:70:EC:B7:04:3C
Certificate issuer:       /CN=FF84FC3D85F0914743832D0A76268570ECB7043C
Certificate serial:       599931A11B7E73C7E32200F2C9ABCBC79B3BB84C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.mft
Manifest number:          0347
Signing time:             Mon 22 Dec 2025 01:04:05 +0000
Manifest this update:     Mon 22 Dec 2025 00:59:05 +0000
Manifest next update:     Tue 23 Dec 2025 03:15:05 +0000
Files and hashes:         1: 34352e3233352e3135362e302f32322d3234203d3e20323637343139.roa (hash: 1CxRyx4TJzxdTc8lhGh6FJ+qhpLXAcvg2C/+ZbTL0Kc=)
                          2: FF84FC3D85F0914743832D0A76268570ECB7043C.crl (hash: 4T22kJkIm6lVgPnQHUxxJQXpH/Elpz4L8khOewMMCm8=)
                          3: 323830343a346433383a3a2f33322d3438203d3e20323637343139.roa (hash: J+QlEG3r+tnfnyc82nbOaLvB5kSOUrEa+l0vQozb9Ao=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.crl
                          rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 03:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:99:31:a1:1b:7e:73:c7:e3:22:00:f2:c9:ab:cb:c7:9b:3b:b8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF84FC3D85F0914743832D0A76268570ECB7043C
        Validity
            Not Before: Dec 22 00:59:05 2025 GMT
            Not After : Dec 23 03:15:05 2025 GMT
        Subject: CN=BBA1B86DE2344DE591ADC555F0D04EC750990A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:2f:5d:af:92:44:28:f5:8c:5a:c8:22:7d:
                    a4:84:2c:68:37:8e:fe:0d:57:2b:a7:4c:cf:29:97:
                    5e:71:21:77:06:a2:18:1f:d9:12:56:97:2e:2c:28:
                    5e:8e:ab:1b:92:69:fb:7a:cf:2a:64:eb:b1:b6:87:
                    32:de:e1:33:02:8e:7e:04:36:c8:65:ec:0d:ef:28:
                    61:92:94:1d:2f:d9:90:f8:81:d1:f0:65:ca:6c:7a:
                    9e:34:94:4b:32:c9:5e:85:5c:6b:9a:02:11:9e:ad:
                    30:08:55:75:e1:33:f7:e2:15:66:f8:5a:3c:12:f0:
                    94:5d:2d:43:ac:fc:4e:50:18:ca:20:b5:9e:1e:5b:
                    8f:a3:f1:1d:2f:6a:fa:d0:46:8d:8a:0c:e6:6c:df:
                    e1:fa:87:2c:e3:3e:59:9a:42:45:26:84:77:72:8b:
                    74:af:8f:cf:56:e1:60:b1:27:81:de:f7:9f:e0:12:
                    84:95:7f:ad:fc:17:89:cb:fe:c6:02:56:e0:0e:ba:
                    d0:bf:ed:0d:de:30:d6:ac:dd:ad:d7:c0:72:cb:3a:
                    b1:1f:75:e9:b1:b3:ca:21:52:d2:50:f3:51:70:ad:
                    e7:f2:6b:1e:3a:1b:e1:aa:c1:91:4b:d7:76:fa:57:
                    fa:41:03:7d:8c:6a:63:5b:e2:85:24:83:f7:10:18:
                    50:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A1:B8:6D:E2:34:4D:E5:91:AD:C5:55:F0:D0:4E:C7:50:99:0A:9B
            X509v3 Authority Key Identifier:
                keyid:FF:84:FC:3D:85:F0:91:47:43:83:2D:0A:76:26:85:70:EC:B7:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF84FC3D85F0914743832D0A76268570ECB7043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PypEYBc3g5VuMHQ1onwrkUacgo8MFvFF9xeznZxb3Ps/1/FF84FC3D85F0914743832D0A76268570ECB7043C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:67:15:51:89:73:45:f8:2f:6a:d4:e8:ec:29:fb:00:a3:
         53:9b:21:36:f8:3f:f3:b3:8c:21:a6:39:89:ef:cd:a3:aa:cf:
         8d:ed:34:ee:da:61:ee:0b:44:6b:45:af:88:d9:e2:fb:4f:30:
         5c:6a:65:e6:5e:6d:95:85:0a:2d:6e:39:01:d1:9f:68:68:11:
         87:14:25:c1:51:92:2b:cc:86:b2:50:37:48:95:40:f5:f3:bd:
         69:c0:60:f9:6e:77:05:2d:69:e0:71:63:ab:07:33:c2:b2:6b:
         ca:53:0a:7a:a0:99:35:9d:07:0a:02:c8:0b:70:a2:30:4b:c2:
         f4:ab:ae:96:65:8d:cb:2d:17:45:ee:ad:b7:3d:1c:e3:bb:33:
         d0:1d:35:9c:8a:c8:92:42:bf:28:51:08:bc:a4:99:48:44:89:
         8d:20:94:ed:0a:df:39:ce:fa:7c:b4:2f:ae:75:73:e3:a1:6e:
         58:ea:e7:56:d3:c8:64:cd:74:89:30:c8:80:32:09:7f:9d:8c:
         09:28:1c:66:56:44:f9:c8:08:a2:e3:85:d4:36:07:c5:2f:af:
         9b:bc:e1:71:56:c5:cf:1d:4c:1b:2b:9d:9c:29:58:7f:04:04:
         b5:c0:ac:14:40:5d:a5:24:22:cd:43:52:80:59:da:32:45:09:
         c0:06:f1:51
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUWZkxoRt+c8fjIgDyyavLx5s7uEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4NEZDM0Q4NUYwOTE0NzQzODMyRDBBNzYyNjg1NzBF
Q0I3MDQzQzAeFw0yNTEyMjIwMDU5MDVaFw0yNTEyMjMwMzE1MDVaMDMxMTAvBgNV
BAMTKEJCQTFCODZERTIzNDRERTU5MUFEQzU1NUYwRDA0RUM3NTA5OTBBOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0S9dr5JEKPWMWsgifaSELGg3
jv4NVyunTM8pl15xIXcGohgf2RJWly4sKF6OqxuSaft6zypk67G2hzLe4TMCjn4E
Nshl7A3vKGGSlB0v2ZD4gdHwZcpsep40lEsyyV6FXGuaAhGerTAIVXXhM/fiFWb4
WjwS8JRdLUOs/E5QGMogtZ4eW4+j8R0vavrQRo2KDOZs3+H6hyzjPlmaQkUmhHdy
i3Svj89W4WCxJ4He95/gEoSVf638F4nL/sYCVuAOutC/7Q3eMNas3a3XwHLLOrEf
demxs8ohUtJQ81Fwrefyax46G+GqwZFL13b6V/pBA32MamNb4oUkg/cQGFBRAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUu6G4beI0TeWRrcVV8NBOx1CZCpswHwYDVR0j
BBgwFoAU/4T8PYXwkUdDgy0KdiaFcOy3BDwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9QeXBFWUJjM2c1VnVNSFExb253cmtVYWNnbzhNRnZGRjl4ZXpuWnhiM1Bz
LzEvRkY4NEZDM0Q4NUYwOTE0NzQzODMyRDBBNzYyNjg1NzBFQ0I3MDQzQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GRjg0RkMzRDg1RjA5MTQ3NDM4
MzJEMEE3NjI2ODU3MEVDQjcwNDNDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1B5
cEVZQmMzZzVWdU1IUTFvbndya1VhY2dvOE1GdkZGOXhlem5aeGIzUHMvMS9GRjg0
RkMzRDg1RjA5MTQ3NDM4MzJEMEE3NjI2ODU3MEVDQjcwNDNDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
CT1nFVGJc0X4L2rU6Owp+wCjU5shNvg/87OMIaY5ie/No6rPje007tph7gtEa0Wv
iNni+08wXGpl5l5tlYUKLW45AdGfaGgRhxQlwVGSK8yGslA3SJVA9fO9acBg+W53
BS1p4HFjqwczwrJrylMKeqCZNZ0HCgLIC3CiMEvC9KuulmWNyy0XRe6ttz0c47sz
0B01nIrIkkK/KFEIvKSZSESJjSCU7QrfOc76fLQvrnVz46FuWOrnVtPIZM10iTDI
gDIJf52MCSgcZlZE+cgIouOF1DYHxS+vm7zhcVbFzx1MGyudnClYfwQEtcCsFEBd
pSQizUNSgFnaMkUJwAbxUQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 08:33:39 2025 by rpki-client