This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft
File:                     3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft (raw, json)
Hash identifier:          GzVvSVdYzuyvH4l+ju7uwax7FclDpTtYjTvfH5iNugI=
Subject key identifier:   68:E4:03:C6:F2:00:57:4D:27:8E:7D:10:5E:D0:7A:E5:2C:BD:68:B7
Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07
Certificate issuer:       /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407
Certificate serial:       3343EDC4595D040C4AEE54C8C657033813DFE509
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft
Manifest number:          0113
Signing time:             Wed 24 Dec 2025 01:12:50 +0000
Manifest this update:     Wed 24 Dec 2025 01:07:50 +0000
Manifest next update:     Thu 25 Dec 2025 02:17:50 +0000
Files and hashes:         1: 3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (hash: ODzRAQKGld4F+Y8wHBsCe+2piAWpl3+jbl1sLUSozuE=)
                          2: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl (hash: LKeXt2KWW7wKl59tEPDcFIr3NEfjgkwJRAC9LmR53H8=)
                          3: 323830343a393235633a3a2f33322d313238203d3e20323734373037.roa (hash: mkUEVYmV0c5j9aXcvowOcLDEfBOaxNE6dpYUouTdU24=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl
                          rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:43:ed:c4:59:5d:04:0c:4a:ee:54:c8:c6:57:03:38:13:df:e5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407
        Validity
            Not Before: Dec 24 01:07:50 2025 GMT
            Not After : Dec 25 02:17:50 2025 GMT
        Subject: CN=68E403C6F200574D278E7D105ED07AE52CBD68B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:bc:9b:3e:e3:55:10:75:5d:0a:57:42:a2:ea:
                    27:8a:61:e5:fe:cd:ad:21:15:ed:d6:f7:06:1e:9f:
                    0b:3c:18:e1:4c:cd:dc:7b:f9:01:7e:b9:77:33:1e:
                    61:84:97:f0:87:f2:2d:48:cf:da:c5:1c:68:4d:ca:
                    55:4e:d8:d2:03:f2:17:a8:6a:2a:2d:9d:e7:68:f2:
                    f7:a4:55:e0:3c:ae:b6:3c:77:b0:e8:fa:5d:b8:38:
                    ae:76:44:2d:75:c2:0a:2a:b7:af:27:ac:ae:09:b5:
                    04:e2:fb:66:a8:0b:c9:0a:3a:16:f8:c5:88:f0:18:
                    df:e0:2d:be:aa:cc:0e:eb:ca:f7:f6:33:32:41:be:
                    1e:fa:40:9c:c8:9e:2f:ee:d3:03:90:ed:44:37:99:
                    5c:eb:ab:a3:a4:b8:25:1d:22:58:e9:6f:9f:ed:a4:
                    22:7c:79:30:a8:53:c6:c7:af:32:5a:cf:c2:dd:83:
                    f3:a0:80:2f:54:be:74:ff:65:9f:a8:2d:c8:33:a9:
                    ad:36:57:7e:6a:97:8b:e6:0b:10:72:43:2c:9d:b9:
                    d3:2d:c5:5c:d6:36:a6:9f:cb:e9:92:70:ba:e6:4c:
                    cb:06:02:28:52:e3:f6:a9:62:c0:b6:c5:10:d6:c8:
                    54:9f:cc:f6:c0:60:1e:84:96:90:8c:f2:6a:ea:80:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:03:C6:F2:00:57:4D:27:8E:7D:10:5E:D0:7A:E5:2C:BD:68:B7
            X509v3 Authority Key Identifier:
                keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:88:16:bf:7f:c9:41:6b:a4:db:a2:6c:4a:4a:24:0b:98:68:
         04:54:36:17:4d:4f:1f:b0:fa:78:42:ac:8d:21:c7:19:fc:4a:
         f5:4e:17:df:a9:8b:2c:37:b2:e6:34:e8:30:64:6e:c6:49:36:
         e3:a5:c9:dc:ef:f0:62:13:7f:df:92:4d:b9:0d:4e:3c:4a:e1:
         f9:1e:9c:77:c5:c2:c0:37:8e:48:98:b2:9e:5c:c7:ad:06:05:
         25:de:06:9a:66:78:ec:7b:81:52:c7:d6:6f:f9:a3:b0:ce:6f:
         c6:81:2a:4a:c0:e8:2d:b0:3c:84:15:00:97:7c:11:36:5c:e4:
         24:6d:eb:f1:1b:2a:62:ef:75:92:5e:cc:b3:b5:d9:4f:e7:a3:
         5b:64:0b:15:cd:16:b3:f7:5b:8e:9f:2a:4e:fd:a6:70:c5:50:
         5a:ef:a0:22:b0:f9:f9:74:67:55:a1:64:a0:37:69:41:a4:98:
         d0:5a:1c:54:6c:53:66:9d:44:bc:41:2e:e0:15:fd:fa:3f:57:
         48:0f:18:8c:1a:52:db:58:9c:ee:d5:e9:f9:0a:bf:40:b3:af:
         57:4a:32:68:58:cc:53:ea:ad:a9:25:e6:9f:bd:0b:34:40:3c:
         b9:9a:1b:21:e7:de:86:52:75:fc:b1:e5:a3:88:17:f3:26:ac:
         bd:50:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:38 2025 by rpki-client