This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft
File:                     3C935E1CA93E646630F422D7A5C05C4398641455.mft (raw, json)
Hash identifier:          PcwTyrWqaxIyRqJR2Qx0n8E2f6wZblHOLwvYFNilgI4=
Subject key identifier:   29:E9:BF:73:89:05:BE:AD:E7:94:BD:DA:41:CE:ED:62:8C:32:85:AB
Authority key identifier: 3C:93:5E:1C:A9:3E:64:66:30:F4:22:D7:A5:C0:5C:43:98:64:14:55
Certificate issuer:       /CN=3C935E1CA93E646630F422D7A5C05C4398641455
Certificate serial:       40AC35C581D7E71188FF8968B6EF3D06212BA947
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft
Manifest number:          BD
Signing time:             Tue 23 Dec 2025 17:29:36 +0000
Manifest this update:     Tue 23 Dec 2025 17:24:36 +0000
Manifest next update:     Wed 24 Dec 2025 19:19:36 +0000
Files and hashes:         1: 323830343a343339303a3a2f33322d3438203d3e203238313934.roa (hash: YKvuDNIHyw3NBnRCbWj16Uwongrcmr0GD6QVxxTjIG4=)
                          2: 3138372e33332e35362e302f32312d3234203d3e203238313934.roa (hash: eAOvJwa8cDL+zwdJYLUzbPPAEm5iZnhfT4ZIZGXqltQ=)
                          3: 3C935E1CA93E646630F422D7A5C05C4398641455.crl (hash: 3kXApzoFVYwgaWyFJb+QC8d168yWLs9A6gtOT95NAbk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.crl
                          rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 19:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ac:35:c5:81:d7:e7:11:88:ff:89:68:b6:ef:3d:06:21:2b:a9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C935E1CA93E646630F422D7A5C05C4398641455
        Validity
            Not Before: Dec 23 17:24:36 2025 GMT
            Not After : Dec 24 19:19:36 2025 GMT
        Subject: CN=29E9BF738905BEADE794BDDA41CEED628C3285AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:f9:a1:fb:d8:f1:68:52:de:8b:26:30:65:
                    99:f9:c6:08:e7:13:3c:9e:1b:9d:98:3b:c0:56:c5:
                    13:d2:ea:ac:54:b6:e3:59:27:56:a0:80:5e:8e:94:
                    d4:e1:c1:2c:ba:45:68:5f:dd:de:d2:8b:9a:15:bd:
                    7f:d7:ae:98:29:fd:4b:96:ac:8d:50:f9:b6:ec:88:
                    ca:18:5a:09:5f:c9:92:57:ce:ce:9f:7d:c2:75:d0:
                    18:44:a4:e2:74:61:26:45:81:0c:fa:6f:98:96:a3:
                    76:96:3f:1c:ed:cd:78:23:0a:dc:c8:c9:eb:71:7f:
                    65:97:a0:6a:e2:27:ed:60:f1:5c:a6:af:1e:06:c1:
                    e5:af:83:da:9d:66:b5:ba:43:d4:bf:ec:da:fe:3a:
                    6c:20:80:e1:4e:65:52:11:84:f8:c5:6f:1b:c3:6a:
                    74:01:bf:a6:79:2d:5e:91:93:51:20:b2:99:6e:e6:
                    91:84:00:f1:6b:6a:7f:16:a0:d7:b0:f0:a9:61:e0:
                    35:bb:75:33:3a:bb:c6:47:63:3f:38:f6:24:e0:44:
                    b5:f8:06:44:f6:e7:28:ed:2c:30:e3:8b:c6:30:fa:
                    80:5d:cc:9b:71:0a:35:a3:16:eb:84:56:c1:c3:aa:
                    c2:f3:17:70:cf:3e:88:1b:50:08:47:e7:66:20:3d:
                    52:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:BF:73:89:05:BE:AD:E7:94:BD:DA:41:CE:ED:62:8C:32:85:AB
            X509v3 Authority Key Identifier:
                keyid:3C:93:5E:1C:A9:3E:64:66:30:F4:22:D7:A5:C0:5C:43:98:64:14:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:18:65:6f:c7:58:31:f9:27:6d:99:14:a1:3e:e7:5d:15:
         57:0e:96:c5:a3:5e:0e:b2:12:92:ea:8c:4c:9b:8e:20:cc:1e:
         18:35:a0:a9:85:e6:a8:72:9e:ec:0b:ba:56:b7:af:ff:61:19:
         ef:83:d8:a4:0a:4e:c1:64:9d:c8:15:7f:9c:65:27:69:b9:1e:
         36:e9:25:91:bf:8b:fd:95:24:ad:3c:6e:0a:a6:ac:58:8e:ee:
         85:59:3a:86:35:5a:a4:90:f8:1f:9c:6a:ea:02:07:f3:16:47:
         23:86:f5:80:cd:9d:58:a3:f7:03:10:d4:5f:63:e3:f4:1d:7c:
         1b:4f:aa:d0:0b:1f:b8:bf:2b:83:28:6f:1c:90:ce:af:88:16:
         00:5b:5a:c7:a7:6a:46:82:45:a5:60:b5:ff:79:da:e4:ab:0d:
         b3:9d:27:73:34:92:42:4a:23:a2:52:05:ab:03:c9:1d:d2:8d:
         f7:27:53:aa:62:40:3c:f9:9a:b3:f8:76:2d:e9:16:3a:c7:24:
         b6:e3:66:8f:2c:cc:44:3e:c7:2a:90:45:78:9c:8a:bf:44:74:
         d1:e2:ed:ca:24:79:66:12:51:06:6c:79:94:5b:cb:1c:85:04:
         d9:9d:4c:af:5a:1e:16:9e:d3:4f:0c:19:ac:14:1e:7f:cc:87:
         6a:fd:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:04:38 2025 by rpki-client