This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
File:                     C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft (raw, json)
Hash identifier:          8rIP/tlarL8qms2QTf/CoD0SVFqKew6HlKE2Rl7YsZU=
Subject key identifier:   D5:1E:DB:AF:C5:D4:69:B0:BB:F7:33:3F:C4:A0:CD:75:CD:E2:C3:95
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Certificate issuer:       /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial:       5804887204A3CE0C0F0BCD13DA8DD91633449B5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
Manifest number:          0326
Signing time:             Sat 06 Dec 2025 01:10:43 +0000
Manifest this update:     Sat 06 Dec 2025 01:05:43 +0000
Manifest next update:     Sun 07 Dec 2025 01:40:43 +0000
Files and hashes:         1: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: UhTWnyVMbYu8EHBAglnDBIow7lLgfSvBg43ee63dnW4=)
                          2: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: cYRnXeUL77tbZZROt3Wn+JGjwSu2QmTDm/qcgCbUuRs=)
                          3: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl (hash: i1OM/jI7cswIj2DF1vbTbgSID3yV9iCt8XrwzU543Io=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:04:88:72:04:a3:ce:0c:0f:0b:cd:13:da:8d:d9:16:33:44:9b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
        Validity
            Not Before: Dec  6 01:05:43 2025 GMT
            Not After : Dec  7 01:40:43 2025 GMT
        Subject: CN=D51EDBAFC5D469B0BBF7333FC4A0CD75CDE2C395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:4e:bf:d8:21:ba:81:85:d5:7b:3e:9d:50:
                    15:17:cd:ea:53:55:8b:c8:da:8d:45:75:4a:5a:fe:
                    14:b8:61:61:67:23:3a:4f:84:e2:79:19:57:6e:2d:
                    3b:6e:33:ac:a8:f8:dc:f0:44:97:aa:8d:70:e3:9e:
                    61:fd:87:c0:39:0f:a5:30:87:94:e2:fe:54:22:a7:
                    e1:87:62:fe:79:11:42:4f:d8:ab:14:38:fd:52:ed:
                    62:b0:a3:99:89:12:26:6a:69:fb:33:d4:03:02:e8:
                    64:04:27:17:31:c7:67:74:4d:7e:d5:ac:1c:94:3f:
                    6d:eb:8a:c5:16:e9:54:5a:39:3d:66:67:d7:63:4b:
                    56:2b:92:51:14:e9:24:e9:d9:33:1a:b4:d1:91:4c:
                    13:34:8f:9a:93:d4:30:be:79:c9:50:8d:f4:27:64:
                    0e:82:6c:73:b1:58:4d:79:4a:31:ff:2a:f9:d9:c6:
                    ac:21:d1:7b:1f:8f:ba:ad:7c:e2:20:36:30:3a:19:
                    0d:2c:14:8c:69:40:cd:3d:85:18:3a:5a:7e:1b:40:
                    38:f5:2b:89:96:2b:6e:2d:2e:84:4b:4c:d2:ad:76:
                    fd:14:5e:1b:cf:cd:f4:43:be:51:2f:f7:88:84:6e:
                    c0:ca:fd:87:48:0a:3e:10:be:56:35:03:ed:b6:f4:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:DB:AF:C5:D4:69:B0:BB:F7:33:3F:C4:A0:CD:75:CD:E2:C3:95
            X509v3 Authority Key Identifier:
                keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:df:71:f1:67:20:e0:75:10:04:7e:0d:f7:d6:50:f9:1e:df:
         d6:4f:d0:b6:f1:58:13:69:69:f6:54:45:07:cd:19:af:c0:f9:
         8a:91:ad:ee:29:21:d0:e6:3e:cf:05:c0:0f:50:58:f5:2a:6f:
         3f:6e:5d:fc:60:f1:05:7e:c0:63:98:19:23:ec:af:7a:39:23:
         45:aa:22:b9:e1:86:b5:45:f2:4a:ee:22:e3:4d:35:f4:d4:c7:
         ea:3d:3e:a0:de:05:d2:2b:70:25:05:77:27:4b:02:42:34:6f:
         f7:01:8d:94:0b:bb:ed:a3:07:a8:fd:be:67:40:da:9f:bd:85:
         29:8f:38:67:8a:69:f0:7f:01:64:20:84:6e:99:17:d4:20:95:
         18:d6:c6:5f:0d:c4:ac:08:fb:95:bc:29:64:0c:da:6e:5c:e7:
         ee:cb:f1:39:7f:3a:73:af:45:78:d4:dd:ab:8d:4d:8a:35:dc:
         47:3e:1e:19:1d:c3:1f:bf:f5:1a:84:9b:2a:bc:31:b6:b0:5a:
         0a:c8:52:e2:ad:aa:ac:65:73:4a:3a:c2:00:9d:55:59:ca:78:
         9d:17:34:d2:df:32:4e:07:7b:0b:bd:ff:7f:d9:1c:5a:a3:b9:
         cf:57:3c:8d:49:bc:7d:54:3e:a9:c8:3a:05:88:0d:0a:a4:98:
         51:25:40:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWASIcgSjzgwPC80T2o3ZFjNEm14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAyOEE5NUZCNkY3RTlCMzA0QUI3QjE1QkE5Q0YzN0M3
NDIwRUU0MzAeFw0yNTEyMDYwMTA1NDNaFw0yNTEyMDcwMTQwNDNaMDMxMTAvBgNV
BAMTKEQ1MUVEQkFGQzVENDY5QjBCQkY3MzMzRkM0QTBDRDc1Q0RFMkMzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1E6/2CG6gYXVez6dUBUXzepT
VYvI2o1FdUpa/hS4YWFnIzpPhOJ5GVduLTtuM6yo+NzwRJeqjXDjnmH9h8A5D6Uw
h5Ti/lQip+GHYv55EUJP2KsUOP1S7WKwo5mJEiZqafsz1AMC6GQEJxcxx2d0TX7V
rByUP23risUW6VRaOT1mZ9djS1YrklEU6STp2TMatNGRTBM0j5qT1DC+eclQjfQn
ZA6CbHOxWE15SjH/KvnZxqwh0Xsfj7qtfOIgNjA6GQ0sFIxpQM09hRg6Wn4bQDj1
K4mWK24tLoRLTNKtdv0UXhvPzfRDvlEv94iEbsDK/YdICj4QvlY1A+229M11AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1R7br8XUabC79zM/xKDNdc3iw5UwHwYDVR0j
BBgwFoAUwCipX7b36bMEq3sVupzzfHQg7kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF
R3gvMS9DMDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwMjhBOTVGQjZGN0U5QjMw
NEFCN0IxNUJBOUNGMzdDNzQyMEVFNDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhFR3gvMS9D
MDI4QTk1RkI2RjdFOUIzMDRBQjdCMTVCQTlDRjM3Qzc0MjBFRTQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATd9x8Wcg4HUQBH4N99ZQ+R7f1k/QtvFYE2lp9lRFB80Zr8D5ipGt7ikh0OY+
zwXAD1BY9SpvP25d/GDxBX7AY5gZI+yvejkjRaoiueGGtUXySu4i40019NTH6j0+
oN4F0itwJQV3J0sCQjRv9wGNlAu77aMHqP2+Z0Dan72FKY84Z4pp8H8BZCCEbpkX
1CCVGNbGXw3ErAj7lbwpZAzablzn7svxOX86c69FeNTdq41NijXcRz4eGR3DH7/1
GoSbKrwxtrBaCshS4q2qrGVzSjrCAJ1VWcp4nRc00t8yTgd7C73/f9kcWqO5z1c8
jUm8fVQ+qcg6BYgNCqSYUSVAMw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:57 2025 by rpki-client