This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
File:                     275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft (raw, json)
Hash identifier:          aAZIzPyexyJ0ixRnW3JhITyp2mTVetSXY+9Hgwxvttw=
Subject key identifier:   2B:36:50:68:E6:93:78:9F:10:68:81:7E:C5:60:4E:0C:01:30:16:04
Authority key identifier: 27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Certificate issuer:       /CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
Certificate serial:       482AECF9594A5E5A81BD07C3A359D7EDF7D42C6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
Manifest number:          032D
Signing time:             Sat 06 Dec 2025 03:26:38 +0000
Manifest this update:     Sat 06 Dec 2025 03:21:38 +0000
Manifest next update:     Sun 07 Dec 2025 05:33:38 +0000
Files and hashes:         1: 3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa (hash: Ry4WEHqQ3COy4GFObdDBhjjlH3TTWPjEE+vFu0K5ing=)
                          2: 323830343a373039343a3a2f33322d3438203d3e20323730373335.roa (hash: j50q5Q+ow8SJ6PGS5kNHGAOsLKmLHvprt+8f7xkhG/s=)
                          3: 275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl (hash: x/03lcjqVb5OgFW8GE0a5tNeStjoSr0c2UcfxztBm4A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl
                          rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2a:ec:f9:59:4a:5e:5a:81:bd:07:c3:a3:59:d7:ed:f7:d4:2c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
        Validity
            Not Before: Dec  6 03:21:38 2025 GMT
            Not After : Dec  7 05:33:38 2025 GMT
        Subject: CN=2B365068E693789F1068817EC5604E0C01301604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:78:46:be:f1:f8:35:82:65:45:70:2b:0e:
                    0b:b4:02:37:2a:eb:d8:31:a9:30:40:83:bb:c2:de:
                    6e:c9:a1:e7:4b:1e:31:83:90:56:62:2c:09:7c:df:
                    b2:14:29:46:12:e0:1a:e2:8d:6d:4d:19:3a:41:31:
                    d5:dd:d0:2c:cc:dd:c6:87:e6:d6:da:68:6f:cb:55:
                    d9:17:70:35:5e:e0:1f:d6:d7:ed:da:99:78:5f:e8:
                    de:a9:63:c6:f0:f7:1d:0d:94:3b:95:0f:50:a4:69:
                    9b:aa:2b:ba:9b:ca:63:6d:0d:ab:1e:a9:9f:bb:0f:
                    4d:e1:3d:d7:ba:8c:9b:a1:f3:37:ed:15:ca:3f:ba:
                    32:6b:38:5b:5c:d4:0e:4b:65:f5:05:34:cb:89:3f:
                    f6:67:3d:97:a6:d2:19:ac:f9:24:b8:c1:2d:d3:f4:
                    28:01:d1:d7:59:04:24:33:f8:a0:a9:b2:ad:a6:7d:
                    cc:df:24:0e:ac:6a:9b:96:87:ac:4e:c9:03:68:ec:
                    30:0a:5e:68:3d:1b:a7:c0:09:f7:1d:fa:78:ba:7f:
                    cc:e9:90:d1:73:0c:47:3d:d8:11:89:c3:ad:f9:70:
                    a6:fd:d9:17:73:e6:ab:f9:01:34:d3:d7:dd:82:34:
                    08:e3:95:77:a4:33:80:36:a3:f8:a8:3b:b0:84:77:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:36:50:68:E6:93:78:9F:10:68:81:7E:C5:60:4E:0C:01:30:16:04
            X509v3 Authority Key Identifier:
                keyid:27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:0d:10:e0:fc:ae:d2:1f:25:45:07:88:ec:09:64:49:86:88:
         52:01:14:43:e4:30:de:46:d4:da:d5:ce:0f:fd:90:fd:1d:43:
         c8:eb:cb:0c:16:e6:22:7a:1a:f7:6f:9a:ca:e3:6a:a0:00:80:
         ac:cd:0f:fa:34:37:5a:52:e4:c9:ca:93:6e:d5:83:e2:f8:6a:
         f8:68:c6:90:cd:05:87:e0:e9:bf:40:4c:29:f8:f8:41:2d:ab:
         44:e5:1e:33:b4:58:24:de:84:74:e7:1f:fd:b0:36:2d:e2:07:
         09:7a:7c:6f:be:dd:ed:c3:c6:34:8a:a7:df:a0:79:75:29:49:
         92:9a:20:78:f9:73:ad:80:5e:2c:bb:5c:4c:f2:e6:80:48:b0:
         4a:59:6b:2c:4d:ad:ce:2b:27:b4:5b:51:96:4e:e7:b0:30:b6:
         cc:27:9c:48:b8:72:5a:a9:92:1b:bc:d2:9a:5d:9b:97:2c:d3:
         fd:c1:10:81:ff:19:23:7b:02:56:0b:c6:0f:4d:ea:7c:1a:a9:
         35:ec:ab:a5:61:3f:8c:f8:1c:ff:0d:5e:8b:d4:47:ca:e1:9e:
         0f:44:e3:2c:e7:03:cc:f4:94:58:4d:f0:e3:e1:f5:c1:af:f5:
         8e:07:7e:40:4c:a7:e8:00:35:2b:21:c8:fc:0c:f8:1e:de:da:
         a2:b7:7f:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSCrs+VlKXlqBvQfDo1nX7ffULG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1RDlFMEYzRTZCQjQwQkJDOTBDOEJBMjY5OURENkEz
NTZEQTJBRTAeFw0yNTEyMDYwMzIxMzhaFw0yNTEyMDcwNTMzMzhaMDMxMTAvBgNV
BAMTKDJCMzY1MDY4RTY5Mzc4OUYxMDY4ODE3RUM1NjA0RTBDMDEzMDE2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2V3hGvvH4NYJlRXArDgu0Ajcq
69gxqTBAg7vC3m7JoedLHjGDkFZiLAl837IUKUYS4BrijW1NGTpBMdXd0CzM3caH
5tbaaG/LVdkXcDVe4B/W1+3amXhf6N6pY8bw9x0NlDuVD1CkaZuqK7qbymNtDase
qZ+7D03hPde6jJuh8zftFco/ujJrOFtc1A5LZfUFNMuJP/ZnPZem0hms+SS4wS3T
9CgB0ddZBCQz+KCpsq2mfczfJA6sapuWh6xOyQNo7DAKXmg9G6fACfcd+ni6f8zp
kNFzDEc92BGJw635cKb92Rdz5qv5ATTT192CNAjjlXekM4A2o/ioO7CEdxU9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKzZQaOaTeJ8QaIF+xWBODAEwFgQwHwYDVR0j
BBgwFoAUJ12eDz5rtAu8kMi6JpndajVtoq4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEMzQ1hRckt5c0VEOUFoWm0yelB3R1ZVMXlIS1phVnZlVlVkcjNEeWdu
Y1IvMi8yNzVEOUUwRjNFNkJCNDBCQkM5MEM4QkEyNjk5REQ2QTM1NkRBMkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NUQ5RTBGM0U2QkI0MEJC
QzkwQzhCQTI2OTlERDZBMzU2REEyQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEMzQ1hRckt5c0VEOUFoWm0yelB3R1ZVMXlIS1phVnZlVlVkcjNEeWduY1IvMi8y
NzVEOUUwRjNFNkJCNDBCQkM5MEM4QkEyNjk5REQ2QTM1NkRBMkFFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtQ0Q4Pyu0h8lRQeI7AlkSYaIUgEUQ+Qw3kbU2tXOD/2Q/R1DyOvLDBbmInoa
92+ayuNqoACArM0P+jQ3WlLkycqTbtWD4vhq+GjGkM0Fh+Dpv0BMKfj4QS2rROUe
M7RYJN6EdOcf/bA2LeIHCXp8b77d7cPGNIqn36B5dSlJkpogePlzrYBeLLtcTPLm
gEiwSllrLE2tzisntFtRlk7nsDC2zCecSLhyWqmSG7zSml2blyzT/cEQgf8ZI3sC
VgvGD03qfBqpNeyrpWE/jPgc/w1ei9RHyuGeD0TjLOcDzPSUWE3w4+H1wa/1jgd+
QEyn6AA1KyHI/Az4Ht7aord/UA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:04 2025 by rpki-client