This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          HltX2sw4pyCWIfCTug7pMWQdM17IfMbDk3T6vr6xJWE=
Subject key identifier:   B5:FF:3D:EF:CB:48:90:BA:60:43:88:4A:37:C1:71:3D:DA:61:82:39
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       12BEE71BAE77C90A206B899E5A04FC5917F4EC05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          01A4
Signing time:             Sat 06 Dec 2025 01:14:50 +0000
Manifest this update:     Sat 06 Dec 2025 01:09:50 +0000
Manifest next update:     Sun 07 Dec 2025 05:02:50 +0000
Files and hashes:         1: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=)
                          2: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=)
                          3: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=)
                          4: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=)
                          5: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=)
                          6: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=)
                          7: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: H/D3JUJEaNuPVqBTwHeltWOs/eOu95pYhEtFdtoPdgc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:be:e7:1b:ae:77:c9:0a:20:6b:89:9e:5a:04:fc:59:17:f4:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Dec  6 01:09:50 2025 GMT
            Not After : Dec  7 05:02:50 2025 GMT
        Subject: CN=B5FF3DEFCB4890BA6043884A37C1713DDA618239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:3f:9d:36:0a:cc:9c:b6:3e:16:e9:fd:5e:
                    79:2a:ad:91:a6:bf:c8:5c:d5:c5:f0:51:9f:2f:db:
                    4a:c8:64:3f:8d:7f:80:03:97:67:1d:d4:eb:03:d6:
                    d0:02:44:e9:a5:f2:42:fd:07:33:65:68:20:eb:cb:
                    8f:9e:9f:d1:e1:9c:a8:e7:4e:11:e2:89:4a:2f:9e:
                    7b:d8:1a:af:d4:ed:8f:75:4d:2e:7b:c3:4f:e3:b3:
                    dd:21:d6:68:2d:e5:34:ff:4f:7d:37:9b:9c:36:86:
                    2c:8b:fd:c3:8c:16:f5:0e:f1:89:50:a2:09:99:ce:
                    46:be:40:62:63:a1:79:11:db:52:87:d8:b8:bf:e3:
                    7c:11:65:e9:6d:4a:38:96:fe:98:93:8a:9a:d6:92:
                    2c:12:b1:32:ca:d3:34:6f:f4:b8:11:00:da:22:00:
                    6d:83:10:76:4b:08:ad:f7:41:e1:0b:5f:ae:3e:0b:
                    87:52:77:9c:21:8b:04:5b:b3:86:0c:55:d4:b4:8d:
                    43:7a:83:90:c2:bc:06:4b:90:af:fc:23:f1:51:9c:
                    f3:78:70:bc:ab:19:fc:19:aa:90:45:07:31:16:bd:
                    e9:a7:a5:9c:e8:bb:6d:c8:24:7f:96:73:f3:d7:89:
                    ab:7e:24:e4:6f:2e:66:1d:dc:e9:bd:c3:12:8a:e3:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:3D:EF:CB:48:90:BA:60:43:88:4A:37:C1:71:3D:DA:61:82:39
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:be:04:1e:86:03:24:06:c0:c1:6b:30:09:27:97:91:b4:6a:
         82:fd:bc:ac:c0:f6:e2:af:59:94:1c:5b:c2:9f:2e:fd:22:6b:
         b6:ae:9e:e8:42:b7:54:7d:27:e1:1e:e0:fe:25:88:a7:50:51:
         46:91:dd:22:4a:fb:4e:09:9b:c7:0a:d8:3e:71:26:88:66:30:
         3d:40:c0:a1:27:a9:ba:79:cb:16:8b:84:b0:5a:24:78:b3:3c:
         27:e4:73:32:26:e0:c9:b2:c5:fe:0c:89:01:ba:f7:af:ae:9d:
         09:22:33:98:96:ad:3e:19:de:43:88:3a:b2:04:02:ed:15:a3:
         82:4e:17:67:5e:9e:09:8a:73:ae:ed:ba:b4:31:e9:e1:52:24:
         3c:69:76:8e:54:61:55:35:d9:02:dc:dd:11:d2:f4:0c:4d:d6:
         62:29:f0:6c:66:8a:10:80:d6:25:d8:92:fa:87:8f:41:43:72:
         eb:9c:ee:69:75:b9:a6:1f:7f:84:62:23:ac:cd:36:07:d4:0b:
         c4:67:3b:4f:c6:7e:e0:17:86:b0:c5:db:d1:95:1b:2b:54:a7:
         43:b1:d0:6e:0c:a1:44:a3:d5:a6:e9:22:64:b7:1c:d4:77:85:
         7a:55:8c:32:0c:76:db:79:04:41:5e:08:21:ea:ef:b1:f5:f7:
         9e:64:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:03 2025 by rpki-client