This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
File:                     2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json)
Hash identifier:          JTSOvcoDO/LDUSRc+wmnucM0xubF2AEITYPaP4axkw4=
Subject key identifier:   B4:C5:79:EF:F4:31:C2:6B:22:5D:E4:69:AE:51:34:A1:EB:CA:80:37
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       40E689832D1B68149B93D3DEACD11804C2E89E36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
Manifest number:          0329
Signing time:             Sat 06 Dec 2025 09:23:32 +0000
Manifest this update:     Sat 06 Dec 2025 09:18:32 +0000
Manifest next update:     Sun 07 Dec 2025 09:43:32 +0000
Files and hashes:         1: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: i42Zf9JlK4N1mmLBTa9TWccNagKQVyNdUEy5+83Gmck=)
                          2: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: HUgjgoMoXy/HcsuPu+XEO8HJHVpykWC6LHcx5p1rb50=)
                          3: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: nuyhgAzX27qSeSVno+9wZ9X/49ZgMdBWxUwbjgZnHk0=)
                          4: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: 5pRsu1LYLpZEQxpS0l9oeI7bDkB972GWroryaIQtGMU=)
                          5: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: bHsfgx5bc+iOPbuSRSP7Bx9qmbPdlwgcPx8SooF5nOw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e6:89:83:2d:1b:68:14:9b:93:d3:de:ac:d1:18:04:c2:e8:9e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Dec  6 09:18:32 2025 GMT
            Not After : Dec  7 09:43:32 2025 GMT
        Subject: CN=B4C579EFF431C26B225DE469AE5134A1EBCA8037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:94:81:74:66:5e:47:70:3a:8c:b1:c7:a9:
                    98:f7:26:b6:eb:c8:e6:0c:ba:12:b5:c5:b5:90:7e:
                    36:9c:89:a0:5c:66:00:77:23:27:a9:3a:90:d5:0b:
                    f9:bc:2d:6c:b1:26:0f:4f:c4:18:25:36:69:b5:4e:
                    3b:63:93:54:87:98:54:4e:48:b1:ae:62:59:a5:10:
                    3a:78:7d:aa:9d:2a:a0:21:2b:fb:4c:b1:62:0b:b2:
                    08:37:8b:5a:96:2d:fc:97:8c:c2:51:92:23:28:95:
                    fe:97:86:21:bc:7a:c3:e3:3a:3b:e0:0e:3a:16:62:
                    e9:92:55:3e:25:ff:c1:db:e4:09:fd:32:fc:98:65:
                    78:4b:10:d1:f2:47:e1:d9:4a:e3:8f:6d:a7:1b:cf:
                    d6:01:ea:81:a9:a5:ae:be:15:5a:a6:ca:97:b6:0e:
                    50:52:5c:e1:5c:ef:4b:cc:22:9b:86:08:50:b2:1f:
                    11:27:b2:35:fe:cc:f2:3f:a1:98:37:7f:17:ab:92:
                    ee:a9:b1:0b:7a:5c:0e:e9:53:8f:62:e6:4f:a7:bf:
                    8e:e4:14:2b:ac:4c:d8:df:ca:9f:f3:46:e7:d0:24:
                    0a:67:e9:e3:36:df:f1:0d:04:b5:9e:07:45:2f:25:
                    41:c1:8e:a5:d0:69:2e:de:b4:98:36:b8:06:13:64:
                    d2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:79:EF:F4:31:C2:6B:22:5D:E4:69:AE:51:34:A1:EB:CA:80:37
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:56:77:fe:74:e8:ed:5a:2a:53:32:07:1f:b5:f1:c6:69:1f:
         77:06:f9:43:96:58:56:f0:09:98:78:98:b5:62:4a:88:26:58:
         28:8d:a5:d7:cb:aa:1e:74:c6:b1:cf:56:9c:65:a1:0d:c9:cf:
         45:d0:10:0f:33:03:fc:4b:51:6e:ae:43:46:75:90:b0:df:6e:
         6f:ef:d9:2b:a9:92:30:21:01:7f:d7:2c:c4:a9:c6:d6:46:1a:
         ae:b5:3b:a1:c7:74:6e:4b:be:92:b4:92:c8:6c:ec:46:ee:5a:
         21:ea:09:3e:7a:66:e9:ce:25:51:ff:5d:5e:19:eb:1f:54:15:
         c7:a5:ef:22:01:a1:86:27:d9:5d:0e:a6:27:2c:e2:99:ce:3c:
         7f:0f:76:e6:4f:48:63:e1:f0:3c:a1:fa:93:02:f1:98:3b:e2:
         70:0f:6f:d7:0c:c6:46:63:52:0d:c8:26:34:4b:64:11:e2:e8:
         d3:c8:bb:56:7e:ee:a0:df:87:5e:1d:e7:e0:40:d1:e2:a6:28:
         91:08:ea:20:7d:68:d1:33:7b:44:75:0f:f4:41:64:ff:2c:e0:
         3c:17:98:b9:cc:f1:bd:c2:d7:f2:c2:0f:75:41:db:d6:f2:88:
         32:d3:dc:77:f1:64:80:f1:92:69:15:35:97:bf:7c:e8:a1:72:
         7b:3a:3c:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQOaJgy0baBSbk9PerNEYBMLonjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz
NkU5MUI1QzAeFw0yNTEyMDYwOTE4MzJaFw0yNTEyMDcwOTQzMzJaMDMxMTAvBgNV
BAMTKEI0QzU3OUVGRjQzMUMyNkIyMjVERTQ2OUFFNTEzNEExRUJDQTgwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeZSBdGZeR3A6jLHHqZj3Jrbr
yOYMuhK1xbWQfjaciaBcZgB3IyepOpDVC/m8LWyxJg9PxBglNmm1Tjtjk1SHmFRO
SLGuYlmlEDp4faqdKqAhK/tMsWILsgg3i1qWLfyXjMJRkiMolf6XhiG8esPjOjvg
DjoWYumSVT4l/8Hb5An9MvyYZXhLENHyR+HZSuOPbacbz9YB6oGppa6+FVqmype2
DlBSXOFc70vMIpuGCFCyHxEnsjX+zPI/oZg3fxerku6psQt6XA7pU49i5k+nv47k
FCusTNjfyp/zRufQJApn6eM23/ENBLWeB0UvJUHBjqXQaS7etJg2uAYTZNIrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtMV57/QxwmsiXeRprlE0oevKgDcwHwYDVR0j
BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp
WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw
MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZpWDIvMS8y
QTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEVZ3/nTo7VoqUzIHH7Xxxmkfdwb5Q5ZYVvAJmHiYtWJKiCZYKI2l18uqHnTG
sc9WnGWhDcnPRdAQDzMD/EtRbq5DRnWQsN9ub+/ZK6mSMCEBf9csxKnG1kYarrU7
ocd0bku+krSSyGzsRu5aIeoJPnpm6c4lUf9dXhnrH1QVx6XvIgGhhifZXQ6mJyzi
mc48fw925k9IY+HwPKH6kwLxmDvicA9v1wzGRmNSDcgmNEtkEeLo08i7Vn7uoN+H
Xh3n4EDR4qYokQjqIH1o0TN7RHUP9EFk/yzgPBeYuczxvcLX8sIPdUHb1vKIMtPc
d/FkgPGSaRU1l7986KFyezo8uw==
-----END CERTIFICATE-----