This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
File:                     38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft (raw, json)
Hash identifier:          wF+WdZsuqWEuAyqE3efLhIXBIJZ4zq3fuUV6ldWqhmo=
Subject key identifier:   65:B6:26:E5:EA:37:AF:B8:65:08:AE:E3:B5:CF:23:D5:F9:43:4B:97
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Certificate issuer:       /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial:       1F2FE5A9598B75807D8A096BEB384F08A003F12A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
Manifest number:          017B
Signing time:             Sat 06 Dec 2025 13:13:34 +0000
Manifest this update:     Sat 06 Dec 2025 13:08:34 +0000
Manifest next update:     Sun 07 Dec 2025 14:21:34 +0000
Files and hashes:         1: 38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl (hash: /e6t3bneQMjjqTvl/YGjEijBPZGqYAuDuTTlAYbBKlM=)
                          2: 323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa (hash: OxiXaJHzz8Byh1GiRDZMJZz0CXZ3wcEdP/xdpxfAPa4=)
                          3: 323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa (hash: EH1sfEAZRN9fm6WRJECWgV5XxWGw16lC6YNprsFfCeQ=)
                          4: 323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa (hash: /u3KDALfJ9hzHHVLVSjgNQ49MGr81XREWSNWBDyrHiI=)
                          5: 323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa (hash: ZU6ILw0lAMoAwCMS6El2NuAxLqUW3seOIsbqFHJzTO8=)
                          6: 3230302e302e37302e302f32342d3234203d3e203131303937.roa (hash: h/FIG3T8g1nQhslyZg11d7Sze3jkAlhK9HP9KqI3p7w=)
                          7: 323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa (hash: 2KCnxX+3b49C2Go7b8r+7usSFcuNvUcR7UEs7+i7HSQ=)
                          8: 323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa (hash: QfvUvKpOc9sqeFiY7Ku0TrUhUjpUh/VZSi9oJMzSMr0=)
                          9: 323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa (hash: TY3j/cL94cilqBBnF2a2wywvcEBFRGGDxKoi4dj7htw=)
                          10: 3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa (hash: 7hau0Yz+B789Y4rDJ7JDQj7W56JoQ6kuoY7UiWfsRQA=)
                          11: 3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa (hash: AyxquFiADhGW8WgOgcULBTfzXOJSF2VxeCo2Z8sPKo8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2f:e5:a9:59:8b:75:80:7d:8a:09:6b:eb:38:4f:08:a0:03:f1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
        Validity
            Not Before: Dec  6 13:08:34 2025 GMT
            Not After : Dec  7 14:21:34 2025 GMT
        Subject: CN=65B626E5EA37AFB86508AEE3B5CF23D5F9434B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:8e:bb:f5:b0:e6:f8:7f:81:fc:fa:2f:92:
                    45:dd:0d:3d:fc:c7:60:b7:a0:ea:76:55:58:cf:ad:
                    1a:52:3c:a7:f4:cd:a8:57:5a:45:41:b6:a2:68:c0:
                    60:0e:9f:f0:5c:cd:d1:de:34:4f:4f:a4:28:76:8e:
                    12:a9:7d:f4:59:5c:a1:b2:ea:c0:54:17:90:85:96:
                    9a:3c:c4:de:b2:67:8c:85:a4:9f:0b:ef:f0:f6:1c:
                    05:4d:cc:8d:93:a3:86:30:2c:18:e2:30:c6:14:a4:
                    98:c3:9e:fd:ad:bc:e9:34:83:a6:ed:80:65:bc:e2:
                    b0:c1:7b:14:19:74:41:7e:ef:7d:f6:6b:39:60:34:
                    9b:82:14:b7:14:98:43:91:f9:d5:b5:f3:a1:f3:23:
                    f2:3a:a6:f8:35:44:ac:f6:c3:32:81:b6:cd:bf:1c:
                    1a:47:cb:50:7c:8a:33:d9:28:bd:0f:d2:fd:09:5e:
                    29:ec:b6:cf:30:ea:7b:80:67:75:d7:f9:47:68:b8:
                    ed:7e:68:14:d0:c9:f3:a0:52:89:96:17:f7:11:1c:
                    76:9c:d0:e1:28:45:b0:2f:d2:92:f8:7f:e3:92:11:
                    4d:62:2b:0d:ff:fa:b4:81:ae:9e:a7:12:e2:f6:6c:
                    4b:cc:ee:31:40:ea:c3:c8:79:81:b6:8d:f6:0b:9a:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B6:26:E5:EA:37:AF:B8:65:08:AE:E3:B5:CF:23:D5:F9:43:4B:97
            X509v3 Authority Key Identifier:
                keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:27:d7:e9:be:c7:c6:af:64:b8:34:35:99:07:8e:cf:66:
         80:ad:bb:b9:f9:04:ca:28:6b:59:71:11:47:0a:db:a5:28:e5:
         a8:93:80:70:13:12:66:61:06:ae:f4:64:f9:4e:f5:b0:01:ba:
         37:ec:f2:d9:82:6f:7b:5c:ad:5c:ec:78:5d:27:db:04:be:fc:
         4e:15:65:62:7d:7f:63:2f:ff:5d:04:03:fa:bb:00:37:56:b7:
         9d:98:21:d3:eb:e3:5d:ed:35:8f:44:e0:34:d7:d7:1f:af:3f:
         31:67:6b:1d:cb:59:49:ec:2d:7d:02:42:27:e9:01:06:54:d0:
         1d:8b:b8:0f:83:2e:cc:11:6d:e8:7b:f3:c4:68:5c:27:66:9e:
         61:da:b2:bc:8f:4d:be:ca:5d:94:52:93:e2:39:38:9f:75:4e:
         48:d5:b9:2a:43:3d:f8:11:c7:b2:fc:5f:8c:fc:2d:75:ec:7a:
         e8:08:0d:1c:18:66:c5:06:b8:52:0b:f8:de:10:aa:22:a5:d5:
         b2:8b:97:5a:d7:3c:c8:e6:6b:02:06:3e:68:94:0b:e5:1f:1f:
         49:9c:b8:5d:ce:68:20:f5:a5:a0:e0:f7:99:2f:c4:70:4f:79:
         39:db:8a:34:dc:f7:55:65:87:cb:6e:5e:92:cf:85:f0:76:5b:
         f5:55:6a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:19 2025 by rpki-client