This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
File:                     32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft (raw, json)
Hash identifier:          1YVNmnEfSAND9Jehh4h6KSgei+om72LQguftVoHflJQ=
Subject key identifier:   D2:3F:31:23:5D:DE:DC:55:83:E2:36:00:6E:C7:1C:A3:91:8C:E6:E2
Authority key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89
Certificate issuer:       /CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
Certificate serial:       4A87380358928A44BFD2C152C3CAECDDCCE4DFAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
Manifest number:          019E
Signing time:             Sat 06 Dec 2025 02:28:09 +0000
Manifest this update:     Sat 06 Dec 2025 02:23:09 +0000
Manifest next update:     Sun 07 Dec 2025 04:45:09 +0000
Files and hashes:         1: 34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (hash: xKpccbO2wzlbHbDV3ZJO8ATedkukSYGdQvi151j6L2o=)
                          2: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl (hash: +YiKYTgUtWzE2v3f1o8FQHyk0V0gR03WRGCU7Rm/JTE=)
                          3: 323830343a363033303a3a2f33322d3438203d3e20323639313531.roa (hash: bustMz7M+5CMeM9CRQbzDoUPI+6nwA7yTMNCHpORS1E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl
                          rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:87:38:03:58:92:8a:44:bf:d2:c1:52:c3:ca:ec:dd:cc:e4:df:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89
        Validity
            Not Before: Dec  6 02:23:09 2025 GMT
            Not After : Dec  7 04:45:09 2025 GMT
        Subject: CN=D23F31235DDEDC5583E236006EC71CA3918CE6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:12:73:77:95:d7:46:98:63:7c:fd:4b:ad:
                    c9:64:29:6b:fc:9a:56:16:08:4a:0f:72:d5:dc:77:
                    f3:2d:3f:6c:54:db:13:e1:10:bd:b8:d8:a3:9d:9e:
                    ee:1a:9e:ac:15:25:86:b4:0a:ed:ba:3b:ed:c0:3c:
                    36:f6:b3:ee:ab:a8:39:40:41:d1:c5:00:2f:3d:98:
                    33:7e:cd:ac:42:25:f3:0a:3f:27:85:71:5e:6b:22:
                    14:1c:14:fd:2c:4f:51:28:7a:22:f8:46:d1:24:3e:
                    ee:75:fc:93:1d:a5:9e:74:ff:ee:99:92:1c:70:3b:
                    72:a5:ea:c7:a6:4e:db:5e:0e:73:78:11:3c:d6:95:
                    58:35:f6:7a:12:59:9c:ac:89:1b:0c:ee:2d:6f:bc:
                    a0:25:41:42:b0:38:1d:5a:75:c8:d2:38:51:ad:eb:
                    02:ba:ba:84:97:5d:8e:22:0f:f2:fd:f8:49:66:36:
                    e0:20:32:a9:e2:79:d2:95:39:41:31:ce:d6:d3:c7:
                    33:ce:88:44:d1:77:d5:44:36:25:82:8c:e8:46:69:
                    9e:e6:2e:d9:07:2a:41:de:9f:90:47:4e:be:c5:05:
                    55:a6:fd:ea:cf:42:75:91:19:20:9d:d5:b6:88:bb:
                    1a:03:d5:bc:79:cf:af:a2:08:01:0e:66:68:de:71:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3F:31:23:5D:DE:DC:55:83:E2:36:00:6E:C7:1C:A3:91:8C:E6:E2
            X509v3 Authority Key Identifier:
                keyid:32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9d:f4:3c:38:d0:fe:f7:49:f3:69:e0:3d:69:db:84:f1:fe:
         9a:b6:69:8e:b2:56:da:05:94:a8:61:d2:b0:82:8e:0b:67:09:
         0b:bb:25:c8:5b:04:a8:2c:32:4d:7a:49:b1:7c:72:c0:9a:29:
         ea:f1:b7:89:10:c8:fb:92:51:a9:24:28:52:d6:3f:ea:06:a5:
         bd:e5:9a:a5:bf:8c:fc:33:61:bc:fb:4a:e9:22:db:aa:7e:32:
         86:e4:0c:aa:4e:78:fa:1f:3f:df:25:fc:9d:e2:ec:2e:c3:5b:
         0f:cf:5e:84:5b:59:28:80:c9:a5:bb:b9:94:ee:f9:db:19:3b:
         d1:43:c8:a4:d5:af:38:b9:24:66:48:d2:72:36:22:43:c8:22:
         54:af:87:8e:a2:65:ce:6f:91:4d:b7:c2:01:47:6f:13:cc:ef:
         8f:ef:c7:d4:43:46:a9:c7:54:e1:fb:a6:96:4c:7f:a1:ce:65:
         10:73:5f:ea:93:63:75:cc:3b:55:38:80:13:11:99:25:4c:19:
         10:6f:b6:5b:c8:4e:10:38:85:1f:ff:6a:31:b8:0e:06:19:26:
         c6:56:0b:15:37:e0:37:f0:29:8a:e6:7e:77:d5:50:df:0c:c5:
         a7:83:b7:1a:8d:4b:a3:21:ce:d2:44:a8:ab:b6:fd:da:23:66:
         22:fb:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:29 2025 by rpki-client