This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
File:                     FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft (raw, json)
Hash identifier:          A1Ssyb1zphisHwA9ni2CXW/v8skoXlRnKMk0mcMJqss=
Subject key identifier:   D0:77:D7:25:CC:16:85:EE:30:3C:53:18:80:36:04:13:71:34:AD:0C
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Certificate issuer:       /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial:       5DBF44510F1B933D10805944FEE063AE2EFE05A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
Manifest number:          0327
Signing time:             Sat 06 Dec 2025 21:23:13 +0000
Manifest this update:     Sat 06 Dec 2025 21:18:13 +0000
Manifest next update:     Sun 07 Dec 2025 23:34:13 +0000
Files and hashes:         1: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl (hash: AvlB9Ghq1mD+d436h+o5q1ilCWm/Seg0W6N59w/Pg/k=)
                          2: 3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (hash: 64d3manPGgk3wxr3C7+S75h3+f1uoBp0OnH1+QMNePE=)
                          3: 323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (hash: J+wRwomABKCbVl4EP5JD2Yfly2BPeIoqIkLJ9ZSvj4s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
                          rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 23:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bf:44:51:0f:1b:93:3d:10:80:59:44:fe:e0:63:ae:2e:fe:05:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Validity
            Not Before: Dec  6 21:18:13 2025 GMT
            Not After : Dec  7 23:34:13 2025 GMT
        Subject: CN=D077D725CC1685EE303C5318803604137134AD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:3a:2a:a5:44:5e:22:89:a4:94:87:c9:64:
                    34:1b:31:97:19:69:c2:51:7c:fc:03:dd:a7:24:c3:
                    d4:09:9f:f2:b7:49:f2:25:5d:45:c5:ed:0a:f9:6c:
                    4f:b7:85:8d:1c:b2:e3:8d:b1:d5:d0:84:68:b5:45:
                    2d:be:7f:89:ae:de:d8:54:04:00:21:7e:20:bc:01:
                    ac:ce:85:c2:12:ea:81:6a:d7:30:3a:d7:84:23:9a:
                    90:24:a4:c2:14:46:d0:76:81:10:94:30:08:72:fb:
                    c0:a3:98:7c:52:23:d5:cf:e0:07:d3:6f:d6:b9:74:
                    90:95:37:10:61:9a:ed:cd:d9:ef:d0:6a:77:45:84:
                    13:cb:65:82:26:7b:19:d1:03:47:67:41:47:08:52:
                    23:1a:bc:ac:9c:22:8c:85:89:f7:e1:b7:a7:ea:3b:
                    a9:11:1d:e8:c4:b5:59:38:10:17:7f:6e:f3:c4:a2:
                    09:a4:a7:d7:01:d1:a7:20:19:83:e6:af:52:3c:a3:
                    18:8e:31:57:1c:63:ca:91:03:49:c4:c6:e0:41:46:
                    39:36:18:48:17:ba:73:57:37:af:06:0c:ba:72:81:
                    a3:dc:f5:f2:14:93:87:ac:a4:6c:29:90:26:aa:a6:
                    e1:79:25:b3:ba:0f:33:b8:13:8b:a1:15:fc:35:95:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:D7:25:CC:16:85:EE:30:3C:53:18:80:36:04:13:71:34:AD:0C
            X509v3 Authority Key Identifier:
                keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:55:f2:f1:f9:93:29:10:f7:65:fc:8b:85:a4:0f:87:25:
         66:34:0e:d0:c7:37:71:86:84:62:d5:c1:0e:55:3b:43:c9:9e:
         57:7e:1c:37:2f:ec:94:dc:0b:63:36:4a:a1:79:0e:bf:71:aa:
         1c:a4:7c:4a:ad:20:a6:01:20:6d:ab:34:98:27:ce:e2:4f:12:
         84:a9:9b:de:01:30:db:12:b0:63:45:dc:3f:56:59:43:a8:c9:
         dd:c7:98:41:17:0c:59:8d:33:48:26:27:59:e3:d7:8d:ae:e4:
         81:69:4a:6b:4e:36:a1:7e:b6:7a:c4:e1:c8:0e:b5:9f:a4:7d:
         7e:0c:c6:3c:f3:1d:16:b5:30:ee:30:df:72:84:6a:37:24:d8:
         70:8c:76:57:2e:36:16:5d:4f:2f:70:e1:ef:d7:ba:1b:73:a3:
         65:99:f4:f2:fd:48:fb:d2:cd:cf:b8:e4:0a:89:6d:90:1b:d3:
         1a:80:05:78:9a:b4:9e:9b:a9:dd:e7:5d:7c:2e:fb:01:3b:51:
         c1:10:8d:32:95:59:99:1a:12:f2:b1:05:f0:4b:5f:7f:44:5b:
         53:ce:0a:eb:59:5a:61:82:51:d4:08:ec:de:e1:1b:6d:f5:5f:
         96:e6:a9:d6:e5:d6:60:2c:14:77:ce:15:ae:82:87:fc:b5:06:
         3d:01:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:49 2025 by rpki-client