This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
File:                     FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft (raw, json)
Hash identifier:          q3uJKyJTe0/o+cAO9qzO/q/+Oc52tw+zPKysxP2WkKE=
Subject key identifier:   A6:A3:C2:39:8B:1A:4C:96:1F:67:E8:11:D7:8D:0E:59:C6:70:89:B0
Authority key identifier: FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78
Certificate issuer:       /CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
Certificate serial:       284179C9AE233C76AF726F87E195399C9579FAA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
Manifest number:          03
Signing time:             Wed 17 Dec 2025 13:36:21 +0000
Manifest this update:     Wed 17 Dec 2025 13:31:21 +0000
Manifest next update:     Thu 18 Dec 2025 13:54:21 +0000
Files and hashes:         1: 323830343a353465633a343030303a3a2f33342d3334203d3e20323638363738.roa (hash: l+t8PJhnhrE6hsCRQDnSvwf6LhixLhBcDcv/l7K9Fxk=)
                          2: 323830343a353465633a3a2f33332d3333203d3e20323638363738.roa (hash: +Pd3z94wyQJWsVKzzBkpAO4/8g+8DoRHLyRqUQ1+jpo=)
                          3: 34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa (hash: GiD7kTDibJ/BshzFUPm52ifDs5ZHFbawfgZ5SJrFUH8=)
                          4: 34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa (hash: Osko/fjdyvGuTEMuzsPi5+nBjF/EIvFOwKrTQmFXW+k=)
                          5: 323830343a353465633a3a2f33322d3332203d3e20323638363738.roa (hash: ahB7L7Ph7rR9uCzozHRJDrJ1/Xmo9qEHQmUSOUnFZcg=)
                          6: 323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa (hash: l8pc+9/csxsdQSbw7tiUlRE/8XdcAhgJ7RxAZpfKLnE=)
                          7: 323830343a353465633a383030303a3a2f33342d3334203d3e20323638363738.roa (hash: x99zBuvWBnU9AVWdYvh6AAlitV1UXJ0iGrnTPVHMJMw=)
                          8: 323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa (hash: 23ZedUrSLqNnJMBB5fTC5/hem3TXgHJOyiFb3jY8Hc8=)
                          9: 34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa (hash: n7MoVOblgjqN+U9PF9Dyp725p+0rWj7F3VZWPLIXR+s=)
                          10: 34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa (hash: 8mwHgXK3uG3eviHzEqSVQk7ausNSlSB8hiEyReZk1Uk=)
                          11: 34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa (hash: 1cwqLnwixhZ5EnGoY5oGrEkmFpdf8/JiSZdpQtNsYIQ=)
                          12: 34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa (hash: EXovxUtj15qyaKXHG1S2i3TWIQgRUMGi3wBabPis9ME=)
                          13: 323830343a353465633a3a2f33342d3334203d3e20323638363738.roa (hash: TuGlDaoQn8Pw8uUa55LY7JTr4yuuL478nmmPdu+cxBQ=)
                          14: 34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa (hash: 0O7NiqLUDDHXiBkFWhy+p2W0St71RZLuwTJnsalzXso=)
                          15: FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl (hash: rV9eYgFs1wGhTJ30dFFauV7JRBr/8p7VIX/GE/Jx2BU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl
                          rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 13:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:41:79:c9:ae:23:3c:76:af:72:6f:87:e1:95:39:9c:95:79:fa:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478
        Validity
            Not Before: Dec 17 13:31:21 2025 GMT
            Not After : Dec 18 13:54:21 2025 GMT
        Subject: CN=A6A3C2398B1A4C961F67E811D78D0E59C67089B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:82:dc:d4:2c:cc:4f:88:8f:ef:d9:aa:6e:
                    d4:0b:99:06:5b:3a:98:51:af:31:8e:70:e6:95:28:
                    76:ec:48:a1:54:e7:ee:d3:68:8c:a9:6e:0e:d0:d1:
                    16:ea:ae:e0:42:ed:cd:41:22:1d:5b:f0:4b:6e:f4:
                    64:03:d4:27:ff:4a:ee:25:66:31:2f:d1:df:3d:0d:
                    a6:b3:5b:31:2f:72:ab:81:e0:a0:2d:60:e9:53:63:
                    62:cb:b9:3a:c4:3d:dc:76:82:c6:40:2c:94:b4:18:
                    b5:55:94:71:75:89:0b:e9:f5:2c:05:26:33:98:12:
                    d5:72:99:c6:44:a8:87:c8:3f:56:3f:2d:1d:31:98:
                    52:4b:e6:d5:55:de:0a:71:d8:6a:61:98:e7:43:d1:
                    29:fa:75:de:9e:ad:ba:38:b2:ce:a6:ff:13:1f:90:
                    9a:19:d4:bd:b3:ab:22:1d:d4:9d:ec:9f:dc:6c:84:
                    16:91:e9:25:b9:a6:76:9f:78:5b:cb:b1:80:ba:37:
                    80:cb:9f:82:52:8f:84:c9:8e:80:37:60:8b:6f:0c:
                    fd:d1:f5:d8:4b:a0:55:36:e7:18:b6:fe:67:19:41:
                    47:57:c0:1b:13:5f:92:ce:56:09:0e:b6:28:71:76:
                    37:c3:ec:c7:13:78:69:31:c8:24:79:6f:58:75:bb:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:C2:39:8B:1A:4C:96:1F:67:E8:11:D7:8D:0E:59:C6:70:89:B0
            X509v3 Authority Key Identifier:
                keyid:FB:21:CF:40:F3:C5:FE:A3:5E:AC:2F:4C:CE:BD:27:AE:4D:AC:24:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/FB21CF40F3C5FEA35EAC2F4CCEBD27AE4DAC2478.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e3:6d:b3:7d:19:45:1a:1d:67:ed:a4:f2:03:a3:2d:b0:db:
         9a:f8:ac:e6:4f:a2:1d:a6:59:8a:b9:b2:0c:22:f2:be:7b:1b:
         67:1c:e0:4d:50:fc:78:6a:e2:e0:5f:2e:dd:41:23:5b:b3:b8:
         23:73:d2:27:59:7e:fc:7b:e2:2c:c3:f8:f2:c4:a9:2f:12:23:
         aa:29:01:d7:52:d1:6c:c9:f6:f1:e3:81:4e:31:a8:49:1a:65:
         09:a0:31:3d:f9:5e:17:fe:e3:73:68:67:2b:db:11:f5:3d:0b:
         31:f4:d2:51:80:ec:27:d9:e4:57:7e:38:9b:07:a1:41:65:1b:
         3f:5d:4c:da:da:05:37:51:42:91:7f:9d:ee:15:ca:42:8c:31:
         d3:b8:01:69:25:2e:86:15:f3:9e:20:9b:6d:fc:44:5a:a3:47:
         36:70:f1:c2:e7:40:1a:51:42:0f:ec:05:cc:0b:68:51:9c:9f:
         af:4f:b5:5b:7e:b7:79:14:f1:47:a5:ff:60:42:dd:f1:55:43:
         33:0b:59:7b:a1:09:ac:2f:bd:7a:c9:e2:7e:b2:06:be:e2:a0:
         c6:4b:6a:f6:aa:02:81:50:02:de:a1:59:b6:77:a9:d4:c4:ea:
         67:f1:09:80:ab:33:11:87:0a:74:c2:6b:ab:cd:19:78:ce:2e:
         f4:39:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 02:08:45 2025 by rpki-client