This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
File:                     37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft (raw, json)
Hash identifier:          5u4cRfUwbTuLigurKNodGGimhZZQNO7ZpQT7zxkQvZo=
Subject key identifier:   DC:AC:C7:D2:C4:FA:BB:39:93:8A:95:31:64:4B:79:E7:85:5F:D0:E3
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       6D3D3F0E4D683E5AF7AD2917F435D5429AFC4B70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
Manifest number:          0333
Signing time:             Sat 06 Dec 2025 08:40:54 +0000
Manifest this update:     Sat 06 Dec 2025 08:35:54 +0000
Manifest next update:     Sun 07 Dec 2025 10:42:54 +0000
Files and hashes:         1: 323830343a326330383a3a2f3332203d3e20323635313839.roa (hash: LiKuh+GJrm0OjnDyeacSbGCLM90b3hc8Q90tDSkoR9Q=)
                          2: 3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa (hash: 1WuKSGXgw+MbBRqdaPKUXD2MLCkLD6FCkDw7ZY6fN8E=)
                          3: 3136372e3235302e34342e302f32322d3234203d3e20323635313839.roa (hash: hlFlLqJAOElEN/yYD+fvQlEyZt6gC9CmwjlahWkfIAU=)
                          4: 323830343a326330383a3a2f33322d3438203d3e20323635313839.roa (hash: dOJPXi7WNMSUZZol5GfqPpg43GsP1CZUPW3CPKHFiBI=)
                          5: 37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl (hash: IlKCZjF/MqsxWljcxuhJ0rBvSK54eLsgGioiZlQm1zc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3d:3f:0e:4d:68:3e:5a:f7:ad:29:17:f4:35:d5:42:9a:fc:4b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Dec  6 08:35:54 2025 GMT
            Not After : Dec  7 10:42:54 2025 GMT
        Subject: CN=DCACC7D2C4FABB39938A9531644B79E7855FD0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:44:47:1d:0b:e4:f8:9b:8f:1c:bd:c4:a5:
                    4e:5f:87:8a:93:0a:17:6a:46:36:23:f8:b8:6e:0d:
                    cb:14:01:b5:1e:ad:35:b8:e8:d9:1a:59:b7:3c:1c:
                    2c:4d:13:f5:23:93:96:34:66:c2:0f:71:8f:05:60:
                    72:b1:47:4d:73:4d:69:f8:07:7a:26:3f:2c:96:78:
                    5f:f6:66:55:ff:d2:19:42:fb:16:b8:15:9d:da:95:
                    b3:3f:24:06:e3:72:34:22:df:18:97:8d:de:c4:b7:
                    c3:f9:54:49:d4:f1:33:0f:87:af:05:8e:d6:a2:68:
                    f7:c6:0a:5a:2c:00:58:8e:e5:51:f4:e8:f3:36:72:
                    20:59:5a:f2:02:95:7c:f6:8e:76:9d:a8:8d:92:33:
                    c4:3c:f1:2d:ea:64:eb:51:5c:c4:2e:35:1c:cc:7d:
                    5f:38:f6:ec:25:f6:d8:78:77:26:7e:a1:11:2c:09:
                    a4:70:a1:36:d5:40:55:a4:9c:01:f1:66:b3:2e:9d:
                    92:2a:16:2c:a8:df:18:fb:b5:09:00:46:45:64:77:
                    a4:e1:53:96:80:5c:1a:a6:a6:8b:5a:4f:5c:7d:bf:
                    c0:25:7a:a8:c5:c2:c1:7c:47:54:81:da:30:a5:f1:
                    f3:0d:05:5f:9c:64:d1:4c:f4:ba:02:10:3f:f5:46:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:C7:D2:C4:FA:BB:39:93:8A:95:31:64:4B:79:E7:85:5F:D0:E3
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:93:48:02:d8:a2:b4:11:68:34:ea:e9:24:56:15:20:01:f8:
         95:cc:d6:15:31:dd:0b:b7:09:d7:81:91:bb:7a:d2:28:8c:7d:
         a1:3e:d3:4d:15:92:c6:9a:e1:91:ea:6d:a6:6b:ad:f4:f4:34:
         12:ac:a1:3f:f3:45:31:38:2a:65:16:43:6f:ef:c3:69:5a:71:
         db:77:83:c2:c9:c6:46:25:9e:68:52:57:81:bb:17:af:ce:e2:
         5f:cc:c4:4d:28:fb:4b:9d:78:88:0a:ab:43:45:b1:21:f1:5b:
         90:79:ae:52:fe:79:bb:ce:98:c3:ba:ef:16:87:85:4d:2e:53:
         ee:74:25:be:43:eb:84:aa:04:6f:c6:31:47:cc:7d:14:f5:35:
         5d:c0:bd:7b:1f:07:e4:74:33:cd:55:6e:13:7e:22:5f:05:1e:
         2f:09:e2:b9:44:b2:58:ba:37:61:3c:29:38:83:0f:a8:9f:93:
         1a:11:3c:ec:e1:e8:e7:af:1d:b8:3a:34:8d:3b:4e:6c:ae:8a:
         30:6c:26:d2:bc:15:e7:1c:29:35:54:11:32:fb:13:0d:50:ec:
         62:95:58:16:76:a3:27:f8:10:f4:9f:5b:2a:de:1e:73:13:c6:
         1e:88:32:71:88:83:25:50:3d:be:b7:a0:fd:41:d0:34:34:5c:
         bf:3e:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:35:40 2025 by rpki-client