This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
File:                     B3C0ECC43363690F72F949D611EE62DCF8942568.mft (raw, json)
Hash identifier:          sBNJlQlvr9qPK8bpbLeqaRBYHitXCsFeXYBY5mnaDHg=
Subject key identifier:   BA:17:C3:3E:43:A5:A0:BB:A5:C1:74:E4:D5:61:A3:97:E1:08:16:4C
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       07F56F1B571FDD890935825984CF26CE3D4D849E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
Manifest number:          0208
Signing time:             Fri 05 Dec 2025 14:09:11 +0000
Manifest this update:     Fri 05 Dec 2025 14:04:11 +0000
Manifest next update:     Sat 06 Dec 2025 15:13:11 +0000
Files and hashes:         1: 323830343a313361343a3a2f33322d313238203d3e20323633353433.roa (hash: NgViZU+smtrX5KI+pgc12is3Dat/7tdY4dskSSJlbWk=)
                          2: B3C0ECC43363690F72F949D611EE62DCF8942568.crl (hash: UWkiMGLmktPP0zFh7bTVNCwwCJQTgxfhv5dcQuCebEE=)
                          3: 3139312e352e3233362e302f32322d3239203d3e20323633353433.roa (hash: XrmREThCWd+9FlIfHO8sDj3baPSgs5QsVANpr6RJMFs=)
                          4: 3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa (hash: zWq3qveuhfjY2yYC6tu5Za/hQVO2cq+c00n4sKVtMG4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl
                          rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 15:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f5:6f:1b:57:1f:dd:89:09:35:82:59:84:cf:26:ce:3d:4d:84:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Dec  5 14:04:11 2025 GMT
            Not After : Dec  6 15:13:11 2025 GMT
        Subject: CN=BA17C33E43A5A0BBA5C174E4D561A397E108164C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:f7:30:c3:8f:ae:44:4a:ee:1e:6e:6e:5d:
                    d7:9d:df:2c:53:bb:6e:16:0c:fd:93:ad:bf:b9:95:
                    3a:8c:33:76:a9:2a:32:83:23:1d:a8:ae:a8:11:c4:
                    60:bc:77:8a:9f:9d:7b:60:e1:27:84:11:64:cd:49:
                    a5:a1:9b:89:ac:bc:fe:d5:3b:7f:a5:83:3a:a1:64:
                    28:6c:cf:a8:ef:7b:a0:1e:b1:e8:cb:35:0e:13:98:
                    e4:7e:97:1b:0b:dc:20:1c:cd:fa:16:b1:b9:9e:80:
                    4d:b1:45:ef:e1:98:11:67:78:e2:17:b1:6e:33:4f:
                    a1:09:fb:48:45:3f:62:ed:8a:ef:a5:1d:1e:99:a6:
                    f5:36:0c:42:1e:66:f6:85:2a:01:0e:32:94:c2:c5:
                    2d:f1:1c:46:54:f5:c9:05:9d:4d:55:b1:9b:8c:d1:
                    d5:7c:b7:d2:29:74:dd:48:0c:b2:de:67:46:86:48:
                    7b:0f:7b:fc:d1:a9:54:cc:e4:9b:3a:a1:8f:63:19:
                    ca:c7:ae:ba:38:a2:18:c5:32:ca:8e:14:76:17:87:
                    88:07:70:fa:a2:d6:1b:d4:15:21:b0:d1:a7:54:16:
                    b7:9d:4f:c8:e2:4d:e3:f3:d2:38:37:18:24:c0:7f:
                    38:b6:31:97:2c:e3:b2:00:db:32:74:20:90:6a:62:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:17:C3:3E:43:A5:A0:BB:A5:C1:74:E4:D5:61:A3:97:E1:08:16:4C
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:da:16:c4:9a:55:54:62:4b:5c:1a:81:ae:24:8e:e3:d8:
         7f:67:73:60:6c:6f:f0:08:4e:c0:67:3a:20:1e:3f:0e:dc:bb:
         ac:65:79:20:ab:da:38:17:60:a6:49:26:64:58:0a:29:34:ca:
         1e:e7:8f:8a:f0:33:e8:25:e4:f3:15:d2:d6:64:1b:bf:9a:86:
         6b:8b:9d:1d:08:fa:ac:05:7e:c5:96:66:79:b5:37:86:ca:e3:
         59:3d:f5:5c:c9:55:f9:ad:4a:81:dc:db:09:ae:b9:86:5a:ef:
         58:9d:64:a9:ba:2c:bf:bf:18:93:79:fd:d4:56:c2:c6:de:83:
         b7:91:ea:e2:3b:e0:b4:6f:d3:9f:5c:f9:70:92:73:d9:94:a0:
         b4:d1:f9:5f:0f:59:4c:60:df:e7:b3:76:1a:46:4f:c9:a9:c8:
         56:5b:37:ec:74:72:7a:04:d8:e5:e4:2a:d0:7f:b4:5a:b7:d6:
         cd:30:c3:d5:3f:58:89:16:91:b9:61:57:45:32:83:27:90:c8:
         85:af:50:85:f5:0b:c3:03:52:aa:7f:90:a2:81:87:3b:cb:e7:
         c2:c9:91:c7:99:b0:9f:54:3a:d5:9c:5a:a7:17:93:34:41:0a:
         3a:74:99:2f:65:e3:e7:db:9a:ad:20:11:16:d5:b4:71:4d:44:
         f6:cf:eb:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUB/VvG1cf3YkJNYJZhM8mzj1NhJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMEVDQzQzMzYzNjkwRjcyRjk0OUQ2MTFFRTYyRENG
ODk0MjU2ODAeFw0yNTEyMDUxNDA0MTFaFw0yNTEyMDYxNTEzMTFaMDMxMTAvBgNV
BAMTKEJBMTdDMzNFNDNBNUEwQkJBNUMxNzRFNEQ1NjFBMzk3RTEwODE2NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHvcww4+uREruHm5uXded3yxT
u24WDP2Trb+5lTqMM3apKjKDIx2orqgRxGC8d4qfnXtg4SeEEWTNSaWhm4msvP7V
O3+lgzqhZChsz6jve6AesejLNQ4TmOR+lxsL3CAczfoWsbmegE2xRe/hmBFneOIX
sW4zT6EJ+0hFP2Ltiu+lHR6ZpvU2DEIeZvaFKgEOMpTCxS3xHEZU9ckFnU1VsZuM
0dV8t9IpdN1IDLLeZ0aGSHsPe/zRqVTM5Js6oY9jGcrHrro4ohjFMsqOFHYXh4gH
cPqi1hvUFSGw0adUFredT8jiTePz0jg3GCTAfzi2MZcs47IA2zJ0IJBqYkYjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuhfDPkOloLulwXTk1WGjl+EIFkwwHwYDVR0j
BBgwFoAUs8DsxDNjaQ9y+UnWEe5i3PiUJWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3Jt
V3kvMC9CM0MwRUNDNDMzNjM2OTBGNzJGOTQ5RDYxMUVFNjJEQ0Y4OTQyNTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzBFQ0M0MzM2MzY5MEY3
MkY5NDlENjExRUU2MkRDRjg5NDI1NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3JtV3kvMC9C
M0MwRUNDNDMzNjM2OTBGNzJGOTQ5RDYxMUVFNjJEQ0Y4OTQyNTY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhI/aFsSaVVRiS1waga4kjuPYf2dzYGxv8AhOwGc6IB4/Dty7rGV5IKvaOBdg
pkkmZFgKKTTKHuePivAz6CXk8xXS1mQbv5qGa4udHQj6rAV+xZZmebU3hsrjWT31
XMlV+a1KgdzbCa65hlrvWJ1kqbosv78Yk3n91FbCxt6Dt5Hq4jvgtG/Tn1z5cJJz
2ZSgtNH5Xw9ZTGDf57N2GkZPyanIVls37HRyegTY5eQq0H+0WrfWzTDD1T9YiRaR
uWFXRTKDJ5DIha9QhfULwwNSqn+QooGHO8vnwsmRx5mwn1Q61ZxapxeTNEEKOnSZ
L2Xj59uarSARFtW0cU1E9s/rNw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:10 2025 by rpki-client