This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
File:                     22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft (raw, json)
Hash identifier:          mLEJ1AqzOL8vUMMDTmbDrs4f1vqBOpTX3bJidUIISSA=
Subject key identifier:   EA:FD:53:D6:9A:31:B7:01:8A:BE:7D:05:3F:3E:47:C5:80:C5:35:32
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       4C49D0A1E9122F4A5CA00366A617D50CC906555B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
Manifest number:          32
Signing time:             Sat 06 Dec 2025 11:05:22 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:22 +0000
Manifest next update:     Sun 07 Dec 2025 15:02:22 +0000
Files and hashes:         1: 3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (hash: 9xv9gmzfO9NoJtk1BW70remD0QwTKEs+0p+Es1C5pKw=)
                          2: 323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa (hash: NOi/sSvvsUXCTqj2NHI7zgCR++/jEaSrppvbZUH4VZg=)
                          3: 323830343a333336343a3a2f33322d3332203d3e20323635333933.roa (hash: XEgnP2B6Yrit5DADHFdBaWJQDcP6jKpMIXaNn5ljCjE=)
                          4: 3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (hash: 1dhXS1FFlvJEQS14xAqiKucmZ1vu3cAPiUysxFtMX0E=)
                          5: 323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (hash: 9x9JKVP+HdoDExBQQTPmYtRUlGgNjsBVMR3r/BbHRjc=)
                          6: 323830343a333336343a3430303a3a2f34302d3430203d3e20323635333933.roa (hash: MsmqnndlvLJkZyFrtkhdBJG0wG/9ocB3ZSMfM+TD6mc=)
                          7: 323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa (hash: mnhUtMeSbnhGWe3IfVuSohQjyISvqCrE7WtANWRKo58=)
                          8: 3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa (hash: ngUr4jLkiA15t1n2/cVGBZUxJLYytsRX3kNJebckvnA=)
                          9: 3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa (hash: D7p/XF1Sb5M/73BzDCi4sCyGUYbfrDw83aKMKoOQ0Fg=)
                          10: 323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa (hash: LvmrU2Sfdi+2GpcbG4K6bKlKW5ibycUeB/rbUnC4438=)
                          11: 22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl (hash: YJDmAbW34Q/yJaomuj/gWiskADPM8y3FTYCT2FEnSPc=)
                          12: 3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (hash: IF6Ed7Y3aPcZbdwGtRP/Cgd9kcm7PhSPpVTxMnYWvOQ=)
                          13: 323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa (hash: h7GzGk2t7cQjlWAk5BhfduhHtkZ87HP76EywqlAwYvw=)
                          14: 323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (hash: KHutm+BmQ/8CdyK2xqtN3MAK8/3qNxBvG+5pyeHe8l0=)
                          15: 3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (hash: XUTuJ7uEneoHFomzG9FUL6wIWCLB29GFJslND9eI5E8=)
                          16: 3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (hash: htzHUUh4GtVoA10oDEZa0ofp3Cw8wDhlfcq+ZUyPRso=)
                          17: 323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa (hash: hED5A0CQHaQtuwkBTsNZjgmMFtrBEACdmZKrAXVIQn8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:49:d0:a1:e9:12:2f:4a:5c:a0:03:66:a6:17:d5:0c:c9:06:55:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Dec  6 11:00:22 2025 GMT
            Not After : Dec  7 15:02:22 2025 GMT
        Subject: CN=EAFD53D69A31B7018ABE7D053F3E47C580C53532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:6c:df:eb:77:a0:de:6a:23:45:06:4e:e9:
                    46:7d:7b:2c:0a:c7:1a:bd:e8:63:8f:84:e7:42:35:
                    f7:69:16:05:3d:18:cb:2e:0d:06:57:6a:f7:f0:5a:
                    b1:46:d9:fc:87:4b:d7:b6:b8:4a:45:da:e2:8d:e8:
                    c9:cf:34:8f:3f:d4:4f:59:e9:64:e7:9f:ef:1f:d4:
                    a6:91:f1:cd:29:87:8c:ff:21:9e:26:b0:ed:4d:c4:
                    93:62:1f:08:c7:8f:73:7b:12:bf:b7:fb:91:d6:c1:
                    7b:e6:53:ec:78:15:2f:c5:01:4d:93:de:0f:76:ca:
                    61:72:fb:45:72:2a:95:9e:18:fb:27:f8:06:1f:23:
                    53:94:a9:9c:e7:bb:c6:78:d8:1c:91:9b:52:55:f5:
                    75:6e:cb:40:a4:24:16:8a:bd:ef:90:37:3b:04:cf:
                    68:66:85:e9:ae:a1:80:8a:14:bc:59:2d:4d:ec:77:
                    c5:a1:6a:41:53:4a:65:ca:4c:0e:1e:45:7c:37:a2:
                    74:09:5f:e2:c8:f5:63:65:d3:9c:a4:60:10:bd:bf:
                    d5:db:d8:1b:05:d5:97:86:14:46:39:ea:7e:33:9d:
                    60:9a:b0:78:a5:ef:4d:e6:55:41:4c:04:8a:af:af:
                    f8:18:e4:82:e2:d8:7d:8a:ee:4d:a6:b8:d4:4a:36:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FD:53:D6:9A:31:B7:01:8A:BE:7D:05:3F:3E:47:C5:80:C5:35:32
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8f:bb:f7:32:0b:30:c4:18:1f:e7:01:44:2b:2a:ee:6b:12:
         0c:3f:be:90:2b:7b:c2:c5:9b:0b:72:d9:76:6c:ca:45:d2:49:
         e7:0d:27:06:eb:98:6e:f8:01:90:20:42:4a:f7:42:bc:37:99:
         aa:16:c2:97:03:db:5f:df:e3:8d:7a:78:4d:1d:f9:2a:a1:36:
         04:f5:ec:67:12:4b:b4:2d:76:7a:5f:c9:28:0c:3f:64:1f:69:
         c0:7c:e2:93:df:66:8d:11:f2:d9:e8:ad:60:4c:62:84:2a:25:
         0b:da:8b:b4:78:cd:31:a0:d4:6d:80:62:18:e6:f5:a1:21:5d:
         cd:67:73:da:80:1d:c7:19:d8:d9:6a:dc:33:0e:bd:94:08:5c:
         8f:2c:95:86:ee:8e:88:f7:7a:c1:e2:39:91:87:8d:78:64:0f:
         c6:af:4c:45:f3:a9:ac:e7:c1:18:8b:12:c8:e8:23:00:0a:e8:
         be:05:87:90:37:5e:36:1e:e8:1e:74:15:72:13:c8:1b:7f:38:
         e2:e1:1b:f0:5f:f3:56:21:3d:dc:b6:c2:23:75:00:e9:a3:eb:
         16:1b:12:34:0a:4c:b4:84:0b:84:2c:44:55:e0:55:aa:3a:9a:
         bc:04:4c:e9:4c:4b:d7:48:d6:e1:45:a3:43:3d:1e:c7:f0:29:
         11:52:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:31:58 2025 by rpki-client