This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
File:                     B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft (raw, json)
Hash identifier:          X8Ksjlq2XjhgEPiMqvxIWwfZhxDh/nxUL+8sluobDP0=
Subject key identifier:   6E:83:DA:A9:3F:D8:2E:5A:29:75:FF:E5:02:93:4B:B1:D3:5F:2D:09
Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
Certificate issuer:       /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Certificate serial:       652124F47B6B7CF144D3C3356C04984733ECF7B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
Manifest number:          0342
Signing time:             Sun 21 Dec 2025 09:34:43 +0000
Manifest this update:     Sun 21 Dec 2025 09:29:43 +0000
Manifest next update:     Mon 22 Dec 2025 13:23:43 +0000
Files and hashes:         1: 323830343a336131383a3a2f33322d3334203d3e20323636303730.roa (hash: 5jChHZu/vFi+LLiu8tTfwWKXqbT78LjUfm2ELx1+iX8=)
                          2: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (hash: CImzxX+rkL1rxYW2A+TXCoq1LL7u0k8unKss9z1G3Xo=)
                          3: B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl (hash: WbHOYS7v21yKx7kaaC+WLSMYESu1+cjaWjGukVhIEZw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl
                          rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 13:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:21:24:f4:7b:6b:7c:f1:44:d3:c3:35:6c:04:98:47:33:ec:f7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
        Validity
            Not Before: Dec 21 09:29:43 2025 GMT
            Not After : Dec 22 13:23:43 2025 GMT
        Subject: CN=6E83DAA93FD82E5A2975FFE502934BB1D35F2D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:b8:35:33:ad:78:61:f2:46:d8:51:25:1f:
                    16:5f:f6:8f:01:f8:14:0c:77:f1:bd:68:8f:e3:77:
                    b1:16:cd:37:d0:a4:ab:ce:63:e7:8e:1d:06:92:cb:
                    52:f2:aa:71:e7:4f:9c:00:6c:7b:0e:cc:3a:6c:19:
                    43:d4:5e:86:1e:99:07:88:f7:7c:a2:33:76:ab:ab:
                    43:ab:ac:65:58:43:9a:d2:0e:46:d2:d9:16:95:b1:
                    2a:a1:1d:ec:b6:7a:39:5d:7b:fe:ec:99:71:86:b6:
                    8b:16:e2:cc:dd:9e:72:6d:30:1c:41:4c:7b:89:1a:
                    f6:e5:bc:3a:96:7e:66:88:83:72:31:8f:d4:2f:da:
                    81:4c:3d:81:4f:8d:91:50:c9:14:a8:3e:8a:bd:61:
                    df:25:ae:72:2f:90:ee:31:17:38:f1:40:3a:10:4e:
                    90:ae:84:c5:8c:29:ab:b7:9c:49:44:9c:e9:ad:2a:
                    10:47:14:3a:06:41:ba:6e:4c:0b:aa:8e:7d:f4:97:
                    5c:ed:48:4c:a9:e6:eb:96:8c:a4:47:d8:6b:be:42:
                    01:5a:23:6d:3e:56:e7:d9:71:f0:3d:35:39:c1:85:
                    4e:25:5a:54:43:33:58:70:a1:d6:08:16:6d:cc:06:
                    d3:b9:65:4b:ce:47:79:df:cc:0a:de:47:ca:fe:24:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:DA:A9:3F:D8:2E:5A:29:75:FF:E5:02:93:4B:B1:D3:5F:2D:09
            X509v3 Authority Key Identifier:
                keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:50:d5:0d:ee:a1:bb:83:df:34:cd:93:6b:f9:ba:05:81:
         34:58:68:6b:2e:93:cc:25:6a:00:75:9c:ed:19:c8:2c:4d:b5:
         e8:19:b2:ff:3b:db:79:ed:fc:bf:b8:dc:70:fa:17:c0:88:e6:
         13:14:37:f9:06:53:58:cc:55:49:2c:1e:ac:05:08:c9:a9:9d:
         96:d4:99:db:a0:aa:06:5a:c8:b0:9e:9d:f0:48:0b:9a:3b:d2:
         e0:52:07:fa:57:1e:36:b6:a8:82:8b:27:18:1e:1e:36:2a:4c:
         e1:6e:16:f8:9b:b5:60:98:79:89:da:89:bf:82:35:82:f0:e3:
         40:c3:17:0b:3b:72:7f:92:13:15:b7:17:de:ca:4e:e6:3e:1d:
         5f:0e:18:91:ce:63:e5:55:86:68:9d:67:be:2d:8d:f2:b7:dd:
         c6:80:7d:20:2f:77:ea:ad:fc:80:86:f7:79:2f:86:9d:f1:ab:
         0c:82:f6:33:85:19:b6:b8:6c:fc:e9:24:4f:f9:8f:3b:4b:5a:
         87:00:ff:a0:ea:43:bc:da:28:d2:7d:f1:97:b5:c0:6b:87:19:
         db:b8:f6:0b:f7:c5:74:52:c1:06:ad:4f:26:3e:2f:c5:ec:df:
         c2:89:85:8b:77:77:44:b4:e3:b8:47:ac:84:01:7b:d0:44:a7:
         15:7b:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:55:54 2025 by rpki-client