This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
File:                     3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json)
Hash identifier:          KIrwKyRNWyz8Ppk433KMMUafCG2AGZ4Gfx/op1cEaAk=
Subject key identifier:   CC:BC:05:71:EF:21:06:00:9E:68:60:43:24:EC:49:B2:7A:71:03:46
Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA
Certificate issuer:       /CN=3895E2089A93A58E1062DE9612B321CA505C51FA
Certificate serial:       28699F443020E8E50EC220E46DC4D95FC387A429
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
Manifest number:          0395
Signing time:             Sat 06 Dec 2025 08:54:00 +0000
Manifest this update:     Sat 06 Dec 2025 08:49:00 +0000
Manifest next update:     Sun 07 Dec 2025 08:54:00 +0000
Files and hashes:         1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: +aovHtk9f+ijQ57/pDijKZOwhYDBqo0pmz11E513GB8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl
                          rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:69:9f:44:30:20:e8:e5:0e:c2:20:e4:6d:c4:d9:5f:c3:87:a4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA
        Validity
            Not Before: Dec  6 08:49:00 2025 GMT
            Not After : Dec 13 08:54:00 2025 GMT
        Subject: CN=3082010A0282010100C5A6A3B597F65A5122C534F4D1A62D3D21F743C72F81FA6BECCA1B43B07F1ABCD152C8380AC2F38B72A4A084DDD670F555467963D831F2741D7377C65119360CB71936EE4AEA5615272DAC3527CCBFC78D00B07D1416FD2E1297608D69BE30816C0031BA6051C0F7CA12EC96EC923DC97E559F6E154C5BAECAC4D5B84916A293CE64990CCB572E1CC2E5E2B825079766627435C4AC56D0EC0C26182D0EA909E41DC8AF4842B456187AF3313DE1DCAB16F4F945EB911C8349270C4BD4EF0FEC659D7E631889D9CED770F2D71B6D778442111DEF83CFE1621F20166B54759F87E629C65C0632AB57758AAA7693912D15EA43F44DD4012235A217526AB1E4CEAE210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:a3:b5:97:f6:5a:51:22:c5:34:f4:d1:a6:
                    2d:3d:21:f7:43:c7:2f:81:fa:6b:ec:ca:1b:43:b0:
                    7f:1a:bc:d1:52:c8:38:0a:c2:f3:8b:72:a4:a0:84:
                    dd:d6:70:f5:55:46:79:63:d8:31:f2:74:1d:73:77:
                    c6:51:19:36:0c:b7:19:36:ee:4a:ea:56:15:27:2d:
                    ac:35:27:cc:bf:c7:8d:00:b0:7d:14:16:fd:2e:12:
                    97:60:8d:69:be:30:81:6c:00:31:ba:60:51:c0:f7:
                    ca:12:ec:96:ec:92:3d:c9:7e:55:9f:6e:15:4c:5b:
                    ae:ca:c4:d5:b8:49:16:a2:93:ce:64:99:0c:cb:57:
                    2e:1c:c2:e5:e2:b8:25:07:97:66:62:74:35:c4:ac:
                    56:d0:ec:0c:26:18:2d:0e:a9:09:e4:1d:c8:af:48:
                    42:b4:56:18:7a:f3:31:3d:e1:dc:ab:16:f4:f9:45:
                    eb:91:1c:83:49:27:0c:4b:d4:ef:0f:ec:65:9d:7e:
                    63:18:89:d9:ce:d7:70:f2:d7:1b:6d:77:84:42:11:
                    1d:ef:83:cf:e1:62:1f:20:16:6b:54:75:9f:87:e6:
                    29:c6:5c:06:32:ab:57:75:8a:aa:76:93:91:2d:15:
                    ea:43:f4:4d:d4:01:22:35:a2:17:52:6a:b1:e4:ce:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:05:71:EF:21:06:00:9E:68:60:43:24:EC:49:B2:7A:71:03:46
            X509v3 Authority Key Identifier:
                keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:72:aa:f4:55:e8:44:98:28:cd:d9:cc:8f:2d:8d:ad:88:58:
         65:b2:06:5b:63:93:cb:27:c2:87:82:16:71:7b:ca:3f:36:9c:
         55:c4:e0:c6:b7:18:2d:2b:89:64:62:dd:83:bf:12:b9:d0:9a:
         94:8c:1a:f4:f3:d8:6c:37:5a:2a:25:b0:ab:98:03:cb:f8:34:
         3a:9a:c1:29:3b:8d:05:f1:6b:64:54:f6:02:a9:6b:17:af:ab:
         ea:dd:02:67:ce:6a:02:7b:38:35:bd:13:c3:57:09:84:88:3d:
         a1:9c:0e:86:ec:78:d6:3e:8c:51:c5:cb:61:6b:8e:c6:60:55:
         13:39:ae:91:27:6d:2d:7d:b0:6d:04:fb:d3:21:41:f4:6f:4a:
         00:e9:63:f5:a9:2a:7f:cf:6d:6e:da:26:18:e8:ea:49:0c:4e:
         4f:b5:16:8b:f1:15:ff:00:55:30:61:75:2f:9d:70:54:07:8a:
         bf:22:d4:d6:e3:3a:27:bf:14:b1:60:51:35:87:39:86:af:cd:
         68:da:28:f4:1e:ca:76:d5:59:85:34:c7:0c:f2:12:7a:1f:1d:
         54:12:8b:ea:ac:99:e0:0f:db:12:50:86:90:c6:2d:e0:3e:f4:
         a8:dd:00:b0:0c:8b:da:06:12:ab:48:6f:71:db:dc:bf:98:25:
         10:a0:36:b1
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUKGmfRDAg6OUOwiDkbcTZX8OHpCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5NUUyMDg5QTkzQTU4RTEwNjJERTk2MTJCMzIxQ0E1
MDVDNTFGQTAeFw0yNTEyMDYwODQ5MDBaFw0yNTEyMTMwODU0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVBNkEzQjU5N0Y2NUE1MTIy
QzUzNEY0RDFBNjJEM0QyMUY3NDNDNzJGODFGQTZCRUNDQTFCNDNCMDdGMUFCQ0Qx
NTJDODM4MEFDMkYzOEI3MkE0QTA4NERERDY3MEY1NTU0Njc5NjNEODMxRjI3NDFE
NzM3N0M2NTExOTM2MENCNzE5MzZFRTRBRUE1NjE1MjcyREFDMzUyN0NDQkZDNzhE
MDBCMDdEMTQxNkZEMkUxMjk3NjA4RDY5QkUzMDgxNkMwMDMxQkE2MDUxQzBGN0NB
MTJFQzk2RUM5MjNEQzk3RTU1OUY2RTE1NEM1QkFFQ0FDNEQ1Qjg0OTE2QTI5M0NF
NjQ5OTBDQ0I1NzJFMUNDMkU1RTJCODI1MDc5NzY2NjI3NDM1QzRBQzU2RDBFQzBD
MjYxODJEMEVBOTA5RTQxREM4QUY0ODQyQjQ1NjE4N0FGMzMxM0RFMURDQUIxNkY0
Rjk0NUVCOTExQzgzNDkyNzBDNEJENEVGMEZFQzY1OUQ3RTYzMTg4OUQ5Q0VENzcw
RjJENzFCNkQ3Nzg0NDIxMTFERUY4M0NGRTE2MjFGMjAxNjZCNTQ3NTlGODdFNjI5
QzY1QzA2MzJBQjU3NzU4QUFBNzY5MzkxMkQxNUVBNDNGNDRERDQwMTIyMzVBMjE3
NTI2QUIxRTRDRUFFMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxaajtZf2WlEixTT00aYtPSH3Q8cvgfpr7MobQ7B/GrzRUsg4CsLz
i3KkoITd1nD1VUZ5Y9gx8nQdc3fGURk2DLcZNu5K6lYVJy2sNSfMv8eNALB9FBb9
LhKXYI1pvjCBbAAxumBRwPfKEuyW7JI9yX5Vn24VTFuuysTVuEkWopPOZJkMy1cu
HMLl4rglB5dmYnQ1xKxW0OwMJhgtDqkJ5B3Ir0hCtFYYevMxPeHcqxb0+UXrkRyD
SScMS9TvD+xlnX5jGInZztdw8tcbbXeEQhEd74PP4WIfIBZrVHWfh+YpxlwGMqtX
dYqqdpORLRXqQ/RN1AEiNaIXUmqx5M6uIQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FMy8BXHvIQYAnmhgQyTsSbJ6cQNGMB8GA1UdIwQYMBaAFDiV4giak6WOEGLelhKz
IcpQXFH6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr
U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4
RTEwNjJERTk2MTJCMzIxQ0E1MDVDNTFGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zODk1RTIwODlBOTNBNThFMTA2MkRFOTYxMkIzMjFDQTUwNUM1
MUZBLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lrU1RGVGhZ
QXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4RTEwNjJE
RTk2MTJCMzIxQ0E1MDVDNTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGFyqvRV6ESYKM3ZzI8tja2I
WGWyBltjk8snwoeCFnF7yj82nFXE4Ma3GC0riWRi3YO/ErnQmpSMGvTz2Gw3Wiol
sKuYA8v4NDqawSk7jQXxa2RU9gKpaxevq+rdAmfOagJ7ODW9E8NXCYSIPaGcDobs
eNY+jFHFy2FrjsZgVRM5rpEnbS19sG0E+9MhQfRvSgDpY/WpKn/PbW7aJhjo6kkM
Tk+1FovxFf8AVTBhdS+dcFQHir8i1NbjOie/FLFgUTWHOYavzWjaKPQeynbVWYU0
xwzyEnofHVQSi+qsmeAP2xJQhpDGLeA+9KjdALAMi9oGEqtIb3Hb3L+YJRCgNrE=
-----END CERTIFICATE-----