This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
File:                     3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json)
Hash identifier:          rSYkORA/EwX0+i41XRyhX+u9AhGC0cRXvpweTiTEMb8=
Subject key identifier:   6F:B3:35:15:33:43:9E:F0:48:F0:C3:83:E8:F2:D6:06:8E:C3:BF:BE
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Certificate issuer:       /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial:       723EABE4F4DB6AFD6160CF85EA4C124026FCF22D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
Manifest number:          0333
Signing time:             Sat 06 Dec 2025 16:57:35 +0000
Manifest this update:     Sat 06 Dec 2025 16:52:35 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:35 +0000
Files and hashes:         1: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=)
                          2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: xTHROcTG7YGbHWexBHgd2cxC7S3+hPxwHuU5zonJuYo=)
                          3: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
                          rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 19:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3e:ab:e4:f4:db:6a:fd:61:60:cf:85:ea:4c:12:40:26:fc:f2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Validity
            Not Before: Dec  6 16:52:35 2025 GMT
            Not After : Dec  7 19:02:35 2025 GMT
        Subject: CN=6FB3351533439EF048F0C383E8F2D6068EC3BFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:0f:83:8f:eb:a2:7c:3b:c7:c2:88:26:73:
                    55:a9:f3:22:c5:56:25:fc:d3:da:48:a9:b2:2b:44:
                    c4:5f:73:3d:1e:68:c0:e5:aa:64:e5:ec:ec:07:5d:
                    47:13:1d:d0:70:59:96:3a:90:51:2c:32:00:6d:9e:
                    58:ab:3a:f6:10:4f:3a:78:dc:8d:95:e7:5f:0f:ad:
                    94:8c:0e:c9:0e:76:fe:bc:a4:cb:45:79:3a:22:99:
                    aa:bb:50:7c:6b:3b:2f:02:86:13:bb:78:65:99:dc:
                    59:05:10:e2:78:d3:e8:d6:f7:da:de:2c:2e:13:79:
                    7c:9e:b6:1c:ab:7a:1f:1d:c1:50:aa:6e:d7:3a:30:
                    6c:2b:bb:dd:68:b5:20:2b:4e:ac:0a:fe:e9:26:fd:
                    aa:14:6c:6d:ed:1c:89:21:1f:51:d6:a0:2f:41:39:
                    c7:71:fd:c7:a4:84:f0:6d:c8:fe:18:17:92:f0:d7:
                    e1:34:24:8a:b7:2d:c0:da:cd:26:5d:8b:43:8f:13:
                    50:61:f0:28:c3:df:59:d0:f0:4c:8f:82:29:39:d4:
                    63:ff:e5:71:a3:fd:3b:f5:5b:6b:fe:a3:b8:c5:09:
                    d3:01:f6:15:a4:3c:30:c6:73:ea:ab:71:93:22:79:
                    98:ff:1e:a0:d6:f0:31:4c:29:b6:42:cb:0b:a1:f3:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:35:15:33:43:9E:F0:48:F0:C3:83:E8:F2:D6:06:8E:C3:BF:BE
            X509v3 Authority Key Identifier:
                keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:88:97:d6:0f:a8:31:6b:8e:22:84:3e:10:36:8d:24:ac:
         e7:1a:7b:21:e0:0d:89:1b:62:68:62:9a:ae:b9:9a:1c:a8:69:
         9a:0e:1c:e7:77:ed:15:89:0e:47:60:4e:7a:b7:ad:6d:05:55:
         ac:14:2a:b5:c4:3c:98:6a:d7:dc:b0:ca:e0:13:c5:f6:8c:5a:
         0a:a1:67:b1:00:3e:fc:f6:4d:29:64:e7:cc:d0:63:f1:51:51:
         f7:49:a4:0f:a5:04:4e:e8:6f:7f:1b:77:3e:28:ba:48:ee:b2:
         fe:d8:8d:23:3c:0e:28:7f:5c:eb:c6:f4:57:d3:4d:bd:ee:eb:
         65:62:69:6a:dc:25:71:03:30:e4:34:b2:8e:72:f9:ab:31:54:
         c5:61:41:9a:dc:68:20:f9:40:9a:c4:50:d2:38:d9:5e:c8:71:
         b8:01:d5:0c:c6:54:68:bf:5f:30:85:8d:13:77:1d:d3:d4:f1:
         1b:57:ae:e9:f8:6b:cf:e0:fe:e9:15:b3:a7:60:2d:bc:e8:ce:
         d7:c4:3e:ad:97:76:68:79:bf:d0:59:c6:6a:83:0a:a2:f8:06:
         4b:4f:6b:51:cb:62:9a:8f:29:f5:09:87:61:00:dc:c0:56:58:
         b1:20:ca:c8:12:d3:20:e6:62:f1:e0:8c:da:57:0f:49:0b:76:
         6c:c0:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:12 2025 by rpki-client