This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft
File:                     425279A675F326D0577BF774BBB20A14508381AD.mft (raw, json)
Hash identifier:          13CyM2593Kg2WiXA5vOEmNPX3utovjjD3KaLh9Qq55M=
Subject key identifier:   BA:43:6A:41:76:09:86:8C:F9:98:E3:59:C9:0D:9D:D4:11:C1:A2:B8
Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD
Certificate issuer:       /CN=425279A675F326D0577BF774BBB20A14508381AD
Certificate serial:       5B933BD2482AC51973ADC302EE0BA22002B95B18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft
Manifest number:          032A
Signing time:             Fri 05 Dec 2025 18:08:35 +0000
Manifest this update:     Fri 05 Dec 2025 18:03:35 +0000
Manifest next update:     Sat 06 Dec 2025 21:38:35 +0000
Files and hashes:         1: 3138392e35302e34382e302f32322d3234203d3e203238333236.roa (hash: mNHi88NZLBtau030tdBn9V/OmWy/tYOVyhjXlqlljXs=)
                          2: 425279A675F326D0577BF774BBB20A14508381AD.crl (hash: wFRYOwN1mThiGGD1TXnRHifNs5ZvNmDYImTTOSGMd7E=)
                          3: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (hash: 0+SKyRuS8vJuXq7MWE/epWSyK2AeWtwCEDU99XSAo6E=)
                          4: 3138392e35302e34302e302f32312d3234203d3e203238333236.roa (hash: kDpmKtJF4mGWfac+atxrTauaGW3uTc73uitca/OTWLI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl
                          rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:93:3b:d2:48:2a:c5:19:73:ad:c3:02:ee:0b:a2:20:02:b9:5b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD
        Validity
            Not Before: Dec  5 18:03:35 2025 GMT
            Not After : Dec  6 21:38:35 2025 GMT
        Subject: CN=BA436A417609868CF998E359C90D9DD411C1A2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:1c:82:ec:bc:84:4c:6f:72:9f:20:61:38:
                    15:e9:88:65:7e:fa:b9:aa:aa:a6:b4:6d:e8:41:89:
                    38:3f:3c:fe:ba:eb:2d:a5:09:18:28:47:df:4a:ac:
                    2a:82:ba:13:86:23:36:35:2d:df:7d:bf:8a:c8:bf:
                    58:44:2f:44:5b:3b:c2:b0:ca:d3:23:a6:39:1f:c2:
                    f1:75:4e:5b:4b:8d:0a:23:77:3b:2a:2f:89:e1:0f:
                    69:3c:91:e4:df:6d:53:d3:6b:ee:5b:bd:18:73:7c:
                    c1:e6:e2:2b:38:9c:07:37:05:d5:1e:65:c5:92:60:
                    03:8a:2e:74:4c:1c:03:8f:ba:4b:23:5c:3d:92:e7:
                    df:94:35:05:49:8a:32:ef:ff:3f:47:d1:cf:39:5b:
                    53:20:3e:be:5c:89:25:58:9c:cf:73:c0:92:2f:dc:
                    9e:f1:27:ea:76:af:ce:25:aa:55:1a:10:ea:30:f8:
                    d8:44:29:bf:30:15:df:f4:f8:6f:3f:7f:26:6b:3d:
                    5b:78:41:6f:bc:8e:c4:c7:38:39:1a:92:12:3d:c5:
                    d5:58:bb:8a:dc:f7:f9:b0:9b:04:23:38:89:f1:df:
                    c6:7c:19:98:1f:d7:d0:e1:19:04:a7:b8:01:9a:90:
                    0e:31:1a:77:09:4b:a7:ea:8a:f5:82:54:e9:7b:41:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:43:6A:41:76:09:86:8C:F9:98:E3:59:C9:0D:9D:D4:11:C1:A2:B8
            X509v3 Authority Key Identifier:
                keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a3:ed:d4:73:be:6a:e4:4e:d5:2e:2f:92:91:6b:41:64:a4:
         d2:24:54:1c:e0:94:01:d8:dc:db:65:70:48:81:d5:e4:fd:b3:
         b2:82:cd:31:64:ed:fd:75:64:f6:8c:6e:c7:67:bc:69:15:7d:
         20:22:1f:5d:4c:c3:8e:41:b9:49:e1:97:8f:a4:ec:0b:2f:33:
         c2:e5:91:ce:99:ca:44:c2:0b:59:6a:5e:bc:1a:3e:cb:8f:52:
         1c:fa:64:b0:f1:bc:68:8d:f5:c6:0b:90:c4:a6:a1:b6:02:df:
         95:f2:42:fe:17:16:2b:f5:59:d5:fc:29:e0:f7:b6:50:96:a2:
         c1:c1:a1:5e:67:52:ca:cd:c1:1f:3a:c3:0d:a7:ec:ac:2b:b0:
         01:08:e0:c4:e9:ea:7f:1e:17:fb:ac:7f:74:cc:50:29:9d:e9:
         60:f9:02:1a:63:d8:f4:a9:93:54:7a:b7:14:3f:db:9b:1e:6d:
         dd:c0:b7:2c:d0:96:1f:fc:c2:14:5f:9a:ac:9c:eb:22:16:b2:
         55:f3:7e:0a:3d:6f:d0:82:7d:ca:db:b1:be:05:6a:70:61:47:
         a5:5f:30:6b:e9:f0:cd:de:b9:09:c3:02:1d:9f:60:da:8a:7b:
         69:3a:27:6f:3a:b4:0f:91:de:30:3b:35:d5:0e:65:59:9d:b6:
         33:5f:a0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:27:26 2025 by rpki-client