This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
File:                     C37D443ACE2088B9542008EA9127A8D95802391D.mft (raw, json)
Hash identifier:          TejCLACzfsIBfU4sh6d75prWrqcUo1LEHek+skE2jMk=
Subject key identifier:   FB:5A:0D:62:79:79:36:B9:11:6E:BE:F9:AC:DB:22:EA:B8:53:B8:89
Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
Certificate issuer:       /CN=C37D443ACE2088B9542008EA9127A8D95802391D
Certificate serial:       06EDD4ED83D4AD123772E9091F2DC68D2D4BB47B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
Manifest number:          022F
Signing time:             Sat 06 Dec 2025 12:52:29 +0000
Manifest this update:     Sat 06 Dec 2025 12:47:29 +0000
Manifest next update:     Sun 07 Dec 2025 14:04:29 +0000
Files and hashes:         1: 323830343a356637633a3a2f33322d313238203d3e20323639313033.roa (hash: VUl2KBji/uPkr1rCYeNPvvVxSbxK6F6y7JqVOXB6tUs=)
                          2: C37D443ACE2088B9542008EA9127A8D95802391D.crl (hash: YJaMICHMwW47Hk+jSJrMILl/IB/oRcw1sixVUVtjF8Q=)
                          3: 34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa (hash: 5BGiFOtUcqQZiGFluG3W3mqHyrCNrFQCh5StfotlU5Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl
                          rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ed:d4:ed:83:d4:ad:12:37:72:e9:09:1f:2d:c6:8d:2d:4b:b4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D
        Validity
            Not Before: Dec  6 12:47:29 2025 GMT
            Not After : Dec  7 14:04:29 2025 GMT
        Subject: CN=FB5A0D62797936B9116EBEF9ACDB22EAB853B889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f3:b1:ac:3a:b8:ea:cd:d5:d0:1b:fa:20:41:
                    5e:af:61:35:83:f4:8e:16:1f:d6:4f:cf:60:9b:0e:
                    9b:3f:8e:3e:a7:9e:48:5a:88:70:64:1e:fc:82:6f:
                    33:6b:d1:cb:a5:a3:de:f8:09:47:fd:40:67:35:29:
                    f5:b7:c4:94:94:57:14:26:18:db:86:b8:c7:24:3b:
                    c8:2b:0c:3c:2e:60:43:75:2c:42:7d:cd:c8:7e:47:
                    60:c0:13:62:a7:d8:2a:19:ed:8b:d4:db:38:d0:49:
                    4b:57:f5:85:ad:2f:46:36:65:32:15:58:a8:92:1f:
                    24:c4:f6:a1:e3:6b:64:e4:7d:3a:14:d5:c1:c3:bc:
                    c9:2d:8b:05:6d:57:3b:54:19:42:55:f9:8e:f2:a0:
                    72:44:cc:bd:d2:ec:4a:62:4b:8a:4d:87:d5:ba:c8:
                    76:66:7f:da:c8:1c:dc:7c:01:b2:f7:d8:6e:10:9f:
                    e5:d2:2d:9a:7f:76:73:70:3b:d9:6a:e2:65:44:0e:
                    ca:3c:a6:67:a3:b8:df:1a:18:99:e7:e1:0f:05:bd:
                    52:65:52:f2:25:0c:67:1c:0a:2a:1d:eb:a7:99:0e:
                    f9:63:5d:a0:92:db:c5:25:bf:ee:f9:77:19:d1:37:
                    d3:37:cf:36:34:e1:91:8f:4d:6b:bd:55:0f:94:13:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:0D:62:79:79:36:B9:11:6E:BE:F9:AC:DB:22:EA:B8:53:B8:89
            X509v3 Authority Key Identifier:
                keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:85:d1:bd:68:5f:3a:43:fc:37:7a:57:fd:31:ad:7d:7b:f4:
         fa:ee:37:25:58:8e:35:39:14:f6:3c:df:19:f8:40:a1:21:98:
         d0:63:ff:7c:54:f2:a8:4f:09:ce:c7:c3:a6:63:e1:6a:a2:19:
         6d:0b:d2:3b:41:6a:9d:62:13:68:60:e6:60:65:d1:59:4d:44:
         b5:e3:e1:d1:cd:40:bb:44:08:26:b3:de:50:26:54:06:19:c9:
         b0:a5:bb:66:a8:9c:5e:55:3a:4d:2b:64:32:29:7e:5f:40:39:
         f5:bc:83:46:57:59:17:fc:0c:69:64:2c:b9:de:2e:b7:46:96:
         96:a7:aa:57:4b:72:02:28:b5:77:db:48:82:00:93:fb:2f:26:
         34:c3:29:b7:20:53:31:1d:4a:b2:7d:b1:d0:4c:30:7e:e6:e7:
         a4:56:ee:2b:e9:9f:fd:f9:00:ca:7a:f7:c5:46:33:fa:25:98:
         00:20:5e:6e:9b:70:e9:81:d9:1d:2d:2f:8c:4e:95:30:74:b4:
         c0:ae:44:c4:6c:0f:e2:72:87:81:12:eb:cb:f3:86:77:50:8e:
         be:98:75:8e:a8:c8:84:c3:69:d4:ae:6b:65:05:dd:e7:bf:e1:
         e8:f1:ab:a0:4f:eb:f3:40:89:4c:be:e1:ab:7e:e1:40:ad:89:
         9b:0f:74:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBu3U7YPUrRI3cukJHy3GjS1LtHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3RDQ0M0FDRTIwODhCOTU0MjAwOEVBOTEyN0E4RDk1
ODAyMzkxRDAeFw0yNTEyMDYxMjQ3MjlaFw0yNTEyMDcxNDA0MjlaMDMxMTAvBgNV
BAMTKEZCNUEwRDYyNzk3OTM2QjkxMTZFQkVGOUFDREIyMkVBQjg1M0I4ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe87GsOrjqzdXQG/ogQV6vYTWD
9I4WH9ZPz2CbDps/jj6nnkhaiHBkHvyCbzNr0culo974CUf9QGc1KfW3xJSUVxQm
GNuGuMckO8grDDwuYEN1LEJ9zch+R2DAE2Kn2CoZ7YvU2zjQSUtX9YWtL0Y2ZTIV
WKiSHyTE9qHja2TkfToU1cHDvMktiwVtVztUGUJV+Y7yoHJEzL3S7EpiS4pNh9W6
yHZmf9rIHNx8AbL32G4Qn+XSLZp/dnNwO9lq4mVEDso8pmejuN8aGJnn4Q8FvVJl
UvIlDGccCiod66eZDvljXaCS28Ulv+75dxnRN9M3zzY04ZGPTWu9VQ+UE98PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+1oNYnl5NrkRbr75rNsi6rhTuIkwHwYDVR0j
BBgwFoAUw31EOs4giLlUIAjqkSeo2VgCOR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkM4ZlBmVDZNVkZtTWp3V0JQMk5CM0xrYm81M0RLOTM5ZFlram5TQk02
c3UvMC9DMzdENDQzQUNFMjA4OEI5NTQyMDA4RUE5MTI3QThEOTU4MDIzOTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzN0Q0NDNBQ0UyMDg4Qjk1
NDIwMDhFQTkxMjdBOEQ5NTgwMjM5MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkM4ZlBmVDZNVkZtTWp3V0JQMk5CM0xrYm81M0RLOTM5ZFlram5TQk02c3UvMC9D
MzdENDQzQUNFMjA4OEI5NTQyMDA4RUE5MTI3QThEOTU4MDIzOTFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJYXRvWhfOkP8N3pX/TGtfXv0+u43JViONTkU9jzfGfhAoSGY0GP/fFTyqE8J
zsfDpmPhaqIZbQvSO0FqnWITaGDmYGXRWU1EtePh0c1Au0QIJrPeUCZUBhnJsKW7
ZqicXlU6TStkMil+X0A59byDRldZF/wMaWQsud4ut0aWlqeqV0tyAii1d9tIggCT
+y8mNMMptyBTMR1Ksn2x0EwwfubnpFbuK+mf/fkAynr3xUYz+iWYACBebptw6YHZ
HS0vjE6VMHS0wK5ExGwP4nKHgRLry/OGd1COvph1jqjIhMNp1K5rZQXd57/h6PGr
oE/r80CJTL7hq37hQK2Jmw90pg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:52:29 2025 by rpki-client