This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
File:                     1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json)
Hash identifier:          GWiQUkJAGFG83QYu1+XijVchRp1jAtyI7eBkHiR9CdU=
Subject key identifier:   6E:32:35:F4:29:D1:56:86:1C:55:0E:92:F7:EB:1A:7B:0F:D5:3F:65
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       38646D3BE6D42B41A8B263BF3B4608ADC42DF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
Manifest number:          032F
Signing time:             Fri 05 Dec 2025 16:54:09 +0000
Manifest this update:     Fri 05 Dec 2025 16:49:09 +0000
Manifest next update:     Sat 06 Dec 2025 19:17:09 +0000
Files and hashes:         1: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: VvdwcUXjgGyjD65HP9HRN/pCc9cNj/Tj0LE5HxpJE/c=)
                          2: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: nc1KYLiIl6MQ2cB8LAaJ1Ei9pNJhoTR2e/w7ESX0VCI=)
                          3: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=)
                          4: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
                          rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 19:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:64:6d:3b:e6:d4:2b:41:a8:b2:63:bf:3b:46:08:ad:c4:2d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Dec  5 16:49:09 2025 GMT
            Not After : Dec  6 19:17:09 2025 GMT
        Subject: CN=6E3235F429D156861C550E92F7EB1A7B0FD53F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:c8:ed:5d:bb:ec:b6:0c:14:2b:d5:94:e8:
                    09:e2:50:69:5a:af:e1:60:7d:1d:f6:51:36:d5:52:
                    5a:14:32:22:7c:3f:a8:7a:6c:f0:db:ed:b3:5f:84:
                    12:95:f3:46:e8:b9:60:42:ea:92:8c:47:89:f4:28:
                    e6:51:0d:0d:7c:20:08:6d:38:5a:ad:7b:de:b3:ee:
                    96:55:23:dd:27:78:03:47:82:fb:9a:b8:af:2a:d9:
                    ff:89:e6:e1:4a:ed:4d:44:a0:97:c7:de:84:43:53:
                    8f:89:58:4d:f5:58:16:21:fb:02:52:be:c3:01:93:
                    f9:e6:0d:85:16:83:1a:f6:ce:fd:c0:f5:73:07:50:
                    fd:77:cb:2c:59:17:c3:17:d5:83:c9:78:ed:eb:f8:
                    56:f4:85:e5:95:f4:a0:92:57:f6:56:30:04:6a:bc:
                    8a:2d:99:f6:5c:83:ae:43:df:d4:c0:05:44:bd:26:
                    3e:d6:fb:c0:46:d4:28:82:7e:8f:9b:c4:09:25:f8:
                    21:33:bb:17:ff:0d:e7:0e:1f:fb:ea:0a:d0:5c:2c:
                    d7:02:e1:55:4a:30:a5:5d:cd:19:57:8a:2d:76:55:
                    6d:ac:1a:f0:35:ed:ea:a0:bc:1b:ac:33:1e:29:4c:
                    f5:c6:fb:f5:5c:9e:51:11:ef:16:a1:1c:1a:c3:36:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:32:35:F4:29:D1:56:86:1C:55:0E:92:F7:EB:1A:7B:0F:D5:3F:65
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ec:25:36:ba:07:d3:dd:65:0b:1e:97:44:4d:e8:23:6e:ad:
         ed:b9:4c:6a:9e:a1:03:3e:0a:67:fd:61:32:76:34:ae:bd:27:
         23:99:0c:0c:94:0a:05:20:68:26:ec:2c:7f:9a:03:26:61:d9:
         f0:fc:c5:47:de:a5:4d:1b:60:82:b3:eb:8e:4a:b3:d1:f7:a1:
         d6:42:b7:31:2c:5d:27:01:41:2d:9b:91:3c:ab:7b:18:86:b9:
         52:7c:22:c4:53:e9:9a:10:55:e3:74:8a:d5:f1:9a:1d:d5:86:
         52:15:8a:04:32:98:cb:fe:f3:e7:41:bf:74:1a:e8:2b:dc:29:
         91:64:a3:86:19:80:6d:83:a2:6a:79:40:f3:27:9c:4f:1f:f6:
         ab:86:ec:cd:28:5c:6f:db:a5:d6:1a:06:b7:f5:c5:1f:c6:0f:
         10:e2:17:59:88:ec:ba:b3:15:23:aa:08:9d:8e:de:34:e2:cd:
         eb:7a:de:59:70:96:9e:36:c4:2b:54:b8:ec:53:f4:ea:91:a2:
         bf:27:9b:f1:af:20:1b:eb:eb:33:52:e0:8f:c7:6f:06:85:1b:
         a1:dd:06:11:65:59:eb:04:de:33:86:5c:b4:ae:67:2d:8a:65:
         dd:76:a3:b3:1b:0c:0a:f7:0e:40:7c:59:2e:a0:db:42:86:29:
         64:29:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:11:43 2025 by rpki-client