This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
File:                     34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft (raw, json)
Hash identifier:          EyIMw2Aw9eZvhT/MeIlfdX/ZZpgx3CiTHIGmTXVYwVc=
Subject key identifier:   C7:61:3F:E8:EF:A7:63:42:40:78:D5:F4:0F:77:34:92:29:2D:FD:C5
Authority key identifier: 34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B
Certificate issuer:       /CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
Certificate serial:       0A98C1566207B40B8896441FB8F9FEB2F098904E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
Manifest number:          0340
Signing time:             Sun 21 Dec 2025 18:56:14 +0000
Manifest this update:     Sun 21 Dec 2025 18:51:14 +0000
Manifest next update:     Mon 22 Dec 2025 21:57:14 +0000
Files and hashes:         1: 323830343a356438343a3a2f33322d3332203d3e20323638393737.roa (hash: kJL4BKrGU+ViLgLCeJPXRmj51oXTbtFUkkanJ7vnSyU=)
                          2: 34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl (hash: s8p1MSsFJ2qyLUtjcPVOiBVnKbNLfwuLgQdN59mZKLE=)
                          3: 34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (hash: k8WHvroGzNVDRDKZ/1KYZipIDUsh8phyDXftCUcck54=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl
                          rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 21:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:98:c1:56:62:07:b4:0b:88:96:44:1f:b8:f9:fe:b2:f0:98:90:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B751FB87F97FC1716FBAC75D6ECEF3594D661B
        Validity
            Not Before: Dec 21 18:51:14 2025 GMT
            Not After : Dec 22 21:57:14 2025 GMT
        Subject: CN=C7613FE8EFA763424078D5F40F773492292DFDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:fc:66:46:b9:a7:5f:76:49:19:64:db:b2:
                    ac:24:b5:36:77:f7:a8:a7:06:f5:ba:1d:62:6f:fd:
                    f9:70:fe:dc:f1:cc:20:66:5a:44:de:4e:7a:0b:42:
                    88:2f:8a:1d:40:e2:2b:88:ba:e4:4a:d7:40:e1:3e:
                    99:a4:9f:8e:2b:92:97:6b:4d:64:e9:f3:96:bd:92:
                    db:96:b3:0d:cd:cb:a0:d3:70:19:89:cb:95:74:5e:
                    47:24:b1:66:70:cd:43:be:55:a9:fe:1f:97:81:43:
                    ed:55:be:c7:ad:77:a2:e9:8f:4d:53:5d:50:9d:2b:
                    49:2a:ba:1f:37:30:59:5f:f2:8b:03:01:46:d6:7b:
                    82:b3:8d:46:1d:4f:ec:b3:b6:6e:0e:33:45:1b:b0:
                    a3:7c:c5:d0:e2:e0:44:ea:25:58:14:0a:d0:b5:8e:
                    a5:cf:a8:89:b4:56:6e:ca:b2:2f:bb:f3:f2:5d:23:
                    78:c0:21:7e:ca:79:d7:04:20:75:cf:a6:dc:ed:95:
                    d9:68:d6:77:a0:a3:8e:6c:a7:a8:f5:77:30:57:a8:
                    a8:69:43:05:e6:22:b5:40:94:d3:b9:67:d5:cc:aa:
                    f4:dc:7b:ff:fe:29:49:58:ac:8d:bb:39:ee:42:59:
                    f9:34:f1:60:0b:6d:d6:87:02:93:5b:77:97:6e:48:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:61:3F:E8:EF:A7:63:42:40:78:D5:F4:0F:77:34:92:29:2D:FD:C5
            X509v3 Authority Key Identifier:
                keyid:34:B7:51:FB:87:F9:7F:C1:71:6F:BA:C7:5D:6E:CE:F3:59:4D:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/1/34B751FB87F97FC1716FBAC75D6ECEF3594D661B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:18:cd:7a:36:f4:ca:be:76:bd:2b:d9:97:ed:aa:99:9e:
         f9:f5:0e:76:15:35:1c:14:5a:e6:86:be:83:30:44:40:4d:5e:
         7e:0f:7a:c0:81:c0:02:45:91:f3:65:06:15:30:37:8a:d1:3c:
         12:ef:eb:e8:48:07:63:ee:25:74:c4:8f:91:0f:0a:d6:a1:47:
         ef:1b:41:0e:4c:aa:38:ef:66:c0:95:13:79:be:d7:7d:90:66:
         5e:d8:5a:f5:86:d4:59:8f:94:d3:ba:7f:82:fe:ee:35:e1:9b:
         20:6c:d8:12:dc:17:56:91:ba:87:8a:fa:a0:51:48:e1:23:23:
         8d:b4:b4:df:79:59:0c:bc:6d:99:d6:26:bb:c5:c7:7b:6b:50:
         b7:ed:e1:00:f3:3c:d8:10:2f:8a:30:25:72:29:c6:9d:be:7f:
         4a:8a:2f:bc:71:b6:fd:4f:85:ad:d4:da:83:6b:0b:62:5b:8b:
         68:e1:7e:6c:20:57:f3:bb:4b:be:ec:75:20:a0:e6:28:f3:7e:
         eb:21:34:1e:8c:4a:57:66:c5:91:52:20:6f:42:00:25:8a:57:
         83:e6:cf:c1:b1:d8:e6:23:69:da:e6:23:98:0a:58:53:2d:c1:
         8f:cf:67:7c:f8:21:7b:78:3c:57:7d:69:25:a5:6e:42:04:29:
         9f:b9:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:01:44 2025 by rpki-client