This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
File:                     3252E783D98B854BCC439007DE017EB6E4E2FF51.mft (raw, json)
Hash identifier:          mixRNZvxD9yR8Bj2U9Ou1LjKBr4iyjk9bF3S/Q6D9q4=
Subject key identifier:   6D:28:87:BA:7B:6C:49:6A:C2:FC:87:4F:4E:DF:53:25:36:3E:33:C6
Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
Certificate issuer:       /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Certificate serial:       2BBAEA802CEF018AFC2E01DEE8AE7F1C231034F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
Manifest number:          06
Signing time:             Sat 06 Dec 2025 00:34:06 +0000
Manifest this update:     Sat 06 Dec 2025 00:29:06 +0000
Manifest next update:     Sun 07 Dec 2025 03:23:06 +0000
Files and hashes:         1: 3252E783D98B854BCC439007DE017EB6E4E2FF51.crl (hash: 83U/mEIIzvQWMP+vlzaiBPxn9Rc9jChydlK6J7ztZy0=)
                          2: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: TGqKcq5hhQvs292+DCyMD6YCLTrai4dDENZfetKhjsc=)
                          3: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: evcJoe8kl899b+xGomFq0rjQEr0vjGkY2XfjdeQy63c=)
                          4: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: Gp1PMxDQ40LAoeo7u3FrJiFb2mSa2LoBqbgag3h7iyw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
                          rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ba:ea:80:2c:ef:01:8a:fc:2e:01:de:e8:ae:7f:1c:23:10:34:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
        Validity
            Not Before: Dec  6 00:29:06 2025 GMT
            Not After : Dec  7 03:23:06 2025 GMT
        Subject: CN=6D2887BA7B6C496AC2FC874F4EDF5325363E33C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:3f:d2:47:64:32:f2:92:cf:96:f3:22:dd:
                    47:52:8e:b1:8a:73:cc:2a:d8:38:c6:9f:bc:23:b6:
                    53:7b:ef:6f:64:27:c9:aa:c9:44:5e:7a:13:45:be:
                    0c:ae:40:e3:49:de:83:76:3f:03:0f:82:e7:df:e6:
                    6e:a2:ad:38:f7:bc:d0:56:fd:e8:50:51:86:e2:89:
                    14:b7:71:96:1a:70:32:51:9c:46:93:b2:0b:d4:3f:
                    cb:cf:ae:bd:dd:1f:13:24:73:5c:a9:aa:58:6a:1b:
                    b4:c3:7c:59:e5:0c:89:6e:ac:23:26:8c:17:6f:33:
                    05:48:b5:ea:cb:aa:cb:37:d9:05:54:97:66:09:6d:
                    f0:0c:13:4a:03:82:c9:6c:fa:5f:78:9c:71:dd:6b:
                    71:a2:14:5c:20:54:1e:d3:86:73:df:46:59:70:25:
                    5e:ac:f3:28:75:26:e6:b4:7a:b7:c7:a1:0e:64:4b:
                    c3:ed:24:bf:fc:18:54:76:2f:44:19:19:c6:e0:0a:
                    9a:5c:4f:4c:20:94:3a:89:ee:2a:c5:2a:9f:c3:fb:
                    f9:da:66:92:1b:3e:8d:ba:24:94:f5:59:4c:97:25:
                    52:45:9e:6f:ca:94:ed:df:f9:dc:b3:e2:b9:0f:55:
                    34:54:99:01:9f:81:b5:5c:ee:61:8a:50:e5:9d:66:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:28:87:BA:7B:6C:49:6A:C2:FC:87:4F:4E:DF:53:25:36:3E:33:C6
            X509v3 Authority Key Identifier:
                keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:f8:9a:5a:f6:7a:78:d3:9d:37:75:87:db:e9:38:7f:c4:
         b0:8c:f0:ff:41:3c:64:17:d8:7e:b8:8d:ee:ac:e9:71:52:df:
         ff:3f:4c:b5:cb:7f:34:fb:1a:0a:f7:c0:b1:ac:a9:aa:98:55:
         be:c3:6e:a1:fd:03:7f:4b:f5:c1:25:47:1a:29:6b:17:13:d0:
         a2:43:d5:04:00:5c:2d:cc:a9:71:b7:e4:6d:70:1c:1a:fb:a6:
         6e:b6:a2:a1:ac:90:1a:27:f2:c9:a8:eb:13:da:3b:fa:5c:de:
         5c:c6:7d:e0:e8:aa:46:46:1d:13:0d:8a:94:a6:e8:6c:c9:14:
         d7:b1:6b:da:ef:ba:54:c9:86:dd:9e:28:f9:c2:5a:7d:2e:24:
         c0:e1:8b:ca:7f:4e:94:c7:e7:bf:2c:47:74:70:11:2c:a6:1f:
         ba:84:03:fe:86:47:a5:16:97:32:16:6a:20:bc:0d:ea:63:85:
         0e:82:f7:f0:de:82:4e:fd:5b:3e:30:91:49:e7:f9:e2:0b:af:
         df:f9:1d:ab:05:5a:ff:66:72:41:6a:a2:42:51:3b:60:11:41:
         80:4d:0d:b7:a7:da:3f:57:69:d8:26:49:fe:55:85:a4:5d:37:
         4e:64:6c:82:38:86:eb:ee:ce:f9:c1:5b:4a:65:1f:e2:ef:20:
         1f:d3:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:02:26 2025 by rpki-client