This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
File:                     33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft (raw, json)
Hash identifier:          i9mKt2RdbIfLyomc/UuQrX/HsTxXGU630QUDKLhGcS8=
Subject key identifier:   63:91:C4:2B:3F:F0:74:A6:5F:B9:6B:CA:3D:DA:B5:0B:59:14:29:F7
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Certificate issuer:       /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial:       7C20F0F81ACDC1D7ADA2929EE485B0A04813F3F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
Manifest number:          0342
Signing time:             Sat 20 Dec 2025 19:08:05 +0000
Manifest this update:     Sat 20 Dec 2025 19:03:05 +0000
Manifest next update:     Sun 21 Dec 2025 19:31:05 +0000
Files and hashes:         1: 33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl (hash: gfkrRb3ZQzqluvRFD+xJbhDyqrqlItuijOUzGSnK3x0=)
                          2: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: 7mTGxBcJmB0cXKah+UHKsduoO+SpzBlH0SwtKtwt3pY=)
                          3: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: tgx0Vy+5T1TRke2lMS4iT0Zn+4rmirQHSXevJR078lc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
                          rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 19:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:20:f0:f8:1a:cd:c1:d7:ad:a2:92:9e:e4:85:b0:a0:48:13:f3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
        Validity
            Not Before: Dec 20 19:03:05 2025 GMT
            Not After : Dec 21 19:31:05 2025 GMT
        Subject: CN=6391C42B3FF074A65FB96BCA3DDAB50B591429F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:cd:4d:9d:de:f8:b7:22:b0:f2:a1:83:84:
                    5f:f2:f3:20:9b:8a:af:5c:43:c4:e6:41:fe:8d:a5:
                    38:49:9e:7f:76:e3:19:52:53:5f:b6:81:a7:74:4e:
                    5b:95:e4:ff:0e:22:e2:2f:5b:4e:50:4e:84:a3:ca:
                    63:1f:9e:ad:b5:07:45:a4:08:46:24:4a:48:bb:2b:
                    79:66:21:4c:e0:48:4d:6a:02:c3:02:65:71:a1:33:
                    43:be:99:5a:06:6d:5f:48:53:e0:1b:ad:9a:fd:3f:
                    68:43:99:c5:91:47:ba:93:09:5f:22:44:8f:b5:e1:
                    9f:5e:c9:9a:1e:43:9d:79:15:0b:66:0c:99:3d:7d:
                    38:91:af:93:7c:07:bc:74:1d:5e:0e:c1:bb:7a:a1:
                    7d:d9:cc:6a:2c:d4:a8:8c:fb:d8:6e:e3:e4:ed:f4:
                    07:11:1c:45:70:a8:3a:74:a1:f7:af:28:bf:93:e7:
                    26:14:ef:ae:98:74:a9:6b:23:72:c7:43:ce:83:e2:
                    00:52:a7:8f:68:dd:d6:c2:8a:07:7b:8d:ac:b2:ed:
                    ce:74:11:61:d9:34:af:6d:06:92:95:e1:83:11:e5:
                    aa:ae:b1:c0:4a:4b:3e:35:4d:b4:49:d7:f2:ad:aa:
                    1e:97:b0:99:7b:f7:c2:b6:ae:44:d7:87:02:6d:3e:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:91:C4:2B:3F:F0:74:A6:5F:B9:6B:CA:3D:DA:B5:0B:59:14:29:F7
            X509v3 Authority Key Identifier:
                keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:25:19:da:05:7c:a7:57:a7:b6:46:20:11:82:2e:2f:4e:0a:
         a8:89:01:cf:d9:3f:a9:e9:62:cc:6d:8c:e2:4a:22:45:5b:6a:
         35:3c:5a:c6:bb:89:46:79:b3:5b:90:8d:c7:a0:4b:50:d6:d6:
         27:54:ed:82:f7:c4:57:e4:37:0b:69:ab:f2:ab:60:5f:9f:3e:
         dd:68:7e:b0:db:f5:90:91:5a:3a:66:bf:07:13:04:62:1c:2b:
         9b:c0:7b:58:6f:01:37:f9:e0:ae:fa:0a:4a:20:08:1f:9f:d5:
         b5:9d:15:c9:38:84:87:09:bb:7a:a3:f9:9a:62:14:d6:a0:a1:
         af:2e:0d:35:bf:85:5f:dc:9e:f7:9b:de:42:a0:bb:a7:cc:67:
         6f:f1:b0:c5:57:d0:2c:52:6b:77:d5:a3:0e:11:7e:ba:b2:8e:
         dc:94:38:bf:95:f6:56:fa:8d:15:78:d2:0c:8e:29:48:87:72:
         23:08:25:65:79:52:4d:30:41:1e:75:65:11:c2:d8:cb:8f:e5:
         55:db:4e:42:fc:fc:eb:7d:f7:84:d2:52:57:7b:76:4b:92:ef:
         8a:6b:da:bb:ee:88:c6:0c:61:2e:cd:01:c1:cd:49:dd:32:b6:
         f1:d2:3a:b8:d5:50:10:4d:3f:59:d8:de:eb:bb:6b:8b:7b:42:
         87:e7:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:16:25 2025 by rpki-client