This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          QQvO9ZXg5xcPOtih6xZ7uYgrdki67me5Q0gaRILrLSM=
Subject key identifier:   FB:D8:ED:88:00:45:B8:84:C3:C2:C4:17:C0:F4:B4:A9:AE:FE:83:17
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       73FF9E92A892686C620B48CD655FE6BE500D810B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          032B
Signing time:             Fri 05 Dec 2025 18:30:00 +0000
Manifest this update:     Fri 05 Dec 2025 18:25:00 +0000
Manifest next update:     Sat 06 Dec 2025 19:41:00 +0000
Files and hashes:         1: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: noH/6wQklcBAaxEAf8opJx4ehieMk2GZ8QTzCrekJZE=)
                          2: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: TO6Eb49up/wmLJo6dXO2I0VlV7zMLlLB/b9vOIm4NVc=)
                          3: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: G0SWK+jmKHTG0ctDczQrKf6TxfRS64Q9op8j2QG1tjc=)
                          4: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: IvMpdw39E7yHBfdNRqRjqhm3M4HxFQsnyvqHbu0ZRt4=)
                          5: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: sBpa4s503VeZUYCOt+l0MWz+VMtYiBSEsylwD1QPHFw=)
                          6: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: r+oC/tP9cVlGYdiKnaYO/EjxupaEl0ebrhGSL23ifBg=)
                          7: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: U2eH9NqttfTafC3EBRQM8TEtkvvFsyjejY/7ctga6eE=)
                          8: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: Pcjq5j9L01oqldGDpHJ1/0Fhghry022+OEJwmG3qykg=)
                          9: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: WisQ1JL2FAAn8kaZqf230Nksj1G0DtPacu/DRaDBIZA=)
                          10: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: sXeIiddgIsbS+sATicLgnnXS6mGcpy75xY5FDmKS1hQ=)
                          11: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: HwDz5NgtLSiOsBWTFEniOOfDCJt2dHYq8prAcQlW/Qs=)
                          12: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: 16TbMKZdTZfIkFgwAstb/ibbX/bvn7/DJ8wvTNDWTQU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 19:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ff:9e:92:a8:92:68:6c:62:0b:48:cd:65:5f:e6:be:50:0d:81:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Dec  5 18:25:00 2025 GMT
            Not After : Dec  6 19:41:00 2025 GMT
        Subject: CN=FBD8ED880045B884C3C2C417C0F4B4A9AEFE8317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:99:d3:30:4e:dc:dc:9f:a6:7d:a0:a5:e5:
                    7e:8d:05:3a:54:0e:20:de:3f:6f:e3:e2:32:c4:6e:
                    e5:d5:3e:70:ff:1e:0e:45:22:ab:54:53:2b:59:b3:
                    b3:0d:98:c2:a8:51:5c:6e:20:e0:dc:b8:6f:a4:ac:
                    fd:f0:af:11:d1:55:ce:6b:a9:94:ae:5b:cd:b4:7a:
                    0c:31:c8:9c:ff:f2:26:b9:9b:ac:77:3e:e0:0d:3f:
                    f6:1c:38:71:a1:35:5c:dc:56:0f:41:95:85:b3:8d:
                    ac:4e:d1:1f:a1:f1:fa:bf:e3:5e:cb:03:74:fb:9c:
                    a2:b3:05:19:ed:3e:37:4a:68:aa:83:41:54:03:79:
                    04:66:b9:c0:43:c5:e7:f0:90:9a:90:52:43:60:9f:
                    38:d2:31:cc:f2:64:c2:2d:7d:9b:c4:c3:07:99:56:
                    97:b0:cd:d7:a7:fe:38:8c:7c:30:e5:94:23:b6:45:
                    fc:26:01:91:39:fe:7e:1c:a3:9e:a1:f7:81:81:4c:
                    cd:69:f2:73:7f:5e:3c:6c:d0:d4:45:76:94:82:1b:
                    f9:59:8c:6a:6c:9b:44:0d:08:d1:96:26:04:b3:41:
                    52:f0:d3:eb:f0:6c:13:e5:c9:1a:dc:ef:5d:38:31:
                    56:73:1f:0b:72:9b:54:c2:bb:f1:24:b8:76:d2:36:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:ED:88:00:45:B8:84:C3:C2:C4:17:C0:F4:B4:A9:AE:FE:83:17
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:c9:9c:7d:8f:ca:42:06:80:62:a9:27:ae:4d:17:f9:7d:
         54:09:76:1c:10:e9:38:6f:42:72:d4:d1:cd:2d:8a:ab:d9:77:
         e6:3b:b8:8d:5c:9d:54:07:7d:c1:1a:9b:49:ce:41:ee:07:97:
         4c:70:cd:1d:7b:c8:77:e8:cb:d9:90:fc:e7:32:e4:8d:9e:36:
         dc:7d:d8:f6:fe:71:d7:5b:7b:b4:75:0d:9f:f0:9a:8c:13:06:
         67:1f:cc:a7:ad:3b:32:19:bc:db:b3:8d:a1:31:1a:69:e2:fe:
         59:8f:da:85:d8:a6:a1:ae:04:26:77:b3:74:f2:b7:71:66:0f:
         ee:9b:ec:54:2a:2e:97:8c:d8:1d:9e:ca:de:2b:a9:8e:de:dc:
         d1:7c:6a:5c:de:e8:57:3c:ea:5a:ce:c9:36:b2:d0:48:b8:cd:
         c7:86:88:e0:3e:f0:d4:fb:91:1b:b5:61:98:89:66:1d:a6:9a:
         d1:78:13:4d:b0:ac:31:12:b7:bc:16:c6:0f:7d:5e:24:bc:07:
         10:8d:45:0a:df:df:63:6b:a6:4f:05:5f:a4:02:f3:41:a3:d6:
         d7:f5:d5:3b:14:dc:d5:a1:ad:41:e1:0c:0f:81:47:50:c0:ee:
         cd:e8:5f:2b:15:ca:66:ae:95:51:32:35:03:02:f7:06:aa:99:
         d6:c4:79:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUc/+ekqiSaGxiC0jNZV/mvlANgQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNTEyMDUxODI1MDBaFw0yNTEyMDYxOTQxMDBaMDMxMTAvBgNV
BAMTKEZCRDhFRDg4MDA0NUI4ODRDM0MyQzQxN0MwRjRCNEE5QUVGRTgzMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/JnTME7c3J+mfaCl5X6NBTpU
DiDeP2/j4jLEbuXVPnD/Hg5FIqtUUytZs7MNmMKoUVxuIODcuG+krP3wrxHRVc5r
qZSuW820egwxyJz/8ia5m6x3PuANP/YcOHGhNVzcVg9BlYWzjaxO0R+h8fq/417L
A3T7nKKzBRntPjdKaKqDQVQDeQRmucBDxefwkJqQUkNgnzjSMczyZMItfZvEwweZ
Vpewzden/jiMfDDllCO2RfwmAZE5/n4co56h94GBTM1p8nN/Xjxs0NRFdpSCG/lZ
jGpsm0QNCNGWJgSzQVLw0+vwbBPlyRrc7104MVZzHwtym1TCu/EkuHbSNoUXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+9jtiABFuITDwsQXwPS0qa7+gxcwHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNoNWcvMS80
MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATJ7JnH2PykIGgGKpJ65NF/l9VAl2HBDpOG9CctTRzS2Kq9l35ju4jVydVAd9
wRqbSc5B7geXTHDNHXvId+jL2ZD85zLkjZ423H3Y9v5x11t7tHUNn/CajBMGZx/M
p607Mhm827ONoTEaaeL+WY/ahdimoa4EJnezdPK3cWYP7pvsVCoul4zYHZ7K3iup
jt7c0XxqXN7oVzzqWs7JNrLQSLjNx4aI4D7w1PuRG7VhmIlmHaaa0XgTTbCsMRK3
vBbGD31eJLwHEI1FCt/fY2umTwVfpALzQaPW1/XVOxTc1aGtQeEMD4FHUMDuzehf
KxXKZq6VUTI1AwL3BqqZ1sR5aw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:12 2025 by rpki-client