This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft
File:                     053534088AE146C26641820A5E5F82310DB957FC.mft (raw, json)
Hash identifier:          uOSixgMlSprPMWMe7KmUiuw5RVLSrxSwIDNfGA9VfL0=
Subject key identifier:   FB:3A:A3:98:7A:24:03:EC:26:63:51:DB:26:3F:01:87:5A:DA:D4:92
Authority key identifier: 05:35:34:08:8A:E1:46:C2:66:41:82:0A:5E:5F:82:31:0D:B9:57:FC
Certificate issuer:       /CN=053534088AE146C26641820A5E5F82310DB957FC
Certificate serial:       1D18895F365CC14DFE07E10052C629864EA2DBC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft
Manifest number:          033C
Signing time:             Wed 17 Dec 2025 16:02:53 +0000
Manifest this update:     Wed 17 Dec 2025 15:57:53 +0000
Manifest next update:     Thu 18 Dec 2025 19:00:53 +0000
Files and hashes:         1: 3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa (hash: cbEI2Y4spdKk0DVSvNDWWlahwXDfhbUCz69fE1xzHT4=)
                          2: 053534088AE146C26641820A5E5F82310DB957FC.crl (hash: 0UWQG/DhLBjjCpjG4n5l5oQrxksByERNNRSQgqyMZ04=)
                          3: 323830343a326137383a3a2f33322d3438203d3e20323634303734.roa (hash: vDZJoIX2Bwg7fYla/PsTIWa6b+iASAMX4cHU27p/PR8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.crl
                          rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Dec 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:89:5f:36:5c:c1:4d:fe:07:e1:00:52:c6:29:86:4e:a2:db:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053534088AE146C26641820A5E5F82310DB957FC
        Validity
            Not Before: Dec 17 15:57:53 2025 GMT
            Not After : Dec 18 19:00:53 2025 GMT
        Subject: CN=FB3AA3987A2403EC266351DB263F01875ADAD492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:6b:36:57:a4:0c:d3:90:ba:f9:82:a7:83:
                    9b:d4:20:64:81:91:68:cf:a2:bc:45:7d:49:67:b3:
                    ab:24:52:ec:be:b5:71:72:f1:12:01:27:2a:29:6e:
                    b4:93:da:9f:3c:af:2b:61:4b:20:e5:55:75:d4:f4:
                    59:1a:31:93:9a:69:f0:3a:04:c1:6b:1e:27:63:0b:
                    1c:8b:d3:ba:be:93:15:d7:17:c6:46:cb:ed:80:c2:
                    25:7c:94:b4:db:40:93:20:38:6b:7e:64:d1:07:ad:
                    34:ac:cc:c6:e4:f1:b6:37:1b:97:3c:60:1c:d3:a1:
                    15:a5:e4:99:98:7b:9e:d0:f3:37:0f:28:03:0a:f7:
                    f9:af:98:a1:cb:82:2e:c6:b0:40:f9:51:3b:3f:85:
                    f4:2f:bb:1b:99:4a:b2:6f:a5:95:ce:5b:f3:90:56:
                    8a:50:f4:bc:d4:d0:5d:c2:1b:98:b6:4b:54:72:fa:
                    52:74:90:8c:dd:ae:f0:34:ca:f0:2b:b6:e4:b3:e9:
                    a3:df:9f:79:6a:a9:ee:c5:e1:7e:87:5e:12:88:ec:
                    d5:a4:10:37:ff:85:6d:2f:7c:f3:30:3a:73:7b:bf:
                    db:8d:15:59:dc:ad:d9:03:36:00:7e:9a:d4:b5:66:
                    2b:d9:5a:c3:32:00:73:a2:f2:f8:db:da:56:1c:6f:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3A:A3:98:7A:24:03:EC:26:63:51:DB:26:3F:01:87:5A:DA:D4:92
            X509v3 Authority Key Identifier:
                keyid:05:35:34:08:8A:E1:46:C2:66:41:82:0A:5E:5F:82:31:0D:B9:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053534088AE146C26641820A5E5F82310DB957FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/1/053534088AE146C26641820A5E5F82310DB957FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:69:dd:5b:42:20:01:a6:61:84:1e:e2:ee:82:dc:62:7e:
         57:ad:f0:e1:60:46:ef:19:65:13:28:d1:9f:e9:f3:b4:8b:9e:
         99:12:c7:70:87:fb:af:24:b8:1c:da:a2:1f:76:eb:73:28:1a:
         6a:23:fb:f3:aa:40:ff:29:a2:d4:68:a6:42:23:ea:b8:3e:dc:
         86:17:24:c5:0d:ab:61:dd:92:b5:2f:9a:2e:91:6b:5f:f5:e6:
         5b:3e:4c:b7:ca:dc:57:ce:a8:96:38:64:56:21:b9:df:b2:3f:
         32:d9:34:b3:61:33:28:0b:97:d2:95:03:be:45:e4:98:ab:92:
         5f:32:21:b2:c9:d6:26:3d:30:80:a0:cd:03:04:ad:5e:32:48:
         f2:0a:16:fb:19:1f:71:1a:e3:33:3e:ed:f3:85:ed:df:93:fe:
         18:e7:26:19:50:5c:97:d2:e4:10:2b:e0:f1:10:bb:26:26:b1:
         fc:3a:18:c6:5e:6c:eb:4f:17:ef:94:8c:aa:9d:47:49:ed:b8:
         81:44:dd:ca:d8:0f:0d:81:2f:2a:89:90:73:96:21:b7:7d:34:
         50:a2:c2:75:d7:a1:bf:27:86:cf:ad:7b:73:bd:96:26:d6:8b:
         e3:64:7c:e0:fe:cd:b2:a3:57:19:c1:71:db:d8:c8:ad:78:ee:
         55:8b:56:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHRiJXzZcwU3+B+EAUsYphk6i28gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUzNTM0MDg4QUUxNDZDMjY2NDE4MjBBNUU1RjgyMzEw
REI5NTdGQzAeFw0yNTEyMTcxNTU3NTNaFw0yNTEyMTgxOTAwNTNaMDMxMTAvBgNV
BAMTKEZCM0FBMzk4N0EyNDAzRUMyNjYzNTFEQjI2M0YwMTg3NUFEQUQ0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCImGs2V6QM05C6+YKng5vUIGSB
kWjPorxFfUlns6skUuy+tXFy8RIBJyopbrST2p88rythSyDlVXXU9FkaMZOaafA6
BMFrHidjCxyL07q+kxXXF8ZGy+2AwiV8lLTbQJMgOGt+ZNEHrTSszMbk8bY3G5c8
YBzToRWl5JmYe57Q8zcPKAMK9/mvmKHLgi7GsED5UTs/hfQvuxuZSrJvpZXOW/OQ
VopQ9LzU0F3CG5i2S1Ry+lJ0kIzdrvA0yvArtuSz6aPfn3lqqe7F4X6HXhKI7NWk
EDf/hW0vfPMwOnN7v9uNFVncrdkDNgB+mtS1ZivZWsMyAHOi8vjb2lYcb19PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+zqjmHokA+wmY1HbJj8Bh1ra1JIwHwYDVR0j
BBgwFoAUBTU0CIrhRsJmQYIKXl+CMQ25V/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtqUjFDWmVjNzllY2RFYmVXUTdOM3BFWGc5Rml2ejRhTWJveFpYdXFq
dm0vMS8wNTM1MzQwODhBRTE0NkMyNjY0MTgyMEE1RTVGODIzMTBEQjk1N0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1MzUzNDA4OEFFMTQ2QzI2
NjQxODIwQTVFNUY4MjMxMERCOTU3RkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUtqUjFDWmVjNzllY2RFYmVXUTdOM3BFWGc5Rml2ejRhTWJveFpYdXFqdm0vMS8w
NTM1MzQwODhBRTE0NkMyNjY0MTgyMEE1RTVGODIzMTBEQjk1N0ZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFTxp3VtCIAGmYYQe4u6C3GJ+V63w4WBG7xllEyjRn+nztIuemRLHcIf7ryS4
HNqiH3brcygaaiP786pA/ymi1GimQiPquD7chhckxQ2rYd2StS+aLpFrX/XmWz5M
t8rcV86oljhkViG537I/Mtk0s2EzKAuX0pUDvkXkmKuSXzIhssnWJj0wgKDNAwSt
XjJI8goW+xkfcRrjMz7t84Xt35P+GOcmGVBcl9LkECvg8RC7Jiax/DoYxl5s608X
75SMqp1HSe24gUTdytgPDYEvKomQc5Yht300UKLCddehvyeGz617c72WJtaL42R8
4P7NsqNXGcFx29jIrXjuVYtWDw==
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:31:19 2025 by rpki-client