This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
File:                     38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft (raw, json)
Hash identifier:          06JNIl2Ovh0J35A30K/8FjgaOtl3NWR8NbF2K7NvWIE=
Subject key identifier:   FB:EE:F2:5D:E2:F7:6A:61:EE:2D:BC:3B:FD:62:D7:05:70:3D:62:25
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       6A2B26DCE042E0B8C6EEA853CFC82E1A5F19F357
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
Manifest number:          E0
Signing time:             Fri 05 Dec 2025 20:59:07 +0000
Manifest this update:     Fri 05 Dec 2025 20:54:07 +0000
Manifest next update:     Sat 06 Dec 2025 21:13:07 +0000
Files and hashes:         1: 323830343a333464383a383030303a3a2f33342d3334203d3e20323635343834.roa (hash: zuQiAIOJ+ZS/ropb8EjQjUEWysJVZ+9WV54nzLTqbmw=)
                          2: 3136382e3139372e3135322e302f32342d3234203d3e20323635343834.roa (hash: tEzMkwxnxtvEU2wXxlFFw5Tb2aEh0v3SW6BXNU2rURE=)
                          3: 38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl (hash: nPxKkDdROmorM15ncEAXiwLHRzax4H9bLFuWr3y4pVs=)
                          4: 3136382e3139372e3135352e302f32342d3234203d3e20323635343834.roa (hash: +MeOKyYM0p0XGjUyx4vlgTCn375XhEQTf8sFNxrJNsg=)
                          5: 3136382e3139372e3135332e302f32342d3234203d3e20323635343834.roa (hash: mU9j1eH/ij0pYMxywalB5xSaBOdQ6VaAayECuuFpXko=)
                          6: 323830343a333464383a3a2f33342d3334203d3e20323635343834.roa (hash: zt6CDyXNajt2tU1ITWsX4t1cpsGBPoMVHVY3j9JOWJE=)
                          7: 323830343a333464383a383030303a3a2f33332d3333203d3e20323635343834.roa (hash: bzUwb9vCcXHaFyB0RM9vUz+JLvelmkvURETnOF+U06Q=)
                          8: 323830343a333464383a3a2f33322d3332203d3e20323635343834.roa (hash: zwF8uAxp0Y9mWlMcIGpcEdDQI4UXWaeyagKZ5G1gYXM=)
                          9: 323830343a333464383a3a2f33332d3333203d3e20323635343834.roa (hash: U7LwLqKHuoMSYFazJUUaIirfWRssObY0fuSR3+Ju+oI=)
                          10: 3136382e3139372e3135342e302f32332d3233203d3e20323635343834.roa (hash: x9aOdfFvH3VEu4sk7sDZlptBHbKpqSCl0IgxVOsEsl8=)
                          11: 323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa (hash: 36CmdseByt18edrqGOwO6jO/ADuqymhG8/4H177lLZQ=)
                          12: 3136382e3139372e3135342e302f32342d3234203d3e20323635343834.roa (hash: 5l+tJQJrcMlijNHk6lzmu7K2C/kncgrrLnSopr/x5T4=)
                          13: 3136382e3139372e3135322e302f32322d3232203d3e20323635343834.roa (hash: eRNs97HyB0u62rEBYqNoT2MZ/OrIvvvQ685ph/Anf10=)
                          14: 323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa (hash: e8/V55oyxKMD2kRIZ3R5netibA9M1wN5NIDFQOgF8nA=)
                          15: 3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa (hash: I7+GzxzOLMovqWw1X3+jBkfJhsi0JQOxHv2XvVhfK4k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2b:26:dc:e0:42:e0:b8:c6:ee:a8:53:cf:c8:2e:1a:5f:19:f3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Dec  5 20:54:07 2025 GMT
            Not After : Dec  6 21:13:07 2025 GMT
        Subject: CN=FBEEF25DE2F76A61EE2DBC3BFD62D705703D6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:6d:d0:70:e6:2a:1b:8c:b6:aa:4d:de:b1:
                    46:1b:dc:7f:49:2a:3d:58:4c:70:b7:0b:a3:f6:36:
                    4c:f3:89:e6:9f:27:73:13:c7:14:e3:70:de:1b:fb:
                    f3:a8:01:76:e5:35:f4:1a:e7:02:72:f4:75:f6:cb:
                    a9:50:a6:17:4e:63:ca:69:cd:77:90:4d:ba:b6:6e:
                    0f:c2:e3:cf:51:57:52:ed:a4:eb:82:90:80:69:8a:
                    1e:da:fe:ae:cb:76:1d:ec:21:f8:43:82:14:61:af:
                    96:2c:3b:04:ac:d8:eb:c1:5d:67:47:69:5c:78:c7:
                    2a:6b:3e:c0:cf:83:60:d1:68:34:40:1f:56:bd:6c:
                    87:93:4d:81:7c:39:75:96:53:54:c4:77:a0:df:13:
                    b3:7b:93:05:47:7b:aa:cf:09:f0:80:b7:41:9f:69:
                    c6:f7:37:c5:32:26:f2:09:1b:ec:1f:04:dc:b4:97:
                    b0:5c:bb:e0:b4:c3:a3:87:b9:9f:66:c2:2d:cc:16:
                    51:aa:86:a5:67:7b:dc:17:96:7d:04:26:ef:d0:08:
                    21:e7:cd:4c:88:ca:58:43:ea:e4:b0:ee:30:bd:80:
                    1e:4e:26:3b:96:65:ad:4c:32:d2:74:b5:1c:df:f3:
                    81:33:d3:ad:a5:46:a0:51:9b:f7:c0:2b:e1:2a:21:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EE:F2:5D:E2:F7:6A:61:EE:2D:BC:3B:FD:62:D7:05:70:3D:62:25
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:9d:57:c9:17:06:04:a7:7d:73:5b:80:1d:b5:18:43:de:
         71:d2:b1:ec:df:df:ca:5c:4d:5f:4a:f0:09:68:6c:95:3a:ee:
         a5:08:99:0b:e4:62:e2:04:55:e6:80:87:c8:89:54:15:f9:b2:
         ae:6e:e9:f7:ff:70:94:ea:79:cf:63:ef:a8:1c:b0:6a:e3:61:
         26:64:74:83:68:00:33:21:cd:f7:cc:7b:75:6a:84:35:86:d9:
         0e:21:20:b7:55:7e:7d:c4:3b:b5:bc:78:5a:eb:ef:8c:47:ff:
         f5:9a:44:8c:84:04:dc:42:a8:03:58:49:a5:ed:73:a0:00:8d:
         da:bf:83:b8:dc:ca:8f:87:9b:07:0b:7d:e1:5e:41:97:a8:f4:
         2e:05:e8:f9:1b:67:bf:fc:d0:15:89:08:36:0f:3e:73:c7:27:
         9b:57:e3:3c:20:f7:4f:3c:0d:41:bd:55:b3:e3:fc:46:dc:36:
         71:ce:d9:b7:09:bf:74:d7:ce:ab:e3:88:24:f8:67:9c:9d:0f:
         42:ff:82:3b:e4:b1:74:92:c4:6c:2d:da:cb:64:47:33:3a:a6:
         be:81:6b:71:8f:1f:17:d6:26:da:fd:aa:8f:91:12:a6:2d:c0:
         41:54:ad:b3:a5:0e:27:79:ac:22:15:57:1d:be:bf:15:f0:8e:
         10:98:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:10:28 2025 by rpki-client