This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
File:                     D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft (raw, json)
Hash identifier:          rv/C1TMgIfClEBTypFfBO7hwjI2yFvXXCjeySwNuZ6Y=
Subject key identifier:   D3:95:5D:11:60:6B:F5:D8:2D:37:28:ED:79:F9:BA:1A:10:FD:DB:12
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       4E6DAF0BA91FF65ED051C54D615743DA15E981DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
Manifest number:          032D
Signing time:             Sat 06 Dec 2025 12:15:13 +0000
Manifest this update:     Sat 06 Dec 2025 12:10:13 +0000
Manifest next update:     Sun 07 Dec 2025 12:22:13 +0000
Files and hashes:         1: 323830343a323736633a633030303a3a2f33342d3334203d3e20323633393030.roa (hash: rHMawISW74ABh6Ymr5evosGIJ0yvV173eVcCKVDaJvU=)
                          2: D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl (hash: jy2kke5qpRUMenXluVOI3DVOFXfdtXCglqM0UrLeCdo=)
                          3: 3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa (hash: HbZnI1rkXbdtRnD0HvWkpg+AtYU555uTmRmvQ6rrSEI=)
                          4: 3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa (hash: Ztn/kRROqYdn3+8z7lQp5IZdec3jfJH0a5FCQh8jPKs=)
                          5: 323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa (hash: dicTN/16HMNWAxhD9KINMXQ8faLHleClER4ouNrfMjE=)
                          6: 3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa (hash: u9CUKciMWwvYy39pOrdNuKoErtpPFi/n45NE4c5lres=)
                          7: 323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa (hash: dk9kTrzyiNv3P7zfiqudO/wTBULnh9Qn7nzSAA6OifQ=)
                          8: 3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa (hash: Ul0edCGJ7qzxUpEzVowkFojJ3qA4ItE2Zej9l0zFMQs=)
                          9: 323830343a323736633a3a2f33342d3334203d3e20323633393030.roa (hash: jNnc27AQTNwKwpdYPVNkCRjhM/ZJOkqdc9wkbjGqmJE=)
                          10: 323830343a323736633a3a2f33322d3332203d3e20323633393030.roa (hash: ldP2WJT0H6xfgkesNLGb/LwInyo1ASOLy7gaco6QCEI=)
                          11: 3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa (hash: dGxluIDvi+exuvbhjX2z6PBSvJnMgeHuG5luPJ0AQVk=)
                          12: 3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa (hash: j7yJU5jKIT/l61rp/tcbOX+KjvKGg0RiF6ySr60qUNI=)
                          13: 3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa (hash: yvPqNt6g1q2bkhgbR4eRQ8aU2xgPY7DrOCd4HvQzFdg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6d:af:0b:a9:1f:f6:5e:d0:51:c5:4d:61:57:43:da:15:e9:81:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Dec  6 12:10:13 2025 GMT
            Not After : Dec  7 12:22:13 2025 GMT
        Subject: CN=D3955D11606BF5D82D3728ED79F9BA1A10FDDB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:cf:42:88:8e:52:09:82:25:90:94:40:a9:
                    df:de:ed:2f:04:10:70:8d:cc:f5:2f:63:74:bc:c2:
                    48:4a:e6:ce:31:b5:43:a8:cc:c1:fe:53:f2:93:29:
                    b6:a5:fd:de:71:c0:13:07:a7:e3:3b:fa:8f:a8:6e:
                    5d:92:a8:25:03:f1:a8:d3:ce:0e:ce:e7:19:9e:d0:
                    52:0d:03:be:6a:cf:b9:62:b1:cd:88:ed:81:1c:0e:
                    23:0d:f7:b8:94:bb:13:67:16:fa:b6:81:61:38:d8:
                    57:56:26:f8:ad:00:36:fd:c6:30:ea:16:cc:50:4c:
                    3b:4c:9b:2e:a7:59:6d:9a:a7:e6:d5:04:fc:0e:cb:
                    6d:e0:68:49:54:69:b0:ab:b6:e8:85:d9:49:59:87:
                    32:66:e8:ab:ac:ec:b7:75:af:2f:68:50:f0:9c:ea:
                    49:b9:97:e2:86:6b:87:e2:e5:58:40:da:41:54:7a:
                    31:a6:50:4a:a2:95:79:9b:10:f2:2c:39:76:2e:96:
                    22:9f:e3:13:78:62:fe:1f:c9:c9:e6:f5:c6:a6:57:
                    47:da:57:00:bf:e0:60:65:92:09:50:4b:b0:2d:96:
                    04:78:a4:d3:41:15:cd:df:fd:d1:0a:6a:13:cf:b9:
                    90:ff:6b:8b:ec:99:07:50:4f:e4:90:5d:2a:c3:38:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:5D:11:60:6B:F5:D8:2D:37:28:ED:79:F9:BA:1A:10:FD:DB:12
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:77:1f:6f:c7:69:a3:a5:3c:1c:a9:0b:14:af:c5:ad:3f:a2:
         97:7f:83:b2:72:90:03:99:5a:41:2c:d3:54:84:f1:3f:d0:24:
         7c:8e:33:27:fd:d0:71:d3:5d:35:be:04:c9:45:4e:71:30:79:
         b1:ad:28:5e:11:04:41:9d:ca:e8:d9:b8:0e:92:ef:5f:15:15:
         5c:d3:ac:74:33:d2:2d:f8:6c:f9:d6:a5:a7:e1:cf:b3:a7:b5:
         5a:3a:0f:9c:41:c2:9f:cf:ca:7f:6f:5c:ff:ae:01:45:76:52:
         5c:f5:ea:c6:73:2e:9c:3b:aa:eb:18:4f:32:67:93:e8:cd:6e:
         52:c2:b5:76:2a:ff:f9:13:86:13:7e:01:bc:1f:d9:46:83:a8:
         d2:85:9c:a4:b2:3f:f5:1c:9d:a6:d9:7c:89:35:55:2c:21:7e:
         59:ae:80:24:8b:a9:88:22:95:d4:df:cc:63:f0:65:64:f2:5c:
         1d:c2:a1:8f:5e:d8:8e:26:e5:29:f1:62:f0:8e:67:ff:1c:ce:
         1d:c8:f6:55:e6:be:36:42:7b:92:e9:ed:31:c9:e7:5e:ad:9e:
         78:c1:cf:4a:af:bc:62:fa:32:57:8a:52:86:3a:7f:1b:6d:38:
         cc:6b:08:c4:f8:8f:6b:84:89:42:66:69:91:64:e1:ca:fa:47:
         40:2b:b9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:00 2025 by rpki-client