This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.mft
File:                     22AD0711A25E9E0FB275ABC71A280702BD666A35.mft (raw, json)
Hash identifier:          f1HfttFNn1QoXMrGISp9sJlXMOKuhhe5iWhW+fK/pOs=
Subject key identifier:   78:33:9B:EB:BA:44:82:B1:37:3C:36:B7:D6:66:07:6C:EF:2D:A0:EF
Authority key identifier: 22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35
Certificate issuer:       /CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
Certificate serial:       0D2B316ABAE1EAF335CFF81B995EBC9EEF267DC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.mft
Manifest number:          01AC
Signing time:             Fri 05 Dec 2025 21:39:52 +0000
Manifest this update:     Fri 05 Dec 2025 21:34:52 +0000
Manifest next update:     Sun 07 Dec 2025 00:52:52 +0000
Files and hashes:         1: 3137372e38362e3234382e302f32322d3234203d3e20323632363434.roa (hash: QhMVqkyLt5GyYlJRgUavyRLf96gHWmvantBlQro5mCM=)
                          2: 323830343a326136343a3a2f33322d3438203d3e20323632363434.roa (hash: 1YX/KZrvpdONeiWtix50YbRderzU50g5oGxrubg8CJ0=)
                          3: 3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa (hash: u5G+qMAisEC7adETMATM8kr8nlnY7hRaxdGGK+LYhTc=)
                          4: 3136372e3234392e31322e302f32322d3234203d3e20323632363434.roa (hash: Jd7wpcrN18qe9LsRmtVrcTVBOadBiHkCGKQgs3uQBbA=)
                          5: 22AD0711A25E9E0FB275ABC71A280702BD666A35.crl (hash: 5u5fMP9hWfilgSFoIRBzmfcQxMmIVta2QmTGA57K15s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.crl
                          rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2b:31:6a:ba:e1:ea:f3:35:cf:f8:1b:99:5e:bc:9e:ef:26:7d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AD0711A25E9E0FB275ABC71A280702BD666A35
        Validity
            Not Before: Dec  5 21:34:52 2025 GMT
            Not After : Dec  7 00:52:52 2025 GMT
        Subject: CN=78339BEBBA4482B1373C36B7D666076CEF2DA0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:83:f0:43:54:67:ca:cb:dd:b2:db:a4:33:
                    05:52:2c:27:1c:6d:68:07:a0:87:29:f1:58:cc:80:
                    91:46:c1:e3:cc:93:9a:c5:ba:da:45:2a:ba:e5:5c:
                    d2:c9:69:56:e3:63:65:f4:a4:4f:c8:2c:31:2f:86:
                    ba:d5:b0:52:aa:75:e8:e0:c7:66:b9:a1:96:81:ba:
                    81:51:cc:02:b0:fb:b5:f8:0d:0a:c4:6d:19:8c:44:
                    7f:c9:a1:0e:5b:6b:28:2c:64:12:c7:89:43:f2:61:
                    d5:26:88:3d:89:25:b1:68:8d:e8:74:20:6d:7e:4b:
                    12:0d:66:5a:da:73:34:2a:40:22:fe:58:94:03:75:
                    3f:c7:a0:c5:a3:1d:2d:38:b4:29:60:78:d1:2f:92:
                    9f:c4:be:8c:30:c9:d8:6f:ef:b9:f0:13:58:f4:fa:
                    6e:54:b7:58:1d:61:b3:08:cd:34:ae:8c:7b:98:80:
                    1c:59:95:d6:9a:8b:51:d0:9b:87:49:d5:12:85:cc:
                    a6:3c:94:c3:12:39:94:69:d0:cb:14:15:a0:cd:e7:
                    1e:31:81:a1:f5:cd:1d:92:11:bd:83:e9:c5:15:e8:
                    ce:1e:d1:84:a4:32:aa:66:47:cf:62:25:77:e0:f4:
                    74:c2:0d:43:18:62:69:19:91:34:ef:ee:b2:6f:c0:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:9B:EB:BA:44:82:B1:37:3C:36:B7:D6:66:07:6C:EF:2D:A0:EF
            X509v3 Authority Key Identifier:
                keyid:22:AD:07:11:A2:5E:9E:0F:B2:75:AB:C7:1A:28:07:02:BD:66:6A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AD0711A25E9E0FB275ABC71A280702BD666A35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/22AD0711A25E9E0FB275ABC71A280702BD666A35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:05:49:9c:46:7a:f1:8d:0a:b4:14:c4:96:9c:8c:c9:c1:b6:
         f5:80:6f:94:28:21:19:fc:57:1d:2c:ea:1c:a0:df:19:b5:ca:
         a0:54:20:5b:33:8e:a5:f1:a3:f1:82:b4:f4:db:e8:ef:b7:d6:
         ef:45:c6:a2:38:95:6e:95:5e:ff:3c:9e:e4:5a:5a:13:a7:ef:
         5e:ec:78:e2:3d:2d:b3:11:c3:22:4d:6f:c5:2a:e9:0d:a8:53:
         e3:31:d1:b8:53:bc:b5:08:11:09:b1:4d:de:27:a4:2d:ec:0f:
         7a:32:4d:05:1a:02:03:62:d3:0a:e2:76:48:8f:ac:02:df:67:
         73:39:65:c5:49:ba:86:d4:4e:67:68:f6:77:1f:df:2d:ad:38:
         8a:50:d6:44:ae:bd:65:b5:6f:a5:ee:2b:e5:ff:56:ef:e3:19:
         df:95:d9:e9:4e:15:ad:01:0c:d4:8c:5e:da:de:72:85:d6:46:
         e3:4b:38:31:c4:31:c3:41:b0:69:d8:2e:e0:37:9f:e7:84:51:
         84:19:bd:14:02:31:cf:22:25:5d:d6:ea:37:63:f5:39:d2:7e:
         fa:cf:94:5c:fd:2a:d2:95:50:bb:dc:5f:dc:33:05:92:da:dd:
         49:a6:7f:85:99:87:f0:cc:7a:d2:a8:1f:c4:52:67:8d:6c:fe:
         83:5a:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:13 2025 by rpki-client