This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          QgGcDFpqs43h6Z9GeAecZOQO7DdGPF0+n5/3HlWCosk=
Subject key identifier:   AA:5D:0F:A5:3C:DB:6E:00:A2:13:A4:07:91:72:D3:EC:82:A7:A9:0A
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       74EF2C119CE3236C268C7DD2D0842C2A87BBD0F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          032B
Signing time:             Sat 06 Dec 2025 09:37:15 +0000
Manifest this update:     Sat 06 Dec 2025 09:32:15 +0000
Manifest next update:     Sun 07 Dec 2025 11:29:15 +0000
Files and hashes:         1: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=)
                          2: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=)
                          3: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=)
                          4: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: lUhMzuKkZhEzjltM7kI6cqgA6C99FOjg323h2gjXNOE=)
                          5: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 11:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ef:2c:11:9c:e3:23:6c:26:8c:7d:d2:d0:84:2c:2a:87:bb:d0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Dec  6 09:32:15 2025 GMT
            Not After : Dec  7 11:29:15 2025 GMT
        Subject: CN=AA5D0FA53CDB6E00A213A4079172D3EC82A7A90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:ec:01:f6:90:e6:e2:a2:8b:b1:ee:c7:9e:
                    dc:62:e1:bc:a1:1d:63:cc:31:92:a9:f1:e6:d9:e5:
                    b9:dc:86:1c:56:c9:fc:05:f7:51:b0:fd:b4:a9:e4:
                    06:73:b3:53:e0:d3:7b:42:dc:ec:22:50:99:66:cc:
                    a3:ca:7c:be:64:1b:6a:eb:ee:ae:90:46:7b:f3:f3:
                    48:ac:b0:b7:5c:7a:d8:e4:6c:52:51:39:95:9a:f1:
                    93:c0:e4:e7:4f:9d:ce:37:8d:d6:72:41:2e:86:7d:
                    f9:4a:3c:59:33:77:51:ed:55:b9:af:70:74:a0:b1:
                    02:a5:f2:0f:81:e2:2b:4e:b6:d1:97:70:61:f4:b7:
                    14:9c:91:72:81:2e:8c:29:2e:20:ff:22:fc:17:52:
                    c0:88:34:27:9c:f6:ab:b9:85:e4:c6:dc:18:54:df:
                    18:cf:43:f3:23:57:76:75:f0:99:de:5e:ae:df:d5:
                    b2:6d:f9:9c:3a:86:c4:47:38:cc:84:67:26:fd:7d:
                    ce:a8:82:ba:77:e5:ee:64:09:fd:ee:58:21:c3:96:
                    12:14:ec:ee:44:37:9d:2d:72:4b:f1:fa:3e:b5:33:
                    df:bd:78:16:74:55:44:b0:22:fd:e5:aa:cf:53:c5:
                    a2:81:78:98:63:3d:e2:81:b4:02:04:e6:57:5b:ab:
                    60:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:0F:A5:3C:DB:6E:00:A2:13:A4:07:91:72:D3:EC:82:A7:A9:0A
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c1:23:1e:15:18:f7:ce:b7:d1:6d:d7:4e:1c:d0:30:c9:71:
         8f:3c:69:d0:da:2b:32:c9:27:a8:07:6b:50:da:eb:cf:e4:30:
         b6:70:7f:6b:57:5f:8d:94:b0:67:99:0f:28:7e:cd:5d:7d:91:
         b5:e6:6c:4e:b1:57:2a:4d:2c:23:73:85:8e:aa:b3:3d:8f:32:
         85:e7:45:a5:79:b3:86:3c:e9:f5:0d:93:90:c5:47:29:08:e2:
         49:f4:6f:aa:ac:1a:78:fd:84:26:81:be:fb:43:3c:a0:64:2e:
         5c:4b:a3:ae:16:f1:54:f7:90:61:bc:96:1f:ba:73:fb:8e:ae:
         11:33:7c:91:b1:d9:7a:d8:e3:fd:99:ab:09:67:64:3b:e4:33:
         8d:88:31:ac:a6:18:52:c8:c9:72:7c:6a:a9:31:0c:91:5b:e1:
         58:5e:3f:64:99:8e:63:4b:ae:09:25:1d:55:13:18:8a:13:4f:
         d6:11:58:6f:5e:74:88:67:bf:54:9b:9d:57:35:e0:7b:aa:0d:
         f9:80:79:7b:f2:f1:a6:4a:43:eb:d5:e4:4d:ae:e8:53:7b:03:
         fc:e1:66:b6:29:26:bf:f2:e3:30:b0:24:10:eb:b0:02:3a:c8:
         eb:78:9c:eb:5c:76:62:63:39:95:8c:49:22:be:4e:02:71:c8:
         e5:3a:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:10:52 2025 by rpki-client