This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft
File:                     F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft (raw, json)
Hash identifier:          uODzeyCkfH4VcU4UgYRU1+9Oh52fnU6TE+chd3/AgT8=
Subject key identifier:   B5:E0:BF:72:17:EC:B4:4F:24:90:27:A2:49:24:4B:B5:4F:18:CB:60
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       54D1A76EB617190E353F0294446970E3E6E4B2AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft
Manifest number:          0346
Signing time:             Thu 18 Dec 2025 19:15:30 +0000
Manifest this update:     Thu 18 Dec 2025 19:10:30 +0000
Manifest next update:     Fri 19 Dec 2025 21:26:30 +0000
Files and hashes:         1: 34352e3233332e3230302e302f32322d3332203d3e20323637333936.roa (hash: U8dEb1Kq0QIYCyA8Vxhje1om0LDccxhV98xD4EqiDXI=)
                          2: 323830343a346364383a3a2f33322d3438203d3e20323637333936.roa (hash: bqYXXfEQJ7ynYHhQPonZJxpqMMsAjcz8KKbatLQNpOE=)
                          3: F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl (hash: 2QD8IOHEXeYdF3eL94IuidWCvowX3nOBiOwD24l5fcw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 21:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d1:a7:6e:b6:17:19:0e:35:3f:02:94:44:69:70:e3:e6:e4:b2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Dec 18 19:10:30 2025 GMT
            Not After : Dec 19 21:26:30 2025 GMT
        Subject: CN=B5E0BF7217ECB44F249027A249244BB54F18CB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:76:d5:ba:a0:15:ad:1e:50:3f:50:a8:fe:
                    dd:6a:95:f5:0b:e8:c3:ad:34:df:46:84:e0:3e:03:
                    d0:cf:3d:7f:79:91:bf:e4:15:2a:ee:06:32:30:11:
                    1e:37:4a:e0:47:e2:d6:cd:d8:b4:91:ea:a3:af:1b:
                    13:86:9e:a9:67:3d:ae:9d:e3:1f:52:1d:39:d6:f0:
                    49:3c:1d:c6:ff:cd:40:06:d7:c8:b2:61:2b:42:61:
                    7d:f0:a1:c1:1d:9d:a6:9a:92:44:27:96:d8:74:1c:
                    98:45:f5:97:ed:f5:16:55:31:3d:8c:46:c0:c6:92:
                    aa:35:43:77:13:1c:c2:80:6e:68:be:13:98:e3:b6:
                    97:ad:95:a3:9d:57:5f:32:f7:b0:d7:30:cd:50:3e:
                    12:b4:06:a6:50:72:fc:16:68:25:9c:58:78:3f:6d:
                    32:57:7a:6e:2a:84:fb:b0:ca:75:38:90:60:0b:b9:
                    16:c9:72:6d:71:7f:70:93:b3:02:83:48:44:e8:8d:
                    3f:a2:48:cc:af:31:d9:99:ed:4d:81:8a:c9:17:b6:
                    8b:fe:8c:18:3d:1e:3d:7a:d7:c7:37:55:00:c8:16:
                    08:01:42:ab:be:1f:72:e4:55:75:e0:35:ff:5b:aa:
                    ce:09:95:82:4e:74:85:50:fb:bf:fe:b0:6e:8d:ca:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:BF:72:17:EC:B4:4F:24:90:27:A2:49:24:4B:B5:4F:18:CB:60
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:12:f2:51:cc:eb:ed:72:fc:ad:d6:91:95:eb:34:b4:dd:8a:
         f7:9f:80:a9:1e:e8:26:88:a7:85:9e:5c:17:65:ff:ab:40:55:
         b0:a8:7a:b7:e9:c9:42:b1:62:9f:df:0b:dc:ed:9b:a4:84:68:
         27:c0:83:57:2f:6e:aa:52:58:b4:9f:bf:38:1d:42:f0:1a:17:
         38:62:4b:6f:51:3a:87:32:6b:ba:74:9d:b4:a5:44:99:fe:00:
         e7:c7:50:88:f1:de:1c:3d:ea:a8:01:16:7a:e1:80:80:34:c8:
         90:3b:60:f8:01:1b:c1:d8:c8:c0:b2:e8:fb:3b:c1:0c:93:41:
         b9:e0:50:8c:16:6b:ee:1a:35:e6:78:a6:15:0e:e8:0f:21:2d:
         87:ad:6d:4c:5e:45:46:26:04:8c:e3:af:1f:0b:71:f6:c1:ce:
         5c:2e:54:48:e0:44:9c:bf:82:53:89:b5:43:2d:6c:e9:40:22:
         8c:f6:45:19:06:69:1d:4a:55:f7:79:4a:b4:e4:85:dc:98:4c:
         6c:52:87:05:28:d5:92:89:0e:4c:4e:f2:36:d5:60:f4:f9:29:
         73:c7:fc:ab:88:14:16:17:1d:37:6e:9e:96:85:ec:c4:59:5b:
         de:db:cd:63:25:84:a8:9b:aa:4e:62:bf:4d:f2:3f:bf:c9:17:
         bb:c3:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:22:49 2025 by rpki-client