This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
File:                     F221C31BD2AD9D051303E1E7DE991DC00987A722.mft (raw, json)
Hash identifier:          fXv2zn2yIj5Wn+wFf3wRExAnP3NdmNDv8NlFQzjAuXU=
Subject key identifier:   33:E1:0D:DD:46:EA:45:2F:50:D4:C7:29:D3:83:12:A4:AA:21:43:9B
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       23B3CD06C5FD5019552310179EDD6D99BFD829FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
Manifest number:          032E
Signing time:             Sat 06 Dec 2025 04:31:46 +0000
Manifest this update:     Sat 06 Dec 2025 04:26:46 +0000
Manifest next update:     Sun 07 Dec 2025 07:35:46 +0000
Files and hashes:         1: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (hash: 5mzCBNX6a9NVDLpUIT21SX0dR/4GsRHXc9dgTV86uNk=)
                          2: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (hash: SPpnWnitvIvfgXmOebaXaI2xG2GoXFJsORzMxoxoQTU=)
                          3: 34352e3139312e392e302f32342d3234203d3e20323639363938.roa (hash: VgiTruskHH6wRxOLPabZH7yFedsjHA3FL/GcXt0Objw=)
                          4: 323830343a363838343a343030303a3a2f33342d3334203d3e20323639363938.roa (hash: 14M8s28ZKRux3r9gT/i2ifhbKy7V9ZcynUOfsoA0QgM=)
                          5: 323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (hash: 7suffMdyFJwcc+5h4rkXUGwPZEd1HFBkhrJUGXc2kj8=)
                          6: 323830343a363838343a633030303a3a2f33342d3334203d3e20323639363938.roa (hash: LaTW7wYzQrWTUAjdKHM0NQG0MQ2uFqWnWI8sXHDQxUM=)
                          7: 34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (hash: i1LFjDleQqoAGjz6MvN6wpPw4uQ4dlQvDkJaxBKU9BU=)
                          8: 323830343a363838343a3a2f33342d3334203d3e20323639363938.roa (hash: pq/Dj3qQG871olBeTjHvGD64gaeJgGewfEclCvL6KP0=)
                          9: 34352e3139312e382e302f32322d3232203d3e20323639363938.roa (hash: uvXqkE0gwe4H6gFGVvKXequ8DorR1C0j+SMI/N7Y91A=)
                          10: 323830343a363838343a383030303a3a2f33332d3333203d3e20323639363938.roa (hash: tTtfJXv3O/MaTM5tF0x2FLFUYralK3kEvTp1Lj+Eaoo=)
                          11: F221C31BD2AD9D051303E1E7DE991DC00987A722.crl (hash: IkoBaYoPS97LWuxCFM/4fPmknq07TaX1AEqAx4YcN68=)
                          12: 323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (hash: K1dP7ftXpuFZydue+YSpBP8lpuEw7F3hZQo24A2h2eg=)
                          13: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (hash: ry0344gAUCjdhJMFogX38/1QuRL2KeHt0TTjQQP+iYw=)
                          14: 323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (hash: t6Luok4IsDWv0drOmD5TkaphJd39YB+gx0AQRMvB9dA=)
                          15: 323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (hash: q8hGSLy7IL+Q+YHLVMEYU1ATp8vBK1bXozLB27nzA4A=)
                          16: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (hash: ACYJnNXuyfFW5y7pVi5pNsk5eUXawdUn0WyMxla+Hog=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b3:cd:06:c5:fd:50:19:55:23:10:17:9e:dd:6d:99:bf:d8:29:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Dec  6 04:26:46 2025 GMT
            Not After : Dec  7 07:35:46 2025 GMT
        Subject: CN=33E10DDD46EA452F50D4C729D38312A4AA21439B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:05:52:f0:4e:51:e9:83:d8:fc:5f:57:b1:
                    08:6a:04:bb:2f:16:2c:a6:ea:8d:de:72:b6:59:6f:
                    0c:3a:93:71:64:fa:c3:90:79:d5:7f:6d:65:43:b1:
                    2b:7c:22:cc:d4:26:59:1b:bc:08:b1:75:ac:be:e8:
                    5d:97:98:ec:fa:ef:8f:ba:55:d6:fa:6a:a1:e1:99:
                    84:bb:52:d4:eb:d2:e0:26:dd:49:5d:66:56:3a:f3:
                    33:75:9a:53:56:26:20:36:43:e1:d1:59:82:f5:2f:
                    e8:a4:7d:03:1a:4f:22:8b:91:79:b5:20:74:f1:6f:
                    bd:a2:a2:bb:77:0c:53:ca:f5:40:58:d1:eb:ec:38:
                    0d:4d:0d:1a:ff:6d:38:ca:ca:a4:e4:b3:b3:b4:81:
                    bd:27:a2:d8:35:71:0c:58:8f:f8:1a:8e:71:d1:92:
                    a4:1f:dc:ef:dd:7a:bd:3a:d3:f9:b0:a8:5f:29:9d:
                    66:4f:10:90:fa:2b:e6:b9:6b:a5:24:2d:9e:9a:5e:
                    35:58:71:54:61:e0:d6:25:d0:79:9a:22:57:24:17:
                    5c:17:2a:75:64:6a:d5:c4:d2:42:33:ee:71:0c:f8:
                    c1:c2:93:a9:50:d2:21:a3:42:51:b4:b4:fa:18:17:
                    86:11:66:4c:84:a2:2a:51:36:33:c6:0f:df:e8:c2:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E1:0D:DD:46:EA:45:2F:50:D4:C7:29:D3:83:12:A4:AA:21:43:9B
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:b4:0b:48:48:21:fe:72:ba:d0:0b:0c:53:b0:d3:78:7c:
         99:ee:bb:56:56:f5:3b:d8:01:92:fc:7c:9b:94:83:b7:fc:59:
         a3:46:40:be:f7:7e:b6:1c:ae:13:e0:56:5d:86:87:1d:10:89:
         dc:70:9c:df:59:78:44:02:10:4f:22:7d:4d:06:0e:0e:db:7e:
         a8:40:d3:91:0e:e7:99:99:db:23:00:6c:5d:52:37:c9:a6:55:
         15:6e:49:26:0f:b4:b0:c4:c4:d1:11:f6:78:a7:ad:7d:7e:70:
         73:63:65:28:9f:83:73:da:02:c4:bd:0c:de:be:54:33:26:d5:
         3b:86:f2:1e:2c:73:d8:fb:87:df:28:7c:84:34:de:3b:4a:7c:
         66:d6:a3:f9:bc:9f:f3:22:83:5f:b9:af:d4:5a:38:86:8c:81:
         94:27:9a:11:3d:f6:eb:fd:29:9c:5d:fb:50:d3:a9:e5:77:44:
         28:1c:21:1c:1a:6a:93:0d:89:ce:26:95:c6:0e:32:76:8f:2e:
         da:0d:1b:a3:1d:41:5a:a1:03:92:2d:1f:c4:d4:91:52:41:f1:
         1c:11:68:19:b1:9b:74:25:6e:04:52:c2:d4:c4:97:39:8f:bf:
         ef:6e:0a:92:5a:15:45:f5:f8:db:4b:e2:4a:ce:d2:b6:e2:dc:
         63:d5:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:12:37 2025 by rpki-client