This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
File:                     98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft (raw, json)
Hash identifier:          +h56yZ6aQpN53xO5MbvdFsoRMrgWm2+TJ8Dkc4sPcaU=
Subject key identifier:   FF:D9:6D:CF:FF:16:F3:56:4E:ED:81:3F:FA:DE:25:A8:34:A9:76:8E
Authority key identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4
Certificate issuer:       /CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
Certificate serial:       026FA36FE0C4E785140069B52DBE83DA2D1FDECF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
Manifest number:          3C
Signing time:             Fri 05 Dec 2025 21:13:25 +0000
Manifest this update:     Fri 05 Dec 2025 21:08:25 +0000
Manifest next update:     Sat 06 Dec 2025 22:47:25 +0000
Files and hashes:         1: 323830343a363164303a3a2f33342d3334203d3e20323639323538.roa (hash: RVEvds/l3t4Qw2XLQrOUJG8lrohW3+3lCwgMpnAdEes=)
                          2: 34352e3138332e32382e302f32332d3233203d3e20323639323538.roa (hash: emzlw40pqMCQ3qu4bLcxZgBrl2wiQdeZGEEpw7OUA5Q=)
                          3: 34352e3233392e3134322e302f32342d3234203d3e20323639323538.roa (hash: +5xH3VGg66qqGObLwnPEzrQUecX3E1bMeJgvtdYpmr8=)
                          4: 34352e3138332e33312e302f32342d3234203d3e20323639323538.roa (hash: 8pwWCkIf0+YTbL23bFkMPc5bQQEFDYkVH5thHHekMHI=)
                          5: 34352e3138332e32392e302f32342d3234203d3e20323639323538.roa (hash: Y0XledqOqFp/ctesKaL3t6MvuxjwK3lGL9hYw0Ru3Q8=)
                          6: 34352e3138332e32382e302f32342d3234203d3e20323639323538.roa (hash: 8C6UC+wDxB0qUbdh7OEHmVIpHSeVjsxbPBNENSNgUMw=)
                          7: 323830343a363164303a383030303a3a2f33342d3334203d3e20323639323538.roa (hash: TKR4P4rJCVRt+asB8CS1k2yKtBzTUG9fcS/jhyY6OBU=)
                          8: 323830343a363164303a343030303a3a2f33342d3334203d3e20323639323538.roa (hash: aHUHDje35ythhdbKPhkq+Z/nAoQRbEDZzNRIZfUIdpU=)
                          9: 323830343a363164303a3a2f33332d3333203d3e20323639323538.roa (hash: aJLy3hllw1KJVs0y6yP5hifneQHNLtJmO7vT/z3H7gA=)
                          10: 34352e3233392e3134302e302f32342d3234203d3e20323639323538.roa (hash: CiONmP+PeykJVpUWpQj6lOU9OL+vJEC6bQ8s0Ehc1Qk=)
                          11: 34352e3138332e33302e302f32332d3233203d3e20323639323538.roa (hash: hxuYxktPIARSMHs+PJr+WN4geas+siHVpE3UpfvAmG8=)
                          12: 34352e3233392e3134322e302f32332d3233203d3e20323639323538.roa (hash: 0X7uKD17yg/YjAIHckUN4WlSmM7P1dCkNrDLUkffsEE=)
                          13: 34352e3233392e3134312e302f32342d3234203d3e20323639323538.roa (hash: jwaYBnk+rmg0vJdnGS2gDNxdxJ8vtY+++EyU1RclGe0=)
                          14: 323830343a363164303a633030303a3a2f33342d3334203d3e20323639323538.roa (hash: wboQOQtus5JP6+FRXe83WKDh6w4gDk0DddQ5JjTwEzo=)
                          15: 34352e3233392e3134302e302f32322d3232203d3e20323639323538.roa (hash: CyOK4L2la3d8LyNnB1s4KqcCPVuRGCPnRkdxhgmuS40=)
                          16: 323830343a363164303a383030303a3a2f33332d3333203d3e20323639323538.roa (hash: 5OXkW+bNvuUKmQqsypMHe0VxCbS2ITsO6ku6SoM1okg=)
                          17: 34352e3233392e3134332e302f32342d3234203d3e20323639323538.roa (hash: NQsSa+zC8ge44twG5XmqbQZpXCSt2h9ZZTOmQhrEx+E=)
                          18: 34352e3233392e3134302e302f32332d3233203d3e20323639323538.roa (hash: kIqH0jANQzgfauNCuwhpFXyTtAA7dlkgBuqOodYGoK8=)
                          19: 98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl (hash: x1tdhyZlQ+CCbjvglnIKLGnAcdnYz1Ln28xOkpFyBtw=)
                          20: 34352e3138332e33302e302f32342d3234203d3e20323639323538.roa (hash: kOaATmV4UGkMqKAFQTH9ivDhBHJK62oX0Skeja080QI=)
                          21: 323830343a363164303a3a2f33322d3332203d3e20323639323538.roa (hash: 8qQCri6qGWiadi01ad1az8JvzGBhTeBmb4mZ2PXSGhg=)
                          22: 34352e3138332e32382e302f32322d3232203d3e20323639323538.roa (hash: M20FQXHHaMgpqM/Q3VHvz3LtrYaLgb/ZiyeDa/mjwHo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl
                          rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6f:a3:6f:e0:c4:e7:85:14:00:69:b5:2d:be:83:da:2d:1f:de:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
        Validity
            Not Before: Dec  5 21:08:25 2025 GMT
            Not After : Dec  6 22:47:25 2025 GMT
        Subject: CN=FFD96DCFFF16F3564EED813FFADE25A834A9768E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:ca:55:4b:fc:b4:ef:cd:c8:5d:ef:b8:bd:
                    e4:99:b3:62:11:04:ab:d7:87:6c:c2:08:71:6f:6a:
                    87:54:b2:85:96:10:6b:17:5f:19:8a:ac:d3:7f:84:
                    83:8c:4a:5a:fd:02:c7:53:bb:af:67:28:1a:b9:45:
                    b1:7e:67:f8:48:48:8c:b7:1e:5d:ee:98:85:fa:7a:
                    15:47:a0:44:59:ba:72:ea:22:1f:71:83:9b:0d:a5:
                    59:76:cf:fe:93:50:9f:e9:fb:a4:01:b6:ca:9d:46:
                    e1:9a:9a:d5:1e:0e:cf:35:16:aa:22:2e:a4:c6:78:
                    9b:c5:a6:25:1a:d2:a4:d7:5f:c3:6e:53:f5:f7:dc:
                    0d:31:32:23:63:1e:98:d1:ae:c3:b9:0f:79:86:5a:
                    c7:c8:b0:03:f6:ba:14:a3:5c:7d:12:e5:3c:17:5a:
                    f7:dc:6b:fb:c8:c7:f9:95:08:ee:b8:eb:21:78:03:
                    13:8e:03:3b:65:1d:4f:63:ed:98:96:1a:07:b9:b6:
                    7b:80:fd:4a:ae:07:e8:f4:a0:c3:4b:c5:ac:4d:22:
                    51:c4:d5:76:93:cf:53:89:d5:25:00:a4:a6:64:97:
                    3c:79:38:b5:19:a1:77:0e:bb:82:4b:20:34:51:cc:
                    88:5d:78:61:76:a8:7c:a5:cb:b9:80:11:97:4a:63:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:6D:CF:FF:16:F3:56:4E:ED:81:3F:FA:DE:25:A8:34:A9:76:8E
            X509v3 Authority Key Identifier:
                keyid:98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:c5:ef:74:bd:65:60:6d:30:e1:ff:be:f9:1f:54:75:a3:
         dc:d8:04:88:af:f1:74:6b:7c:ce:03:67:3c:ac:a3:d6:4f:5f:
         ee:e0:67:f1:38:dd:45:dd:1a:64:78:09:28:48:cd:ea:8f:3a:
         1d:97:2a:0e:35:b4:56:ca:27:3a:c2:e5:6c:dc:40:e6:7b:e5:
         a4:9d:c6:11:b2:d2:4c:ff:f0:0d:91:49:ab:1b:93:ff:82:ce:
         d2:69:1b:c2:ba:cd:27:1e:6b:c7:e3:30:76:f0:2b:1d:2c:b8:
         09:50:3e:d3:8a:4a:c5:49:5c:d8:ab:ba:b5:97:40:f4:47:9a:
         db:a0:6b:77:dd:55:c7:d3:2d:fe:39:42:89:98:7f:fc:29:d9:
         95:86:ae:07:f9:d5:6c:27:62:3e:9f:54:db:ad:bd:f7:82:bb:
         bc:9c:57:8b:ae:7f:0b:f9:36:16:f1:17:10:03:54:af:e2:50:
         be:13:14:1d:d3:60:cd:c2:00:cb:38:f9:9f:d0:13:95:97:dc:
         89:7c:da:fe:f7:e5:c6:ee:a0:30:56:89:93:e1:49:5c:85:ef:
         a5:c9:58:05:9e:05:54:a9:30:f2:d6:c1:cc:f4:9b:4c:37:ed:
         27:df:23:25:92:8b:f4:47:30:c3:f1:4a:96:26:b1:fa:02:d3:
         8a:2c:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:08:55 2025 by rpki-client