This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          N/DzuoEjU8QhZFsCLle+npAbwSmFQrt610UReqmtB8Q=
Subject key identifier:   0E:18:8E:93:CF:CE:1C:5F:F7:7A:6A:DC:B6:D9:F7:54:8D:4D:69:91
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       3A7B7F2B7CE959E2EA53BEB1197AD7C94FD1A686
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          032E
Signing time:             Fri 05 Dec 2025 19:40:00 +0000
Manifest this update:     Fri 05 Dec 2025 19:35:00 +0000
Manifest next update:     Sat 06 Dec 2025 22:02:00 +0000
Files and hashes:         1: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          2: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          3: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          4: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          5: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
                          6: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          7: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
                          8: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          9: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          10: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: +/as1UKGF5w081DNlyAZ+0hzKlXdKFfCUhFvFbbS3UU=)
                          11: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          12: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:7f:2b:7c:e9:59:e2:ea:53:be:b1:19:7a:d7:c9:4f:d1:a6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Dec  5 19:35:00 2025 GMT
            Not After : Dec  6 22:02:00 2025 GMT
        Subject: CN=0E188E93CFCE1C5FF77A6ADCB6D9F7548D4D6991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:05:4c:a1:8e:bb:47:8c:60:2e:37:95:78:
                    bb:68:93:f5:38:4d:4d:46:20:ac:25:8b:ec:44:2d:
                    a7:4d:fa:43:0f:0e:bc:78:cb:84:2b:f2:92:3d:b7:
                    14:55:c0:b8:31:a3:02:19:a1:6c:85:03:73:03:5e:
                    3a:6a:7d:a8:b2:a7:17:a1:c1:5d:28:4e:0d:b1:db:
                    56:4c:98:7e:d5:3c:fb:29:c9:07:7c:d5:ec:ce:1b:
                    a7:90:03:8f:4a:15:8b:ae:ac:c8:d1:42:d0:9e:9f:
                    a6:6b:05:81:65:f0:99:fc:5d:91:fe:ec:c3:4b:b7:
                    43:72:ec:67:5f:98:e5:6d:52:8a:cd:b2:e1:cd:8c:
                    72:99:22:0f:b4:99:ec:ae:32:b1:7a:95:0a:23:1c:
                    d8:84:54:2d:55:3e:04:c6:31:bd:4f:b5:3f:ae:5d:
                    89:4b:ce:ea:c8:f0:dd:f9:05:57:e1:8e:2e:49:e3:
                    70:9b:e1:97:dd:18:cc:ae:0a:b0:b7:12:c1:a4:0c:
                    a7:0e:5b:7a:60:6e:8f:c7:15:9c:56:a6:e2:b9:69:
                    0c:f6:d3:17:1a:2d:81:8b:65:1f:f1:1c:fe:39:10:
                    2e:27:eb:36:9f:fe:71:b0:62:b5:f6:20:eb:dd:f3:
                    19:6d:40:3c:51:aa:8c:c7:53:93:26:88:44:5f:4b:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:18:8E:93:CF:CE:1C:5F:F7:7A:6A:DC:B6:D9:F7:54:8D:4D:69:91
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:6d:46:07:a5:37:e7:8a:fe:e8:f4:47:c2:98:7f:fe:40:
         69:c2:49:60:55:c1:66:98:30:15:a5:5f:01:c4:61:00:cc:bd:
         9b:23:2f:7a:d6:f6:6c:21:69:de:a2:fa:3c:5e:29:ae:33:e3:
         f2:00:03:df:c4:fe:5a:dc:15:0b:82:0b:90:88:60:fa:4c:ea:
         8d:08:00:4c:b7:87:0e:55:04:25:c2:3f:bd:69:39:7a:c8:56:
         4f:c6:ff:d4:8b:db:9c:35:62:ad:5f:d5:a6:13:9a:b9:01:cc:
         51:5d:58:76:04:6d:12:7b:e7:97:41:b8:26:9e:4e:1f:0c:6b:
         7a:81:38:b0:c2:37:65:b3:1d:a5:a0:15:be:ee:12:67:d2:00:
         c0:04:53:39:75:43:30:21:a4:99:9c:11:3f:66:3b:32:5a:6c:
         a4:34:13:98:28:9a:e3:9d:c6:02:16:87:99:fd:21:c3:51:d6:
         62:9a:36:f5:9b:71:cc:25:49:40:a3:20:06:19:e9:2c:97:ce:
         ad:1e:bd:19:b6:77:3c:28:40:69:50:f6:03:08:b9:ee:5b:e3:
         4b:12:4a:f5:d8:4f:9a:47:f8:e8:84:80:e2:37:06:5c:2d:1f:
         4f:06:bb:f2:25:1b:5c:97:fa:bd:25:5d:e1:17:86:4e:02:c6:
         4a:e9:90:da
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUOnt/K3zpWeLqU76xGXrXyU/RpoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNTEyMDUxOTM1MDBaFw0yNTEyMDYyMjAyMDBaMDMxMTAvBgNV
BAMTKDBFMTg4RTkzQ0ZDRTFDNUZGNzdBNkFEQ0I2RDlGNzU0OEQ0RDY5OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0AVMoY67R4xgLjeVeLtok/U4
TU1GIKwli+xELadN+kMPDrx4y4Qr8pI9txRVwLgxowIZoWyFA3MDXjpqfaiypxeh
wV0oTg2x21ZMmH7VPPspyQd81ezOG6eQA49KFYuurMjRQtCen6ZrBYFl8Jn8XZH+
7MNLt0Ny7GdfmOVtUorNsuHNjHKZIg+0meyuMrF6lQojHNiEVC1VPgTGMb1PtT+u
XYlLzurI8N35BVfhji5J43Cb4ZfdGMyuCrC3EsGkDKcOW3pgbo/HFZxWpuK5aQz2
0xcaLYGLZR/xHP45EC4n6zaf/nGwYrX2IOvd8xltQDxRqozHU5MmiERfSwW5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUDhiOk8/OHF/3emrcttn3VI1NaZEwHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0p1
WUxIUGRLWTVZMXBoRjVNb3FxV0JrTTJWNVBBb25ia3JjdVB1MlJlSDIvMS8zREM2
OTBDMERFODAxMzFCMjIzQkVFNzBEN0Y2RkY5OTBBMTVGMzQxLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
nU5tRgelN+eK/uj0R8KYf/5AacJJYFXBZpgwFaVfAcRhAMy9myMvetb2bCFp3qL6
PF4prjPj8gAD38T+WtwVC4ILkIhg+kzqjQgATLeHDlUEJcI/vWk5eshWT8b/1Ivb
nDVirV/VphOauQHMUV1YdgRtEnvnl0G4Jp5OHwxreoE4sMI3ZbMdpaAVvu4SZ9IA
wARTOXVDMCGkmZwRP2Y7MlpspDQTmCia453GAhaHmf0hw1HWYpo29ZtxzCVJQKMg
BhnpLJfOrR69GbZ3PChAaVD2Awi57lvjSxJK9dhPmkf46ISA4jcGXC0fTwa78iUb
XJf6vSVd4ReGTgLGSumQ2g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:24 2025 by rpki-client