This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
File:                     C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft (raw, json)
Hash identifier:          yTfj5HfU+kFh0GGihBRYtYOs1mRaZ7R+DZ7JrocyaIE=
Subject key identifier:   2A:FC:E5:21:ED:B8:FD:ED:D8:6E:17:22:B4:8A:E8:97:A1:C4:7B:D2
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Certificate issuer:       /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial:       2F5757F59DC7E36C0DA1F73F49305EFCCE55BC43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
Manifest number:          4D
Signing time:             Sat 06 Dec 2025 05:23:43 +0000
Manifest this update:     Sat 06 Dec 2025 05:18:43 +0000
Manifest next update:     Sun 07 Dec 2025 05:32:43 +0000
Files and hashes:         1: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl (hash: nKuYVGn0tvrc0MHUh3eP3pBWBGG5XZNeTTbevKLmXRw=)
                          2: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (hash: ctFV3kPNJK3bV9B3MLschItzKM1ihhzRapNYYOJyJ2c=)
                          3: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (hash: Hfp1DucUOLGX558iN8StPvuFHGp7CQRLaXSkygAZbFQ=)
                          4: 323830343a346462303a3a2f33322d3332203d3e20323638323133.roa (hash: SZSAqVslfoIeZ8CsTmwiFp0IQTONHzAfigBL/Esv6sQ=)
                          5: 34352e3233362e392e302f32342d3234203d3e20323638323133.roa (hash: 70JQRaVTJXwvav8bFTgGxR3IrAOSwj6tnXxST/n7XC0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:57:57:f5:9d:c7:e3:6c:0d:a1:f7:3f:49:30:5e:fc:ce:55:bc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
        Validity
            Not Before: Dec  6 05:18:43 2025 GMT
            Not After : Dec  7 05:32:43 2025 GMT
        Subject: CN=2AFCE521EDB8FDEDD86E1722B48AE897A1C47BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:26:c9:9d:74:78:8e:82:68:e8:a5:3b:f6:
                    0a:41:a8:08:0f:cb:0f:c9:ee:31:47:07:77:5d:40:
                    5a:c4:5f:90:db:9b:9a:af:22:65:76:f5:46:19:14:
                    5b:cb:b6:0f:fe:d4:b9:a2:be:d0:ab:13:69:4e:55:
                    8b:62:a7:4b:71:d2:9d:47:d1:b6:96:1e:9c:f9:57:
                    d4:35:10:ca:02:a4:82:61:7f:b3:0d:b2:8b:a4:19:
                    03:62:88:42:ac:ef:06:84:e9:8c:e4:b5:93:bf:8c:
                    0d:e8:48:04:55:08:bf:5e:ce:b2:84:65:9a:97:f8:
                    a1:3f:26:22:b4:f9:e7:d9:b0:b1:e8:0f:08:90:45:
                    97:ce:5d:77:12:7d:dd:1c:d2:3a:f9:07:73:7d:38:
                    52:7e:a6:79:6d:15:4d:fe:80:c6:d5:87:4d:ef:a7:
                    79:4f:05:26:c3:df:b4:b4:c9:0c:39:3d:bf:09:18:
                    a7:a9:94:99:8c:26:0e:db:5f:a8:b5:1c:52:e4:9d:
                    4d:7f:f7:0a:1b:71:34:a3:06:f3:be:65:dd:42:aa:
                    15:33:b8:5f:10:34:28:fc:73:26:23:74:a2:63:ef:
                    1d:bb:88:2c:89:8f:af:e1:13:4f:bf:19:28:d4:9e:
                    a3:bf:96:46:a4:91:33:75:f1:df:86:4b:6c:13:84:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FC:E5:21:ED:B8:FD:ED:D8:6E:17:22:B4:8A:E8:97:A1:C4:7B:D2
            X509v3 Authority Key Identifier:
                keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:30:30:a4:de:4e:a8:1a:80:44:7d:2f:d3:4b:db:7f:b7:1a:
         53:64:cd:e8:23:04:22:95:e2:5e:a6:f9:73:dd:a4:63:8f:76:
         28:09:86:51:23:cc:50:a1:e8:97:95:bc:bc:12:d6:16:6e:63:
         2a:17:ca:71:91:79:a0:85:47:88:ad:b2:9a:32:3f:32:3f:95:
         1e:ca:a9:fd:23:51:09:9c:09:a5:34:be:56:7f:67:7c:b2:94:
         99:b8:fa:38:a2:3c:56:0a:9c:c0:7e:8b:7a:bd:bc:3b:4f:34:
         e5:a7:e1:64:c3:27:ca:76:3d:0d:f9:d8:4b:99:ce:0a:c3:29:
         5e:da:9c:a0:4d:dc:e1:6f:80:8f:ad:2c:0a:14:3e:92:8b:b0:
         96:0d:19:eb:f7:2b:88:95:46:60:e3:82:42:3f:58:41:5a:5d:
         eb:bb:fb:a0:d7:2a:c6:32:d7:ab:9a:60:f8:00:69:9a:24:89:
         54:e0:43:4e:67:63:79:96:5c:0e:5f:6e:61:75:63:fd:9d:44:
         9e:d1:37:da:fb:8f:9e:3d:89:6a:2e:da:ae:bc:9b:b7:b2:c5:
         7c:25:25:86:5b:04:49:b0:41:b1:b0:01:aa:1b:0f:09:d2:0e:
         f5:75:db:de:c5:bd:f7:66:10:f1:b0:3c:7f:04:bf:0b:23:02:
         56:5a:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:30:32 2025 by rpki-client