This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.mft
File:                     95E83C1EC29F8251CA035F581B61B808604EC59D.mft (raw, json)
Hash identifier:          ub2zqxEyvQqyEzMcI/KGoYHTp8QbARzvQzg2xPvve8Q=
Subject key identifier:   B3:58:66:81:DE:D0:16:AE:A5:FB:0A:67:8B:24:E4:8D:B9:8E:6F:C2
Authority key identifier: 95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D
Certificate issuer:       /CN=95E83C1EC29F8251CA035F581B61B808604EC59D
Certificate serial:       45D9F6DF3013550958DB0DF3EFACD6B990823C64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.mft
Manifest number:          0348
Signing time:             Sun 21 Dec 2025 11:07:44 +0000
Manifest this update:     Sun 21 Dec 2025 11:02:44 +0000
Manifest next update:     Mon 22 Dec 2025 11:41:44 +0000
Files and hashes:         1: 95E83C1EC29F8251CA035F581B61B808604EC59D.crl (hash: 01jJJisXipr48Tv/xYIdZuHzTGc2BbalHt31YlFbu2c=)
                          2: 323830343a343334633a3a2f33322d3334203d3e20323637353631.roa (hash: +mX59NMIaX5R64LXlD3cQXaX5rONei5QG916R6NdIlw=)
                          3: 34352e37302e3131322e302f32322d3234203d3e20323637353631.roa (hash: MDjTNkZbjA64kCumF+cddtcpIQhvLzj8pwuq029uouY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl
                          rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 11:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d9:f6:df:30:13:55:09:58:db:0d:f3:ef:ac:d6:b9:90:82:3c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E83C1EC29F8251CA035F581B61B808604EC59D
        Validity
            Not Before: Dec 21 11:02:44 2025 GMT
            Not After : Dec 22 11:41:44 2025 GMT
        Subject: CN=B3586681DED016AEA5FB0A678B24E48DB98E6FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:39:b6:da:7b:b2:2b:a9:f3:19:eb:dd:fb:
                    ca:ca:4c:5c:e8:d4:80:6a:c2:0d:7f:75:9f:d6:1f:
                    9d:c3:d0:8f:4f:5f:99:23:88:02:82:54:51:98:5e:
                    71:ce:0b:7e:56:aa:f6:0c:59:52:a4:8b:7e:a3:c9:
                    dc:81:44:e8:db:c9:c5:21:c1:5c:2e:b3:cb:39:b0:
                    af:f1:65:a9:32:34:65:76:3f:3a:c8:65:e1:35:e4:
                    16:ff:e1:12:2f:34:af:0d:50:48:2c:8f:7c:ae:fe:
                    1f:ce:ac:a6:f0:ee:fd:a2:32:fa:6a:8d:d3:cb:c3:
                    fb:48:ca:79:eb:48:da:6b:05:87:cb:25:0d:5b:f8:
                    e7:37:d1:ba:47:d1:00:ea:99:e0:85:31:49:7e:92:
                    8d:a7:64:cd:ea:b6:72:e3:f3:cf:bd:75:ba:aa:54:
                    53:3c:e3:cc:f4:b7:2b:e3:6b:97:94:d0:1c:5d:52:
                    ae:8e:a8:3a:f0:d3:cd:e3:00:48:4c:d7:9f:8b:de:
                    ac:ff:38:54:e7:a9:81:4d:78:18:49:69:9e:4f:11:
                    97:e1:2e:f5:98:ee:86:ac:9b:2a:44:2b:dc:9d:f1:
                    26:0f:20:ad:49:f8:f4:b6:48:db:21:51:68:a3:5b:
                    73:a4:ec:5a:ae:02:1b:00:3f:b9:b9:32:41:f5:56:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:66:81:DE:D0:16:AE:A5:FB:0A:67:8B:24:E4:8D:B9:8E:6F:C2
            X509v3 Authority Key Identifier:
                keyid:95:E8:3C:1E:C2:9F:82:51:CA:03:5F:58:1B:61:B8:08:60:4E:C5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95E83C1EC29F8251CA035F581B61B808604EC59D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/1/95E83C1EC29F8251CA035F581B61B808604EC59D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:4d:ae:f4:8d:cb:6f:09:6a:95:0f:cb:f3:f6:c7:4a:af:
         dd:c9:c1:3d:9f:c6:62:71:56:2c:59:3d:d6:7a:4f:57:11:9f:
         c1:26:91:d1:0f:6a:63:8b:d0:da:88:42:8d:7c:e7:6f:ca:a7:
         96:a8:f5:25:ce:d6:b2:27:1d:97:aa:95:79:6c:cb:b8:b0:65:
         98:d2:3c:24:9c:9f:39:f4:f5:21:0e:63:e4:c3:d8:28:1a:39:
         e5:3a:e9:50:38:77:be:e5:30:d2:df:eb:66:36:80:ff:59:3f:
         3e:ed:15:ae:49:25:bd:cd:be:7d:f0:52:15:b7:42:a5:6b:42:
         cf:c2:95:48:d0:0d:b3:2b:12:35:f4:1f:2c:e7:63:59:d0:51:
         95:75:38:9c:57:2e:ec:49:4c:bf:1f:9d:5f:c0:1a:42:c0:43:
         4b:3a:ce:84:f4:93:8d:fa:ec:f5:85:10:f1:85:b7:76:89:26:
         93:8b:4b:aa:eb:66:42:80:35:63:11:cd:4a:27:cf:be:6f:f9:
         67:95:c3:23:ce:31:e1:69:3c:f7:ea:83:95:2c:bd:13:a5:96:
         a5:1b:ea:64:85:0c:9e:39:bd:14:f1:04:61:90:24:a2:bb:17:
         4d:f5:c6:c7:fc:22:c6:2f:b9:f6:84:11:f2:81:06:6e:4d:63:
         92:e8:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:08:35 2025 by rpki-client