This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
File:                     95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft (raw, json)
Hash identifier:          qO4W6MsPNX5iOi44gZn8+LCMepoO3UnyZytWPdYffrE=
Subject key identifier:   A1:84:61:6E:F8:30:FA:FA:42:41:2D:75:88:3E:43:18:B5:5C:5E:03
Authority key identifier: 95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62
Certificate issuer:       /CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62
Certificate serial:       32E5631AAC9FF2FCF1DBAA660F87107DA8CFFBD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
Manifest number:          0345
Signing time:             Fri 26 Dec 2025 21:30:42 +0000
Manifest this update:     Fri 26 Dec 2025 21:25:42 +0000
Manifest next update:     Sun 28 Dec 2025 00:56:42 +0000
Files and hashes:         1: 95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl (hash: 0sFv/y2K0LjvwDk0uXgAxKi+lvplIW5tNpbASJSiAKw=)
                          2: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: tyETCmyQLN1Mwuz9ll9pHgT2sn2m8Myg4vngYVoyBGM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl
                          rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Dec 2025 00:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e5:63:1a:ac:9f:f2:fc:f1:db:aa:66:0f:87:10:7d:a8:cf:fb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62
        Validity
            Not Before: Dec 26 21:25:42 2025 GMT
            Not After : Dec 28 00:56:42 2025 GMT
        Subject: CN=A184616EF830FAFA42412D75883E4318B55C5E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:39:c6:c6:5d:ab:54:ec:d3:0f:eb:f1:da:
                    e7:3b:14:ac:49:5c:76:7f:a5:b4:0d:3c:fd:29:3f:
                    56:4a:6c:e9:01:d3:68:69:b7:3b:58:bb:7a:7e:c7:
                    bc:a5:70:8f:6c:b7:ab:41:37:28:7f:72:bf:e5:b0:
                    7e:df:74:a0:58:5c:8b:e3:93:0a:be:82:1c:79:b5:
                    b8:40:25:a8:ac:4d:38:83:49:13:c2:99:d8:11:59:
                    00:5a:f9:9d:c8:75:6d:ed:43:0c:83:cc:83:5a:1d:
                    84:ef:ff:62:02:21:c7:12:cf:0e:2e:fa:df:ba:ae:
                    53:c5:9f:5d:79:48:bb:e7:70:92:38:fc:0a:eb:c0:
                    37:f9:82:35:cb:8c:5c:d6:98:75:86:01:a7:0f:c2:
                    61:a3:ef:21:1b:06:6d:23:63:d3:8c:c3:22:2c:6e:
                    e8:80:81:a1:58:80:2b:6b:2e:ff:03:a0:cf:7e:59:
                    76:d2:5f:ec:7a:6e:4b:b5:95:b5:6c:b1:58:c1:91:
                    7f:b2:8f:c4:3b:d6:13:d1:84:97:62:03:e2:b2:88:
                    a2:b6:e9:13:fe:8d:c9:4d:19:9c:cb:5d:f7:a7:4a:
                    ec:cc:07:2b:f7:39:fe:ca:c7:ad:5f:02:74:3e:f7:
                    b9:28:5f:4c:ef:76:50:26:9e:86:0c:12:ba:1f:21:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:84:61:6E:F8:30:FA:FA:42:41:2D:75:88:3E:43:18:B5:5C:5E:03
            X509v3 Authority Key Identifier:
                keyid:95:FB:4F:79:54:A7:9C:3E:AE:B9:15:5C:B5:F4:F2:47:D2:B0:6D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/1/95FB4F7954A79C3EAEB9155CB5F4F247D2B06D62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:41:df:73:91:4d:63:1c:e2:b5:be:0a:ce:13:2d:a4:64:6e:
         1f:9e:3b:82:46:0f:ce:ca:39:80:3e:82:fd:31:cc:9a:53:02:
         ee:36:79:b1:bb:27:9c:7f:34:b0:59:0b:cb:bd:19:34:65:6c:
         fb:77:49:e6:0f:4d:be:4d:8c:db:fa:03:76:86:0c:a8:7a:ab:
         19:4d:86:f6:62:6a:36:82:7d:85:b0:fc:dc:82:61:a8:7e:e0:
         9e:f4:14:4d:8b:d8:21:0b:46:b5:7c:c5:bc:19:d2:43:90:bb:
         a8:b1:a8:d2:4b:d9:a7:e7:ff:82:a9:55:f2:20:50:e4:c6:22:
         97:6d:37:d5:c7:42:9d:45:55:e0:f7:9f:61:98:f6:03:cf:a4:
         71:6e:22:c9:89:50:f4:cd:fd:ea:13:13:f2:87:53:a0:93:23:
         08:71:ff:6e:11:0b:94:8f:f2:70:b6:b4:65:e4:19:92:f2:20:
         81:e9:99:5b:eb:c7:c1:a7:0d:36:56:cb:a1:c5:ab:ae:98:00:
         98:15:0d:d7:2c:48:a2:70:6e:91:ba:79:db:2b:c2:e2:ad:c1:
         d9:9f:80:74:f9:1e:11:f6:07:8e:14:6d:e2:22:1e:e0:1b:bb:
         f9:91:f2:85:7f:49:0f:35:17:46:26:2c:10:19:ce:86:9c:ce:
         a3:53:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:51:43 2025 by rpki-client