This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
File:                     1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft (raw, json)
Hash identifier:          Qf+bEbWqffuLWb6LrDIMxxwK4oDuWThg+T+uWX5DJkY=
Subject key identifier:   2B:16:1C:CD:E5:96:E5:EE:BF:10:F5:54:61:5C:D0:CA:A7:B2:69:D8
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       1972E098CE260EF35A3119B0A66822B70B04A611
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
Manifest number:          0349
Signing time:             Fri 19 Dec 2025 16:12:11 +0000
Manifest this update:     Fri 19 Dec 2025 16:07:11 +0000
Manifest next update:     Sat 20 Dec 2025 18:58:11 +0000
Files and hashes:         1: 1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl (hash: /opPO43nXBcY0gj5+vCaJBlZPIYBF9XoQewo/QoArqU=)
                          2: 3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa (hash: KQ4w4HsCnS6muTAhBvT26hKjOMoO/6iO//Sml7Vi/vM=)
                          3: 3138392e38392e3234302e302f32342d3234203d3e20323634313230.roa (hash: 2fr7r8R9lDxNrRl4/Hw4+ij8XzNMy1fJIpN7SWdKn+s=)
                          4: 323830343a323263303a3a2f33322d3430203d3e20323634313230.roa (hash: d/dDHA39Nu1q0bgvuw2F6HRvtau+Fjh+UiGSneZo8KE=)
                          5: 3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa (hash: WO+FKFMBBiOVPBQfaW1urrem7SgkrtoJJxK0M0e9ZEI=)
                          6: 3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (hash: sUu/YLPLaMu0Olqsngx/9uH8qml8jsoB7mpsGIvMI3k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 18:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:e0:98:ce:26:0e:f3:5a:31:19:b0:a6:68:22:b7:0b:04:a6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Dec 19 16:07:11 2025 GMT
            Not After : Dec 20 18:58:11 2025 GMT
        Subject: CN=2B161CCDE596E5EEBF10F554615CD0CAA7B269D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:e8:52:03:02:40:aa:b9:1d:2a:26:04:fc:
                    5a:fb:76:03:2c:bf:96:19:3d:7b:b5:df:a7:5b:44:
                    e8:f5:5a:4f:68:38:71:f3:d4:ef:af:4d:48:ed:9c:
                    5b:4a:70:0d:d2:27:c6:0e:4b:2a:cb:17:cd:3a:a1:
                    58:bf:6a:f2:91:11:58:42:af:6a:3e:85:14:2a:2d:
                    96:0e:e4:37:af:d9:d6:07:50:7e:15:b2:06:3a:58:
                    26:e9:99:92:df:5b:17:69:4b:96:59:a6:36:30:c9:
                    4b:24:81:f4:65:0d:10:f2:00:ab:36:ea:8e:a0:e5:
                    dd:8f:e8:49:27:4d:b5:18:b4:f9:92:06:19:e5:e8:
                    76:56:34:9b:3f:33:69:91:02:86:6f:19:cf:4d:c9:
                    9b:62:1a:2d:ca:b5:ba:56:b2:e4:4c:f1:3b:00:a9:
                    b3:93:9f:8d:f5:48:83:48:04:6c:9a:5b:fa:9f:46:
                    77:7c:f9:e4:17:9f:52:27:40:7e:f6:0e:1c:78:50:
                    d3:bc:4b:82:d3:7d:f2:93:3a:07:9f:b1:fc:d5:00:
                    c1:30:8c:c6:f2:6e:71:c0:84:1f:70:cc:04:4b:0c:
                    fc:a7:13:57:69:80:97:09:33:a3:02:41:f5:52:ef:
                    9f:d5:9f:22:62:01:fb:2b:62:21:a1:1f:ce:50:a2:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:16:1C:CD:E5:96:E5:EE:BF:10:F5:54:61:5C:D0:CA:A7:B2:69:D8
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:36:25:a0:9b:3a:05:bb:e4:a7:7d:9d:75:3d:95:23:4b:7f:
         10:14:60:49:59:3b:67:17:e3:d4:cd:d0:83:59:5e:d9:23:9e:
         7e:b0:d3:8d:d5:26:d3:dc:b9:29:82:a2:b6:7c:dc:ec:4d:c6:
         a8:18:e9:41:b5:0e:96:a2:78:6a:af:0e:82:b0:60:bf:aa:c7:
         e1:62:19:9d:25:1b:a2:52:c5:89:3d:68:12:a4:a5:d6:9c:86:
         f4:30:fd:c7:a3:5b:2d:6a:fa:9a:73:9f:d1:fa:28:63:50:74:
         26:ce:1f:8d:a9:c9:e8:3c:b0:65:cb:6d:b1:63:39:17:7d:3e:
         73:db:70:d9:7f:cd:90:d7:5b:bb:d1:e7:4a:94:1b:7a:cb:eb:
         54:03:d1:a5:3f:98:7c:f4:84:96:83:39:65:7e:58:bd:d2:3a:
         05:40:e5:52:db:f7:6e:7b:fc:04:77:01:f1:2a:62:c8:6c:97:
         56:fd:48:4d:38:b0:3a:3b:71:31:f4:fe:bc:f8:e4:c9:b1:9d:
         60:5d:97:71:8e:12:6c:d8:31:0e:75:c3:b9:e9:19:71:26:f2:
         0d:70:66:ea:d5:ce:79:fa:bd:35:03:ca:1a:a9:bf:84:ff:37:
         4d:00:67:14:45:4c:ff:36:b9:73:9c:8a:08:1c:0a:df:85:fd:
         cb:32:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:25:19 2025 by rpki-client