This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
File:                     1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft (raw, json)
Hash identifier:          kg10aPxEeBK1K3NvryttWHJ6eeX9NDzbLmDYh/Is1u4=
Subject key identifier:   2A:90:D3:B9:FC:8A:4D:4E:FD:6A:20:C8:F1:F6:31:08:E0:FE:F5:39
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       1CBE3A0BD27E83FB3D866E5D226DF8E5A185C5F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
Manifest number:          034D
Signing time:             Mon 22 Dec 2025 17:43:09 +0000
Manifest this update:     Mon 22 Dec 2025 17:38:09 +0000
Manifest next update:     Tue 23 Dec 2025 19:06:09 +0000
Files and hashes:         1: 3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa (hash: WO+FKFMBBiOVPBQfaW1urrem7SgkrtoJJxK0M0e9ZEI=)
                          2: 1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl (hash: IjU1Ah6/wU7MDtb4+SST9kCTXYSWuwibbY+nqvzSUM0=)
                          3: 3138392e38392e3234302e302f32342d3234203d3e20323634313230.roa (hash: 2fr7r8R9lDxNrRl4/Hw4+ij8XzNMy1fJIpN7SWdKn+s=)
                          4: 323830343a323263303a3a2f33322d3430203d3e20323634313230.roa (hash: d/dDHA39Nu1q0bgvuw2F6HRvtau+Fjh+UiGSneZo8KE=)
                          5: 3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa (hash: KQ4w4HsCnS6muTAhBvT26hKjOMoO/6iO//Sml7Vi/vM=)
                          6: 3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (hash: sUu/YLPLaMu0Olqsngx/9uH8qml8jsoB7mpsGIvMI3k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 19:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:be:3a:0b:d2:7e:83:fb:3d:86:6e:5d:22:6d:f8:e5:a1:85:c5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Dec 22 17:38:09 2025 GMT
            Not After : Dec 23 19:06:09 2025 GMT
        Subject: CN=2A90D3B9FC8A4D4EFD6A20C8F1F63108E0FEF539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:35:65:93:f8:99:e9:88:d7:33:51:7b:7f:
                    a0:6a:ed:15:87:ab:b1:27:ee:be:47:4d:d5:d1:4c:
                    5e:ca:89:6e:df:fc:02:32:dd:45:bd:83:e1:e4:1c:
                    b0:3a:cf:6e:13:5c:29:41:22:87:e3:48:a1:05:8c:
                    6f:2b:6d:42:03:33:82:43:c0:cd:cc:80:5d:ce:fe:
                    47:63:53:32:20:3a:3e:70:f3:c8:de:48:76:7e:94:
                    f8:c2:ef:ea:89:2f:6e:bf:c1:50:86:d3:5b:9c:59:
                    73:fb:4e:6c:29:69:b9:c7:f8:df:ad:ef:99:b3:88:
                    dd:24:6f:f1:42:6b:91:ca:3e:fe:b0:68:a0:e2:19:
                    ed:16:9a:05:67:be:71:0a:70:31:dc:3e:27:ba:fe:
                    f4:ae:f7:8f:a3:32:60:ce:f1:c9:51:81:54:c1:72:
                    64:4d:f9:89:2e:f5:13:7c:e1:88:c8:fc:e1:01:19:
                    3c:78:29:c7:d6:48:94:90:6c:c0:0e:5f:d4:32:2f:
                    8e:e9:51:84:98:d8:7f:66:49:23:09:15:4e:de:cf:
                    f4:e9:21:b3:91:4d:3c:65:58:78:8c:ca:09:83:70:
                    32:de:0a:06:80:39:12:28:aa:01:ff:0a:fb:63:9f:
                    49:b2:78:f3:ec:9c:ff:75:6f:6a:5b:69:63:20:7d:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:90:D3:B9:FC:8A:4D:4E:FD:6A:20:C8:F1:F6:31:08:E0:FE:F5:39
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:c6:55:b8:8d:c4:49:b1:fc:bc:34:ab:b9:9f:68:d2:d5:
         7f:29:10:8e:1f:b4:39:67:e6:27:88:1f:93:98:82:d1:20:ae:
         ed:97:2d:01:b4:90:63:63:38:d7:82:44:db:3e:00:88:25:3f:
         68:79:f5:15:07:db:66:a3:ae:66:0a:99:a9:47:c3:5f:a3:43:
         95:0d:e6:ab:3c:55:a8:30:87:0e:6a:16:c0:e4:a4:c7:49:71:
         f7:46:30:e8:e4:05:b0:08:ce:94:a1:d4:f9:58:52:2f:79:ed:
         7f:5a:22:d1:f9:1b:24:8e:02:a5:72:82:f5:98:aa:c6:b3:fe:
         d3:37:32:8b:a4:c1:98:0f:05:37:6f:f8:98:31:2d:cd:7b:2d:
         21:eb:83:90:db:79:26:61:79:29:06:e3:01:55:7e:0f:2d:b3:
         48:56:0a:b5:19:ab:88:01:65:17:f1:26:b7:ff:50:66:e1:46:
         56:cd:ef:96:ff:9d:c9:1e:0b:ad:60:c8:83:d2:69:96:cf:88:
         ac:8f:00:7f:08:fb:47:57:7c:e5:d7:c0:16:ff:c0:5a:99:3c:
         ef:58:06:20:af:cd:1f:92:e2:49:11:e5:83:8b:d4:1d:ff:37:
         94:6d:4a:18:c1:d3:1e:eb:c7:98:57:a3:03:00:c2:e3:ef:f9:
         f8:fc:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 22:51:32 2025 by rpki-client