This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
File:                     FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft (raw, json)
Hash identifier:          EhlbUssHuL6/itE0fTxeuVIZBAZWb4uJniHy7caHHdw=
Subject key identifier:   83:E1:BC:D9:20:35:3A:96:85:5E:29:C1:27:C2:21:B5:C9:01:09:42
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       40E96F4C7E7803EF2657D925D1F0EC9C6BBAE733
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
Manifest number:          0347
Signing time:             Wed 31 Dec 2025 05:38:12 +0000
Manifest this update:     Wed 31 Dec 2025 05:33:12 +0000
Manifest next update:     Thu 01 Jan 2026 07:11:12 +0000
Files and hashes:         1: FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl (hash: o8ATb4SvZtD1vm07s88rcEfSmmZo0U10t26Y+KW5xrk=)
                          2: 3136382e3139352e3136382e302f32322d3234203d3e20323635343336.roa (hash: gLjzvqhIddRfRAKvMrLuHYyvGatKWXhSoNrRU1rlkBI=)
                          3: 323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (hash: TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
                          rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 07:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e9:6f:4c:7e:78:03:ef:26:57:d9:25:d1:f0:ec:9c:6b:ba:e7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Dec 31 05:33:12 2025 GMT
            Not After : Jan  1 07:11:12 2026 GMT
        Subject: CN=83E1BCD920353A96855E29C127C221B5C9010942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:f3:b4:3e:47:47:ec:45:30:06:b8:62:76:
                    1d:81:2f:b2:9d:b2:d1:97:48:47:a4:62:04:2e:46:
                    05:f8:48:eb:0e:7b:57:37:10:24:6c:ad:79:62:93:
                    95:29:ef:09:36:dc:8d:d9:4f:c4:04:69:54:87:ed:
                    55:a5:05:2a:e1:90:4d:d9:25:dd:56:43:c9:1d:cc:
                    4e:3b:3c:15:2c:45:93:28:81:27:60:81:60:02:bc:
                    c1:39:cb:70:e3:c9:67:f3:06:7b:10:71:d6:5f:09:
                    1b:75:02:c2:d7:cd:07:db:3d:45:c4:1f:85:5b:12:
                    fa:99:99:f9:26:9f:99:72:54:19:20:e0:51:4f:5a:
                    1a:d8:3b:a0:78:bb:13:ac:1f:40:e4:6a:90:f3:88:
                    41:a0:ed:f9:e8:d5:54:95:be:6d:a6:ce:d7:82:32:
                    d7:04:6b:91:14:f0:a8:28:19:1a:42:f1:c4:61:47:
                    9d:f3:c8:be:10:5e:ef:1e:da:ba:b9:fc:41:14:01:
                    63:85:79:8e:44:3f:21:51:5d:dc:a2:4d:f8:33:63:
                    4a:de:30:36:de:26:22:ab:3b:20:f3:35:89:49:9c:
                    78:29:3e:b6:32:5c:b3:7f:ec:ce:85:ad:72:40:f1:
                    17:6e:3f:9f:fc:65:5d:d2:26:fe:82:99:86:bc:fc:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E1:BC:D9:20:35:3A:96:85:5E:29:C1:27:C2:21:B5:C9:01:09:42
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:68:83:8b:51:d7:67:d4:fb:df:92:56:cc:df:8b:ff:e4:
         c0:92:14:44:90:8b:04:85:57:63:e6:f4:b1:d9:01:99:59:82:
         11:f3:af:98:cf:3b:f6:3e:8f:0d:a2:1b:c3:67:37:23:6a:83:
         46:61:26:1b:f7:fa:43:e8:20:32:62:fb:62:c0:b8:a0:e4:87:
         f0:9d:30:92:de:6d:a2:d6:15:db:ce:7d:56:9a:12:90:e4:c1:
         39:78:b9:06:85:f2:c9:c6:8c:db:47:b8:05:52:64:e0:3b:6b:
         b4:3e:7c:b6:46:06:80:a0:f0:19:0c:59:ba:27:14:af:b2:d8:
         87:b5:44:f8:c6:45:69:5f:e7:38:4a:e5:d5:60:2c:bc:0a:13:
         97:e4:89:be:01:6d:a7:65:d1:50:62:eb:76:0a:50:96:48:0a:
         7a:59:2c:9b:6a:e3:98:25:ad:10:c7:c9:96:01:82:0d:d5:78:
         29:ca:03:66:0d:90:53:10:af:d2:ef:f7:71:5c:62:fc:9a:37:
         b9:14:42:60:a4:fd:a7:6d:33:ea:90:a0:38:de:95:59:9b:57:
         46:84:e6:68:31:36:1c:49:cb:30:4a:7c:d0:c5:79:75:66:ff:
         8d:bf:e4:89:16:c5:11:fd:ab:3c:c3:d7:e7:87:be:3a:10:1b:
         06:ab:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:11:50 2025 by rpki-client