This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
File:                     C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft (raw, json)
Hash identifier:          LGV+XrwiPiLFRANZ1R/gVBvJ9j2VMzH1rGyPgvI2Xt0=
Subject key identifier:   C5:82:7A:BD:70:56:09:3E:11:E8:D0:E2:05:A7:91:72:11:E5:5F:99
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Certificate issuer:       /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial:       70C6053169B5B7C1EEB7354CE3168856EC47A228
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
Manifest number:          0340
Signing time:             Thu 25 Dec 2025 04:20:32 +0000
Manifest this update:     Thu 25 Dec 2025 04:15:32 +0000
Manifest next update:     Fri 26 Dec 2025 08:11:32 +0000
Files and hashes:         1: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: UhTWnyVMbYu8EHBAglnDBIow7lLgfSvBg43ee63dnW4=)
                          2: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: cYRnXeUL77tbZZROt3Wn+JGjwSu2QmTDm/qcgCbUuRs=)
                          3: C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl (hash: 8wdJVvCfmq57r61mk+n+PVOEPHt2D0RyEFbHJyx9Cts=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 03:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c6:05:31:69:b5:b7:c1:ee:b7:35:4c:e3:16:88:56:ec:47:a2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
        Validity
            Not Before: Dec 25 04:15:32 2025 GMT
            Not After : Dec 26 08:11:32 2025 GMT
        Subject: CN=C5827ABD7056093E11E8D0E205A7917211E55F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:8c:26:48:9a:b6:d3:a3:0e:86:57:c5:86:
                    33:fc:e3:32:65:d2:15:03:37:70:ab:2d:63:c7:51:
                    15:9d:b8:33:10:c3:26:84:20:d1:3c:90:7d:1a:4e:
                    cb:06:1d:f0:85:8c:69:fd:0a:14:78:18:8b:1e:79:
                    20:5d:7f:94:cb:68:3a:1e:e0:a3:f1:3a:bf:4b:cb:
                    7d:0a:9f:01:47:96:7a:c4:f6:f0:47:0a:c0:05:45:
                    04:e3:c0:2f:06:97:24:b9:54:95:18:e3:3c:11:ee:
                    14:34:10:9f:35:f1:cc:fc:de:3c:f9:41:7b:86:58:
                    7c:bd:1a:2f:ce:b2:fe:60:6f:92:ce:1d:bc:68:ec:
                    7c:86:ba:a2:4d:e6:1b:9f:6a:7a:89:45:ba:0f:0a:
                    63:23:0b:71:11:97:6f:99:51:0f:ab:38:76:9f:47:
                    49:aa:6e:ee:9e:6f:9c:a7:05:e8:72:80:e8:2b:07:
                    e3:4d:6b:8a:b0:ad:96:0d:e3:66:a2:1a:50:41:75:
                    1e:44:29:75:9f:a0:02:3d:ee:77:47:36:5a:36:00:
                    0b:09:b0:82:56:44:ea:6c:17:00:f6:f9:56:f3:5d:
                    d9:fe:e4:e4:5f:d8:67:2f:be:9c:8e:8c:7c:ad:4d:
                    1e:5e:63:8d:f6:7b:78:24:49:62:d9:70:c1:b1:ca:
                    79:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:82:7A:BD:70:56:09:3E:11:E8:D0:E2:05:A7:91:72:11:E5:5F:99
            X509v3 Authority Key Identifier:
                keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:5b:08:02:14:05:97:43:f4:02:a8:6a:1d:39:77:9e:a0:
         de:d0:61:e7:42:70:b6:b3:26:94:9c:bf:4f:0b:0e:b7:01:8b:
         6a:5f:33:fa:39:a8:e3:de:3b:65:7f:11:d6:2c:0f:04:41:b3:
         38:84:34:e7:4e:54:2b:c7:fa:7f:e4:ad:99:ca:bb:4f:4e:b5:
         72:75:64:91:ab:1b:5c:9b:b2:4c:14:9a:f9:ed:13:6b:6b:8b:
         71:5e:54:e2:6c:4a:61:7e:2a:fa:59:ff:15:5d:1f:93:fd:b8:
         83:b8:8b:b2:0b:9c:3b:6f:b8:7c:8c:c9:1e:ad:05:91:ce:41:
         c1:2f:38:1b:af:e0:91:a7:7e:40:c0:8a:78:a3:ba:c2:62:cf:
         9b:ac:1c:0f:ab:b5:04:90:43:78:7c:29:b6:29:37:47:d9:70:
         f7:05:17:5a:ed:1b:0f:b0:f5:57:d9:67:aa:2d:1b:fb:84:92:
         d5:b3:f2:46:72:99:68:78:1a:eb:5a:44:53:e7:8b:ba:ea:9c:
         9a:61:4a:2e:e9:1a:0e:6e:73:03:16:92:d1:d6:48:86:8a:53:
         fe:a1:d7:68:aa:e0:fd:68:55:88:bc:fd:a5:02:01:c8:24:f2:
         46:83:a5:34:93:1a:02:f9:c2:df:2c:c4:c5:64:a8:b2:b1:e2:
         dc:79:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:37:06 2025 by rpki-client