This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
File:                     216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft (raw, json)
Hash identifier:          yqmbkedDYpeeL4jLdMk6uz1cyFZvQks4QeG0FpNhHwk=
Subject key identifier:   88:6F:56:47:DE:BC:AB:0D:6B:23:F4:2F:CB:91:6E:59:9C:79:34:4C
Authority key identifier: 21:66:46:11:7C:CC:EA:6B:81:BA:E6:31:DC:E8:8B:22:8D:51:A1:CF
Certificate issuer:       /CN=216646117CCCEA6B81BAE631DCE88B228D51A1CF
Certificate serial:       451AE818B960656CC4423E88D3CA9444A8F71F22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
Manifest number:          3B
Signing time:             Thu 18 Dec 2025 19:37:37 +0000
Manifest this update:     Thu 18 Dec 2025 19:32:37 +0000
Manifest next update:     Fri 19 Dec 2025 22:21:37 +0000
Files and hashes:         1: 34352e3137392e3136382e302f32322d3332203d3e20323639303932.roa (hash: fqy1yj4fqKQxeo/unqWxTyYG4rfgJw3h5Eg7k/ZI4e0=)
                          2: 216646117CCCEA6B81BAE631DCE88B228D51A1CF.crl (hash: LpaGYy9yfi/vN1VroN/u/Bcocriz3NlyeuFsav3of2I=)
                          3: 323830343a356635343a3a2f33322d313238203d3e20323639303932.roa (hash: ECsW8oJ1XGoMLfx1OL/+EgO7CYOVSo2+3YA5Ulpj0/4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 22:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1a:e8:18:b9:60:65:6c:c4:42:3e:88:d3:ca:94:44:a8:f7:1f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216646117CCCEA6B81BAE631DCE88B228D51A1CF
        Validity
            Not Before: Dec 18 19:32:37 2025 GMT
            Not After : Dec 19 22:21:37 2025 GMT
        Subject: CN=886F5647DEBCAB0D6B23F42FCB916E599C79344C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:18:a5:17:65:f8:00:44:79:1a:53:8d:0e:
                    2b:85:12:08:3f:45:f9:52:06:6b:a4:80:75:b7:bf:
                    1e:f0:5a:41:b9:25:e9:f1:17:dc:f6:9a:cc:24:a0:
                    1b:8f:d8:07:0f:0d:08:35:a7:1b:e5:a8:f0:3c:4c:
                    27:be:9c:8f:9a:83:1e:8e:29:78:d1:ab:0d:0a:b1:
                    71:78:c5:d2:a0:fc:e5:09:ee:61:bc:4c:8a:73:a3:
                    50:5b:03:25:c2:c0:65:1c:36:08:eb:5e:ec:92:7b:
                    8d:ce:22:cd:e4:3c:bc:44:f1:d8:47:15:02:40:6b:
                    58:17:32:d3:99:2a:af:aa:c8:9f:0e:c3:cd:31:0a:
                    c6:08:1e:74:79:b7:8e:1f:57:3c:fa:e9:84:bd:76:
                    2a:19:ee:ef:37:c9:17:13:86:7f:28:92:ed:5d:66:
                    f2:ee:50:41:03:5d:31:5e:b0:2a:d9:55:05:c1:02:
                    7d:8c:45:0f:39:91:e0:4d:b9:be:17:51:62:a4:d0:
                    d9:6d:09:89:8f:6a:ca:d8:94:dd:2d:14:20:a1:c7:
                    3e:09:43:55:4f:0f:02:d4:8f:37:49:22:82:f9:66:
                    d5:35:3d:6e:2d:aa:c7:42:e4:97:b6:db:92:77:5c:
                    52:20:55:24:82:af:8d:89:b9:23:b6:55:1d:7a:d1:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6F:56:47:DE:BC:AB:0D:6B:23:F4:2F:CB:91:6E:59:9C:79:34:4C
            X509v3 Authority Key Identifier:
                keyid:21:66:46:11:7C:CC:EA:6B:81:BA:E6:31:DC:E8:8B:22:8D:51:A1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:72:de:01:2d:96:59:49:6d:a2:79:91:e2:4b:36:5c:c8:78:
         c7:16:14:50:3f:ac:21:ea:a3:e1:94:17:63:cf:3a:41:55:2a:
         42:13:a4:54:f2:fc:6b:13:36:74:19:09:13:ce:e8:85:48:94:
         5b:e7:a1:9e:fd:52:da:0c:a0:17:f3:d4:eb:9b:49:64:90:70:
         36:f7:31:96:f1:dd:eb:1f:92:0a:a1:27:32:12:58:86:1f:4a:
         86:9b:16:bc:bc:6e:20:21:e6:94:06:9d:3e:ed:be:aa:99:2f:
         fe:3a:22:49:37:eb:b3:1b:ba:d4:50:c7:fa:6f:70:0a:09:52:
         2d:07:04:28:2c:b4:bb:6e:70:66:e8:c8:c3:6c:15:9f:eb:14:
         d7:1f:ae:b6:3e:2a:9c:e9:4a:e5:21:db:6e:4b:aa:c7:bf:b6:
         42:12:9d:8b:2b:28:8f:78:f7:9a:51:8c:d9:f3:09:10:a9:a8:
         ae:e9:3c:b5:d4:d2:c6:34:6a:d5:41:5e:0d:de:07:58:30:49:
         65:b8:bf:bb:93:c2:f0:dd:cf:83:62:a9:3f:ae:8f:ec:15:4e:
         15:83:40:e0:51:94:f0:52:b3:e8:e6:18:b2:3d:84:50:56:93:
         6f:a9:12:bb:5f:4a:e4:36:c6:3a:5d:b8:ec:37:b7:4f:13:d4:
         e7:82:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:40:05 2025 by rpki-client