This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
File:                     3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft (raw, json)
Hash identifier:          UhNPz7RdhCM+HM5flzeAfXODcIOUaD2VS3w1RAhAmnQ=
Subject key identifier:   68:76:73:4C:B9:41:B7:74:28:24:6D:38:E0:29:A5:82:63:B9:53:69
Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F
Certificate issuer:       /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
Certificate serial:       6736C232E0F5D8C724369E37CCE1B311B8722F8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
Manifest number:          23
Signing time:             Fri 19 Dec 2025 13:41:45 +0000
Manifest this update:     Fri 19 Dec 2025 13:36:45 +0000
Manifest next update:     Sat 20 Dec 2025 17:28:45 +0000
Files and hashes:         1: 323830343a393663383a3a2f33322d313238203d3e20323734333539.roa (hash: Ytqo8wa3MR5Sf7KXr1wl+CjQS/odKyL/1MiNLCin5fk=)
                          2: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl (hash: Syhqd9oXNwPa7Ydp390Mz74p45dbFFfaFSRGMWir5JI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl
                          rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 17:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:c2:32:e0:f5:d8:c7:24:36:9e:37:cc:e1:b3:11:b8:72:2f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
        Validity
            Not Before: Dec 19 13:36:45 2025 GMT
            Not After : Dec 20 17:28:45 2025 GMT
        Subject: CN=6876734CB941B77428246D38E029A58263B95369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:8f:6f:58:2b:0f:81:38:23:50:20:fc:a4:
                    d4:46:9f:6e:a0:19:b3:d6:09:58:c2:6d:cb:f1:f7:
                    fb:9d:fe:cb:2a:01:3f:16:f2:d6:0f:a7:8f:b7:22:
                    6d:c6:cf:af:2c:b3:2f:8b:d8:a9:84:7a:5e:94:5b:
                    d2:16:46:12:25:66:f8:0a:fc:f0:9e:c1:c2:83:a3:
                    e1:95:56:fc:88:97:4a:85:3a:5c:ef:87:5c:a0:10:
                    9d:ec:84:78:3c:11:d6:4b:fb:f7:d2:fe:53:26:62:
                    97:93:84:43:33:ba:bf:9c:0b:66:98:e4:f8:5c:71:
                    dc:16:d9:a2:98:98:21:cd:63:18:d6:b3:72:3d:db:
                    d3:d0:f2:15:f8:a6:1f:9b:67:32:74:70:a0:dd:65:
                    dd:a3:4e:2d:40:54:f7:4d:12:32:96:50:54:ed:3b:
                    af:58:66:c0:c1:d2:16:57:19:a2:c1:1f:68:bc:82:
                    51:19:86:12:bd:5f:c6:0d:38:1b:6e:04:81:0b:1a:
                    88:10:d3:be:f8:8b:30:c3:e7:02:f3:84:47:96:e0:
                    9b:c8:5e:e8:63:cd:b0:67:20:51:20:73:0d:5e:65:
                    5f:13:3b:41:ce:7e:5e:f6:01:fc:bf:4d:08:85:56:
                    3c:d0:5b:68:4d:0d:27:2b:b4:6b:d8:0d:71:3e:b0:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:76:73:4C:B9:41:B7:74:28:24:6D:38:E0:29:A5:82:63:B9:53:69
            X509v3 Authority Key Identifier:
                keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:41:87:0b:2a:a1:38:98:ef:00:20:03:60:5a:9e:16:61:
         8b:73:44:ed:ae:0f:2a:de:8a:4d:88:f4:a1:89:ce:99:d7:b7:
         2e:6f:3a:a0:11:9c:38:eb:42:21:85:72:52:36:b1:d6:7d:54:
         3c:de:81:55:10:39:1f:96:0f:3f:9c:50:4b:46:2b:52:ff:9b:
         67:e8:c4:ad:fa:44:16:f2:44:2e:8f:59:8c:fc:1f:02:c3:14:
         9a:df:a6:8e:ad:a3:ba:cd:c0:35:c7:4e:de:95:38:02:b2:86:
         66:53:b4:15:0d:0c:6d:cc:2a:1f:a4:1f:0d:82:54:93:5b:b3:
         d3:54:46:65:fe:bc:3a:36:21:c5:3a:17:04:f6:c5:1c:5e:8e:
         07:17:ac:de:8e:76:85:e3:fc:e6:f8:34:7f:2a:34:47:da:c0:
         c5:f7:fd:2d:c5:0a:c8:21:e8:65:90:2e:cd:da:d7:8d:9f:67:
         e3:ae:e5:61:ad:10:79:99:6a:4f:ae:c5:ed:84:33:56:4b:cd:
         76:26:95:0d:95:62:72:b1:03:ce:03:5d:d9:aa:d5:6e:64:2f:
         72:7e:d3:6b:01:f3:74:dc:4e:5a:bf:1c:a1:4f:7c:21:cd:78:
         d9:00:74:94:81:b2:ff:5e:cc:39:4f:eb:5e:1a:b4:03:cf:bc:
         3c:99:ea:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZzbCMuD12MckNp43zOGzEbhyL4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E5RUNFMDFDQUI5QzMwNDg0MjIyNUYyNTU0Q0Y4NEY3
OTEwRjgzRjAeFw0yNTEyMTkxMzM2NDVaFw0yNTEyMjAxNzI4NDVaMDMxMTAvBgNV
BAMTKDY4NzY3MzRDQjk0MUI3NzQyODI0NkQzOEUwMjlBNTgyNjNCOTUzNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/I9vWCsPgTgjUCD8pNRGn26g
GbPWCVjCbcvx9/ud/ssqAT8W8tYPp4+3Im3Gz68ssy+L2KmEel6UW9IWRhIlZvgK
/PCewcKDo+GVVvyIl0qFOlzvh1ygEJ3shHg8EdZL+/fS/lMmYpeThEMzur+cC2aY
5PhccdwW2aKYmCHNYxjWs3I929PQ8hX4ph+bZzJ0cKDdZd2jTi1AVPdNEjKWUFTt
O69YZsDB0hZXGaLBH2i8glEZhhK9X8YNOBtuBIELGogQ0774izDD5wLzhEeW4JvI
XuhjzbBnIFEgcw1eZV8TO0HOfl72Afy/TQiFVjzQW2hNDScrtGvYDXE+sOhBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaHZzTLlBt3QoJG044CmlgmO5U2kwHwYDVR0j
BBgwFoAUOp7OAcq5wwSEIiXyVUz4T3kQ+D8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1Jt
WWEvMC8zQTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUVDRTAxQ0FCOUMzMDQ4
NDIyMjVGMjU1NENGODRGNzkxMEY4M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1JtWWEvMC8z
QTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnfRBhwsqoTiY7wAgA2BanhZhi3NE7a4PKt6KTYj0oYnOmde3Lm86oBGcOOtC
IYVyUjax1n1UPN6BVRA5H5YPP5xQS0YrUv+bZ+jErfpEFvJELo9ZjPwfAsMUmt+m
jq2jus3ANcdO3pU4ArKGZlO0FQ0MbcwqH6QfDYJUk1uz01RGZf68OjYhxToXBPbF
HF6OBxes3o52heP85vg0fyo0R9rAxff9LcUKyCHoZZAuzdrXjZ9n467lYa0QeZlq
T67F7YQzVkvNdiaVDZVicrEDzgNd2arVbmQvcn7TawHzdNxOWr8coU98Ic142QB0
lIGy/17MOU/rXhq0A8+8PJnq0w==
-----END CERTIFICATE-----