This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
File:                     33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json)
Hash identifier:          kVLhBGCrgNgzg3EXRl4LpFiPwjubSX5KiR9fT8HMqtM=
Subject key identifier:   92:0D:64:99:C4:AE:1A:E1:49:D0:39:5D:7D:AD:FF:4D:E9:94:90:21
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       4B783B61F12237842C79E41F048CFD649C126B27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
Manifest number:          035D
Signing time:             Wed 31 Dec 2025 02:18:11 +0000
Manifest this update:     Wed 31 Dec 2025 02:13:11 +0000
Manifest next update:     Thu 01 Jan 2026 04:54:11 +0000
Files and hashes:         1: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: FyuyQnnbkn+2KhEmMm4GHkMhs1ubvJjJ/TSogJ/GPgg=)
                          2: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=)
                          3: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: 65XCz7a3MWKVs7zGaFWxzye5qGPakmiAev6OY53gaHU=)
                          4: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 04:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:78:3b:61:f1:22:37:84:2c:79:e4:1f:04:8c:fd:64:9c:12:6b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Dec 31 02:13:11 2025 GMT
            Not After : Jan  1 04:54:11 2026 GMT
        Subject: CN=920D6499C4AE1AE149D0395D7DADFF4DE9949021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:a7:bf:b8:81:40:52:e0:b1:fe:8a:35:80:
                    cd:10:91:e9:61:0a:f6:d6:91:f1:7d:a6:5c:00:2d:
                    63:d0:17:fc:04:61:a6:8e:e4:be:96:4d:9d:30:04:
                    7c:2c:c9:0b:3f:1e:c4:d0:01:43:47:56:e2:d0:1b:
                    fa:f0:3d:f0:2e:d4:05:30:b4:69:a5:4f:a0:09:3f:
                    99:ae:5c:98:54:bf:a7:c1:2b:07:59:25:1c:3b:7e:
                    00:e6:10:21:e4:42:27:06:28:5b:03:e0:f8:c7:63:
                    a7:d0:2e:5b:fb:cb:f0:d1:3d:a8:32:42:7a:e4:b2:
                    d1:d1:e9:af:d7:48:88:08:db:53:8d:4d:2f:9e:c0:
                    11:a4:60:cf:b0:b3:62:29:95:86:b9:d7:c3:d4:ed:
                    7d:b6:76:3b:1f:51:92:c5:75:eb:af:73:0e:a1:50:
                    bd:95:63:76:80:26:4d:06:b7:c1:04:20:a4:01:7d:
                    5a:a7:0e:60:78:72:8b:2b:5b:09:10:5a:fe:77:23:
                    8f:3d:f4:ef:25:9c:33:9e:a2:95:ee:fc:43:f5:0f:
                    b1:8c:e4:04:54:0a:69:a7:00:55:ea:54:06:f4:39:
                    c6:b8:b1:6a:a6:df:56:1e:c8:58:f4:09:5f:a7:67:
                    18:d2:ce:15:0f:b6:40:30:41:8e:cc:d3:03:a1:1d:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:64:99:C4:AE:1A:E1:49:D0:39:5D:7D:AD:FF:4D:E9:94:90:21
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:c2:a3:ac:61:9f:b6:18:e5:1d:17:bf:92:22:d9:16:4b:66:
         1e:d5:a3:53:90:e4:40:be:dc:c9:5e:88:6c:d6:6d:42:1c:36:
         f9:e7:3b:9b:c3:b1:d2:ad:a8:05:87:69:21:8c:76:a9:40:14:
         7d:d4:6f:0d:e7:6a:2b:51:56:cd:a8:48:14:b5:0a:a3:29:da:
         3b:84:84:11:89:31:78:bf:eb:ee:4c:05:8d:1f:a0:27:44:2e:
         c7:9b:c4:bb:f4:8c:c9:c5:37:93:c4:83:ad:51:13:4b:23:90:
         11:7d:08:a3:03:d3:0f:56:ca:49:60:98:17:37:fd:6a:b8:58:
         9a:0b:2b:eb:47:b7:d6:07:8b:52:0c:97:9e:16:e8:ab:99:9e:
         20:53:93:20:15:c1:b7:a8:06:5c:13:ac:ee:b3:7c:36:dd:1b:
         54:e3:95:eb:d2:55:b0:a6:c1:af:a1:a6:3e:06:3a:de:12:3c:
         ac:c7:b7:65:b8:e8:27:89:c0:d2:c0:e0:ef:41:29:af:a3:95:
         09:aa:8f:97:57:cc:d6:89:a8:03:ec:01:af:ee:1e:a3:b0:ba:
         ea:ba:8b:41:dd:32:4b:d2:d0:aa:90:d4:7e:34:6f:1e:c8:80:
         57:18:35:b0:9c:a0:4b:8c:80:18:9d:05:e2:1a:4a:03:24:06:
         0f:1f:90:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:38:39 2025 by rpki-client