This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
File:                     22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft (raw, json)
Hash identifier:          7P6sRZPWzbiBBXnTsE+S6CA6IdchN5M14D44J2zNMRc=
Subject key identifier:   D6:98:49:41:E3:1C:3A:4B:A7:44:BB:A0:81:02:13:C0:92:92:33:04
Authority key identifier: 22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64
Certificate issuer:       /CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
Certificate serial:       10ECAED7F9336F5B942352A4FF42A0702F27135D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
Manifest number:          43
Signing time:             Fri 19 Dec 2025 16:21:35 +0000
Manifest this update:     Fri 19 Dec 2025 16:16:35 +0000
Manifest next update:     Sat 20 Dec 2025 19:37:35 +0000
Files and hashes:         1: 3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (hash: 9xv9gmzfO9NoJtk1BW70remD0QwTKEs+0p+Es1C5pKw=)
                          2: 323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa (hash: hED5A0CQHaQtuwkBTsNZjgmMFtrBEACdmZKrAXVIQn8=)
                          3: 323830343a333336343a3a2f33322d3332203d3e20323635333933.roa (hash: XEgnP2B6Yrit5DADHFdBaWJQDcP6jKpMIXaNn5ljCjE=)
                          4: 3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa (hash: D7p/XF1Sb5M/73BzDCi4sCyGUYbfrDw83aKMKoOQ0Fg=)
                          5: 323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (hash: 9x9JKVP+HdoDExBQQTPmYtRUlGgNjsBVMR3r/BbHRjc=)
                          6: 323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa (hash: mnhUtMeSbnhGWe3IfVuSohQjyISvqCrE7WtANWRKo58=)
                          7: 323830343a333336343a383230303a3a2f34302d3430203d3e20323635333933.roa (hash: h7GzGk2t7cQjlWAk5BhfduhHtkZ87HP76EywqlAwYvw=)
                          8: 3136382e3139342e3136372e302f32342d3234203d3e20323635333933.roa (hash: 1dhXS1FFlvJEQS14xAqiKucmZ1vu3cAPiUysxFtMX0E=)
                          9: 3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa (hash: ngUr4jLkiA15t1n2/cVGBZUxJLYytsRX3kNJebckvnA=)
                          10: 3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (hash: htzHUUh4GtVoA10oDEZa0ofp3Cw8wDhlfcq+ZUyPRso=)
                          11: 3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (hash: IF6Ed7Y3aPcZbdwGtRP/Cgd9kcm7PhSPpVTxMnYWvOQ=)
                          12: 323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa (hash: NOi/sSvvsUXCTqj2NHI7zgCR++/jEaSrppvbZUH4VZg=)
                          13: 323830343a333336343a3430303a3a2f34302d3430203d3e20323635333933.roa (hash: MsmqnndlvLJkZyFrtkhdBJG0wG/9ocB3ZSMfM+TD6mc=)
                          14: 22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl (hash: OSqqlTuWKHr4wjHuoIBUaFDMfVrP1Dn2xdXHUhkQrY0=)
                          15: 323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa (hash: LvmrU2Sfdi+2GpcbG4K6bKlKW5ibycUeB/rbUnC4438=)
                          16: 323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (hash: KHutm+BmQ/8CdyK2xqtN3MAK8/3qNxBvG+5pyeHe8l0=)
                          17: 3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (hash: XUTuJ7uEneoHFomzG9FUL6wIWCLB29GFJslND9eI5E8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ec:ae:d7:f9:33:6f:5b:94:23:52:a4:ff:42:a0:70:2f:27:13:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF36E328E420A19C4B5C36928D8DC7C97E7264
        Validity
            Not Before: Dec 19 16:16:35 2025 GMT
            Not After : Dec 20 19:37:35 2025 GMT
        Subject: CN=D6984941E31C3A4BA744BBA0810213C092923304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:c5:ad:5e:64:89:e8:c8:19:cb:d1:5f:7f:
                    e0:b5:f3:93:f5:36:da:c1:4b:a8:6b:fc:d6:d9:0c:
                    c6:bb:e6:96:7d:a5:e6:62:cf:fa:24:f4:f4:69:a5:
                    d6:9c:94:bb:9f:03:99:00:6a:cd:ca:c8:05:2f:9b:
                    4c:57:fd:3e:8f:57:34:a4:44:37:68:d5:db:f6:cc:
                    88:1a:58:0a:44:bc:60:4a:ee:cd:de:22:57:ae:f8:
                    a5:c6:03:10:1f:47:84:4e:39:76:0f:8c:ad:47:45:
                    a3:4f:79:01:3c:08:01:d1:12:94:a6:c7:6f:7a:f0:
                    bf:d5:83:39:b8:ce:44:39:67:57:f2:44:a6:9e:7f:
                    e3:20:21:2a:f8:23:e2:99:09:9b:67:12:66:23:b5:
                    3b:aa:42:2b:73:07:25:71:f5:66:d2:5c:00:b5:f8:
                    f7:f7:e9:31:83:93:b7:35:f8:4a:c8:4d:c2:ab:3b:
                    91:7a:41:3a:78:e5:2e:9f:08:86:3b:ae:84:4f:1f:
                    6b:36:49:3c:87:d2:ee:d2:28:c5:8f:c7:97:d8:1f:
                    17:7d:08:a5:bd:3f:e9:76:5b:58:a6:a3:eb:fa:bb:
                    14:52:7c:f1:e0:87:f5:0b:67:29:96:6d:92:01:b6:
                    f5:c5:1c:e5:ed:54:67:8b:bd:42:b0:e4:68:80:17:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:98:49:41:E3:1C:3A:4B:A7:44:BB:A0:81:02:13:C0:92:92:33:04
            X509v3 Authority Key Identifier:
                keyid:22:AF:36:E3:28:E4:20:A1:9C:4B:5C:36:92:8D:8D:C7:C9:7E:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF36E328E420A19C4B5C36928D8DC7C97E7264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/22AF36E328E420A19C4B5C36928D8DC7C97E7264.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:6d:aa:ff:79:c8:b5:aa:60:cf:dc:30:4b:ac:15:d8:20:b5:
         18:2d:ee:a1:3e:a3:31:2a:6c:1b:24:5e:cd:83:c9:84:0a:c3:
         8d:2f:e7:4d:18:bf:4e:4b:0a:c5:1e:af:21:36:26:17:89:27:
         95:f9:36:91:5c:a4:24:55:6e:b3:a6:fe:d3:54:57:af:1e:fd:
         2d:ad:10:1f:c9:19:74:13:e6:ac:04:25:a9:fa:33:c0:d9:99:
         22:1b:55:ce:a4:81:78:0b:8b:9e:d0:b0:98:e2:a9:90:94:ca:
         63:2e:cd:77:de:4f:48:0c:95:23:54:b4:0c:45:b6:88:0a:27:
         6f:93:ba:1c:64:0f:f8:9b:9d:12:ac:0b:b6:8f:73:35:18:cf:
         09:e0:ba:46:30:45:5c:d8:4d:fd:05:c1:f9:5d:ae:55:6d:0b:
         3d:9a:23:4e:6f:47:9a:f4:90:03:1e:13:14:27:c1:ae:af:34:
         3c:83:17:6e:2f:89:ba:85:28:5a:eb:ca:03:a6:be:d6:c7:25:
         40:50:59:a1:5b:1a:ff:80:c4:6f:a0:a0:b4:49:d8:e4:4f:22:
         f5:96:f3:cf:97:dd:26:45:22:fe:98:59:45:69:15:e8:dc:51:
         87:e2:46:de:3c:21:77:25:85:a4:7e:0b:a9:75:8f:74:6e:bd:
         17:d2:1d:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEOyu1/kzb1uUI1Kk/0KgcC8nE10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJBRjM2RTMyOEU0MjBBMTlDNEI1QzM2OTI4RDhEQzdD
OTdFNzI2NDAeFw0yNTEyMTkxNjE2MzVaFw0yNTEyMjAxOTM3MzVaMDMxMTAvBgNV
BAMTKEQ2OTg0OTQxRTMxQzNBNEJBNzQ0QkJBMDgxMDIxM0MwOTI5MjMzMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxsWtXmSJ6MgZy9Fff+C185P1
NtrBS6hr/NbZDMa75pZ9peZiz/ok9PRppdaclLufA5kAas3KyAUvm0xX/T6PVzSk
RDdo1dv2zIgaWApEvGBK7s3eIleu+KXGAxAfR4ROOXYPjK1HRaNPeQE8CAHREpSm
x2968L/Vgzm4zkQ5Z1fyRKaef+MgISr4I+KZCZtnEmYjtTuqQitzByVx9WbSXAC1
+Pf36TGDk7c1+ErITcKrO5F6QTp45S6fCIY7roRPH2s2STyH0u7SKMWPx5fYHxd9
CKW9P+l2W1imo+v6uxRSfPHgh/ULZymWbZIBtvXFHOXtVGeLvUKw5GiAF/vXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1phJQeMcOkunRLuggQITwJKSMwQwHwYDVR0j
BBgwFoAUIq824yjkIKGcS1w2ko2Nx8l+cmQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3Zx
ckwvMC8yMkFGMzZFMzI4RTQyMEExOUM0QjVDMzY5MjhEOERDN0M5N0U3MjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQUYzNkUzMjhFNDIwQTE5
QzRCNUMzNjkyOEQ4REM3Qzk3RTcyNjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1ZodjVjNFpFaGFmOEFMWkFOdVJ0cEdqcmpZNW4zZEU0VDJ4dms2Z3ZxckwvMC8y
MkFGMzZFMzI4RTQyMEExOUM0QjVDMzY5MjhEOERDN0M5N0U3MjY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1W2q/3nItapgz9wwS6wV2CC1GC3uoT6jMSpsGyRezYPJhArDjS/nTRi/TksK
xR6vITYmF4knlfk2kVykJFVus6b+01RXrx79La0QH8kZdBPmrAQlqfozwNmZIhtV
zqSBeAuLntCwmOKpkJTKYy7Nd95PSAyVI1S0DEW2iAonb5O6HGQP+JudEqwLto9z
NRjPCeC6RjBFXNhN/QXB+V2uVW0LPZojTm9HmvSQAx4TFCfBrq80PIMXbi+JuoUo
WuvKA6a+1sclQFBZoVsa/4DEb6CgtEnY5E8i9Zbzz5fdJkUi/phZRWkV6NxRh+JG
3jwhdyWFpH4LqXWPdG69F9IdYw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:32:31 2025 by rpki-client