This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
File:                     AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft (raw, json)
Hash identifier:          QOq4vt3DMTyzRJ6FYlhRaKoE2KbTJsmz/d/rKiRlhZU=
Subject key identifier:   1C:73:02:71:C7:81:80:C4:E3:85:89:DA:C9:24:06:FB:81:1D:4E:2A
Authority key identifier: AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B
Certificate issuer:       /CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
Certificate serial:       74645C7B69B9803CFE9A9080A64E4B49C6F73147
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
Manifest number:          AF
Signing time:             Sat 20 Dec 2025 06:52:00 +0000
Manifest this update:     Sat 20 Dec 2025 06:47:00 +0000
Manifest next update:     Sun 21 Dec 2025 09:41:00 +0000
Files and hashes:         1: 34352e3136362e3136312e302f32342d3234203d3e20323637393835.roa (hash: 7lEgUdTmMbygr9aOy0YeXwYU6RLt//gyV5lJPML1/Z8=)
                          2: 34352e3136362e3136302e302f32322d3232203d3e20323637393835.roa (hash: h7L6GkNU/OyNow9H63ViVgR/8dQE/boYky+AS8CF/QI=)
                          3: 34352e3136362e3136322e302f32342d3234203d3e20323637393835.roa (hash: RFp+ERH8JRcpop+BMusWcds84S2PsLeR2TWZfDfEpAg=)
                          4: 323830343a353633633a3a2f33322d3332203d3e20323637393835.roa (hash: LROcD+tDs9MR6QkrWhGGZ3GqYK6zcXtsD8X4uBrtoh8=)
                          5: AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl (hash: HsZvl6mKuYqJQ1qogLOnkdquCd7DGSEMg2EjSrGfd3s=)
                          6: 34352e3136362e3136332e302f32342d3234203d3e20323637393835.roa (hash: yawP4G/X45WxHSHmzXNI13pBAL/44P9LR5GEYp5D2ys=)
                          7: 34352e3136362e3136302e302f32342d3234203d3e20323637393835.roa (hash: ANOX5RNOAj0VlP1p4A8/MfXSVnKJFxykCYSqPh0IL+E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl
                          rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:64:5c:7b:69:b9:80:3c:fe:9a:90:80:a6:4e:4b:49:c6:f7:31:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
        Validity
            Not Before: Dec 20 06:47:00 2025 GMT
            Not After : Dec 21 09:41:00 2025 GMT
        Subject: CN=1C730271C78180C4E38589DAC92406FB811D4E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:ab:c8:56:42:3f:90:59:07:75:5d:76:76:
                    47:fe:8f:81:dd:1e:b5:a2:b8:31:e0:8d:54:57:4d:
                    c5:1f:9a:e6:55:71:d9:3a:78:8c:1b:d3:66:8b:e4:
                    46:6b:75:b5:f6:00:ec:3d:e6:11:99:e0:2a:f3:30:
                    18:e3:7d:8d:c7:c8:fe:ef:db:99:bb:66:81:35:f0:
                    70:3b:85:f2:80:0a:5b:a2:d3:21:f0:24:7f:e7:9a:
                    fe:6f:86:88:7b:66:4d:c3:06:07:3c:a7:cb:bd:06:
                    42:92:ce:6e:99:35:4d:2e:ef:ee:16:3a:98:5a:9b:
                    d6:c2:45:06:2e:f5:9d:9e:ad:27:33:ae:9e:59:82:
                    e6:e2:a2:9e:3b:9c:75:54:d4:d4:7c:84:31:e0:4c:
                    9e:ed:8b:1c:e0:dc:b1:6f:c0:51:e8:c0:18:f9:56:
                    3c:1d:43:b2:60:97:4c:84:c7:3b:05:f6:86:5a:72:
                    0e:bf:45:c6:4c:2c:0b:67:2c:07:d0:dc:a6:bf:fc:
                    19:3e:41:e8:7b:86:16:21:fc:50:3b:c7:7e:dc:aa:
                    a0:0b:91:43:a4:b9:bb:11:a5:c2:6e:fd:43:f7:b9:
                    37:19:51:1c:42:8f:c4:51:b0:2e:43:a2:ef:c6:ed:
                    79:0c:92:f1:03:b0:14:7c:19:cb:5c:03:83:ce:41:
                    64:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:73:02:71:C7:81:80:C4:E3:85:89:DA:C9:24:06:FB:81:1D:4E:2A
            X509v3 Authority Key Identifier:
                keyid:AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:56:52:60:70:92:ef:c1:4b:99:ac:c0:2d:27:13:a1:56:
         5f:67:17:f5:33:4b:9d:7b:7a:8d:a0:1d:e8:ed:9c:28:e3:55:
         d4:64:7c:13:02:59:6b:b6:43:92:ac:82:ed:a8:54:d9:d7:1a:
         db:f0:c3:a3:63:74:52:8f:9f:05:6a:25:39:8f:e1:be:00:4b:
         06:82:01:f8:fe:12:c2:3f:ba:20:28:17:ac:fc:d9:e6:d0:7c:
         b1:c5:d7:43:05:7f:76:67:a4:4c:1f:6f:b2:f3:f6:27:ba:53:
         80:9b:e6:f4:2c:c1:1a:41:70:c1:10:24:4d:47:cd:f4:1b:3b:
         a9:62:6a:74:bc:90:94:e1:75:97:2b:d1:3a:ff:82:81:70:e5:
         72:3f:d7:a8:ca:29:9e:37:24:f2:bf:da:99:ab:45:cd:3b:f2:
         c8:f1:5c:44:7d:bd:89:0b:c6:85:3e:8b:d4:e6:69:07:3c:fc:
         7f:89:43:33:70:d8:a5:54:71:e6:94:9d:cf:96:39:97:ac:8b:
         28:f0:e9:5d:67:5e:7f:33:9d:e4:13:70:40:9a:a4:4d:a6:dd:
         00:e3:c9:45:f8:4a:69:f0:14:38:09:bf:8e:b2:a6:fb:1e:51:
         87:b0:35:c4:1b:b4:27:6b:ac:fc:9e:9b:16:c2:b5:05:bf:49:
         15:75:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:58:46 2025 by rpki-client