This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft
File:                     E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft (raw, json)
Hash identifier:          /PE/49bARB7vU5p4FdGRTPLm9mtZ/TfndgpCOHDucW0=
Subject key identifier:   FC:B3:17:20:E9:73:F2:A9:2B:80:FC:F4:9A:84:E7:F4:BC:70:D5:4B
Authority key identifier: E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B
Certificate issuer:       /CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
Certificate serial:       3D608FE16614E78EE95527D5D48D803F784610BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft
Manifest number:          0351
Signing time:             Mon 29 Dec 2025 05:48:22 +0000
Manifest this update:     Mon 29 Dec 2025 05:43:22 +0000
Manifest next update:     Tue 30 Dec 2025 08:30:22 +0000
Files and hashes:         1: 323830343a316532633a3a2f33322d3438203d3e20323634343132.roa (hash: zX2fImbV45Q9fdg5AiU/4GGIs1c634kEzzLrgsyGCDA=)
                          2: 3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa (hash: e8aNfx0pA42dD9erCwEmaW5DomJFSsYC2HZGirZjkMw=)
                          3: E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl (hash: HFo2m57rBB1uLw0W9Z62MJjnqkJGLPVcQxZAi7jveb4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl
                          rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 07:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:60:8f:e1:66:14:e7:8e:e9:55:27:d5:d4:8d:80:3f:78:46:10:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
        Validity
            Not Before: Dec 29 05:43:22 2025 GMT
            Not After : Dec 30 08:30:22 2025 GMT
        Subject: CN=FCB31720E973F2A92B80FCF49A84E7F4BC70D54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:5b:62:7b:fa:6a:68:c7:04:b9:ff:b2:a7:
                    26:8f:23:c9:2f:a7:83:e9:8d:53:e0:b3:7f:e7:70:
                    6e:e6:36:d9:54:20:ba:ac:e4:7e:ea:1f:d4:c6:b1:
                    51:1b:a0:a8:6d:0a:47:2b:a9:63:18:05:f3:cb:0a:
                    fe:39:58:10:a3:e5:fd:16:b3:84:4d:04:ee:83:a9:
                    84:65:f1:da:13:71:9b:a1:cf:7a:66:f6:8e:4e:de:
                    f6:b9:e6:7a:02:db:14:0d:3a:1b:c3:20:02:1b:47:
                    e7:cf:54:ad:e2:35:07:e8:a5:2e:23:2f:97:7f:38:
                    a7:c8:56:08:c3:a6:dd:bf:5a:53:6d:08:ef:72:38:
                    3b:31:3d:21:0b:f2:96:66:e1:4b:56:e2:1b:b8:03:
                    e7:3f:5e:c9:a1:d0:cf:f1:c7:f7:c8:c7:c5:3b:0b:
                    17:6f:8f:09:60:8d:46:b7:4e:14:72:25:de:bd:ec:
                    ba:b5:64:af:d6:6e:f3:1c:85:5f:37:4f:18:57:bd:
                    6a:1f:b2:89:b6:68:42:41:0b:02:09:07:be:82:5a:
                    56:24:eb:7e:60:8a:d4:35:43:85:bd:f9:2b:fe:f1:
                    37:63:a0:13:b0:14:3f:ed:24:2f:66:aa:ad:fd:be:
                    90:1a:b6:4d:d3:f1:a1:7c:26:14:db:d8:f8:8c:56:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B3:17:20:E9:73:F2:A9:2B:80:FC:F4:9A:84:E7:F4:BC:70:D5:4B
            X509v3 Authority Key Identifier:
                keyid:E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:2e:dc:60:64:83:eb:53:61:13:22:55:ac:93:12:13:fc:
         1a:71:78:d4:bb:e5:f1:1d:3e:c1:d9:be:3d:26:17:33:e4:3e:
         27:f8:af:34:55:1d:bc:ce:f1:de:91:2e:73:cb:0d:71:e2:bd:
         86:5b:0d:c8:58:2d:a2:af:55:97:f7:a9:aa:c1:b2:55:51:84:
         57:f2:01:47:49:91:8b:c5:4e:9f:fa:fb:52:bf:66:6d:9e:f6:
         fb:f4:f6:f6:32:87:de:aa:86:14:1d:30:50:cd:71:2b:fc:f3:
         32:a5:35:8f:91:52:c6:76:33:81:dc:b1:b2:96:8d:8d:1d:3a:
         01:5c:94:3f:5c:bf:f2:bb:4e:ca:cf:e5:51:9d:2e:4d:d4:51:
         62:75:3d:85:2e:41:80:51:df:d6:99:2c:ac:40:4e:99:5a:fc:
         f1:33:a7:98:47:5f:48:64:ab:1b:a6:3c:1f:f6:a4:38:8e:5c:
         a5:ba:27:42:2a:ec:bd:2a:fe:04:a4:af:28:31:41:2f:3e:b3:
         18:c1:21:26:8b:8f:a2:06:d6:76:d1:b9:ea:3f:2e:fc:6a:4b:
         35:e3:71:2f:a0:b3:fb:fe:57:59:b3:03:77:1a:95:96:85:72:
         7c:f2:c4:8b:0b:66:98:9d:5a:b2:19:79:57:bc:c2:7d:97:51:
         05:12:b9:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPWCP4WYU547pVSfV1I2AP3hGEL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTREMERERDkwRDQ0NDlEQjMyRjhGQzEwNzM4MEREQjdG
NUQwQUI0QjAeFw0yNTEyMjkwNTQzMjJaFw0yNTEyMzAwODMwMjJaMDMxMTAvBgNV
BAMTKEZDQjMxNzIwRTk3M0YyQTkyQjgwRkNGNDlBODRFN0Y0QkM3MEQ1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/d1tie/pqaMcEuf+ypyaPI8kv
p4PpjVPgs3/ncG7mNtlUILqs5H7qH9TGsVEboKhtCkcrqWMYBfPLCv45WBCj5f0W
s4RNBO6DqYRl8doTcZuhz3pm9o5O3va55noC2xQNOhvDIAIbR+fPVK3iNQfopS4j
L5d/OKfIVgjDpt2/WlNtCO9yODsxPSEL8pZm4UtW4hu4A+c/Xsmh0M/xx/fIx8U7
CxdvjwlgjUa3ThRyJd697Lq1ZK/WbvMchV83TxhXvWofsom2aEJBCwIJB76CWlYk
635gitQ1Q4W9+Sv+8TdjoBOwFD/tJC9mqq39vpAatk3T8aF8JhTb2PiMVswTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/LMXIOlz8qkrgPz0moTn9Lxw1UswHwYDVR0j
BBgwFoAU5NDd2Q1ESdsy+PwQc4Ddt/XQq0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdHSnBSWU1CbWtkVUxoekdzdkV6RmRod3NoRHByNURINTNybTVVUHB3
VWgvMS9FNEQwREREOTBENDQ0OURCMzJGOEZDMTA3MzgwRERCN0Y1RDBBQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDBEREQ5MEQ0NDQ5REIz
MkY4RkMxMDczODBEREI3RjVEMEFCNEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTdHSnBSWU1CbWtkVUxoekdzdkV6RmRod3NoRHByNURINTNybTVVUHB3VWgvMS9F
NEQwREREOTBENDQ0OURCMzJGOEZDMTA3MzgwRERCN0Y1RDBBQjRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADx4u3GBkg+tTYRMiVayTEhP8GnF41Lvl8R0+wdm+PSYXM+Q+J/ivNFUdvM7x
3pEuc8sNceK9hlsNyFgtoq9Vl/epqsGyVVGEV/IBR0mRi8VOn/r7Ur9mbZ72+/T2
9jKH3qqGFB0wUM1xK/zzMqU1j5FSxnYzgdyxspaNjR06AVyUP1y/8rtOys/lUZ0u
TdRRYnU9hS5BgFHf1pksrEBOmVr88TOnmEdfSGSrG6Y8H/akOI5cpbonQirsvSr+
BKSvKDFBLz6zGMEhJouPogbWdtG56j8u/GpLNeNxL6Cz+/5XWbMDdxqVloVyfPLE
iwtmmJ1ashl5V7zCfZdRBRK5vA==
-----END CERTIFICATE-----
Generated at Mon Dec 29 08:30:00 2025 by rpki-client