This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
File:                     3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft (raw, json)
Hash identifier:          cke6ozDRmYO4VADHvN44SekhKBPNdNcgIjoDaYRKqWE=
Subject key identifier:   7E:A8:4C:29:2E:B2:85:CF:F0:C1:94:D3:26:4B:49:51:13:87:A7:22
Authority key identifier: 3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Certificate issuer:       /CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
Certificate serial:       3AB385AFEAC46F266F3BE90AA248F855F7021FC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
Manifest number:          02C2
Signing time:             Tue 23 Dec 2025 12:39:15 +0000
Manifest this update:     Tue 23 Dec 2025 12:34:15 +0000
Manifest next update:     Wed 24 Dec 2025 13:33:15 +0000
Files and hashes:         1: 323830343a336663633a3a2f33322d313238203d3e20323635393135.roa (hash: IqZiGjuwlwLCeDHTutM5pp1/892ZrhTDRe59rjwMYak=)
                          2: 3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl (hash: 20gM+dfG76dulvs9d0m60e4tb5WAxw1/UsnNaf0vfa0=)
                          3: 3133312e3139362e3136382e302f32322d3332203d3e20323635393135.roa (hash: M7pdtYs6Nb3rw+nJtbBZzxuLhgUtWYawsz/eaqx2qxA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl
                          rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 13:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b3:85:af:ea:c4:6f:26:6f:3b:e9:0a:a2:48:f8:55:f7:02:1f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
        Validity
            Not Before: Dec 23 12:34:15 2025 GMT
            Not After : Dec 24 13:33:15 2025 GMT
        Subject: CN=7EA84C292EB285CFF0C194D3264B49511387A722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:cf:6c:8f:cd:45:53:d2:ed:2a:8d:0e:b5:
                    ea:fa:78:bd:b5:7c:e1:0d:af:39:83:d2:33:13:5b:
                    25:2a:50:0b:68:fa:ca:00:ab:8f:24:7a:32:e0:7b:
                    d9:cf:b2:03:00:68:a3:50:20:0a:8b:25:cc:8c:3e:
                    3e:48:f9:f5:22:2d:ac:23:45:42:ea:5e:90:22:88:
                    52:03:04:44:6e:db:9d:b3:9c:a9:5c:d0:90:36:a7:
                    e7:b6:5d:e1:73:be:99:56:de:6b:72:91:db:b4:78:
                    1b:0f:fc:70:12:fb:35:b9:f3:c0:a3:a5:30:6c:ff:
                    bb:0a:f1:14:5d:73:95:32:d3:6d:f8:ac:56:c1:07:
                    93:d5:9e:e0:1c:f4:23:97:18:e3:54:5a:ca:22:8e:
                    b3:e3:e7:b4:1a:6f:45:03:c0:3f:e1:9b:f8:d9:a2:
                    d5:01:2d:fc:c9:9c:d0:60:84:37:f3:46:46:c7:b4:
                    75:aa:13:f5:1b:6c:9f:59:03:18:b8:6f:67:7b:01:
                    4f:1f:3f:3d:6a:53:be:f9:ad:db:13:0c:71:b7:f0:
                    21:fb:67:ee:fb:fd:33:ac:31:0d:9c:c7:e3:ff:1d:
                    c3:43:89:2c:ba:0e:e3:c5:19:dd:f2:e6:81:5c:59:
                    1b:ee:bd:43:bb:0c:09:8b:d8:c2:66:47:e4:a6:ca:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:4C:29:2E:B2:85:CF:F0:C1:94:D3:26:4B:49:51:13:87:A7:22
            X509v3 Authority Key Identifier:
                keyid:3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:4c:08:8f:d1:9a:93:40:c9:ca:99:f4:f4:a5:a6:90:7f:
         eb:5c:76:a1:6c:b8:26:62:d1:b6:36:8c:24:f9:bb:60:c5:35:
         e6:9d:24:52:15:3d:bb:a2:35:26:6e:e3:a9:15:94:49:07:3b:
         46:0a:d5:f8:db:5c:99:be:60:a2:85:bc:1f:83:aa:53:ab:39:
         ab:07:76:90:6a:6d:c2:de:27:07:8c:17:96:92:58:e8:cc:d2:
         6c:64:3a:37:65:2b:4d:b5:80:f3:9d:cd:bd:f9:a6:49:88:e7:
         0e:43:63:0a:28:5d:ae:3b:d3:d1:24:34:f1:4a:a0:88:4e:62:
         08:1a:d7:e1:5f:83:b2:f7:78:d0:e8:78:bb:3f:d4:8d:9b:0c:
         3f:6d:cf:ee:1c:5a:79:af:ca:7a:ea:2c:32:a4:e5:91:e3:bb:
         b7:5a:81:45:db:78:a2:4e:5e:3f:c6:20:5e:90:d9:16:75:50:
         29:a5:a4:a5:ca:56:61:66:db:31:69:88:a4:6f:0e:99:a5:35:
         e9:6b:e7:86:73:f5:ac:5e:b4:92:6f:ce:a5:bb:8b:3a:19:0f:
         26:17:7f:7f:e9:0c:f9:87:18:85:3b:25:d0:ae:04:ed:60:57:
         09:bc:08:ff:82:3c:da:93:a9:c5:e4:ed:20:cd:4b:23:a1:88:
         fe:4e:bd:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOrOFr+rEbyZvO+kKokj4VfcCH8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JEQ0JGNzNBOUZEMDJERTU1QURDOTA3N0IyMTZFMjhF
QzY0NTkyQTAeFw0yNTEyMjMxMjM0MTVaFw0yNTEyMjQxMzMzMTVaMDMxMTAvBgNV
BAMTKDdFQTg0QzI5MkVCMjg1Q0ZGMEMxOTREMzI2NEI0OTUxMTM4N0E3MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkM9sj81FU9LtKo0Oter6eL21
fOENrzmD0jMTWyUqUAto+soAq48kejLge9nPsgMAaKNQIAqLJcyMPj5I+fUiLawj
RULqXpAiiFIDBERu252znKlc0JA2p+e2XeFzvplW3mtykdu0eBsP/HAS+zW588Cj
pTBs/7sK8RRdc5Uy0234rFbBB5PVnuAc9COXGONUWsoijrPj57Qab0UDwD/hm/jZ
otUBLfzJnNBghDfzRkbHtHWqE/UbbJ9ZAxi4b2d7AU8fPz1qU775rdsTDHG38CH7
Z+77/TOsMQ2cx+P/HcNDiSy6DuPFGd3y5oFcWRvuvUO7DAmL2MJmR+SmynOfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfqhMKS6yhc/wwZTTJktJUROHpyIwHwYDVR0j
BBgwFoAUO9y/c6n9At5VrckHeyFuKOxkWSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUI5VVRHZVhFRGFSSkVMWkJucGJTbnBBQmpXaXZ5NkNLWHdOV0V5YzdM
a1EvMC8zQkRDQkY3M0E5RkQwMkRFNTVBREM5MDc3QjIxNkUyOEVDNjQ1OTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCRENCRjczQTlGRDAyREU1
NUFEQzkwNzdCMjE2RTI4RUM2NDU5MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUI5VVRHZVhFRGFSSkVMWkJucGJTbnBBQmpXaXZ5NkNLWHdOV0V5YzdMa1EvMC8z
QkRDQkY3M0E5RkQwMkRFNTVBREM5MDc3QjIxNkUyOEVDNjQ1OTJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABT9MCI/RmpNAycqZ9PSlppB/61x2oWy4JmLRtjaMJPm7YMU15p0kUhU9u6I1
Jm7jqRWUSQc7RgrV+Ntcmb5gooW8H4OqU6s5qwd2kGptwt4nB4wXlpJY6MzSbGQ6
N2UrTbWA853NvfmmSYjnDkNjCihdrjvT0SQ08UqgiE5iCBrX4V+Dsvd40Oh4uz/U
jZsMP23P7hxaea/KeuosMqTlkeO7t1qBRdt4ok5eP8YgXpDZFnVQKaWkpcpWYWbb
MWmIpG8OmaU16WvnhnP1rF60km/OpbuLOhkPJhd/f+kM+YcYhTsl0K4E7WBXCbwI
/4I82pOpxeTtIM1LI6GI/k69hg==
-----END CERTIFICATE-----
Generated at Wed Dec 24 04:48:53 2025 by rpki-client