This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
File:                     FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft (raw, json)
Hash identifier:          rSyuJ4QxFZy3YjN/bm/6GkB+1UqaUbgZhtnrQE5rSfA=
Subject key identifier:   C5:48:90:DB:A1:84:B1:A4:56:C3:34:1A:58:CC:9E:A0:E7:8A:A7:23
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       3614DDFBCB634681A420868F31588BA570C33718
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
Manifest number:          0347
Signing time:             Wed 24 Dec 2025 19:40:00 +0000
Manifest this update:     Wed 24 Dec 2025 19:35:00 +0000
Manifest next update:     Thu 25 Dec 2025 21:27:00 +0000
Files and hashes:         1: 3137372e38372e38382e302f32322d3234203d3e203238333334.roa (hash: e64n4sLZBtLeJPeUzLEY+EYUZXoppfs/ossgmDdTEPQ=)
                          2: FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl (hash: GRBEzFwYmLx7vsSXTUFrBRRMSR60XGgCXn6thzs6qHc=)
                          3: 323830343a316235633a3a2f33322d3438203d3e203238333334.roa (hash: OjmYpyPCNRdUo3HTUoQwsotpmoD6ojtzqY9oBeEsPlE=)
                          4: 3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (hash: MuxS4BnEz3OAvZyyhAb2CZ4pf0m9nzjE5a7zG2BLklI=)
                          5: 3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (hash: ssF7lgdVeYo4WoEu0Et1cOFiGEBQ1Y4fCwwN0djQC5c=)
                          6: 3138392e35302e3232342e302f31392d3234203d3e203238333334.roa (hash: 0oCO5z3FprGuhSLc5dn263bOouL+eHY+61Llwm2MUbY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 21:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:14:dd:fb:cb:63:46:81:a4:20:86:8f:31:58:8b:a5:70:c3:37:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Dec 24 19:35:00 2025 GMT
            Not After : Dec 25 21:27:00 2025 GMT
        Subject: CN=C54890DBA184B1A456C3341A58CC9EA0E78AA723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:7d:4f:48:a3:16:b7:ca:08:12:e9:85:23:
                    b0:dd:6d:32:99:d4:44:e4:fc:1a:3c:7f:5b:9b:e5:
                    c4:af:8c:8d:2b:05:69:57:2b:1b:38:8c:e6:46:d2:
                    03:46:08:6d:3b:b0:6f:9b:d1:2e:27:eb:2e:fa:75:
                    38:c8:ed:d9:e5:bf:8d:6d:b4:41:b0:b0:8b:df:2a:
                    44:1f:c9:9f:6a:0d:cd:f0:b3:2d:c4:f2:e8:5e:10:
                    5b:12:77:d2:79:59:21:d9:c0:52:81:d5:37:d9:18:
                    ef:2e:f9:66:67:9f:0c:23:7e:32:4a:04:2e:3c:87:
                    b8:67:f5:93:25:1b:1f:fa:82:38:bb:f9:ff:aa:40:
                    55:b2:f0:a8:81:9d:46:fd:1b:e4:c0:c5:ae:ec:e0:
                    a1:6c:8b:e1:9f:16:fb:f3:e7:c4:3c:cb:e9:10:72:
                    58:7c:6a:42:64:4e:a0:48:0f:eb:72:71:45:eb:4c:
                    1a:12:a3:e2:7e:a7:6e:6e:ab:2c:f1:a1:cf:02:a3:
                    24:d7:d0:ae:64:87:b0:94:1f:a1:5b:ea:86:18:c2:
                    16:9c:db:a1:fa:77:f9:26:33:0a:dd:cf:a7:4e:68:
                    b5:1e:d0:e8:0e:22:e8:f7:eb:bf:c5:96:60:8d:bc:
                    96:63:6f:0a:e0:63:4b:23:74:ec:63:15:c6:54:a5:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:90:DB:A1:84:B1:A4:56:C3:34:1A:58:CC:9E:A0:E7:8A:A7:23
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:20:f0:91:91:dc:b5:43:6f:6f:c1:9e:3a:96:a7:12:37:
         f1:ed:95:eb:64:4f:76:30:cb:b0:52:54:3d:16:35:34:9d:95:
         7a:3c:77:51:6b:ef:b2:99:af:93:30:0f:39:e7:49:70:3f:db:
         86:e5:54:5c:c4:6b:fb:cb:59:09:cf:e6:94:7a:b0:f7:12:e2:
         bd:f2:f0:63:46:61:a7:c5:f8:f4:8d:4c:a3:39:66:8b:86:4e:
         8c:fd:32:3a:63:79:80:d3:b3:6a:6b:53:7a:3f:5e:34:60:ff:
         07:e5:9d:f2:87:01:69:7d:2f:f9:c0:ee:80:90:7f:5d:52:d9:
         f4:23:11:1f:b7:34:4c:9a:f3:3c:b4:ee:ba:12:26:8f:a9:0d:
         fe:3d:0b:d9:6d:09:da:c3:90:8b:bb:5c:6a:35:db:77:6d:d8:
         4a:4a:7a:ad:e0:68:ab:e2:6b:12:ed:74:8b:22:4f:17:11:f5:
         80:fe:a6:4b:91:2d:c5:e2:84:66:25:75:16:c6:bb:9a:9e:fc:
         b4:97:3a:1d:66:2a:0a:07:f0:95:da:b1:82:c9:c5:23:3e:d7:
         35:b9:71:40:0f:6f:15:cb:42:4e:60:cb:69:b7:12:83:4f:6e:
         bf:bf:06:da:49:20:76:a9:a4:1e:b7:c4:ec:44:b3:c6:07:42:
         2f:f3:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:31:29 2025 by rpki-client