This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File:                     3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier:          KypiYXicVIKeXWp76oXQG2gztrt4jJnynDEovKl6Z1I=
Subject key identifier:   70:F4:C5:77:DC:D6:74:3D:1A:B3:89:09:5D:E3:89:6A:CB:2B:B5:50
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer:       /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial:       47001B72592C12E615CA3D46CDE678F2924ABE0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number:          0348
Signing time:             Wed 24 Dec 2025 04:33:01 +0000
Manifest this update:     Wed 24 Dec 2025 04:28:01 +0000
Manifest next update:     Thu 25 Dec 2025 07:30:01 +0000
Files and hashes:         1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=)
                          2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: NZpd3d9rdpuU7p0BSHEtO3V7xvDQ1dHh6L855rcoRro=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
                          rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 07:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:1b:72:59:2c:12:e6:15:ca:3d:46:cd:e6:78:f2:92:4a:be:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
        Validity
            Not Before: Dec 24 04:28:01 2025 GMT
            Not After : Dec 25 07:30:01 2025 GMT
        Subject: CN=70F4C577DCD6743D1AB389095DE3896ACB2BB550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:43:da:51:a0:c2:bd:b8:e5:e6:07:bb:72:
                    86:05:bd:c5:a1:58:15:d2:96:b9:f7:1f:ad:a9:a8:
                    1f:20:eb:30:88:5c:93:e3:32:8d:00:26:3e:c9:80:
                    f2:5c:a4:d3:fe:e6:3e:cb:55:12:a2:a7:bc:14:f6:
                    31:fe:7d:c6:42:88:e2:7e:b6:ef:aa:b6:d3:ca:f7:
                    ba:dc:d5:28:8e:29:71:32:65:e7:4e:6c:e9:1a:77:
                    12:6d:fb:6e:df:66:2c:73:d9:e0:35:7c:e5:76:76:
                    29:8b:34:87:d5:b2:c5:0b:3b:66:71:aa:05:a0:a6:
                    30:af:33:68:c8:66:cd:ca:84:9c:5e:da:c3:e0:3a:
                    fa:19:a5:11:3f:41:37:07:44:78:2e:76:38:e0:7b:
                    93:21:43:14:b1:09:19:ba:ff:96:02:ea:5a:b3:3c:
                    c2:9a:dd:2e:30:24:9a:65:92:4b:e7:11:ea:5e:93:
                    d0:9e:9f:d0:28:c7:10:65:85:18:35:12:e2:b6:88:
                    70:54:0d:95:a9:3e:ec:b4:0a:4e:09:4c:ad:6b:07:
                    24:94:c9:8a:17:bf:c2:e7:1c:d8:30:fb:12:7c:0f:
                    3b:58:de:96:a3:a4:40:73:db:2a:be:ef:25:f5:16:
                    a4:36:42:d7:3c:7a:f8:0a:28:81:7e:39:79:16:62:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F4:C5:77:DC:D6:74:3D:1A:B3:89:09:5D:E3:89:6A:CB:2B:B5:50
            X509v3 Authority Key Identifier:
                keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:ef:11:ab:01:c9:00:1f:f6:cd:38:ea:32:a8:07:96:c0:
         0a:3f:74:55:e9:5d:ff:18:91:ca:80:fd:32:68:53:81:9d:a5:
         d6:76:12:97:51:cb:15:c9:f8:93:a6:90:5f:53:c1:1f:3c:a6:
         fd:f5:c5:7a:44:96:a3:17:35:2e:bd:c1:cb:2a:dc:42:6e:07:
         b1:1f:a4:7a:19:10:e0:04:0c:ab:c5:3a:66:f7:0c:74:27:b3:
         c0:4a:a4:87:c3:14:0d:cd:24:e1:5b:d6:9f:01:d9:29:3d:49:
         b4:d0:64:43:85:25:19:ea:aa:0f:84:e7:09:b8:49:c1:07:2a:
         f6:b7:0c:94:e9:48:37:ab:2d:80:11:32:33:2d:e5:32:cb:56:
         b4:34:35:a7:75:2a:55:97:b4:e5:4e:1d:1a:ce:ce:22:92:33:
         fc:53:69:67:35:71:02:69:3d:b7:37:c0:a4:a0:b7:01:2a:55:
         76:af:80:66:02:0e:b4:31:64:30:ef:e2:e7:67:c6:71:da:b4:
         d2:2d:52:9e:af:eb:16:bb:25:66:55:1d:35:05:12:f0:7e:f1:
         b0:99:48:08:55:c6:82:34:ec:08:a5:00:34:e2:ab:f4:d1:75:
         9a:1d:9b:b3:cd:99:2c:69:8f:2e:35:4a:20:f2:60:1f:81:1c:
         98:20:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----