This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
File:                     C37D443ACE2088B9542008EA9127A8D95802391D.mft (raw, json)
Hash identifier:          UwCmQ7dfItX4jvZOwcc0wGlijgsLJV6MYRlBRKqsh2g=
Subject key identifier:   DE:70:5E:C0:0E:1F:3F:97:A9:EB:5F:AA:DB:B5:C0:92:43:BB:5E:85
Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
Certificate issuer:       /CN=C37D443ACE2088B9542008EA9127A8D95802391D
Certificate serial:       42E1B46CD05D0B18E0838B0E0739418EDB7AC8AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
Manifest number:          024F
Signing time:             Tue 30 Dec 2025 11:33:01 +0000
Manifest this update:     Tue 30 Dec 2025 11:28:01 +0000
Manifest next update:     Wed 31 Dec 2025 12:34:01 +0000
Files and hashes:         1: 34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa (hash: 5BGiFOtUcqQZiGFluG3W3mqHyrCNrFQCh5StfotlU5Q=)
                          2: 323830343a356637633a3a2f33322d313238203d3e20323639313033.roa (hash: VUl2KBji/uPkr1rCYeNPvvVxSbxK6F6y7JqVOXB6tUs=)
                          3: C37D443ACE2088B9542008EA9127A8D95802391D.crl (hash: ECL69S5XKFGazglVD9PJf/0QGfrgBYYAtIRdxbYvpP0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl
                          rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 12:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e1:b4:6c:d0:5d:0b:18:e0:83:8b:0e:07:39:41:8e:db:7a:c8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D
        Validity
            Not Before: Dec 30 11:28:01 2025 GMT
            Not After : Dec 31 12:34:01 2025 GMT
        Subject: CN=DE705EC00E1F3F97A9EB5FAADBB5C09243BB5E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:72:e6:79:70:2a:f8:db:6c:69:89:a8:bd:
                    90:f4:14:3c:b0:d7:cb:96:b1:7a:05:2c:14:59:f6:
                    99:1b:8c:99:9b:05:f6:4f:f2:0e:ab:7e:1c:01:d3:
                    5b:c2:3f:10:f5:cc:fc:2f:ae:1b:7d:52:ce:d6:7f:
                    5d:13:04:ed:52:ed:63:aa:b0:5d:d6:a4:e3:f3:16:
                    19:4a:08:eb:50:d3:24:c9:5c:9f:dd:78:c4:34:4c:
                    f7:4a:d8:85:7b:22:c0:c1:be:cd:ae:71:bd:1d:8c:
                    81:20:c4:bc:be:71:3d:2e:69:f0:55:b8:0a:dd:0a:
                    6a:a2:26:6f:03:e0:aa:6d:a5:51:6c:3c:96:eb:d2:
                    70:65:d2:dd:75:b2:26:01:1a:3c:40:86:40:97:88:
                    0e:54:e0:98:2a:2f:8e:6e:18:54:e9:9a:6f:dd:5e:
                    45:b8:3c:a7:54:6b:2e:f3:43:3c:92:57:4c:df:ce:
                    00:3a:cb:65:f5:27:ea:f7:ea:08:b1:eb:fc:9d:e1:
                    5e:94:19:64:ad:d0:b7:55:90:b5:3f:41:3e:95:50:
                    15:94:71:27:b1:63:28:6f:f7:17:f6:0f:91:34:b1:
                    0a:39:21:cd:db:a4:50:94:a8:f1:fc:9f:43:3f:de:
                    7d:bb:4c:8b:9d:ad:47:16:1b:b0:89:56:6e:7b:ac:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:70:5E:C0:0E:1F:3F:97:A9:EB:5F:AA:DB:B5:C0:92:43:BB:5E:85
            X509v3 Authority Key Identifier:
                keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:cd:fb:44:2e:dc:40:eb:6e:5a:f7:54:f5:e6:38:9c:24:
         35:ec:74:7a:ec:f8:83:aa:d1:fb:2f:e7:2a:a7:af:da:2c:9f:
         7b:71:ff:b2:05:33:87:cc:24:60:a9:c1:54:a1:08:66:08:d6:
         b2:ec:f5:dd:e2:af:93:57:59:fe:6d:e0:63:5e:f9:e0:b3:5d:
         17:b7:bd:6f:b0:0e:fd:6f:34:d8:ca:ed:c1:ee:42:7d:f3:be:
         18:f7:e3:e0:8b:00:76:6d:06:4d:11:83:be:28:e0:e8:53:c6:
         7b:fc:3d:76:32:95:d9:e7:dc:a8:39:16:11:db:bb:71:3c:1b:
         a5:7d:4e:24:b5:bd:10:aa:f4:7b:f9:3d:cf:c4:a5:c8:d6:c4:
         32:a1:18:cd:97:77:43:f4:5f:18:73:1e:80:da:d2:49:17:1d:
         4b:7b:74:89:0a:f6:e3:25:12:e8:4a:fb:e6:a5:1b:4b:e1:2a:
         93:9c:75:1a:cf:8f:29:c6:80:fc:0b:7d:c1:5f:52:66:08:bb:
         70:50:de:79:a3:0b:57:b5:8f:1b:20:cf:32:72:3e:c1:e4:95:
         b4:75:a0:94:11:ec:44:da:b5:6d:83:e6:ee:0f:6f:1d:70:6c:
         0b:95:c0:b9:b9:78:ae:ff:86:1a:e9:02:fe:b5:a8:97:1f:b8:
         b6:88:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 18:45:45 2025 by rpki-client