This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
File:                     F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft (raw, json)
Hash identifier:          QeT4/8048+5qE82JN0s+JWNZrEFBbCETifbSWzAtvZk=
Subject key identifier:   35:C8:C9:AC:0D:5C:1A:57:80:75:F8:24:50:9B:A5:73:23:59:BF:79
Authority key identifier: F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
Certificate issuer:       /CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
Certificate serial:       572581D1DEBC6DDB92FCCAC07BB892BA0C3B4866
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
Manifest number:          0139
Signing time:             Sun 21 Dec 2025 17:13:34 +0000
Manifest this update:     Sun 21 Dec 2025 17:08:34 +0000
Manifest next update:     Mon 22 Dec 2025 19:12:34 +0000
Files and hashes:         1: F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl (hash: qVWPx8fRDK7XVfA82OGROd4hmF0S7xWxflVov9lOPHI=)
                          2: 323830343a323231383a3a2f33322d3438203d3e20323634353931.roa (hash: HlwUs2L7419/cMa2+4mwkPjcY7ZP9qFwySS+Yz91Nh0=)
                          3: 3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa (hash: HvjR2d2trJ5LWnuobRmMJncz1ARxND/q/9gbw8Is3K0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl
                          rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 19:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:25:81:d1:de:bc:6d:db:92:fc:ca:c0:7b:b8:92:ba:0c:3b:48:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
        Validity
            Not Before: Dec 21 17:08:34 2025 GMT
            Not After : Dec 22 19:12:34 2025 GMT
        Subject: CN=35C8C9AC0D5C1A578075F824509BA5732359BF79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:0a:50:93:d0:a4:9c:78:53:92:e4:73:e8:
                    82:38:8d:59:da:ea:4b:bd:80:36:f1:27:06:60:54:
                    a0:c7:2b:4a:e4:d1:58:7d:a1:bc:df:b2:19:74:6f:
                    7e:a6:9a:3c:d6:b2:fd:a5:1a:b2:1d:ae:39:ee:20:
                    c9:a9:89:1d:d2:44:b6:f3:4f:b3:c6:a3:05:75:a4:
                    8d:e9:44:fd:92:20:85:9f:4c:8c:70:22:27:88:66:
                    cf:ac:0c:81:a4:6a:48:ee:4b:ab:b8:d8:23:7e:1f:
                    26:85:94:c4:b0:fb:de:65:4b:df:5d:d3:41:96:ad:
                    8c:32:bd:d6:a2:b4:d2:49:c0:33:06:7f:05:d0:fa:
                    49:e9:85:36:71:95:64:0b:b0:20:68:02:de:71:0a:
                    6b:41:24:84:ea:95:d6:fe:f4:1f:7b:f5:32:fe:f4:
                    87:2f:01:58:c1:e4:c5:cc:01:26:d6:53:45:27:df:
                    29:75:91:7e:95:8e:6c:f9:2b:3d:0f:84:af:73:fa:
                    f8:13:3e:0e:b2:3f:8c:3a:b6:96:be:e2:b0:d1:fd:
                    b3:2b:a3:c4:ea:da:02:43:02:46:94:b7:c3:45:b1:
                    4b:1f:0b:8e:eb:37:bf:96:d7:3c:a1:a8:ab:32:38:
                    ee:84:39:6e:4b:c5:43:e9:37:b5:58:6a:8e:a5:0d:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C8:C9:AC:0D:5C:1A:57:80:75:F8:24:50:9B:A5:73:23:59:BF:79
            X509v3 Authority Key Identifier:
                keyid:F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a3:dd:2e:22:60:95:1e:4b:57:7d:d6:f3:21:02:2a:0c:ae:
         05:cf:c1:1a:10:5e:6e:43:b5:41:3a:b3:83:42:d2:7e:9d:8d:
         78:1c:e3:df:27:b4:12:61:29:df:18:48:71:e3:68:ce:34:88:
         d7:f3:97:4d:6a:69:6e:63:49:d6:e6:57:00:5a:9b:85:9a:1c:
         4c:8f:a6:dc:23:f9:d1:fb:e9:a9:76:7b:80:9a:d8:43:fa:ca:
         44:b5:66:09:fd:6d:71:42:33:9b:31:f4:19:73:15:33:49:1f:
         33:6e:d3:e0:55:53:77:bc:f6:4b:54:0d:ec:55:a4:66:7a:78:
         03:30:af:8b:5d:f6:22:04:0f:5a:0c:46:99:fb:65:32:7b:39:
         f9:a7:df:84:d4:6a:01:b0:ba:30:8a:1f:21:dc:00:90:b7:c2:
         ce:28:b2:d5:82:77:c2:b3:b5:61:ae:7e:c4:6a:64:74:7b:0d:
         31:e5:8c:20:99:c6:a7:8d:06:b1:36:bc:e9:9b:17:46:02:c6:
         11:96:41:40:1f:fa:82:57:f3:af:66:1e:0f:63:09:41:ec:39:
         c2:59:5d:39:87:03:9e:4b:f5:f5:b6:2e:00:06:8b:9b:8f:26:
         e8:2f:fa:02:5c:4e:d4:61:c4:76:ed:1f:11:a0:3d:da:a8:f8:
         3f:8a:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:52:38 2025 by rpki-client