This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
File:                     EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft (raw, json)
Hash identifier:          UMW8EjkpOukzEV8zuoGZVlhZ3dXeCwvr0tEnqNVPIqY=
Subject key identifier:   0E:3F:BF:D5:C8:3C:7E:EE:70:31:BE:1C:73:89:06:23:2E:83:BA:E2
Authority key identifier: EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
Certificate issuer:       /CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Certificate serial:       7B4804AFFCC23B99EADF8290DFC352420527E419
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
Manifest number:          0347
Signing time:             Sun 28 Dec 2025 10:25:05 +0000
Manifest this update:     Sun 28 Dec 2025 10:20:05 +0000
Manifest next update:     Mon 29 Dec 2025 12:16:05 +0000
Files and hashes:         1: 3137372e38362e39362e302f32312d3332203d3e20323632353036.roa (hash: zNEO5VjdUssSmDnatKQ0risH9GIqrvSntMswWswg8RI=)
                          2: EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl (hash: xNjZJ8rkcYcvrZBFRNzTsW632+dURDxDV6RqqyElKBk=)
                          3: 323830343a373235633a3a2f33322d313238203d3e20323632353036.roa (hash: DxpqrHeHTS5oYOfPy5TSY37lPlsXFR/7xTA1lwITK78=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl
                          rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 12:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:48:04:af:fc:c2:3b:99:ea:df:82:90:df:c3:52:42:05:27:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
        Validity
            Not Before: Dec 28 10:20:05 2025 GMT
            Not After : Dec 29 12:16:05 2025 GMT
        Subject: CN=0E3FBFD5C83C7EEE7031BE1C738906232E83BAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:cd:4d:86:d4:a7:47:45:5e:cf:96:a7:e9:
                    0c:85:49:37:57:6d:36:eb:8a:bc:3f:0e:cb:4f:d3:
                    bb:1a:da:76:12:7d:61:44:88:0b:d9:76:6b:86:42:
                    f7:1c:b9:ab:00:64:f9:28:ec:da:18:19:c8:36:31:
                    a3:f2:e7:33:2b:71:84:81:55:4d:af:73:8f:b7:13:
                    af:1e:03:bf:e5:6a:4d:03:19:1f:34:c2:11:6f:dc:
                    59:71:4b:b9:74:5d:03:d2:29:ab:1b:e6:1e:7d:0c:
                    97:36:2c:c1:0a:2f:25:75:b5:e9:e2:a2:a7:9d:0e:
                    c5:66:23:17:e9:2c:7b:b7:c3:9d:1c:f7:4f:a1:1d:
                    c1:d7:a6:e1:28:22:44:5d:cf:57:a0:a1:8a:8c:5a:
                    8e:a7:91:3c:37:00:40:e3:b5:bc:61:e6:a6:9a:3a:
                    cb:d7:ec:08:34:ef:0f:64:ae:7b:b3:1b:66:d6:ed:
                    eb:32:1e:ec:49:4c:ff:8e:e9:b8:95:f7:63:8f:ec:
                    2e:a2:a2:6f:0e:86:06:19:01:d8:54:71:41:48:ca:
                    82:fc:3f:6e:a1:d0:83:cd:46:ff:94:73:57:86:54:
                    67:e1:37:21:f9:88:36:37:dd:51:c5:e0:e4:b6:90:
                    c2:a0:e1:e9:f9:f5:bb:6f:40:86:2c:dc:8a:d8:6c:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3F:BF:D5:C8:3C:7E:EE:70:31:BE:1C:73:89:06:23:2E:83:BA:E2
            X509v3 Authority Key Identifier:
                keyid:EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:94:1a:a6:88:ed:07:a7:a4:f7:54:a4:37:d3:67:09:05:2a:
         f4:2f:6c:16:1b:58:7a:9b:d5:6b:41:59:2f:ef:03:2b:39:ae:
         9d:ad:98:b5:e3:16:fa:be:91:b7:fa:90:cd:0d:57:31:48:55:
         04:bf:57:29:d3:68:25:d8:af:7a:ae:15:ac:cf:cd:b3:23:78:
         02:27:fd:5d:b2:07:23:10:32:ee:8c:11:85:c4:ec:6e:0c:aa:
         aa:78:bc:e4:dc:09:9b:ed:f5:93:2c:18:d3:14:30:9d:00:94:
         dd:55:18:4e:db:ab:49:15:41:48:88:bc:bd:f7:e8:9d:67:d0:
         29:29:8b:a4:47:bf:3e:d2:66:1d:cd:34:7b:bb:ce:76:da:77:
         42:f7:6f:dd:dd:59:ce:30:69:a7:75:9a:93:71:e4:f3:0a:52:
         33:bf:bc:fb:e1:18:7f:88:6d:0a:3e:02:84:15:70:a2:c8:ff:
         25:26:25:34:ee:4b:8f:35:41:df:b5:1b:9c:65:3f:25:85:4e:
         9d:81:a2:bb:64:4e:67:b8:d4:0f:e6:b1:ae:50:73:c4:c3:9a:
         cc:6d:31:49:09:a0:65:a2:28:6f:77:d9:6a:7a:9b:2a:26:0c:
         4f:b3:3c:cc:4a:4a:0e:b2:a2:41:f4:63:e5:89:b6:e4:c3:99:
         64:89:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 02:57:54 2025 by rpki-client