This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
File:                     21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft (raw, json)
Hash identifier:          US89gSjXDV86nEzIDvz4X/xxHSC4Jpf7ZhdNcjC/5/g=
Subject key identifier:   95:D8:1E:4F:B4:7E:B4:7E:C3:37:9B:98:B0:41:5F:6F:EC:27:C0:BB
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       564EE88304990DBE2C91897E052022C8C136CD5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
Manifest number:          034C
Signing time:             Sun 28 Dec 2025 07:08:44 +0000
Manifest this update:     Sun 28 Dec 2025 07:03:44 +0000
Manifest next update:     Mon 29 Dec 2025 10:01:44 +0000
Files and hashes:         1: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (hash: RerjbS9xKc0/CK/Y5n8XplDwJVGGM77Bh0aaB454fY4=)
                          2: 323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa (hash: RnSg+YKbK8pR5bia+dZ9K105SclQ1I16ep03dg/iZ7c=)
                          3: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (hash: x8GmIb1SS/y7q4B+DFsz2yAOvlZbT66RrnYr4dLqQ+o=)
                          4: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (hash: uuAjvoElj+s2P03j2V4PuccKOgje+VoUZnf+Hle0akg=)
                          5: 3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (hash: r7vfeKk55qhQBOyEy24AMQ64UzQyzWkqz312ndhdfUc=)
                          6: 323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (hash: TYRWQ7gyDTR9aR04XFxDpPB2omElfX3dnOpZ3IOnRX4=)
                          7: 3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa (hash: U1U/PJKv+Yna7Dv3n/OMq3HZDeNphHtQAu6Jb7RzBs0=)
                          8: 323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa (hash: 5CA3bhiL9G5EqssM79mQ2NXKJ4+iR7T1WwgYCJVhPkw=)
                          9: 323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (hash: J37Irn6rkJ/gW2wUAdd0Ln1bXjOwHrhLGBV5ttnIhOU=)
                          10: 323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa (hash: zZmqNl3wVb+besWe55tMDhoT10Qhn57ix2MlPtQrb2w=)
                          11: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl (hash: 5MjvAiVkNM3BJq2aAkpF8PYWj/f3+Om2y2XvgaYvjeg=)
                          12: 3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa (hash: lL3sWcpDBbZjNJudevKuoE9ICP1DM73uG/8oJbBo9Og=)
                          13: 323830343a373335633a3a2f33342d3334203d3e20323730393130.roa (hash: CsvGGcE0V3Tu69LRuhwsdvsimuS6XZEP7ogsRoKMiZM=)
                          14: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (hash: smaUHbT25OXhUmvU+Kn4HyZtcLPSslJSZIjbPHYe0vU=)
                          15: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (hash: JL+tQ5Kfrej9dzNOHqdA47WL83D9j5wRJVEy93Y0jqU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 10:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4e:e8:83:04:99:0d:be:2c:91:89:7e:05:20:22:c8:c1:36:cd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Dec 28 07:03:44 2025 GMT
            Not After : Dec 29 10:01:44 2025 GMT
        Subject: CN=95D81E4FB47EB47EC3379B98B0415F6FEC27C0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:17:72:cb:e8:57:13:5a:d4:d4:0f:74:91:a7:
                    db:33:f7:1a:56:22:0f:a9:ea:e4:1c:91:3f:4b:cd:
                    fc:52:3f:5b:0a:53:fc:8b:c7:b1:c0:fe:38:78:fc:
                    fa:21:6d:a5:a4:23:21:d5:d8:89:7a:23:95:81:1c:
                    e9:d0:64:2c:21:43:8e:71:36:c2:66:10:95:1e:e0:
                    86:50:e0:8d:da:fe:83:2a:72:3d:80:2b:54:8f:12:
                    44:7c:03:64:3e:52:bb:2c:d9:c5:3a:8a:f9:fc:3f:
                    94:84:95:53:68:5c:e2:4a:f7:fa:dc:f3:56:09:b0:
                    23:93:0f:43:55:68:5e:5b:68:f1:ce:11:87:be:b1:
                    c6:bf:45:2f:2c:e1:e4:c1:ea:4a:6e:29:03:00:2b:
                    cd:31:f4:e0:bb:77:b2:6c:ce:7b:a2:52:10:47:6e:
                    1c:da:2f:b2:52:b0:d7:2d:fc:47:e5:b7:15:40:8f:
                    d5:25:5c:e7:27:38:75:82:0a:6a:3a:1b:26:c9:5f:
                    8e:a2:81:41:a6:18:c8:f4:75:c1:34:0e:70:23:19:
                    52:ee:ac:96:ff:eb:a3:6b:13:b3:45:27:c5:5c:3e:
                    b2:f0:a0:7a:b4:86:4e:90:01:d5:4c:d0:a0:83:c6:
                    b8:a5:d7:8a:95:fd:4a:84:3a:b9:15:d7:ce:71:11:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D8:1E:4F:B4:7E:B4:7E:C3:37:9B:98:B0:41:5F:6F:EC:27:C0:BB
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:01:d0:35:d9:92:e2:e0:2e:73:7b:2e:a8:8c:3c:b5:ae:
         dd:60:c3:fd:52:a4:df:6b:2d:3c:37:e3:95:89:ac:9f:da:c0:
         09:82:b2:a8:c7:89:fa:b3:9e:b0:9a:91:4a:c9:fa:72:e8:ba:
         6d:7b:51:58:e1:8a:d9:ce:93:dc:ae:53:71:39:45:70:a7:4d:
         02:27:6b:bd:3d:d2:b8:c9:f8:bc:3f:b7:78:47:33:8c:92:8f:
         ed:3e:ff:62:8b:ca:28:a2:69:4a:53:23:e2:00:a2:5e:c1:b2:
         35:e5:d7:72:85:5e:5d:14:e8:fd:80:8b:40:a4:53:fe:d3:45:
         a8:a9:16:ee:cf:72:dd:cb:46:5c:c5:16:cc:a5:72:db:f0:cf:
         86:16:b6:f7:a9:4a:32:31:dc:b6:06:11:c1:38:34:81:4a:50:
         1c:b2:f8:7e:aa:26:02:5c:74:fe:f3:3a:27:b0:3b:c6:6c:23:
         bb:16:be:ce:c0:61:47:2b:3b:07:3f:70:c9:b3:42:15:64:94:
         09:3f:7b:5d:13:7d:17:a2:99:e5:36:c1:7d:a8:92:77:7a:3a:
         e5:bc:0d:71:ca:69:54:df:a0:e9:da:97:f0:c5:2e:73:00:d7:
         39:d8:98:a7:61:c3:e5:2d:22:ee:95:49:cd:55:af:04:1f:bd:
         35:ae:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 01:01:54 2025 by rpki-client