This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft
File:                     3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft (raw, json)
Hash identifier:          Ds2UFKeNqZCkfGmiWF/NUjB60YjMw+IOuyPx2RfOHJQ=
Subject key identifier:   17:26:69:4F:9D:BA:C7:5E:D7:3E:5C:22:3B:EC:F5:2F:65:2E:F7:30
Authority key identifier: 3C:F9:34:35:3E:BF:DA:BA:82:A3:7B:B0:1E:29:78:A8:41:6E:4E:61
Certificate issuer:       /CN=3CF934353EBFDABA82A37BB01E2978A8416E4E61
Certificate serial:       499234326206E114155C3063D359233FBC2E64DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft
Manifest number:          4B
Signing time:             Sat 20 Dec 2025 22:52:27 +0000
Manifest this update:     Sat 20 Dec 2025 22:47:27 +0000
Manifest next update:     Mon 22 Dec 2025 00:20:27 +0000
Files and hashes:         1: 3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (hash: V7rcSavUAJcCA6H53w4LDef5s/U/Kbjt2bv4RVwyUfg=)
                          2: 3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (hash: 8MLKNUFG8PmsO7aA70OzrBRlogU4CNw+//Ry87Nsag8=)
                          3: 323830343a3937303a3a2f33322d3438203d3e20323633303836.roa (hash: ULLOOKMFeNHlPUv0DYSWxXpet+nvVRea/P49WdtgpBY=)
                          4: 3CF934353EBFDABA82A37BB01E2978A8416E4E61.crl (hash: N5nm9lvB//bMMXwCn4o/JnehjFnIylAHm6sxEhQShiA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 00:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:92:34:32:62:06:e1:14:15:5c:30:63:d3:59:23:3f:bc:2e:64:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF934353EBFDABA82A37BB01E2978A8416E4E61
        Validity
            Not Before: Dec 20 22:47:27 2025 GMT
            Not After : Dec 22 00:20:27 2025 GMT
        Subject: CN=1726694F9DBAC75ED73E5C223BECF52F652EF730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:1b:28:f7:5c:dc:e9:cd:6c:c2:59:2a:79:
                    6e:75:ba:2d:31:db:37:5b:5f:f4:0f:f2:93:cd:ad:
                    1f:b2:53:3f:be:05:34:d3:9a:d2:8b:ea:6c:10:53:
                    cb:ee:08:1d:a1:dc:e0:51:60:67:6b:43:d5:90:19:
                    c0:10:87:07:8a:6a:9a:23:40:d9:a1:ef:bf:80:5c:
                    73:bf:6e:49:a7:70:51:f5:cd:63:42:68:1c:f7:90:
                    c3:7f:e5:80:1d:8f:2e:b4:f3:c7:a4:1c:8b:a6:8e:
                    f4:4d:32:4c:82:f5:53:c9:75:36:ff:d2:64:db:32:
                    b5:9a:39:77:51:9b:33:d4:fa:bf:8f:28:e7:41:64:
                    c2:45:19:0b:ec:ca:b8:30:48:e2:a5:da:e9:6d:dd:
                    46:9c:3c:de:e7:60:18:cd:6c:93:c1:02:3b:b7:91:
                    de:34:ec:77:8e:2a:ff:9f:47:d1:cf:c6:68:21:7e:
                    ca:ba:47:23:1a:85:99:a8:27:74:f3:76:f8:6b:f5:
                    cd:ba:3f:45:ae:81:21:12:65:59:cb:86:12:ce:6e:
                    13:00:d1:07:d6:7b:16:12:fd:cf:5b:fc:a6:1b:7e:
                    d7:4f:5d:b0:c7:6f:c9:86:fe:5d:2b:6f:7f:dc:b1:
                    11:74:07:bd:99:39:19:a0:97:64:d9:e2:07:52:90:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:69:4F:9D:BA:C7:5E:D7:3E:5C:22:3B:EC:F5:2F:65:2E:F7:30
            X509v3 Authority Key Identifier:
                keyid:3C:F9:34:35:3E:BF:DA:BA:82:A3:7B:B0:1E:29:78:A8:41:6E:4E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:24:2a:1e:7e:a3:73:bd:a6:95:55:8b:c8:e1:ba:89:59:51:
         4d:66:55:d0:32:2e:dc:d0:e6:78:2a:84:b4:17:58:8f:df:b8:
         d1:fa:33:17:64:7b:8e:1f:ac:7f:f7:5c:51:80:29:ff:45:29:
         f6:d1:bd:83:4e:48:58:4c:05:fa:03:37:36:1f:88:7c:2b:df:
         b2:44:b9:5b:7e:e6:2d:6b:55:7d:40:f8:71:41:fc:bc:ce:0a:
         ee:43:6d:24:dd:8e:73:69:b5:d0:22:09:42:2b:02:13:b7:77:
         e6:13:04:fa:cc:0f:98:a0:2e:92:94:c6:d2:ff:17:21:e0:bf:
         aa:6c:3a:ae:74:22:77:e6:1b:70:61:d6:cc:fd:ab:2d:ac:d6:
         01:2c:d9:62:02:25:e5:96:8f:76:a7:57:a1:92:d1:b5:c4:9b:
         1f:83:63:5e:a6:a2:1a:78:fa:a6:e6:4b:b6:90:96:d5:a6:fb:
         66:fa:42:c9:fe:bd:ac:d6:e5:e8:69:f5:e0:fe:11:8b:e9:f2:
         9c:c3:75:94:45:c8:7f:4f:43:fb:85:cb:3a:5a:40:15:c7:e0:
         18:78:8b:6f:cd:d6:2e:2a:74:fb:0a:1e:64:30:99:8e:20:3b:
         1c:51:1e:f7:a1:5d:c9:bc:26:66:7c:98:1b:a6:22:1a:18:34:
         ff:f3:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:43:02 2025 by rpki-client