This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
File:                     4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft (raw, json)
Hash identifier:          D+Gu51ehzdoCHESciEuHn4lCt+LPwtGttZx0nlY5hHQ=
Subject key identifier:   D2:00:27:83:77:09:7E:48:59:97:E2:18:F2:38:7E:C6:80:BD:E3:96
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       06876E86B93B359B4BDF2C68E182EBAC692495E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
Manifest number:          0341
Signing time:             Sun 21 Dec 2025 23:40:00 +0000
Manifest this update:     Sun 21 Dec 2025 23:35:00 +0000
Manifest next update:     Tue 23 Dec 2025 02:54:00 +0000
Files and hashes:         1: 3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (hash: Pcjq5j9L01oqldGDpHJ1/0Fhghry022+OEJwmG3qykg=)
                          2: 3137302e38332e34342e302f32322d3234203d3e20323632353935.roa (hash: WisQ1JL2FAAn8kaZqf230Nksj1G0DtPacu/DRaDBIZA=)
                          3: 3139312e372e382e302f32312d3234203d3e20323632353935.roa (hash: G0SWK+jmKHTG0ctDczQrKf6TxfRS64Q9op8j2QG1tjc=)
                          4: 3137372e38352e302e302f32312d3234203d3e20323632353935.roa (hash: sBpa4s503VeZUYCOt+l0MWz+VMtYiBSEsylwD1QPHFw=)
                          5: 3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (hash: sXeIiddgIsbS+sATicLgnnXS6mGcpy75xY5FDmKS1hQ=)
                          6: 3133382e302e36342e302f32322d3234203d3e20323632353935.roa (hash: 16TbMKZdTZfIkFgwAstb/ibbX/bvn7/DJ8wvTNDWTQU=)
                          7: 323830343a3639303a3a2f33322d3430203d3e20323632353935.roa (hash: TO6Eb49up/wmLJo6dXO2I0VlV7zMLlLB/b9vOIm4NVc=)
                          8: 3133382e3132312e31362e302f32322d3234203d3e20323632353935.roa (hash: r+oC/tP9cVlGYdiKnaYO/EjxupaEl0ebrhGSL23ifBg=)
                          9: 34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (hash: U2eH9NqttfTafC3EBRQM8TEtkvvFsyjejY/7ctga6eE=)
                          10: 3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (hash: IvMpdw39E7yHBfdNRqRjqhm3M4HxFQsnyvqHbu0ZRt4=)
                          11: 4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl (hash: qNcDP3hs+qvj+yrvvyLo0pFRdi8u0oMc6R2Wo8wqENA=)
                          12: 34352e3137392e3138302e302f32322d3234203d3e20323632353935.roa (hash: noH/6wQklcBAaxEAf8opJx4ehieMk2GZ8QTzCrekJZE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 02:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:87:6e:86:b9:3b:35:9b:4b:df:2c:68:e1:82:eb:ac:69:24:95:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Dec 21 23:35:00 2025 GMT
            Not After : Dec 23 02:54:00 2025 GMT
        Subject: CN=D200278377097E485997E218F2387EC680BDE396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:1c:7a:0f:ac:04:02:80:fa:db:43:6c:e3:
                    74:69:53:f7:f6:c0:ef:4d:b6:48:9e:71:57:a2:73:
                    66:61:df:70:71:81:0b:c3:9c:b0:74:75:71:56:a1:
                    9d:f6:ba:51:73:fc:01:38:56:1a:c4:78:e3:67:67:
                    7c:54:36:ff:ea:e3:ee:b9:47:92:0e:05:25:30:ba:
                    3e:e5:43:15:0e:79:39:f8:17:44:55:95:56:1a:c1:
                    74:fc:30:fc:19:86:7a:95:5f:98:c1:8f:80:d1:00:
                    46:3c:c6:80:ba:d7:69:29:49:9d:23:6a:84:07:8f:
                    6a:94:8f:97:3e:fc:0c:72:5f:25:1c:98:d4:81:65:
                    46:bd:dd:c2:e5:ef:c1:f8:14:1d:7d:47:37:a6:56:
                    8c:c6:6d:54:c5:94:44:20:49:4d:e6:c1:bd:59:36:
                    c6:d6:6f:5d:f2:c0:2e:0b:3c:1a:ca:bf:8e:42:a2:
                    e8:ea:dc:9a:d0:64:bd:70:97:27:ac:c4:32:44:12:
                    af:5b:0c:c0:29:3e:bc:7e:f6:bc:84:8f:08:73:ce:
                    74:0b:dd:72:8f:c5:7a:94:b3:6c:34:8c:22:42:d6:
                    84:f0:44:75:be:9b:2c:d7:90:c2:d8:fd:af:e7:ec:
                    4c:1f:0f:04:f9:ff:74:15:19:c4:5e:c7:23:c9:a1:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:27:83:77:09:7E:48:59:97:E2:18:F2:38:7E:C6:80:BD:E3:96
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:96:25:55:6b:4b:18:b5:5c:c7:13:77:59:30:53:e9:00:
         6b:e0:cf:49:ef:37:c6:5a:49:9b:27:01:1a:b7:f2:b6:14:74:
         5a:ed:92:48:60:a2:ef:26:b0:1e:68:00:aa:de:ba:a1:b7:6c:
         94:72:4e:9a:cb:b1:96:8a:77:16:5c:19:91:8a:6d:05:87:42:
         6d:ef:85:b9:6e:33:f6:c8:76:d1:d7:db:77:74:5c:bb:61:d7:
         f9:75:73:c7:47:bf:d3:b9:ad:82:c6:2a:8c:ec:f3:20:3d:3b:
         5e:e9:dc:ef:06:1f:5c:12:1f:8e:ec:03:23:e4:26:6f:3e:5c:
         de:42:7c:53:77:ec:b7:89:ef:45:09:10:33:ca:ab:cf:2b:75:
         56:4d:e9:e1:e3:02:08:e6:0f:27:ae:94:d0:2d:9f:dd:6e:ad:
         e9:16:9f:9f:b8:3a:31:4e:65:45:66:33:6d:8f:f1:13:aa:3e:
         f2:2d:87:b9:03:35:be:39:55:41:0a:3f:84:eb:42:06:a6:3b:
         28:4a:7c:05:40:90:93:22:98:29:f0:44:fb:e2:50:a7:c1:85:
         14:f8:ee:9e:c9:1e:a1:15:14:ca:71:0b:80:9e:d3:c6:89:b3:
         0e:e1:14:a8:ba:8a:30:a0:58:8d:8f:15:06:81:04:c3:cf:bc:
         8a:95:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:44:38 2025 by rpki-client