This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft
File:                     BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft (raw, json)
Hash identifier:          V/eJrrEASwNNqnjcdx2lmmm0l1nF/b0dEoYgQqYCaIA=
Subject key identifier:   F8:79:A2:1A:9C:D1:DC:C6:09:B7:6A:D9:BA:5A:4B:AC:02:93:99:0E
Authority key identifier: BD:33:22:3E:F2:A3:73:94:67:5D:7D:34:B5:C8:F3:27:DA:58:A7:6E
Certificate issuer:       /CN=BD33223EF2A37394675D7D34B5C8F327DA58A76E
Certificate serial:       29E71776C6EC0A1FABDBFE6754F117B3867D2BC6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft
Manifest number:          3C
Signing time:             Sat 20 Dec 2025 04:04:03 +0000
Manifest this update:     Sat 20 Dec 2025 03:59:03 +0000
Manifest next update:     Sun 21 Dec 2025 07:50:03 +0000
Files and hashes:         1: 323830343a386630633a3a2f33322d313238203d3e20323733343634.roa (hash: yYw47TgaVmtOmfFRpM4vizV4A19jVR0QOmN2wiNSI7M=)
                          2: BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl (hash: DQOWrOHDK6IeT9eW9531jrnq/kCMXtvbNuefIL7i48k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl
                          rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:17:76:c6:ec:0a:1f:ab:db:fe:67:54:f1:17:b3:86:7d:2b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD33223EF2A37394675D7D34B5C8F327DA58A76E
        Validity
            Not Before: Dec 20 03:59:03 2025 GMT
            Not After : Dec 21 07:50:03 2025 GMT
        Subject: CN=F879A21A9CD1DCC609B76AD9BA5A4BAC0293990E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:21:84:fe:80:23:1a:01:fe:5f:54:e7:17:
                    e4:92:a9:8d:eb:45:fd:9f:fd:08:4a:f7:cb:5c:78:
                    79:f9:e2:11:ae:3b:3f:58:93:6a:3a:08:1c:f2:48:
                    2d:3c:0d:d8:23:e8:4c:96:e1:a5:52:db:fa:8a:c4:
                    5a:e2:15:23:a1:88:f0:25:61:d1:b2:1c:ac:6a:ce:
                    fb:82:cb:b5:0c:93:b2:6c:31:ab:48:28:65:3b:ef:
                    8d:fc:73:82:5d:78:75:8b:5f:dd:54:f6:c7:2b:dc:
                    d4:e7:40:fa:6b:61:b8:23:a8:28:c3:92:0d:f3:67:
                    35:ec:9d:81:dd:42:8f:8a:fb:a6:ba:f3:ab:05:9a:
                    bc:40:25:97:5a:a7:51:67:17:a9:ea:1d:09:84:3c:
                    d2:49:e6:a3:27:29:77:8b:8e:ed:16:b6:7f:92:37:
                    ed:4a:97:a5:d8:b2:8c:35:51:2c:d5:0a:e3:8e:ff:
                    e0:09:24:32:45:6f:61:14:97:bb:d9:89:d3:be:b7:
                    57:e1:b4:7b:1b:07:cf:33:36:cf:52:4e:11:d7:2a:
                    b3:36:08:05:db:f1:2f:56:3e:e5:32:5f:63:09:d6:
                    76:64:09:55:9c:af:c7:92:fa:2d:5e:62:e1:64:18:
                    90:1d:c8:b9:74:39:ae:f4:1d:46:0d:e8:97:96:4b:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:A2:1A:9C:D1:DC:C6:09:B7:6A:D9:BA:5A:4B:AC:02:93:99:0E
            X509v3 Authority Key Identifier:
                keyid:BD:33:22:3E:F2:A3:73:94:67:5D:7D:34:B5:C8:F3:27:DA:58:A7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:8c:21:1c:52:a6:67:76:d0:dd:d7:6c:5b:54:3a:23:25:
         12:b9:81:9c:dc:9b:dd:8c:13:57:39:a5:2c:58:16:7b:ae:5e:
         a2:58:ff:68:98:38:06:96:8d:13:24:dd:f1:12:39:f0:20:79:
         d0:fa:80:5c:2e:f2:d1:37:be:ce:12:ff:b6:e4:0e:b4:dc:f4:
         cb:45:2d:e2:01:40:9d:ec:0a:fe:6e:ac:0f:42:0c:ba:b3:94:
         75:0f:15:31:2a:c4:36:00:35:e6:33:27:3f:7d:aa:87:99:31:
         b5:0f:87:8d:e7:93:51:ad:17:66:c5:2c:35:34:c0:30:91:20:
         47:d4:b0:40:36:6f:a4:95:7d:ca:17:a4:97:61:c4:76:0c:2b:
         1f:dc:c0:0c:3e:53:a6:37:4a:98:79:61:72:c9:c6:3f:59:5d:
         3f:53:9d:ed:e6:c4:79:4c:1a:75:c8:73:86:c5:d2:c6:61:84:
         53:42:9f:b1:c6:7e:40:6d:38:fe:32:d7:b2:d8:d2:f9:af:49:
         02:5e:f9:bc:ee:13:9e:d1:0c:80:dc:ef:82:39:b1:bf:78:e6:
         7c:c2:20:02:c5:b9:28:03:29:26:1d:9c:18:a8:8a:8b:bb:0a:
         6b:5a:1a:38:e4:d0:9e:e5:03:6f:7a:65:de:76:cb:df:3b:56:
         74:e5:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----