This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
File:                     38025C3CE376357918C078D8E62D989FFD0406EC.mft (raw, json)
Hash identifier:          OgF5OgqDUnGYADopZvYcv6OrsCNPxwiOal6mcED+FvU=
Subject key identifier:   28:95:0F:F7:7E:67:44:B5:60:76:E3:78:9A:EC:20:CD:4C:E6:AF:96
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       786F50B5641C61A22D3047C6E4DE0C44C73CBBE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
Manifest number:          017E
Signing time:             Thu 25 Dec 2025 12:06:11 +0000
Manifest this update:     Thu 25 Dec 2025 12:01:11 +0000
Manifest next update:     Fri 26 Dec 2025 13:35:11 +0000
Files and hashes:         1: 323830343a363562303a3a2f33322d3332203d3e20323639353038.roa (hash: 5/Teq7VhHEqk1CmpJQNroEWzgLoeAwoLipvY2OZ6XjY=)
                          2: 323830343a363562303a343030303a3a2f33342d3334203d3e20323639353038.roa (hash: zLlviauGM91SL5Qzz9ahG7evmv7WcuR21o5AKs+HaL4=)
                          3: 34352e3138382e33362e302f32332d3233203d3e20323639353038.roa (hash: t+YZRhhtCELc5qgWprYNvxduaOTEixYcoSyrCx4TiuM=)
                          4: 323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa (hash: iiboG93cUwq9aiXqtF/C+qU239+P73vFA7fCFy9GPHA=)
                          5: 34352e3138382e33362e302f32322d3232203d3e20323639353038.roa (hash: FvxGMqMkjxcDqPIQrrpPhMkznlxANXiP5oWUJ7//PLI=)
                          6: 323830343a363562303a383030303a3a2f33342d3334203d3e20323639353038.roa (hash: iJvs8rfWE8S/PUFhBHvMlGo6J1eOCLRTzXMq483PAn4=)
                          7: 323830343a363562303a383030303a3a2f33332d3333203d3e20323639353038.roa (hash: RO6nw0i1EKNlYGgEsHrSorj5JcmlZ307XZPB5fYAGMo=)
                          8: 34352e3138382e33362e302f32342d3234203d3e20323639353038.roa (hash: Ve0+wc2+YcRFqyJlVSGd4ST9l9dEKqWpxTN7pLJvXLg=)
                          9: 34352e3138382e33382e302f32332d3233203d3e20323639353038.roa (hash: 5BAoKY7mIVJC41pKAc0RT4IItwg3WpuqNEstGETj12I=)
                          10: 34352e3138382e33392e302f32342d3234203d3e20323639353038.roa (hash: LbKlUIYcNxtv5sYMZNyUAU2PljLlb0OdN553PBDCEyM=)
                          11: 323830343a363562303a3a2f33332d3333203d3e20323639353038.roa (hash: DyPwCo1vjapgoNi4InH3SoL/pvw8scLsjZb0vWIXauc=)
                          12: 323830343a363562303a3a2f33342d3334203d3e20323639353038.roa (hash: EffEsdxkAER0Fj0xM0pNsunwfYEswky56p5DS+4NX34=)
                          13: 38025C3CE376357918C078D8E62D989FFD0406EC.crl (hash: R9SDtrysporJx5ZsT2o8hIeqcYuXsXxa/OgGh7dCmaw=)
                          14: 34352e3138382e33382e302f32342d3234203d3e20323639353038.roa (hash: aa4+7l40yjEXMFYEWjKhiCZGQD2B3x1U7KlJQ2wJtZg=)
                          15: 34352e3138382e33372e302f32342d3234203d3e20323639353038.roa (hash: GNFFn7GD0kT1CNLyNC0zlxkREJdG8hKhbDAO4oBIfyU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 13:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6f:50:b5:64:1c:61:a2:2d:30:47:c6:e4:de:0c:44:c7:3c:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Dec 25 12:01:11 2025 GMT
            Not After : Dec 26 13:35:11 2025 GMT
        Subject: CN=28950FF77E6744B56076E3789AEC20CD4CE6AF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:63:11:fc:c4:d6:df:c7:76:b6:aa:fe:1d:
                    14:68:98:0c:06:a9:e5:28:6c:91:fb:0e:a4:8d:42:
                    28:33:31:6a:11:4b:33:74:9e:f3:aa:91:e3:f3:f5:
                    3e:8b:7f:1b:2b:f5:f7:c6:5f:f9:0b:42:49:09:f1:
                    40:b0:57:27:91:18:16:a7:98:ec:84:7b:1f:1b:dc:
                    27:5e:d1:53:d3:a1:1b:1e:37:8f:33:2e:75:00:ee:
                    e1:0a:75:92:6d:50:e9:a6:eb:00:d1:b3:52:de:6a:
                    5e:6e:fc:16:42:9b:5d:34:44:a1:14:44:f4:64:3e:
                    cb:f9:7f:49:6a:6f:ba:b9:46:76:55:96:a0:ff:e8:
                    63:c4:b5:c1:4a:89:7a:2d:ef:f0:9e:b6:c6:b9:a7:
                    7c:fe:b4:17:f3:0d:5c:06:1d:43:56:1b:85:6b:ca:
                    d0:a4:62:ad:83:31:59:3f:fa:40:8b:d7:46:54:69:
                    41:60:92:2d:15:b9:26:0f:12:57:c5:05:06:e9:99:
                    8d:fb:3e:c9:81:55:44:20:a6:2b:9e:21:a2:8f:58:
                    be:7a:35:dd:11:c4:c0:3d:7d:5e:e3:16:83:5b:0a:
                    d8:f9:ea:43:2e:21:a8:49:3a:d1:e0:59:1d:22:0a:
                    ca:99:9c:ac:fe:28:78:24:b4:4d:6e:ae:94:cf:5a:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:95:0F:F7:7E:67:44:B5:60:76:E3:78:9A:EC:20:CD:4C:E6:AF:96
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f5:93:28:a6:c4:a8:11:01:93:14:13:eb:6b:03:6e:a3:72:
         4c:a0:46:68:62:74:95:74:53:44:0e:92:10:c3:75:c8:90:29:
         24:9e:ac:71:07:98:d6:cb:77:fe:41:fb:8b:81:b4:ec:a0:c8:
         af:60:42:a2:69:83:25:db:b2:33:22:b5:08:b0:cb:1d:2d:39:
         40:41:33:4b:e9:7f:c2:f3:c6:49:92:b1:8f:e6:fc:4f:8b:a6:
         8c:a3:40:49:65:b9:c7:4a:85:2b:34:9c:ff:14:27:8b:45:ef:
         6b:55:59:c1:39:df:88:0b:d0:cc:8f:12:d3:a4:c7:07:0d:28:
         c8:e7:7f:84:a9:f0:fd:63:92:0f:c5:1e:e7:16:55:87:30:7c:
         e4:0f:4d:b0:a6:09:3b:b1:0d:47:db:ba:7b:9f:73:eb:f6:ae:
         9a:04:54:7e:2b:0c:bd:4b:01:f2:f5:1e:1c:bb:21:ae:ac:85:
         92:e3:76:16:f7:4f:f3:de:cb:42:d3:bf:40:ec:cc:c5:07:52:
         8b:5d:30:12:67:ab:2a:2e:3c:c5:dc:b8:d8:b8:e0:3c:be:c6:
         62:fa:5a:90:5b:cf:5d:11:37:a4:37:1c:58:2f:5c:3f:b8:d6:
         12:52:74:1d:43:81:61:2e:bb:46:f7:f1:7d:77:a1:57:99:2d:
         dc:c6:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:13:33 2025 by rpki-client