This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
File:                     3CF129D24760CA58DEE1B42CDACAE4407710A219.mft (raw, json)
Hash identifier:          3l0099vKW+k6cjnJHyPP9eauXzRNcQC0RTQQgMPJ7zA=
Subject key identifier:   CE:0D:58:43:8B:2F:C6:F2:81:10:E7:57:E5:CE:0C:CC:59:DB:9B:85
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       077FB3C904A1F28170592C868BFBFDB9E4ACAB1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
Manifest number:          032C
Signing time:             Sun 21 Dec 2025 05:14:04 +0000
Manifest this update:     Sun 21 Dec 2025 05:09:04 +0000
Manifest next update:     Mon 22 Dec 2025 06:26:04 +0000
Files and hashes:         1: 3CF129D24760CA58DEE1B42CDACAE4407710A219.crl (hash: adyrbhOoVSeHt0KyKBEnHTmhylh7J6ddP+1B2kqEg3U=)
                          2: 3139302e392e37372e302f32342d3234203d3e20323731363432.roa (hash: qMk30ymCN/0mdqfHbnOIw7ruJwrflPlCaLrbhr/XDBE=)
                          3: 3139302e392e37392e302f32342d3234203d3e20323731363432.roa (hash: efOB6BUnFRkXMc/5Xb/3RhyF8NSmzmGLP+0nD5VgYIA=)
                          4: 3139302e392e37362e302f32342d3234203d3e20323731363432.roa (hash: qS7YOdWdMSn62fYjd4tTd9FWC5HbQvc5gaTCfZGqURY=)
                          5: 3139302e392e37362e302f32322d3232203d3e20323731363432.roa (hash: vkdrLfrEgIF4V9ADn9mDWAlBjZbSAmaarjhEV5821lo=)
                          6: 3139302e392e37382e302f32342d3234203d3e20323731363432.roa (hash: 3CSXvgD8gZZJY3OihNgW2wuvdgpLd+7AI9EKOovQkxU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7f:b3:c9:04:a1:f2:81:70:59:2c:86:8b:fb:fd:b9:e4:ac:ab:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Dec 21 05:09:04 2025 GMT
            Not After : Dec 22 06:26:04 2025 GMT
        Subject: CN=CE0D58438B2FC6F28110E757E5CE0CCC59DB9B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:19:12:40:5d:7d:33:b8:72:f0:fb:a4:0f:
                    d5:4b:67:a1:9d:1e:33:69:2a:89:06:be:39:b7:05:
                    de:80:af:7c:b7:37:bc:6d:b5:f1:eb:56:ee:f8:c5:
                    47:53:d3:c7:2f:5d:98:5a:c2:80:87:b4:e6:e0:20:
                    18:bc:49:0e:4b:c1:9e:29:0e:ac:b8:8f:ad:b8:0a:
                    00:75:e9:11:af:f6:c4:6a:35:b5:b6:47:30:d5:09:
                    67:3f:a5:24:af:e9:1b:d0:8e:c9:21:7f:22:5a:76:
                    97:ba:71:df:e1:37:19:93:09:f8:12:27:61:3e:b9:
                    98:8d:1d:cc:b0:47:7b:67:15:22:a3:56:90:b8:2d:
                    d7:70:ce:49:06:88:54:b8:6d:6d:bd:4e:71:ec:5b:
                    76:54:5e:49:b6:7e:e1:b5:63:ff:76:58:2f:56:14:
                    27:b6:b0:bb:3e:f8:fa:23:a6:53:2e:7d:71:79:06:
                    47:93:48:0d:53:61:d3:d7:60:82:79:cb:3b:02:a4:
                    58:48:1e:1d:d3:4c:72:c5:74:9b:1e:01:f6:3d:93:
                    63:12:5f:07:e2:46:de:63:b1:44:41:4a:73:57:be:
                    22:07:14:60:66:d5:ba:d4:be:2d:27:fe:76:e8:5e:
                    0c:f5:36:74:89:05:7d:a0:b7:49:46:f5:e9:b3:07:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0D:58:43:8B:2F:C6:F2:81:10:E7:57:E5:CE:0C:CC:59:DB:9B:85
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:9e:9a:1a:eb:0e:27:6f:c4:82:fe:d2:32:c1:3c:50:10:
         21:47:05:c2:b6:72:9e:90:e1:39:a7:22:3c:bc:27:40:d3:81:
         06:11:e7:64:8d:9a:d1:cc:fb:2d:fe:d4:d2:80:14:8b:37:4b:
         77:ae:95:08:47:c8:89:c2:f4:6d:a6:b0:c0:54:55:8e:5e:3d:
         be:12:e4:31:9a:ee:bc:ee:10:f9:64:8a:e3:a2:52:d4:b6:e4:
         df:fb:80:5b:67:96:75:5f:a0:18:b4:d2:e1:28:cc:5d:03:2d:
         fd:6f:b9:28:be:50:ac:c1:9a:42:56:d3:cb:e3:a7:d1:ad:20:
         4f:af:83:f4:9a:2e:0b:ae:af:8a:2b:ed:82:3d:f9:4a:7a:b6:
         45:67:29:80:27:0a:82:8a:82:76:26:13:02:f8:63:52:f3:d8:
         d8:71:72:44:ea:44:b8:d6:b0:a4:dc:5c:13:7a:4d:1d:d2:5a:
         99:08:3e:ce:29:09:da:a1:08:b4:2c:62:ae:39:17:f2:4f:50:
         78:28:32:46:29:30:c5:54:12:27:c1:17:da:12:a3:8c:ce:85:
         66:ac:95:96:43:78:39:ba:01:8c:a3:aa:e5:f6:34:62:46:cf:
         ed:af:3d:ac:1c:c9:28:af:8d:67:fa:a6:d6:50:4c:b8:08:7b:
         a9:54:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:28:43 2025 by rpki-client