This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
File:                     EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft (raw, json)
Hash identifier:          m/QhV+RewjJpw33wv4iIP1UaY7GYigM4qynsNRceang=
Subject key identifier:   54:A3:4D:E9:B5:08:5E:69:F9:CC:17:DE:0F:B5:75:8F:13:D0:62:BC
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Certificate issuer:       /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial:       44F05B197017485265FE8540BB6E1F270EB7AA5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
Manifest number:          017B
Signing time:             Tue 30 Dec 2025 22:22:49 +0000
Manifest this update:     Tue 30 Dec 2025 22:17:49 +0000
Manifest next update:     Thu 01 Jan 2026 02:10:49 +0000
Files and hashes:         1: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: aglHitQCJNgIY3C7Tlxv80IWetc3uLwgBi5NAsxzjh8=)
                          2: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: S7mn+aIRKkfCkrEGNSaEpbEn+9QE2IZk2jlyPQPYAu4=)
                          3: EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl (hash: gVe2jOeAllGh7PBLm+18dmf+tCaqA4q1xA1oss4z5qI=)
                          4: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: 2S5jPVpDtF/c3KX+7YrkDsURbXg6ohRU2xrGg9VcEpU=)
                          5: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: qEEGnNXOgVLxsBmaHjZoeEIwIlOS5rZuaildH5CuVeg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 23:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f0:5b:19:70:17:48:52:65:fe:85:40:bb:6e:1f:27:0e:b7:aa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
        Validity
            Not Before: Dec 30 22:17:49 2025 GMT
            Not After : Jan  1 02:10:49 2026 GMT
        Subject: CN=54A34DE9B5085E69F9CC17DE0FB5758F13D062BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:e7:92:23:a7:97:f8:28:49:a5:cd:53:fc:
                    49:6f:9f:ea:21:66:10:2e:c7:bb:69:1c:fd:b2:15:
                    84:09:89:6e:a9:e8:d9:36:94:50:21:65:0f:2f:d4:
                    cf:61:a5:af:c5:fc:8c:c4:21:5e:45:7b:16:a8:ab:
                    5c:05:ee:ce:a4:17:e0:b7:bb:4f:66:39:b1:d9:d9:
                    70:27:c9:0d:16:c0:8d:9a:34:16:ac:cc:46:fb:43:
                    ec:83:e3:b1:5c:c4:92:5e:61:7d:7a:b6:a8:2d:f0:
                    ee:c9:e0:54:8e:8f:61:dc:6a:03:bf:98:98:f7:5b:
                    02:6b:e9:ed:93:a9:fd:93:d1:43:3d:cc:74:58:c4:
                    f6:28:c0:95:ed:87:03:0d:4b:7b:34:98:dc:27:49:
                    b4:8f:71:cc:3d:84:f6:88:b0:d2:5d:5e:17:b0:06:
                    e8:ca:3a:94:06:84:50:07:3e:16:a8:49:41:ce:ea:
                    da:c5:f8:9c:80:78:43:59:50:8e:ad:c4:6a:0b:d5:
                    9b:c4:ab:ca:9c:77:fe:db:c6:9a:73:5b:4b:bb:75:
                    52:c6:6d:30:e4:a9:e2:f2:b1:62:2d:0d:ee:98:82:
                    16:a0:42:e0:1b:9f:21:a0:ec:6a:04:69:ec:e3:39:
                    8c:d0:c0:9a:0b:ca:a9:53:c1:cd:46:89:d6:de:46:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A3:4D:E9:B5:08:5E:69:F9:CC:17:DE:0F:B5:75:8F:13:D0:62:BC
            X509v3 Authority Key Identifier:
                keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:fe:07:0d:54:2b:bc:78:9f:1f:85:6a:19:7b:90:a1:c7:
         9d:e9:18:e5:92:5c:1c:91:68:21:47:ab:5c:0d:e4:6d:02:03:
         6c:e2:b5:36:45:ff:60:f5:6d:90:9a:fa:7f:30:fb:55:60:61:
         3a:57:10:39:8f:af:a8:92:c7:61:8a:51:99:33:85:e8:20:0e:
         ed:e0:a0:81:78:d8:ab:0d:0d:d4:94:09:57:09:07:eb:ae:80:
         a3:71:3c:d3:93:93:f4:dd:0d:88:d8:4a:b9:be:42:83:02:03:
         87:5c:ec:70:2e:7b:5a:2d:a8:27:a6:ca:5c:d7:05:32:b3:76:
         3b:a7:04:fd:97:3a:1d:50:43:d7:a5:bf:2b:a8:95:99:a3:b2:
         29:cb:1c:b7:4a:52:c4:26:a0:57:ab:80:b4:d3:79:2c:81:39:
         19:3d:07:54:a8:5a:af:10:93:90:ec:c4:46:51:74:5a:04:25:
         13:e6:df:e6:b7:b7:03:d0:00:94:b5:cf:13:74:3a:53:5f:e6:
         df:14:85:67:56:96:43:b7:48:e9:77:1e:d0:4b:91:f9:f2:86:
         cb:93:5c:08:cd:b8:0f:f2:b9:83:70:d3:e8:48:43:54:39:88:
         2c:ce:89:0b:44:08:c9:cc:5e:88:58:e7:eb:76:c0:cb:67:fb:
         1c:17:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:06:37 2025 by rpki-client