This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
File:                     1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft (raw, json)
Hash identifier:          jsGqnf52U4vJazN7W6FUwG9Jt+sW0p8F0hUc8WQnuC0=
Subject key identifier:   5F:D7:9E:BA:34:57:AA:44:32:11:77:6C:45:79:44:2B:B9:57:93:65
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       4BFEEB0097DC396B30C114ED56B2EE45D1358934
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
Manifest number:          0345
Signing time:             Sun 21 Dec 2025 08:40:00 +0000
Manifest this update:     Sun 21 Dec 2025 08:35:00 +0000
Manifest next update:     Mon 22 Dec 2025 09:12:00 +0000
Files and hashes:         1: 323830343a333630303a383030303a3a2f33342d3334203d3e20323636333230.roa (hash: UHylxjpKLffVvrOuprDjPU4Y1uBtZ+wvkrLEWPl/y2A=)
                          2: 3137302e3233382e3133362e302f32342d3234203d3e20323636333230.roa (hash: GQY1JpeVZOxVKtNSCqu7m78cCLN+rfPmEgHQ3q3nvW4=)
                          3: 3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa (hash: zqJkivgmnCEuNfzNrt9apgnhYI/kYTvLC5LO28/Xwwo=)
                          4: 3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (hash: qsHEzva0imSPbl/kqUJw0DgNm7tAJDGrmbBl7cT1WC0=)
                          5: 323830343a333630303a3a2f33332d3333203d3e20323636333230.roa (hash: BcGC+epgztA5VoQ71kOh3HFEznh+rgeBpjdNDogMNyo=)
                          6: 3137302e3233382e3133372e302f32342d3234203d3e20323636333230.roa (hash: PkKceo21YlcnEDhvPvVwkhJLP6CPNnQBI9ZDcmGeC2w=)
                          7: 3137302e3233382e3133362e302f32322d3232203d3e20323636333230.roa (hash: WiXmfgF6f/3DHXXKu3AFNjtIBYO4oBb9iRe/bIzvTVU=)
                          8: 323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa (hash: Q8iH1xMRVJEkISsJjGFQUjzUjdHNLcy8dPjrcKsSQ9s=)
                          9: 323830343a333630303a343030303a3a2f33342d3334203d3e20323636333230.roa (hash: Fj9wv9Af9bmfR5AYCDRRKRAvkU5WuXWh8edrKIdXcXc=)
                          10: 323830343a333630303a633030303a3a2f33342d3334203d3e20323636333230.roa (hash: Dc7OZZi5JYDbGuDqOGIjaQQFqZhCJIdDVMFLeQoBsAk=)
                          11: 323830343a333630303a3a2f33322d3332203d3e20323636333230.roa (hash: IMONqocGytKT2rGyQeoSYuoBFTUOsSR77OhsyWy9e+E=)
                          12: 3137302e3233382e3133382e302f32332d3233203d3e20323636333230.roa (hash: 9yeQry5xK02DHn+uVdxy9RxBDM+370sBy34vBXg8Xnw=)
                          13: 3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa (hash: 641+GYXZNw4123ybKrg6PrmJrdCv5tIFK7N2dcy60hY=)
                          14: 1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl (hash: xAU0JXl9e4uBevXZm1cBS2Gav4robG8nwzRz80bPS8c=)
                          15: 323830343a333630303a3a2f33342d3334203d3e20323636333230.roa (hash: kiMV50dIYWNCzAjNDMVjqQXUdQof1dv7Jlh3deD3nQ0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 09:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fe:eb:00:97:dc:39:6b:30:c1:14:ed:56:b2:ee:45:d1:35:89:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Dec 21 08:35:00 2025 GMT
            Not After : Dec 22 09:12:00 2025 GMT
        Subject: CN=5FD79EBA3457AA443211776C4579442BB9579365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:42:6b:48:7c:59:0e:4e:d2:8e:23:ca:10:
                    b2:23:4b:cd:cf:6e:41:25:a0:fb:f3:ac:21:fe:ee:
                    10:16:d0:97:38:9e:15:d2:e2:29:c7:11:b4:58:96:
                    b5:06:54:44:77:52:c9:5a:e8:f0:a1:01:8d:aa:89:
                    41:3a:2e:31:64:7c:48:a5:51:43:74:74:b5:6d:f3:
                    6c:0c:f1:a3:3f:0e:ea:01:44:fd:d5:37:af:10:41:
                    0c:5b:04:fe:5a:24:8e:f5:c9:89:22:2b:63:83:fd:
                    3d:f9:80:fa:b3:e1:c5:e4:fe:63:90:8b:d3:db:e6:
                    b4:93:2c:64:b4:df:cc:a7:60:dc:71:12:34:cf:c5:
                    df:47:5d:25:d6:74:49:2d:13:3a:65:e6:84:bb:a7:
                    07:39:8f:43:c8:d1:2d:ba:03:36:1e:9a:c0:04:50:
                    8f:ea:b2:9f:a4:d6:c3:39:f6:90:12:50:fa:73:8f:
                    ba:06:31:cb:9d:a4:e4:b8:59:f0:d9:af:c0:30:41:
                    3c:09:78:99:e4:d2:96:f3:19:ba:9f:8b:dd:5e:87:
                    ce:2b:d6:a9:39:1b:5e:6d:15:21:43:bc:d4:7b:47:
                    8e:0a:35:0a:76:ca:27:63:38:a2:7e:40:1c:92:60:
                    59:df:5e:6c:25:d1:75:c4:37:25:81:5f:79:7c:5b:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D7:9E:BA:34:57:AA:44:32:11:77:6C:45:79:44:2B:B9:57:93:65
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:63:e7:7d:ac:8d:4f:58:39:c3:3f:54:45:c8:c3:66:e2:44:
         fd:72:2d:b4:1c:7b:c5:ed:73:c9:aa:ec:45:e0:2b:5e:ee:89:
         98:ae:80:15:9c:33:4c:39:ae:65:3e:5f:bd:df:de:87:5f:0d:
         a9:76:ca:9e:82:ee:84:2b:2c:0e:9b:a3:aa:58:27:84:47:5f:
         74:02:4b:7a:ce:20:58:53:99:46:44:49:c0:b2:09:79:cc:22:
         ed:53:01:b9:59:47:ac:83:21:d9:2b:cf:81:6d:0d:86:9b:4c:
         f3:58:19:b4:cc:ab:e7:ee:11:25:8c:27:7d:b9:c3:63:cb:d6:
         df:2c:28:66:2e:cd:e9:37:93:8d:06:48:a1:ed:1d:c1:3f:df:
         76:22:55:d1:c8:d0:04:84:ef:7d:64:52:ba:6b:7d:73:88:b8:
         30:8a:df:88:ee:9d:75:51:81:a8:79:ec:9e:79:4f:48:47:ac:
         d8:fe:48:4f:b1:9d:ee:7f:0c:b9:f5:f4:b1:57:ed:5e:dd:fd:
         b0:f9:cc:34:28:ae:49:3a:ab:cc:f6:24:4f:f8:f4:fe:ea:51:
         82:a4:2d:80:29:1d:8c:74:e0:39:df:6b:32:27:3c:9f:cc:e9:
         58:39:a0:7f:6f:95:3e:db:a3:f0:da:0a:80:fd:ed:a0:ce:eb:
         14:7f:c7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:34:30 2025 by rpki-client