This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          Z3Sw+LAjPFWBGHK+FrXLl1mj1d+rugdg1qX3l1Prnc4=
Subject key identifier:   D2:43:B3:2D:AE:98:98:63:18:59:34:21:69:82:B1:D2:A6:26:55:94
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       4596C4E6BF60904E01685D7EE1593D1D01E3DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          0342
Signing time:             Tue 23 Dec 2025 16:35:42 +0000
Manifest this update:     Tue 23 Dec 2025 16:30:42 +0000
Manifest next update:     Wed 24 Dec 2025 17:43:42 +0000
Files and hashes:         1: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=)
                          2: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=)
                          3: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: T44QDNCfAbKFapyTUZB6dVOwKTD6E4Dg5HLrFUB9TAk=)
                          4: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=)
                          5: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 17:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:96:c4:e6:bf:60:90:4e:01:68:5d:7e:e1:59:3d:1d:01:e3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Dec 23 16:30:42 2025 GMT
            Not After : Dec 24 17:43:42 2025 GMT
        Subject: CN=D243B32DAE989863185934216982B1D2A6265594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:c3:36:67:7c:fd:b0:cf:66:a0:a9:91:26:
                    6c:e0:23:5e:b2:8d:3b:b1:86:44:a6:f6:76:78:84:
                    9c:a9:1d:44:69:10:22:d3:e3:5b:a5:7a:c3:a3:e3:
                    4a:9b:fe:1c:b7:09:69:3d:a1:95:84:da:79:8d:39:
                    bb:46:92:27:47:2a:0a:42:dc:5e:12:c9:1c:3b:d9:
                    74:65:9f:24:3b:c8:c7:9e:42:b5:72:37:d4:02:d4:
                    25:e3:8a:55:8a:12:37:73:e2:df:34:d9:d9:c5:7f:
                    8d:d3:22:c9:dd:cd:0e:b5:20:3d:8e:7c:4b:0d:36:
                    99:04:5d:22:52:d1:49:0c:d1:49:02:2d:00:a7:d6:
                    68:60:d6:89:fe:38:75:55:c2:4e:0e:d2:66:ee:a0:
                    35:fe:e7:da:88:fb:26:1f:ef:88:77:76:27:c2:a4:
                    5c:33:bb:96:60:a9:12:53:3a:72:5e:05:fa:04:11:
                    59:9e:55:a7:61:e4:72:ba:f8:74:ce:45:64:77:b2:
                    0f:16:c5:2d:0c:cc:83:87:6a:f9:27:e2:31:18:61:
                    d9:38:d5:b1:2a:fe:cd:13:77:b0:a9:46:ba:f8:96:
                    b9:e3:b7:2e:4e:cf:0b:d8:bd:47:a4:8e:21:44:5a:
                    94:9c:73:5d:b2:46:72:9f:2b:65:fb:0e:8d:b5:97:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:43:B3:2D:AE:98:98:63:18:59:34:21:69:82:B1:D2:A6:26:55:94
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:c8:5d:48:1f:8b:83:11:30:63:8b:9e:d5:73:98:38:8f:
         58:6a:8c:eb:da:a0:de:39:59:9e:ff:f8:4a:09:ac:1e:1a:b9:
         d9:70:7c:85:31:2c:3d:ef:bf:4e:69:19:f5:89:d8:ef:91:11:
         06:51:f4:47:d0:18:e6:30:0e:61:ac:8d:93:3c:ac:29:93:10:
         6c:51:7c:6f:5a:8b:ed:db:0e:43:63:f0:a8:66:18:3d:44:71:
         31:81:6a:9e:ed:a5:ce:69:b2:9f:bd:0e:a1:6e:2f:1f:81:65:
         d7:66:b4:bc:9c:49:dc:0d:80:46:ff:ec:47:75:fe:68:ca:24:
         f0:37:3d:f9:ca:ff:d8:a0:2e:67:78:07:5d:1c:8b:0b:e8:4b:
         c4:e0:6f:97:f1:a2:4e:d8:29:d2:f4:09:ce:c9:71:66:7a:2b:
         53:b2:0b:6d:f8:68:e2:8c:01:c3:78:4d:fb:1b:92:7b:29:19:
         07:70:f3:d0:77:af:79:a5:49:f4:cd:3a:dc:4c:0d:6f:02:3c:
         3a:61:92:11:6c:71:63:16:9e:33:b5:7b:24:2b:43:77:29:57:
         29:01:0d:6b:c8:57:60:54:ac:f1:eb:ac:42:c8:6a:9b:d4:60:
         d8:b2:73:d7:72:0e:24:ab:4f:cc:a3:be:05:5c:8d:93:a1:eb:
         cf:df:cf:83
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgITRZbE5r9gkE4BaF1+4Vk9HQHj3TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1
MDMyRkMwMB4XDTI1MTIyMzE2MzA0MloXDTI1MTIyNDE3NDM0MlowMzExMC8GA1UE
AxMoRDI0M0IzMkRBRTk4OTg2MzE4NTkzNDIxNjk4MkIxRDJBNjI2NTU5NDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALI9wzZnfP2wz2agqZEmbOAjXrKN
O7GGRKb2dniEnKkdRGkQItPjW6V6w6PjSpv+HLcJaT2hlYTaeY05u0aSJ0cqCkLc
XhLJHDvZdGWfJDvIx55CtXI31ALUJeOKVYoSN3Pi3zTZ2cV/jdMiyd3NDrUgPY58
Sw02mQRdIlLRSQzRSQItAKfWaGDWif44dVXCTg7SZu6gNf7n2oj7Jh/viHd2J8Kk
XDO7lmCpElM6cl4F+gQRWZ5Vp2Hkcrr4dM5FZHeyDxbFLQzMg4dq+SfiMRhh2TjV
sSr+zRN3sKlGuviWueO3Lk7PC9i9R6SOIURalJxzXbJGcp8rZfsOjbWXZw8CAwEA
AaOCAlkwggJVMB0GA1UdDgQWBBTSQ7MtrpiYYxhZNCFpgrHSpiZVlDAfBgNVHSME
GDAWgBTNEZRDomibpPxha81pKeY2tQMvwDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9IM1pxRU16QzlwbTJGaFY2WnEyWHJOekoxQnVCZjVOQzhGajRYNktCR1ZG
RS8xL0NEMTE5NDQzQTI2ODlCQTRGQzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQ0QxMTk0NDNBMjY4OUJBNEZD
NjE2QkNENjkyOUU2MzZCNTAzMkZDMC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK
BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9I
M1pxRU16QzlwbTJGaFY2WnEyWHJOekoxQnVCZjVOQzhGajRYNktCR1ZGRS8xL0NE
MTE5NDQzQTI2ODlCQTRGQzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAubWZ0MBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC76shdSB+LgxEwY4ue1XOYOI9Yaozr2qDeOVme//hKCaweGrnZcHyFMSw9779O
aRn1idjvkREGUfRH0BjmMA5hrI2TPKwpkxBsUXxvWovt2w5DY/CoZhg9RHExgWqe
7aXOabKfvQ6hbi8fgWXXZrS8nEncDYBG/+xHdf5oyiTwNz35yv/YoC5neAddHIsL
6EvE4G+X8aJO2CnS9AnOyXFmeitTsgtt+GjijAHDeE37G5J7KRkHcPPQd695pUn0
zTrcTA1vAjw6YZIRbHFjFp4ztXskK0N3KVcpAQ1ryFdgVKzx66xCyGqb1GDYsnPX
cg4kq0/Mo74FXI2ToevP38+D
-----END CERTIFICATE-----