This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          NR9VFDjl29dpnmsfaB12rWuHjU1Fk2kbrJGjcP5oZgo=
Subject key identifier:   E0:07:30:70:69:45:DD:7D:50:AA:63:9E:84:73:B5:94:EB:40:7E:D7
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       3F42EBFF0F5B2DA12175F22D9D5C3C0736B35BE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          0340
Signing time:             Mon 22 Dec 2025 03:23:34 +0000
Manifest this update:     Mon 22 Dec 2025 03:18:34 +0000
Manifest next update:     Tue 23 Dec 2025 07:15:34 +0000
Files and hashes:         1: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=)
                          2: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=)
                          3: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: I8/tqaoLXS1Ga2rR+pw2cBduBOLxDYl/x4+WsiC5OnI=)
                          4: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=)
                          5: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 07:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:42:eb:ff:0f:5b:2d:a1:21:75:f2:2d:9d:5c:3c:07:36:b3:5b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Dec 22 03:18:34 2025 GMT
            Not After : Dec 23 07:15:34 2025 GMT
        Subject: CN=E00730706945DD7D50AA639E8473B594EB407ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:c7:72:7c:63:4c:dc:68:fe:40:ee:84:f0:
                    b4:7b:d0:71:bf:a7:3c:7a:0a:ff:80:ee:70:4b:03:
                    8f:33:6f:b2:55:86:63:56:4c:63:94:ac:a5:6c:f4:
                    1e:1e:1f:9e:2d:0c:80:1e:7d:12:5e:fc:3c:cd:46:
                    74:f2:74:7d:90:ad:e5:76:cc:85:79:37:cd:b9:e9:
                    c5:a8:e7:04:96:53:12:13:08:29:72:da:5e:62:c4:
                    d1:34:54:86:05:13:d0:98:59:fd:63:61:e1:97:63:
                    26:91:59:be:a9:d9:5d:09:e1:92:fb:93:af:03:08:
                    ce:cb:bb:6e:f6:4c:db:03:81:f2:46:f1:a9:2c:c8:
                    77:f3:2b:e0:0c:67:10:cb:f0:97:5b:62:f7:2f:11:
                    ae:75:15:8c:88:b0:71:fb:af:93:64:60:30:ae:f8:
                    52:bb:e8:3e:65:bc:b9:55:89:c5:da:d8:6b:36:0d:
                    ea:91:55:bc:dc:dc:ae:9e:74:46:bd:cd:d0:21:6f:
                    33:64:8a:4f:7a:ff:70:3e:02:1b:50:fb:f2:60:98:
                    8f:7c:1e:31:b5:36:f7:3a:f8:1e:99:95:91:45:95:
                    ae:89:85:42:e4:4f:a1:08:2d:82:2f:ff:5d:e6:85:
                    f6:8c:53:c3:b8:3f:2a:41:35:10:b9:c7:f1:7b:7b:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:07:30:70:69:45:DD:7D:50:AA:63:9E:84:73:B5:94:EB:40:7E:D7
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f0:61:b9:6c:7b:7f:51:c6:c8:d5:01:8a:40:b1:77:6c:74:
         7e:a6:18:20:87:c2:f6:ec:6e:f0:97:0e:f1:3f:12:1d:b9:b4:
         56:4d:aa:ab:1a:b3:cc:92:48:09:24:49:f4:fa:cb:c1:3c:da:
         30:9d:fb:0c:50:c0:93:a1:bc:6f:a4:16:75:05:ed:0e:3d:0b:
         b2:a1:12:17:15:90:ba:f6:9b:71:c5:04:70:ba:7c:49:3f:89:
         d5:79:6d:63:10:ea:ec:b7:83:5a:34:f9:94:0e:12:29:bd:6a:
         9a:ce:cc:bd:46:6f:be:de:1c:83:fa:c6:68:9a:1e:aa:c3:31:
         cb:a7:d9:60:e6:ca:56:d9:78:84:0e:31:23:0f:a9:33:fa:cc:
         2b:59:1c:3b:40:1c:3d:53:6c:7d:9d:70:d8:52:ae:c9:7b:17:
         6f:31:02:51:82:70:a1:4d:e8:f7:b8:67:a4:f0:5c:d4:61:4c:
         85:6d:5b:b4:ba:32:58:41:c3:a0:f8:5d:bc:15:89:d9:d8:b8:
         5a:41:c0:c2:56:fa:8b:a7:2d:34:67:19:24:7e:c3:5b:7f:74:
         8d:98:f5:2a:0a:40:48:39:63:72:81:c3:27:ad:9f:ba:df:45:
         27:2c:b8:dd:3b:a9:60:0e:e4:e5:5a:5f:a7:4b:b7:62:f2:bb:
         d1:ae:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:58:25 2025 by rpki-client