This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
File:                     D495C627858363377EC2F78374A56D2330185EC0.mft (raw, json)
Hash identifier:          KNa+3ah6II5IEP+3uEwKT8h8nBvie9eBibDvak+Vyos=
Subject key identifier:   EE:29:81:C1:14:71:36:35:07:26:63:66:FB:25:FD:4E:01:54:16:5F
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       48C3D36C588043DB816E2DFBA2739F00103F39A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
Manifest number:          034A
Signing time:             Sat 20 Dec 2025 11:48:50 +0000
Manifest this update:     Sat 20 Dec 2025 11:43:50 +0000
Manifest next update:     Sun 21 Dec 2025 12:11:50 +0000
Files and hashes:         1: 34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa (hash: MebfgJJc/AO06TxiNbmKvG6EOQFeRjMMnctIcMhTyXs=)
                          2: D495C627858363377EC2F78374A56D2330185EC0.crl (hash: t7pQzAw1idZR8eKSRVux+xoFc+cO9rfCStBtgsCtosw=)
                          3: 323830343a363835303a3a2f33322d3438203d3e20323639363834.roa (hash: DKRzHO07XxgXg3/sGmlmvppwP59uVy9achM3gVBIAhs=)
                          4: 34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa (hash: nYZt27e16XGSOf1lNWlRRKug1KmEAgnBi+uN/jabquw=)
                          5: 34352e3139312e3230342e302f32322d3234203d3e20313938393439.roa (hash: aVT2T0GFqzSSSY8m3DHYS71CPNyLQRqIFGKWtTN5YL8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
                          rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:d3:6c:58:80:43:db:81:6e:2d:fb:a2:73:9f:00:10:3f:39:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: Dec 20 11:43:50 2025 GMT
            Not After : Dec 21 12:11:50 2025 GMT
        Subject: CN=EE2981C11471363507266366FB25FD4E0154165F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:0b:d1:cf:c9:a6:3a:f3:83:a3:36:ab:c1:
                    4d:cb:68:86:26:4e:a2:74:68:a4:e2:ec:e7:3d:22:
                    73:39:95:b8:d1:dd:dc:be:27:38:2a:7a:e4:52:43:
                    da:44:35:40:02:ad:b7:90:0d:c5:d6:57:e4:c7:31:
                    09:05:1e:3f:5d:e3:8c:b2:f0:48:6a:38:12:d6:80:
                    84:94:1e:51:73:a8:6a:2a:81:95:24:aa:1c:38:e7:
                    8b:61:df:1c:bc:e0:00:0a:c5:c7:b6:ca:8f:c2:34:
                    5d:bd:5a:ec:2d:df:6f:e2:c5:d3:cf:86:cb:cf:33:
                    52:fb:22:d3:9e:d8:f6:d6:ab:c1:d2:80:05:66:1d:
                    96:17:89:bf:84:a6:00:ba:35:e0:d7:02:8e:82:b2:
                    4b:76:21:f9:ea:45:63:86:07:ac:9c:74:b8:50:d5:
                    35:5b:97:57:ea:7b:0d:6f:e3:e8:8a:7d:22:8a:9b:
                    73:c0:c1:47:f8:d7:9b:5d:68:b8:fe:96:db:36:23:
                    f1:19:d6:d6:a4:ba:60:73:80:e6:25:32:89:09:b4:
                    fa:9b:42:4f:14:47:46:ca:2c:35:45:ce:1b:98:b7:
                    b8:52:1a:81:32:02:17:15:46:bb:c1:7a:50:1e:9a:
                    a9:ea:7c:89:82:0f:ad:24:46:4a:8a:e0:56:42:76:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:81:C1:14:71:36:35:07:26:63:66:FB:25:FD:4E:01:54:16:5F
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:bd:c6:48:0b:66:5f:c2:79:a9:34:d4:c7:9d:c9:21:28:
         17:0a:5e:52:ee:ba:a1:65:ec:43:a6:ee:04:03:c4:c6:0c:aa:
         d9:d2:0a:e7:7f:39:43:4e:2a:11:d5:db:68:af:49:d7:6e:2f:
         11:7f:73:2a:16:49:eb:77:e9:77:82:e9:a3:85:59:2f:e3:d7:
         b9:3d:06:02:bb:f5:2a:ac:64:ab:9f:25:0d:36:29:17:b3:f3:
         66:64:da:bf:5a:cc:1d:83:b0:82:87:83:d1:ea:f3:cb:13:08:
         8e:4a:61:65:21:6d:9b:c0:3d:26:ea:02:70:da:79:97:d5:95:
         16:4b:31:0d:1c:da:ae:4e:07:30:25:21:9c:a3:91:8c:c7:2e:
         9a:bf:59:ee:c2:01:28:70:fd:ec:80:70:b0:7e:cd:e6:d5:42:
         c6:c6:93:2f:53:52:c4:55:f2:ec:14:72:ac:88:5f:d1:da:d1:
         db:75:8e:ab:46:26:d8:b0:6f:b4:f2:7e:87:50:dd:c0:f9:ed:
         1a:b9:6c:e5:ba:90:c1:4f:93:6d:ae:f6:f1:cf:5d:e5:85:1c:
         fc:8a:3e:5b:03:3a:2a:d5:dc:a5:14:fc:45:c6:d8:be:ce:4c:
         b9:43:b5:e7:82:e9:f7:11:d0:be:91:af:92:6e:4f:e1:c3:98:
         33:3e:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:45:35 2025 by rpki-client