This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
File:                     3332A8C3B68FE79476953E58B1857203FA676F0F.mft (raw, json)
Hash identifier:          mkJ1MK3hv4IXtyovrUcT4BBqDepLtTW8SlGccJqaefM=
Subject key identifier:   E9:D0:7C:25:8A:C6:35:81:E7:CC:9E:B2:15:CD:AD:D8:01:23:B6:27
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       4FCAE19F57236DA08279BCACE76AA416F720A80A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
Manifest number:          02BE
Signing time:             Mon 22 Dec 2025 19:58:40 +0000
Manifest this update:     Mon 22 Dec 2025 19:53:40 +0000
Manifest next update:     Tue 23 Dec 2025 23:54:40 +0000
Files and hashes:         1: 3133322e3235352e3134302e302f32322d3332203d3e203533323233.roa (hash: xfBj7EHGkXfpaVkg+i26+Pm0zpmELHrz6cERLXLO/bA=)
                          2: 3332A8C3B68FE79476953E58B1857203FA676F0F.crl (hash: dn18zBp4AJaz4ZchMvGEFg2bWV5HZx2hIpwt3UJMW34=)
                          3: 3138362e3235312e38302e302f32312d3332203d3e203533323233.roa (hash: 492Ebg7iQemc/TE4N/iR58FeCmeAA91V38unRlDznt8=)
                          4: 323830343a323038383a3a2f33322d313238203d3e203533323233.roa (hash: 5fQ3uPb5SVDlUX3RSxQAq0TlweJO1u7jbGHmsCaKc/w=)
                          5: 3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (hash: e3lF6O0/izSqcl2PK/nGJ0F7KicvIwfhh8Bq3/aSRyE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 23:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ca:e1:9f:57:23:6d:a0:82:79:bc:ac:e7:6a:a4:16:f7:20:a8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Dec 22 19:53:40 2025 GMT
            Not After : Dec 23 23:54:40 2025 GMT
        Subject: CN=E9D07C258AC63581E7CC9EB215CDADD80123B627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:1a:07:85:a7:fa:2f:f8:e3:ae:04:85:74:
                    46:72:60:da:48:5e:55:47:8b:dc:8f:1c:1e:8f:f7:
                    90:09:7c:6c:69:22:83:07:82:10:3a:06:36:5f:c2:
                    1d:42:41:39:53:bb:d3:e5:b5:cb:a5:d0:0d:f5:50:
                    c0:b9:03:3f:ee:0a:80:6e:5e:20:d6:8c:a3:d0:a7:
                    ec:80:f5:02:6e:cc:f6:ae:55:d1:2f:32:e2:9e:a3:
                    ec:ca:6d:fd:3d:19:31:96:6e:a4:98:3e:7b:30:04:
                    83:53:24:69:ac:91:c7:94:58:8f:3b:b0:8f:f4:06:
                    08:0c:e3:ab:5d:24:65:80:ac:68:f2:18:3d:42:8a:
                    7c:4f:7c:89:03:e2:a7:17:1f:63:cf:93:f2:7a:2a:
                    33:46:5d:ab:0c:2a:aa:ef:09:2b:99:a7:fc:a7:77:
                    86:19:a8:71:a5:03:99:2f:85:86:ea:8a:8f:8a:71:
                    17:50:20:68:be:6d:aa:94:84:56:34:f4:d6:b5:19:
                    04:7a:4b:b2:73:0e:cb:1d:47:cd:1a:be:ff:10:2c:
                    d5:9a:21:a1:db:d7:37:e9:15:8d:77:80:72:d6:74:
                    1d:33:92:63:2a:7e:ba:fc:84:4b:e4:1d:d0:5f:9a:
                    95:34:ac:6c:9b:f5:ea:94:df:21:6d:c1:88:a0:29:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D0:7C:25:8A:C6:35:81:E7:CC:9E:B2:15:CD:AD:D8:01:23:B6:27
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:24:8f:0a:27:da:1b:f7:82:9d:cd:c1:31:72:29:3c:0f:b2:
         c2:ec:ad:f4:7d:7e:b3:15:cd:a9:a3:4c:a6:46:15:05:63:1c:
         b7:98:e1:3e:e5:67:54:80:1f:bd:41:3c:dd:06:ad:fc:f5:1f:
         eb:e3:c8:7a:8d:ca:52:8f:23:a4:21:e6:ac:f2:ac:a7:42:75:
         e3:75:6e:55:26:ef:01:0e:73:85:ce:7b:ee:fb:ca:fe:5b:e0:
         1c:9a:e5:19:10:66:6b:82:40:24:08:b0:0b:c3:b1:77:bb:f9:
         4f:45:8c:aa:68:04:79:5d:cf:93:dc:18:1d:dc:b0:41:61:d9:
         5e:08:1f:1b:76:b8:70:f0:14:0b:33:14:c2:e1:15:db:f7:f4:
         3f:b4:99:93:6a:47:a7:e5:9b:15:fd:1f:b2:7b:fa:f0:46:ab:
         4b:07:5e:96:00:b1:e2:e9:0a:11:86:73:e2:33:81:f6:ef:66:
         a8:95:e4:f4:23:12:11:f2:02:6c:0a:3b:e6:0e:2e:03:56:c7:
         12:eb:a3:f7:53:63:00:d2:24:99:86:ea:90:a0:01:75:3d:3b:
         a6:03:a3:4b:54:90:03:63:c1:92:a7:bb:df:8b:03:14:b8:95:
         75:a1:ce:1f:e4:c4:35:f5:7b:8b:51:c3:8b:94:e3:de:15:23:
         bf:9f:71:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:01:58 2025 by rpki-client