This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
File:                     3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json)
Hash identifier:          YYITP1IG4j+d69RrJWpExBL9En5ZMqldaTrTjl33M6o=
Subject key identifier:   BC:E9:5A:98:37:08:DF:C3:10:01:E3:AF:D2:B3:AB:B0:E2:D1:90:12
Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8
Certificate issuer:       /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
Certificate serial:       607EF709AC5359A1D3E6AB32DDF51F5DFE60A7D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
Manifest number:          03AD
Signing time:             Sat 20 Dec 2025 03:00:00 +0000
Manifest this update:     Sat 20 Dec 2025 02:55:00 +0000
Manifest next update:     Sun 21 Dec 2025 03:00:00 +0000
Files and hashes:         1: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: oltG1noOnbrRoM0sS15kDu8e6YFzCzXI+kuYiuRIpNo=)
                          2: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: ioQjGfieQHF3yV2fgI8Chw4pCzVaqcleon3vtaTviRw=)
                          3: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: qd8Txu4dDWNY16FOFsJaa44zsa01upn8VNhBpDXAP68=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl
                          rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7e:f7:09:ac:53:59:a1:d3:e6:ab:32:dd:f5:1f:5d:fe:60:a7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8
        Validity
            Not Before: Dec 20 02:55:00 2025 GMT
            Not After : Dec 21 03:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:17:11:e2:cf:c1:27:ca:00:ab:90:4a:32:
                    3e:9a:cb:e7:45:d4:08:ea:71:c7:c9:25:68:42:e5:
                    35:66:b5:2c:69:3d:8a:c0:ef:ee:89:5e:30:17:b3:
                    09:27:06:5f:6d:35:ad:4a:9d:c1:82:4d:fa:df:fc:
                    34:96:80:19:fd:a2:7e:bd:59:8f:95:a0:ce:23:e8:
                    d7:be:66:37:de:5f:da:9f:a5:c6:28:91:17:67:1b:
                    6a:e2:bc:68:bf:71:2a:48:c6:d1:cd:f2:d6:1d:bb:
                    ec:2f:d0:4c:66:75:b6:12:08:7b:33:5c:9e:f4:76:
                    5b:1c:89:e9:1d:e8:bc:d0:ff:55:88:d9:1c:6b:b9:
                    c7:1a:c2:58:69:c8:b0:9f:76:7a:e7:3e:42:86:75:
                    69:79:fe:09:b7:8d:12:77:61:a5:e1:82:e5:df:09:
                    2c:8c:08:ac:c3:0a:8d:0e:a8:9f:d5:09:47:af:ed:
                    8b:de:04:96:c8:fd:54:40:76:48:c7:64:26:4e:5a:
                    63:cf:13:91:ef:bc:3b:d3:c8:14:1c:92:f9:8e:bf:
                    04:d1:91:0c:3e:3d:fb:37:18:dc:5c:fc:3a:21:11:
                    70:9b:f3:35:ab:b6:25:2a:d6:2c:78:de:d3:38:6a:
                    5f:cc:4d:c8:f2:0c:48:0d:3c:78:60:d2:38:c6:fe:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:5A:98:37:08:DF:C3:10:01:E3:AF:D2:B3:AB:B0:E2:D1:90:12
            X509v3 Authority Key Identifier:
                keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:f8:fe:89:32:48:d5:58:94:ac:16:2a:e1:6f:92:18:c9:
         16:58:d8:c4:8e:c5:a1:94:47:fb:26:54:d0:9e:5c:ea:f0:ea:
         2f:7f:09:ad:b1:cf:eb:f4:8a:2b:1c:9c:9b:3e:0a:f9:e4:c7:
         72:68:9a:b8:1d:23:1c:5e:67:31:33:30:94:d4:b9:00:f6:c0:
         32:c0:34:ec:a5:c0:68:0b:c4:c9:8e:42:4d:7d:1f:3f:76:ff:
         17:2b:88:33:7e:a2:10:69:5e:36:84:ed:7e:73:01:f4:00:1b:
         49:10:7b:38:e1:0a:39:8f:5d:49:11:4c:c8:26:75:1c:ff:cf:
         9f:3e:6e:e3:6d:37:cd:94:71:20:d4:a1:cd:f6:05:c0:55:4a:
         be:be:59:84:c2:36:ea:6a:d0:13:44:fc:7c:f0:1f:a9:5b:95:
         18:c4:9b:8e:c8:f4:59:3d:ae:a7:11:27:31:25:18:0b:ae:e2:
         14:f8:3b:4d:ac:e9:57:47:8a:aa:09:eb:66:5a:2d:17:93:0b:
         eb:1a:73:d8:4b:86:c1:aa:4e:e5:65:9c:c3:5d:e0:53:21:7d:
         ff:8e:6a:96:b9:61:79:8a:79:08:80:ec:07:3c:d0:d4:5a:79:
         01:b7:90:8b:e6:79:fd:7d:2a:9f:24:f1:c6:44:4f:6a:fe:0c:
         a5:c5:da:38
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUYH73CaxTWaHT5qsy3fUfXf5gp9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRFQkFDRjE1Q0Q3
NTM0MUVGODAeFw0yNTEyMjAwMjU1MDBaFw0yNTEyMjEwMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjg2MzE3MTFFMkNGQzEyN0NB
MDBBQjkwNEEzMjNFOUFDQkU3NDVENDA4RUE3MUM3QzkyNTY4NDJFNTM1NjZCNTJD
NjkzRDhBQzBFRkVFODk1RTMwMTdCMzA5MjcwNjVGNkQzNUFENEE5REMxODI0REZB
REZGQzM0OTY4MDE5RkRBMjdFQkQ1OThGOTVBMENFMjNFOEQ3QkU2NjM3REU1RkRB
OUZBNUM2Mjg5MTE3NjcxQjZBRTJCQzY4QkY3MTJBNDhDNkQxQ0RGMkQ2MURCQkVD
MkZEMDRDNjY3NUI2MTIwODdCMzM1QzlFRjQ3NjVCMUM4OUU5MURFOEJDRDBGRjU1
ODhEOTFDNkJCOUM3MUFDMjU4NjlDOEIwOUY3NjdBRTczRTQyODY3NTY5NzlGRTA5
Qjc4RDEyNzc2MUE1RTE4MkU1REYwOTJDOEMwOEFDQzMwQThEMEVBODlGRDUwOTQ3
QUZFRDhCREUwNDk2QzhGRDU0NDA3NjQ4Qzc2NDI2NEU1QTYzQ0YxMzkxRUZCQzNC
RDNDODE0MUM5MkY5OEVCRjA0RDE5MTBDM0UzREZCMzcxOERDNUNGQzNBMjExMTcw
OUJGMzM1QUJCNjI1MkFENjJDNzhERUQzMzg2QTVGQ0M0REM4RjIwQzQ4MEQzQzc4
NjBEMjM4QzZGRTMyRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuGMXEeLPwSfKAKuQSjI+msvnRdQI6nHHySVoQuU1ZrUsaT2KwO/u
iV4wF7MJJwZfbTWtSp3Bgk363/w0loAZ/aJ+vVmPlaDOI+jXvmY33l/an6XGKJEX
Zxtq4rxov3EqSMbRzfLWHbvsL9BMZnW2Egh7M1ye9HZbHInpHei80P9ViNkca7nH
GsJYaciwn3Z65z5ChnVpef4Jt40Sd2Gl4YLl3wksjAiswwqNDqif1QlHr+2L3gSW
yP1UQHZIx2QmTlpjzxOR77w708gUHJL5jr8E0ZEMPj37NxjcXPw6IRFwm/M1q7Yl
KtYseN7TOGpfzE3I8gxIDTx4YNI4xv4y0QIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FLzpWpg3CN/DEAHjr9Kzq7Di0ZASMB8GA1UdIwQYMBaAFD36sR11yBnQV3NVTrrP
Fc11NB74MA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkVZM0hvN0dFY0ViTUVn
a3NlUkY2b3JaUTliQXA5V1hWUlY5ejJhMkRiZC8xLzNERkFCMTFENzVDODE5RDA1
NzczNTU0RUJBQ0YxNUNENzUzNDFFRjguY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRFQkFDRjE1Q0Q3NTM0MUVG
OC5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y
cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KRVkzSG83R0VjRWJNRWdrc2VSRjZv
clpROWJBcDlXWFZSVjl6MmEyRGJkLzEvM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRF
QkFDRjE1Q0Q3NTM0MUVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJpU+P6JMkjVWJSsFirhb5IYyRZY
2MSOxaGUR/smVNCeXOrw6i9/Ca2xz+v0iiscnJs+Cvnkx3JomrgdIxxeZzEzMJTU
uQD2wDLANOylwGgLxMmOQk19Hz92/xcriDN+ohBpXjaE7X5zAfQAG0kQezjhCjmP
XUkRTMgmdRz/z58+buNtN82UcSDUoc32BcBVSr6+WYTCNupq0BNE/HzwH6lblRjE
m47I9Fk9rqcRJzElGAuu4hT4O02s6VdHiqoJ62ZaLReTC+sac9hLhsGqTuVlnMNd
4FMhff+Oapa5YXmKeQiA7Ac80NRaeQG3kIvmef19Kp8k8cZET2r+DKXF2jg=
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:56 2025 by rpki-client