This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
File:                     FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft (raw, json)
Hash identifier:          X1rtmQMU6u8tO7tVB4wO2s3yZrmuFrgqthMtUrmCIBk=
Subject key identifier:   43:BA:0A:50:30:70:C5:50:B2:6E:B7:AE:2B:07:7C:D9:A7:44:D9:20
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       76BCE35229710BAA9819DBC06E324D80C9B1E4C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
Manifest number:          3E
Signing time:             Fri 19 Dec 2025 17:32:07 +0000
Manifest this update:     Fri 19 Dec 2025 17:27:07 +0000
Manifest next update:     Sat 20 Dec 2025 18:30:07 +0000
Files and hashes:         1: 323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa (hash: B66JKtLsBgBMjQp/AGkwOwAi47r2U4InpzDd/Z7/C44=)
                          2: 323830343a343166383a3a2f33322d3332203d3e20323637343639.roa (hash: Ks3u3FOVDXNgr1C723Q8QDIGH5YXu5WjdFq84+Aoa5Q=)
                          3: FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl (hash: TgstYTitYValTLP+19B4cYXvEgae54wQ42bXkHRbkIM=)
                          4: 3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa (hash: mYT8vPw3a1Oxp/NzVNHAx6psb04gQBzPpCuvmDLLZyE=)
                          5: 323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa (hash: AO3dF06oRpcmMC+MTQ/Qf9blP4AtHY9TVocAYbUwugE=)
                          6: 323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa (hash: vYYVp0B8JdyIL9GopTUWbZA/5MB0e0hPWXndELd//eU=)
                          7: 3139322e3134312e3135382e302f32342d3234203d3e20323637343639.roa (hash: UXrZfK4qHT0RlFOpshm6mr2Xi5XTv97mJiNR2vn6VhM=)
                          8: 323830343a343166383a663234303a3a2f34332d3433203d3e20323637343639.roa (hash: rT8cf1ONWslM6q58ddcVm5FujlGeQfHT4OCZkudm/Cg=)
                          9: 323830343a343166383a663030343a3a2f34362d3436203d3e20323637343639.roa (hash: nqHx65/I84jySZZxCt+f9KGm+XkUBgPzLRw3ShXviqg=)
                          10: 3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa (hash: qPy7KkNhtAdoTufnPwnrRnXcVUtVBpUr4nAdV9YW0XA=)
                          11: 323830343a343166383a663232303a3a2f34332d3433203d3e20323637343639.roa (hash: xJ5tarndwmtaOgMt6mSt6+Pvmdyp6I2FLynBmZ7Ji88=)
                          12: 3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa (hash: Az00IP6p/LjbkSEgP2DYZzTQTV62URdzMh0BaE/WYkw=)
                          13: 323830343a343166383a663333303a3a2f34342d3434203d3e20323637343639.roa (hash: zeQ8nTkkU7g50mKcsOLPD2lrCzgQIX3z491ItcFNnfQ=)
                          14: 3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa (hash: bapVe9t1HYfxMazk88/BGK06ok6qN1ojEvVMD2U9ek8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 18:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bc:e3:52:29:71:0b:aa:98:19:db:c0:6e:32:4d:80:c9:b1:e4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Dec 19 17:27:07 2025 GMT
            Not After : Dec 20 18:30:07 2025 GMT
        Subject: CN=43BA0A503070C550B26EB7AE2B077CD9A744D920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:6e:9a:e6:4d:d7:22:a6:12:3f:1b:d0:68:
                    45:24:5a:f5:f1:69:fa:dc:4a:bf:18:1e:4c:f8:df:
                    4c:6f:ee:c5:05:4a:0b:11:b9:0f:bc:30:56:c5:a3:
                    4e:a1:fb:da:2c:f2:59:ba:38:8f:a5:9a:aa:f8:11:
                    74:30:84:42:7f:9e:1c:78:c8:9e:82:9e:39:a1:23:
                    56:87:d1:00:14:09:4b:df:57:fc:58:de:7e:b6:98:
                    8c:3e:71:a2:da:5f:39:7b:c9:8b:12:c1:f1:90:ed:
                    62:a8:f7:24:d0:47:93:36:ac:56:8f:ed:40:a7:81:
                    bb:ac:65:80:ad:0e:e3:90:bb:ad:68:14:a7:1e:84:
                    e3:66:f4:c9:63:7b:50:80:91:49:c4:fb:95:f8:72:
                    98:b8:35:ca:ff:79:03:08:59:be:96:4d:5c:90:a2:
                    64:ef:dd:53:e5:b7:3e:79:6a:28:73:08:4d:64:cc:
                    aa:b9:f0:aa:6e:47:b3:7e:16:c2:8b:40:c9:e4:f2:
                    64:df:03:9c:d6:52:09:77:6c:02:3e:b7:49:fd:de:
                    81:98:e6:4e:3a:c8:42:76:82:e6:9d:02:0a:a6:d3:
                    89:66:2b:08:6c:af:56:33:ce:57:ed:30:a2:44:83:
                    6d:05:6d:04:35:74:b4:8e:76:18:29:97:7d:f0:3a:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:0A:50:30:70:C5:50:B2:6E:B7:AE:2B:07:7C:D9:A7:44:D9:20
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:e5:21:0c:29:fc:42:e4:e5:f1:38:c3:ce:02:c9:cb:30:
         30:c9:56:c4:26:a5:98:62:da:50:da:05:49:05:d0:e4:c4:58:
         6a:92:e8:6a:b3:d9:5e:bf:5e:85:e3:f0:c4:eb:b8:23:3f:57:
         98:7c:6c:85:08:d7:e6:fd:40:d5:68:fb:13:e8:2c:3a:fa:87:
         5c:bf:af:f5:29:d6:cd:bc:bd:2a:be:c4:a8:ba:8a:33:ad:35:
         1c:67:34:42:c2:ac:5b:aa:0c:38:8b:35:52:bf:5f:d8:95:e7:
         79:cf:e7:42:14:9a:98:62:8e:20:b9:6f:5e:2f:46:20:c9:f5:
         e2:30:07:c4:8b:ac:d3:b6:a2:f3:35:0d:4e:32:f5:bd:e6:2e:
         f3:12:61:9d:fc:6f:9c:ef:75:6d:b4:10:c1:c9:da:2f:31:7b:
         87:7e:8a:80:0a:6d:87:40:b2:72:1c:08:b4:05:03:9b:5d:ca:
         5d:c4:62:58:ef:17:1c:25:ee:5f:c7:99:06:1d:52:f5:8c:67:
         e6:2a:b2:ad:80:59:f9:bf:fb:84:af:e3:21:5e:9d:bf:22:c1:
         71:c5:87:3f:f8:93:f6:67:e3:0b:2c:3f:9d:c4:74:64:5c:2b:
         37:54:57:b4:62:df:b0:7e:37:17:b8:cd:4e:7a:1b:81:7e:be:
         8f:11:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:11:04 2025 by rpki-client