This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft
File:                     6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft (raw, json)
Hash identifier:          Cem6FVRTetGCGJ7VUiv8eLcYKivFD/fMpE1ptNEba+E=
Subject key identifier:   14:3D:FC:8D:37:77:53:B8:53:E3:05:49:F9:4B:3B:B4:74:A7:77:94
Authority key identifier: 6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D
Certificate issuer:       /CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
Certificate serial:       452928E66919F7BB519ADA2267E5D24EFCC4D471
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft
Manifest number:          0206
Signing time:             Tue 30 Dec 2025 17:17:56 +0000
Manifest this update:     Tue 30 Dec 2025 17:12:56 +0000
Manifest next update:     Thu 01 Jan 2026 20:17:56 +0000
Files and hashes:         1: 323830343a316433303a3a2f33322d3334203d3e20323634333533.roa (hash: 1wxtTCj3CNX3PkOgqpWEjswPSaD8y+wB6nt5m8xB4KM=)
                          2: 6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl (hash: qxki2SIrxS0CoDtrYyBW24LzRHjDnMbUDhVPtf7kOrk=)
                          3: 3133382e3138362e3130342e302f32322d3234203d3e20323634333533.roa (hash: CxIpvpn/YqxQAAa0qioW2ZDr8x92Y+m4E0Zf2Sq7p/g=)
                          4: 3133312e3130382e3131362e302f32322d3234203d3e20323634333533.roa (hash: aUhcrNfNzUX3Q3qixMyLCaS8pf54EETSWQQNsfzTm6s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl
                          rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 Jan 2026 10:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:28:e6:69:19:f7:bb:51:9a:da:22:67:e5:d2:4e:fc:c4:d4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D
        Validity
            Not Before: Dec 30 17:12:56 2025 GMT
            Not After : Jan  1 20:17:56 2026 GMT
        Subject: CN=143DFC8D377753B853E30549F94B3BB474A77794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:b2:6e:4f:3e:f6:57:20:ea:7f:f0:9e:27:
                    f6:52:ea:4e:38:c7:db:9a:98:06:b5:61:d7:42:cf:
                    d0:9d:cf:ff:91:60:73:14:13:19:1c:c9:04:06:e3:
                    24:58:17:5e:6a:34:3f:62:33:33:13:af:cf:00:e7:
                    42:a0:a6:39:e3:10:a1:dc:9d:a8:3f:0b:94:db:6d:
                    69:15:c0:42:9a:47:fd:c1:42:c0:99:11:a0:89:57:
                    f4:b2:03:9e:aa:30:63:a2:aa:a7:e9:4b:8d:30:7b:
                    6e:99:b3:a9:78:8e:45:ff:a4:b6:e0:53:af:48:fe:
                    7d:6f:46:16:58:1c:07:fa:53:1f:5d:3c:bf:92:66:
                    fe:6a:35:c1:76:6f:10:7d:78:50:1e:69:ae:81:51:
                    50:01:9b:79:6d:b8:6f:63:5c:b2:f0:53:b4:27:47:
                    6a:af:9a:05:5c:0c:3b:d8:30:5f:9b:75:8f:77:72:
                    4a:ff:02:36:9b:1f:87:57:6c:77:69:80:4e:d7:c4:
                    9b:33:59:e1:ab:ea:79:ed:26:9c:c6:9a:33:57:8e:
                    b5:86:04:6d:95:5b:99:49:1d:87:fa:68:08:60:5f:
                    dc:bd:5e:f1:db:85:ad:cf:02:ab:b8:57:f3:4c:43:
                    05:f3:f2:c9:09:f3:11:a7:a4:87:37:ce:2a:d8:43:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3D:FC:8D:37:77:53:B8:53:E3:05:49:F9:4B:3B:B4:74:A7:77:94
            X509v3 Authority Key Identifier:
                keyid:6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bb:c6:a0:8f:0b:d4:62:fc:14:a3:f5:ba:4c:b5:73:9c:5e:
         c9:59:ab:b7:82:75:76:ee:28:c0:ce:58:2e:dd:fd:57:16:a6:
         a0:6c:6e:1a:0e:5f:d4:a5:dd:f4:5b:d5:85:57:14:b6:4e:18:
         e2:f7:33:08:2d:d7:2e:3e:36:51:71:f9:67:8c:b5:83:25:3b:
         59:d3:1b:2c:9b:c5:2f:0c:1e:15:cf:6e:d2:cd:e6:31:00:01:
         31:7b:b0:a4:55:d4:75:76:51:a9:01:a7:73:93:82:99:06:f4:
         16:33:19:39:c6:c5:e3:17:02:23:e5:65:00:c3:5c:a9:ff:2b:
         c7:99:21:e4:2e:8e:66:76:da:d1:30:0d:7e:92:45:14:a3:7e:
         15:3f:9f:c5:bb:8d:df:3a:67:b8:cd:f5:5a:30:32:ee:e2:ce:
         66:60:a2:51:3d:e1:d6:ed:d7:0e:93:d3:03:a6:b5:e7:4b:4d:
         43:28:c6:50:62:d1:5c:fb:d1:09:02:9e:c1:51:a3:00:11:67:
         eb:92:2f:9e:1d:63:79:2a:0c:56:49:a2:ba:bf:e9:e1:10:43:
         de:45:da:bf:0f:8d:3b:e0:04:30:5c:9b:a9:84:22:6e:94:64:
         10:7b:10:90:b9:c4:29:90:7e:ae:08:ca:fc:12:65:94:5c:46:
         bb:6a:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:05:57 2025 by rpki-client