This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
File:                     C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft (raw, json)
Hash identifier:          2vOkA7YtRENh0dRzIEtwU4FFeK5HFcM5t0fi19MhVjs=
Subject key identifier:   70:04:76:5B:8D:F3:21:FD:6B:FE:42:93:E9:87:D2:7F:AA:68:B5:FD
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       6D73E4A9A28C8034EBFB585AF9E6C7D68425412B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
Manifest number:          03AF
Signing time:             Sat 20 Dec 2025 06:55:46 +0000
Manifest this update:     Sat 20 Dec 2025 06:50:46 +0000
Manifest next update:     Sun 21 Dec 2025 08:36:46 +0000
Files and hashes:         1: 323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa (hash: PVW6h9Xco0FwwZrlQk0HuQF3QDt318QJyllbxqUEvcc=)
                          2: 323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa (hash: KmfoJnA+m+lIIb/f7v2HReLl/jpaS6ANmcaCEAuHOLc=)
                          3: 3133312e37322e3234362e302f32342d3234203d3e20323632333933.roa (hash: 615rGj9Js2Dl80Kw62XMW8emzqgvSZMSfqWUJ4tE6hM=)
                          4: 3133312e37322e3234342e302f32332d3233203d3e20323632333933.roa (hash: oIWfcne/oyNqImYMcllWN4vLfKN08UJHxXxzljREtWQ=)
                          5: 3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa (hash: a4b9PokCzM9g1DP4xGE1eI0CLHGuQKIAvQpkDuU1Iao=)
                          6: 3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa (hash: NicDSpiEpXH5KXOI9ch1Cm1dUUPZ7jtxvS30kYkjNDI=)
                          7: 3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa (hash: 7wxYt9ygikKP9PZSdWrnUf2+El2/ik2bYxtE0EzlIaw=)
                          8: 3133312e37322e3234362e302f32332d3233203d3e20323632333933.roa (hash: MCplcWcIzhbLVGxOr8Cra/FAdQPUsv+wVTiqRJpLNHc=)
                          9: 3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa (hash: 7K4+wuw6iIYiMptynPMVuyFuTUXosqK080iW42Xramk=)
                          10: 323830343a3863383a3a2f33322d3332203d3e20323632333933.roa (hash: z0w8FVCJ4DS2w5yYqh99pjh5BAMG3JvBPm+NKZzKfWE=)
                          11: 3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa (hash: 1C15ArpsghCWqRjUwKygT9aup/yy6Tzw/oBory9Scrs=)
                          12: 3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa (hash: 0EicfWM+00LLGwGoIzeydddrmOZ3rQFHLsFIgLJacjU=)
                          13: 3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa (hash: gD89NORW7iXL3urwci0r5xZ81xY86MTMlB1XVWqI264=)
                          14: C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl (hash: ioK5DGQBTS5Y8T26cHd4TOC+Q1ZBMJqEZHuZuB1kJgI=)
                          15: 323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa (hash: gLf52+ozj+dPkOZjCLdzZxFH4yEPwfpI1gLgVM7xcNA=)
                          16: 3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa (hash: JNdoxeaIs6VxuwdZsxib3eCibZx97pvL/aTLC3dJm2M=)
                          17: 323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa (hash: No6Rd9VHGWJVW+wmHQlEIM7ZMFM7MIRSvrdeUEima4I=)
                          18: 3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa (hash: kv1FzY7jmh3UYKxQ0VRTwjVfk9dfI3L772103n6srXY=)
                          19: 323830343a3863383a653030303a3a2f33352d3335203d3e20323632333933.roa (hash: cBZL/LLfq1QTvV2JCizQa/fL1OhoO6vNKM8GC6oQbjs=)
                          20: 3133312e37322e3234372e302f32342d3234203d3e20323632333933.roa (hash: EM/+8xjJz8rZ/NBarltQZC3cxUL5I0PofBtmSEjpuqQ=)
                          21: 323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa (hash: iG9MBxrBIm41u5GGH+CMZZXj4c+DUDay0eUrlH+XD/c=)
                          22: 323830343a3863383a3a2f33332d3333203d3e20323632333933.roa (hash: OrxneSgEcvlRbnaWMw0eP6WsBIXo/UUrOjTjCBwJ/NI=)
                          23: 3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa (hash: tcQCzZMH3OwqnOaypvNNpGtPXsj4yJb/6a9IfKKYeA0=)
                          24: 3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa (hash: I4U57E02yxwrFc+69+Z6WZ1JuIILV/3JF5TE+xDy9iU=)
                          25: 323830343a3863383a383030303a3a2f33332d3333203d3e20323632333933.roa (hash: Z9+oPMdn9Mf5Dy0Q1T4rtylqO2k9ySVGZNH61FdzMSc=)
                          26: 323830343a3863383a3a2f33352d3335203d3e20323632333933.roa (hash: dmo5cPb/7pRc/a4nNJ6ApKn00n6/OXjgMuWweoiEMJE=)
                          27: 323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa (hash: UDKjT4hWz4wzlMX4OlsQM/uIE/3ohHRkaMbqafvXBx8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:73:e4:a9:a2:8c:80:34:eb:fb:58:5a:f9:e6:c7:d6:84:25:41:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Dec 20 06:50:46 2025 GMT
            Not After : Dec 21 08:36:46 2025 GMT
        Subject: CN=7004765B8DF321FD6BFE4293E987D27FAA68B5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3f:03:cc:56:5b:99:a6:1e:af:b1:1c:d2:c9:
                    08:ef:a8:a4:f4:49:e6:ad:db:53:20:fb:ec:58:9e:
                    5f:1f:f4:4c:5d:32:70:6c:15:04:b5:63:bf:5e:cd:
                    6e:bb:73:0c:4b:37:30:6c:a6:3d:db:ae:4b:c3:4c:
                    e0:4f:b2:91:71:e2:c4:a8:9c:80:98:74:b7:27:ab:
                    06:a0:73:1b:7b:9c:00:d6:7e:fb:18:84:77:9d:32:
                    83:ff:b3:c7:42:6b:7b:65:b3:95:24:32:17:c0:d9:
                    66:0c:07:87:ef:a4:d9:08:64:f9:73:78:6d:eb:a4:
                    3b:1d:21:8d:7b:eb:7d:54:c2:20:a8:79:a7:9e:b3:
                    35:7c:4f:52:31:9e:1a:9f:79:4f:55:62:d9:d3:76:
                    05:d7:15:c7:7a:4b:28:a2:5e:db:bf:b6:54:f1:0d:
                    3d:60:5f:4f:3f:fc:65:ea:89:9c:2d:72:c4:21:42:
                    33:58:8c:b8:c8:a8:36:2e:7b:6f:7c:21:b5:69:71:
                    5e:b1:98:5c:e6:b5:48:30:b2:88:e5:98:42:c8:dd:
                    6b:cb:3c:26:4b:00:a0:50:80:0d:68:0d:f8:92:16:
                    fd:f4:1e:ae:32:88:b4:c4:57:35:cd:4f:f9:7e:44:
                    46:a8:e8:43:ef:18:15:1e:80:36:8c:b6:76:6c:db:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:04:76:5B:8D:F3:21:FD:6B:FE:42:93:E9:87:D2:7F:AA:68:B5:FD
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:1a:93:67:14:6f:99:67:fe:82:6b:e9:18:ef:e3:96:ac:
         9c:a6:43:bc:44:1e:ee:0c:51:0e:e6:b0:14:d2:7d:f9:5c:5f:
         b6:60:be:bd:0a:c9:b5:ca:73:a9:ad:53:f1:27:ca:5b:59:47:
         e0:58:b1:1e:08:b5:fc:e0:b6:71:0e:aa:e7:cd:e3:0e:fc:cd:
         79:4e:59:50:b5:90:6b:a1:8f:c3:39:b6:23:2d:f5:15:c9:1b:
         07:f1:43:08:21:13:d3:34:26:b4:52:6a:e2:1d:05:b9:b4:d9:
         2d:64:76:eb:de:37:dc:6b:91:8a:9a:69:42:6b:2f:db:1f:64:
         cf:e1:4e:f8:16:4e:9e:9c:7b:57:3f:65:9c:d2:cc:1d:45:3b:
         19:3d:19:08:2b:f2:52:65:17:f9:f1:f5:ab:3f:0f:39:32:5b:
         f5:05:b1:b1:b5:7c:79:22:74:43:b7:6b:44:43:2a:8d:5a:a0:
         d8:b8:cd:bb:b1:80:15:3e:9c:58:ed:70:09:aa:d9:d1:a4:ff:
         ba:03:54:25:c6:01:64:c5:b4:ba:60:d2:eb:c2:4d:c5:59:72:
         de:a4:c3:cd:ad:a9:6f:03:09:a8:e0:fc:d9:d1:7a:82:6e:47:
         1a:f3:29:f4:12:7b:83:a4:1a:c1:b0:6e:72:d7:61:7c:44:d0:
         44:6d:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:45:13 2025 by rpki-client