This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
File:                     0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json)
Hash identifier:          7V8rmS60J0PvEY53MW23901UTCwLmuG/a3S/Rz0FFA4=
Subject key identifier:   3B:4C:E5:38:21:B8:01:EF:E3:A2:AA:D3:B5:5B:F1:A2:6D:D1:AD:AC
Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
Certificate issuer:       /CN=0688357ED433C0A60770FB474BDB2C72796B78BD
Certificate serial:       0961E9190B374B6B04B68528DAF7EEE54F4E19CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
Manifest number:          0151
Signing time:             Tue 23 Dec 2025 12:35:14 +0000
Manifest this update:     Tue 23 Dec 2025 12:30:14 +0000
Manifest next update:     Wed 24 Dec 2025 16:03:14 +0000
Files and hashes:         1: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: zc3LULECX4vlM4Y2/cxgj7HsAHrgoE//NS1fQooz3ZI=)
                          2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=)
                          3: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=)
                          4: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl
                          rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:61:e9:19:0b:37:4b:6b:04:b6:85:28:da:f7:ee:e5:4f:4e:19:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD
        Validity
            Not Before: Dec 23 12:30:14 2025 GMT
            Not After : Dec 24 16:03:14 2025 GMT
        Subject: CN=3B4CE53821B801EFE3A2AAD3B55BF1A26DD1ADAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:04:5f:6a:36:53:a0:08:46:d4:2e:5e:ae:
                    32:94:5c:ae:4e:72:e1:23:bf:bd:f1:51:a9:59:12:
                    24:7f:62:26:13:59:8a:d0:af:0b:28:4a:bb:08:e4:
                    00:d7:a1:52:e9:df:8a:da:b1:08:29:71:1e:75:a7:
                    43:a8:4c:36:ef:c0:ad:81:fe:e1:36:85:8a:63:ed:
                    0d:6d:ab:1a:b9:d6:2e:e9:d6:9c:eb:c2:8d:81:c0:
                    76:f1:83:a6:31:87:62:d3:1f:b8:4b:fb:c6:ad:d3:
                    32:d1:8c:dd:0b:11:9b:ec:c9:d9:18:6b:19:7d:4d:
                    af:f8:f2:1d:09:26:4b:5f:a1:70:1a:3d:33:a6:63:
                    af:e3:75:5d:e6:10:f5:28:ba:08:8f:10:ad:ca:8a:
                    8b:48:21:36:26:b6:2d:4e:13:23:68:d9:d5:c1:68:
                    98:e3:43:02:1a:1e:6a:ba:aa:7b:6d:58:31:fb:3e:
                    e6:4e:ce:15:3d:71:3a:19:d1:8c:2b:f3:56:a7:20:
                    fc:29:c5:1b:35:e0:d9:05:2e:b4:da:5e:b6:c4:71:
                    e0:7c:32:22:6f:5f:68:5e:e0:b9:c9:2f:bd:a6:31:
                    c5:04:47:d0:21:5c:99:d9:32:09:5f:3b:1a:e1:f5:
                    ef:df:cd:07:bc:f8:30:0c:94:13:08:86:51:aa:38:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:E5:38:21:B8:01:EF:E3:A2:AA:D3:B5:5B:F1:A2:6D:D1:AD:AC
            X509v3 Authority Key Identifier:
                keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:f0:52:26:4f:1f:b3:91:9e:08:fc:2e:40:55:98:71:df:
         2e:de:b2:47:69:d4:bc:7a:d2:77:46:6c:e2:2e:c0:7e:08:9b:
         6a:9f:c5:19:78:86:45:79:a5:cd:36:72:e4:6e:3e:f6:89:b8:
         e3:c9:1d:fe:72:2e:a4:1a:db:e7:d9:79:dd:3a:59:d8:90:64:
         27:51:c2:94:b4:ea:c9:66:b8:df:7c:a4:d6:e4:b3:ec:af:f7:
         a7:41:f5:32:ef:81:4e:f1:27:98:a8:42:85:68:57:3f:16:f2:
         77:42:95:21:67:03:af:22:4f:bb:80:d9:c9:a2:04:8d:87:b1:
         ec:e6:65:b2:4f:7c:79:c5:ba:e8:b3:c2:25:84:30:f6:62:ae:
         f0:93:45:1b:67:59:2e:4b:a7:ce:59:15:a9:a8:16:41:1a:40:
         b7:79:4c:d4:a1:82:f5:c6:c5:e9:2d:3a:04:e0:94:fb:d1:95:
         37:3b:93:94:b8:b3:17:24:1b:e6:47:f9:85:9d:f9:6e:a3:5e:
         0b:2e:9c:ff:b0:29:c5:1e:ef:28:d4:90:3c:1f:86:63:08:13:
         7c:cb:a0:ef:a3:5e:a1:19:7e:44:a7:13:fc:08:e0:30:3a:81:
         fc:a2:eb:64:38:f0:4a:51:28:ae:44:f6:96:b7:fe:c2:de:d7:
         cd:f6:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:57:28 2025 by rpki-client