This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
File:                     6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft (raw, json)
Hash identifier:          QIueJ3e4Omky9k85LCW9LbRmYYkrwGTnsBMFHt6VJ9w=
Subject key identifier:   1F:65:B6:75:5A:16:AE:33:B1:B2:C4:7E:2F:B8:6F:C2:B7:EF:B7:92
Authority key identifier: 6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53
Certificate issuer:       /CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
Certificate serial:       10758AF8A13CD6F89E044767C09C99F0879AE8CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
Manifest number:          016D
Signing time:             Sat 20 Dec 2025 04:24:25 +0000
Manifest this update:     Sat 20 Dec 2025 04:19:25 +0000
Manifest next update:     Sun 21 Dec 2025 07:20:25 +0000
Files and hashes:         1: 3137302e3235342e3234382e302f32322d3332203d3e20323635333835.roa (hash: hBgzZnxmEBmYRTuvlGTuu4nN28d1lzU1d0fXQNp/cp8=)
                          2: 323830343a333334343a3a2f33322d313238203d3e20323635333835.roa (hash: /Q/JaZ+icLikHWHv6dzvxz7VzZzgz++sE7gytxv6cx0=)
                          3: 6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl (hash: NqJoHsRXcej1FqO81UnzA6+QML2ru/Cid37vQhopF2I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl
                          rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:8a:f8:a1:3c:d6:f8:9e:04:47:67:c0:9c:99:f0:87:9a:e8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CCF865AC90751CCEF5EF29C83DA400ECDC00353
        Validity
            Not Before: Dec 20 04:19:25 2025 GMT
            Not After : Dec 21 07:20:25 2025 GMT
        Subject: CN=1F65B6755A16AE33B1B2C47E2FB86FC2B7EFB792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:1b:4d:f5:29:e4:42:92:92:7a:00:1c:97:
                    81:dc:da:c3:5b:62:3e:d4:8b:b5:ab:b0:4c:f4:03:
                    f5:54:93:c9:fa:f2:ec:21:4a:80:5a:17:95:7f:e8:
                    fc:f3:1a:3d:18:4b:df:84:af:0d:23:34:37:a2:6c:
                    87:e0:09:d4:ff:7e:a8:a8:34:21:ee:c1:93:93:0c:
                    40:4a:8a:a0:a4:2d:7a:45:b7:16:e0:96:66:68:5b:
                    fa:30:d2:a0:77:49:63:c3:f8:02:ac:1f:bb:b4:59:
                    10:a4:b9:d0:03:bb:e2:1e:e4:91:a6:1f:cd:9e:05:
                    68:4d:5b:7e:82:89:1d:7c:39:2d:c6:4b:e0:37:2c:
                    9d:e3:64:d2:7c:7a:e4:8e:34:d6:ca:5d:7a:5d:61:
                    ef:b4:16:83:34:7f:14:b1:d1:33:02:61:82:3a:64:
                    48:89:32:5f:f5:d2:cf:d3:72:e2:16:63:e7:d0:8f:
                    73:5f:9d:d6:c8:31:54:58:f0:3c:00:eb:a0:0f:6e:
                    7f:8f:f0:f9:de:af:85:d7:72:9f:a8:59:0d:75:db:
                    1e:7f:c8:e3:8a:69:95:74:72:12:0c:fb:68:c4:b1:
                    09:4d:91:cf:27:97:dc:30:ad:7b:d8:5c:26:31:c6:
                    ec:c6:cc:eb:6d:56:a9:67:db:f2:77:b8:e1:51:da:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:B6:75:5A:16:AE:33:B1:B2:C4:7E:2F:B8:6F:C2:B7:EF:B7:92
            X509v3 Authority Key Identifier:
                keyid:6C:CF:86:5A:C9:07:51:CC:EF:5E:F2:9C:83:DA:40:0E:CD:C0:03:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/6CCF865AC90751CCEF5EF29C83DA400ECDC00353.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b0:a8:15:c7:fb:c0:62:3b:df:35:2e:4a:95:1f:b1:be:b4:
         f7:98:77:81:1a:7b:f2:c0:65:44:96:c2:03:9d:24:1b:da:27:
         7f:eb:90:ee:4e:dd:45:19:2d:32:87:a9:40:44:9a:c0:b3:98:
         68:b8:c5:02:55:bf:29:64:c6:dc:06:db:c6:3a:dd:b1:13:18:
         80:e9:a4:61:a1:88:05:07:15:29:c1:96:c1:e3:0d:95:a5:92:
         91:9b:2e:26:0f:5f:08:46:d2:19:55:a5:d9:da:a2:30:4e:ee:
         4a:0c:a2:22:9c:47:fc:db:2e:95:49:30:5d:fa:4c:dd:de:05:
         bf:03:04:eb:3e:c6:33:46:c7:2f:29:21:47:50:4e:64:f9:80:
         c0:52:4a:e6:3e:60:4b:66:f1:bf:cd:fd:1a:64:c6:a1:33:0a:
         6b:4b:9a:15:98:80:e1:65:74:0d:e0:a8:00:d4:3e:8f:91:18:
         74:94:24:0c:7e:60:37:09:4d:16:9c:b0:06:17:6f:4b:c0:4d:
         1d:43:b9:0b:a3:e4:37:2d:c9:bb:5f:0b:3f:ec:4d:7e:5b:4c:
         a4:71:a3:cd:c3:85:01:85:d7:54:1d:6a:00:ca:21:12:76:9c:
         3d:53:ff:3c:6d:01:5d:da:b7:4f:dc:93:31:83:77:7a:01:33:
         be:d0:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:47 2025 by rpki-client