This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
File:                     6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft (raw, json)
Hash identifier:          MGkanTKwv0N3bzY3pDuGHGs4yo6LBtNP89tvghrVgWo=
Subject key identifier:   D7:06:E5:A8:B7:5D:70:91:8E:18:D9:37:C4:37:AF:05:0B:47:AF:E4
Authority key identifier: 6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5
Certificate issuer:       /CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
Certificate serial:       5973DB7BAFF1C14BF72C532A254B8B101A3DD92B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
Manifest number:          0205
Signing time:             Sun 28 Dec 2025 07:37:04 +0000
Manifest this update:     Sun 28 Dec 2025 07:32:04 +0000
Manifest next update:     Mon 29 Dec 2025 11:17:04 +0000
Files and hashes:         1: 323830313a38313a61303a3a2f34382d3438203d3e20323734363736.roa (hash: 1Y7gkGkQAn6+7BSPC9kaTmn0gjD/7MhHXZF3K91pIGQ=)
                          2: 3138362e3139352e3136372e302f32342d3234203d3e20323734363736.roa (hash: iPY8xo1qgutjW1dWtbApFlLt/QEGoVSJGazLGzyHsmg=)
                          3: 6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl (hash: en3Q0v2XS/HuwnQTScGhMomD54IgOIuMrpr3lCDXFyg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl
                          rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 11:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:73:db:7b:af:f1:c1:4b:f7:2c:53:2a:25:4b:8b:10:1a:3d:d9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5
        Validity
            Not Before: Dec 28 07:32:04 2025 GMT
            Not After : Dec 29 11:17:04 2025 GMT
        Subject: CN=D706E5A8B75D70918E18D937C437AF050B47AFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:84:00:ec:cf:c1:94:2d:0b:94:ab:3c:0f:
                    95:20:30:39:40:e6:0b:25:7f:a2:17:8e:e8:01:1f:
                    50:bb:2a:60:f2:e2:de:37:f3:a6:dd:9d:fa:dd:0b:
                    f7:04:d3:82:18:6d:5a:1e:18:bc:03:f3:10:a5:7e:
                    7b:05:a8:de:7d:0e:57:52:b1:90:be:35:1a:fe:9f:
                    1f:aa:87:da:9f:e4:bb:46:22:26:05:59:69:d6:dc:
                    47:b8:cd:c7:a5:4e:d2:52:0b:b4:d8:f5:19:98:7f:
                    28:54:dd:98:aa:57:26:e9:f4:f0:51:12:b7:4a:b3:
                    93:68:aa:e1:68:29:bc:f3:36:45:c3:67:7f:dc:0a:
                    9c:a0:f1:a9:63:0e:5d:05:06:04:4c:46:38:c2:d7:
                    a5:57:2a:8a:e0:df:7b:98:8b:ad:89:96:68:84:df:
                    36:bf:c9:98:89:6f:e6:f5:42:5e:eb:0c:4b:46:4e:
                    0f:91:7f:6a:30:be:2f:6f:7a:90:5b:ca:63:32:f7:
                    d4:84:17:a0:bd:c3:fa:bd:34:99:dd:ad:b0:3c:15:
                    fc:aa:ae:5e:d8:15:1e:a5:70:4c:5f:c3:7c:e0:0c:
                    ca:93:d3:c8:69:e9:2a:69:74:42:a3:07:58:55:2a:
                    de:e7:b4:95:7d:69:0a:98:2b:7a:de:99:c0:03:7b:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:E5:A8:B7:5D:70:91:8E:18:D9:37:C4:37:AF:05:0B:47:AF:E4
            X509v3 Authority Key Identifier:
                keyid:6C:A8:F2:E3:76:D5:1B:5B:94:37:1C:8C:F8:53:DE:69:86:BA:4A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xxGCZw9M48eUJsHJGURaQkp6rNdP9itEmwpH4hzEmeL/0/6CA8F2E376D51B5B94371C8CF853DE6986BA4AF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3c:0d:75:87:6c:5f:ca:a5:ec:2b:65:c6:46:76:cb:b4:6c:
         c3:8e:c8:32:c9:82:3f:29:8c:9a:57:17:db:20:0b:70:42:e1:
         27:37:32:d4:4b:d1:f1:db:36:a9:92:01:2f:7c:a1:83:64:11:
         34:d1:a2:1e:42:2b:b1:be:2a:fc:72:e5:a8:e3:2e:cb:b4:51:
         6f:7d:87:d1:cf:38:c2:cf:4a:bc:01:39:f9:4b:84:55:5c:80:
         0a:74:30:be:83:df:d6:ac:db:70:ef:58:16:7b:5d:42:97:a9:
         48:5d:87:4c:b4:9a:f4:aa:8f:58:c2:5c:e1:6a:5d:fd:b8:c1:
         c5:05:46:74:63:89:ce:7a:fb:ae:45:99:7b:52:04:ed:35:82:
         6f:cd:97:dd:ac:cc:82:c8:54:9c:07:f9:50:cf:0f:c9:61:28:
         b4:70:ac:72:ae:84:37:11:45:cf:6b:47:19:9c:1e:07:f7:b5:
         be:07:6d:09:a1:7e:12:9f:23:0a:da:4b:b6:65:de:7c:16:60:
         3c:da:23:7b:03:25:4c:8b:41:7f:fe:46:a0:0a:85:24:5a:61:
         c9:4f:f9:e8:dc:ba:13:2e:ca:47:5c:c1:50:c9:7b:7f:b9:10:
         e1:86:8a:7a:33:ba:3b:bc:ce:8e:97:8f:5d:55:57:c1:e8:41:
         37:7a:e4:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWXPbe6/xwUv3LFMqJUuLEBo92SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBOEYyRTM3NkQ1MUI1Qjk0MzcxQzhDRjg1M0RFNjk4
NkJBNEFGNTAeFw0yNTEyMjgwNzMyMDRaFw0yNTEyMjkxMTE3MDRaMDMxMTAvBgNV
BAMTKEQ3MDZFNUE4Qjc1RDcwOTE4RTE4RDkzN0M0MzdBRjA1MEI0N0FGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHYQA7M/BlC0LlKs8D5UgMDlA
5gslf6IXjugBH1C7KmDy4t4386bdnfrdC/cE04IYbVoeGLwD8xClfnsFqN59DldS
sZC+NRr+nx+qh9qf5LtGIiYFWWnW3Ee4zcelTtJSC7TY9RmYfyhU3ZiqVybp9PBR
ErdKs5NoquFoKbzzNkXDZ3/cCpyg8aljDl0FBgRMRjjC16VXKorg33uYi62JlmiE
3za/yZiJb+b1Ql7rDEtGTg+Rf2owvi9vepBbymMy99SEF6C9w/q9NJndrbA8Ffyq
rl7YFR6lcExfw3zgDMqT08hp6SppdEKjB1hVKt7ntJV9aQqYK3remcADe4lbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1wblqLddcJGOGNk3xDevBQtHr+QwHwYDVR0j
BBgwFoAUbKjy43bVG1uUNxyM+FPeaYa6SvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnh4R0NadzlNNDhlVUpzSEpHVVJhUWtwNnJOZFA5aXRFbXdwSDRoekVt
ZUwvMC82Q0E4RjJFMzc2RDUxQjVCOTQzNzFDOENGODUzREU2OTg2QkE0QUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQThGMkUzNzZENTFCNUI5
NDM3MUM4Q0Y4NTNERTY5ODZCQTRBRjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mnh4R0NadzlNNDhlVUpzSEpHVVJhUWtwNnJOZFA5aXRFbXdwSDRoekVtZUwvMC82
Q0E4RjJFMzc2RDUxQjVCOTQzNzFDOENGODUzREU2OTg2QkE0QUY1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFjwNdYdsX8ql7CtlxkZ2y7Rsw47IMsmCPymMmlcX2yALcELhJzcy1EvR8ds2
qZIBL3yhg2QRNNGiHkIrsb4q/HLlqOMuy7RRb32H0c84ws9KvAE5+UuEVVyACnQw
voPf1qzbcO9YFntdQpepSF2HTLSa9KqPWMJc4Wpd/bjBxQVGdGOJznr7rkWZe1IE
7TWCb82X3azMgshUnAf5UM8PyWEotHCscq6ENxFFz2tHGZweB/e1vgdtCaF+Ep8j
CtpLtmXefBZgPNojewMlTItBf/5GoAqFJFphyU/56Ny6Ey7KR1zBUMl7f7kQ4YaK
ejO6O7zOjpePXVVXwehBN3rkKg==
-----END CERTIFICATE-----
Generated at Mon Dec 29 01:54:11 2025 by rpki-client