This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
File:                     8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft (raw, json)
Hash identifier:          ePX1S0NX+QmEY4TcWuLhsDNKMmaLF5NF029dvZj9gzk=
Subject key identifier:   08:5A:BF:46:D3:CF:D1:38:2A:08:B0:F8:D9:89:95:FE:1D:FC:83:71
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       2043B2E3423011F6F0747676807F973A39F2913E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
Manifest number:          022E
Signing time:             Fri 19 Dec 2025 23:00:11 +0000
Manifest this update:     Fri 19 Dec 2025 22:55:11 +0000
Manifest next update:     Sun 21 Dec 2025 00:00:11 +0000
Files and hashes:         1: 3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa (hash: sbJHPn3dWUwsi0qmFXwC/ratf8AVvbI/IF2heqXzNBc=)
                          2: 3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa (hash: /fUvUxnGYQFT7TnAOHiefG6aMWu3Wxtz5KtYwMBbNy8=)
                          3: 323830343a336265343a3a2f33322d3438203d3e20323636313738.roa (hash: efJfplOtXb/kewW5M0EnZm0tv7/C2wRazsh3UjKjPTY=)
                          4: 8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl (hash: ElsQHEypGv41jF8Av//d91tQ+5xMx2Y1aNkQNslPBqk=)
                          5: 3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (hash: g19LYQXp6mzNXJgpiLJtMjT9m4+EvOZxxZn8tIle/bY=)
                          6: 3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (hash: /9OJ+mF4Wp8Oq0nYxSjBeVHNSoaZV9OizbRzZKYK+qA=)
                          7: 3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (hash: iLF7XIWeMQGgHKMlS6NOBA8V4BCd6yee9E7gqnE/42k=)
                          8: 3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (hash: M6ER/d26ON15UtTOvFStLwb3bWS5QtDioUQFgvHKQfQ=)
                          9: 3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (hash: tEXNEcR0bExFaJvTMGEgjkeXmCinKFhAPvS3B/zBS50=)
                          10: 3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (hash: akSCKp8SsUrYcF+qebEjEWPIh4lrttT3OqJxyv5vkaM=)
                          11: 3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (hash: KGmtYZg8uieHVYAYvE6AE33X7A1OtlUL7NsP+k1cb+4=)
                          12: 3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (hash: vgYb9BAuf4bhVEH5mLObWdzqX7yKTdM1IZvXQBELeKw=)
                          13: 3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa (hash: 9T/G3KuTkdiWlNuGai6zaRmf1aZny9qMUxrIqDzoBIY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:b2:e3:42:30:11:f6:f0:74:76:76:80:7f:97:3a:39:f2:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Dec 19 22:55:11 2025 GMT
            Not After : Dec 21 00:00:11 2025 GMT
        Subject: CN=085ABF46D3CFD1382A08B0F8D98995FE1DFC8371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:28:30:ca:da:9e:51:8a:63:5f:bd:02:2d:
                    db:d4:4f:3d:2b:aa:fa:4f:e7:c0:7c:d2:b0:33:ea:
                    b4:51:0e:7a:d6:af:ce:d6:68:74:44:77:cf:77:51:
                    56:af:3d:d6:31:db:6f:a0:76:62:50:62:53:27:f0:
                    c8:7f:96:c1:7c:ba:a1:68:ce:8c:61:40:e5:42:65:
                    22:09:63:01:be:65:25:fe:b5:24:f3:51:64:e5:cf:
                    52:fc:33:3e:e8:bc:14:c0:5b:ca:d2:30:d6:84:92:
                    e0:95:9e:14:77:71:59:74:bc:c7:e7:bb:9c:f2:c5:
                    25:16:b1:e8:aa:93:da:1e:64:af:b2:d6:29:10:4f:
                    c0:56:da:90:bb:30:92:55:28:66:cf:f4:22:eb:fa:
                    04:87:8d:d2:09:80:55:ee:db:51:d9:0f:e0:aa:0a:
                    4a:4f:ef:de:4f:5d:85:90:e8:96:06:b9:ed:f4:c5:
                    49:87:04:46:84:e0:4b:16:c8:59:8c:fc:cd:8b:d7:
                    fe:3d:8e:7b:61:36:69:3f:ff:f5:8a:23:fd:e3:d4:
                    6b:16:0a:68:ba:1a:1f:7d:6e:76:cc:ba:ae:6b:a5:
                    f3:6a:98:08:47:d4:3e:95:fd:06:db:e3:24:8a:d6:
                    15:05:57:19:52:b5:bf:6b:06:fe:b6:9d:ef:93:1d:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5A:BF:46:D3:CF:D1:38:2A:08:B0:F8:D9:89:95:FE:1D:FC:83:71
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:66:49:06:9a:bf:0f:bd:a6:b5:14:c5:23:bc:c5:80:83:
         e2:07:f3:1d:69:7c:ea:ef:5f:87:53:1c:f5:b9:a4:08:59:3d:
         9d:08:e8:44:b5:c7:60:e3:89:45:ad:6f:c6:30:b0:a1:26:36:
         c2:2e:c7:d6:6d:fa:5d:38:81:78:c4:b6:8a:a0:70:46:78:bc:
         35:7c:a2:c0:f8:a4:a0:8d:55:97:83:8a:db:57:76:91:52:fd:
         f3:2b:c7:b6:3d:c1:bd:c1:e0:85:0a:49:33:3a:b4:90:49:12:
         21:8d:69:df:35:bf:6b:16:41:28:2d:d3:de:42:45:58:ff:fe:
         6e:94:68:8f:e1:56:8e:f5:76:f4:7f:f8:f8:04:24:3b:15:46:
         45:64:4c:3e:7a:3e:7b:82:32:c5:e0:c0:7b:e3:f7:8a:cc:c4:
         06:5d:d4:c2:bd:4f:a1:8d:03:02:60:c1:59:67:63:6d:be:bc:
         db:4c:a0:77:a1:71:01:d1:92:3f:57:8b:ed:98:41:98:bc:78:
         a6:62:89:29:b0:af:49:2f:df:a0:a4:a4:57:35:9a:15:50:12:
         89:66:be:84:53:ae:cc:90:b1:54:0c:14:e8:37:9f:11:7f:19:
         47:ec:14:7b:35:af:48:04:ff:e9:b6:1d:45:22:3e:e9:dc:ed:
         a3:c2:f8:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIEOy40IwEfbwdHZ2gH+XOjnykT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJCMjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENF
QkMzQkI5MDAeFw0yNTEyMTkyMjU1MTFaFw0yNTEyMjEwMDAwMTFaMDMxMTAvBgNV
BAMTKDA4NUFCRjQ2RDNDRkQxMzgyQTA4QjBGOEQ5ODk5NUZFMURGQzgzNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXigwytqeUYpjX70CLdvUTz0r
qvpP58B80rAz6rRRDnrWr87WaHREd893UVavPdYx22+gdmJQYlMn8Mh/lsF8uqFo
zoxhQOVCZSIJYwG+ZSX+tSTzUWTlz1L8Mz7ovBTAW8rSMNaEkuCVnhR3cVl0vMfn
u5zyxSUWseiqk9oeZK+y1ikQT8BW2pC7MJJVKGbP9CLr+gSHjdIJgFXu21HZD+Cq
CkpP795PXYWQ6JYGue30xUmHBEaE4EsWyFmM/M2L1/49jnthNmk///WKI/3j1GsW
Cmi6Gh99bnbMuq5rpfNqmAhH1D6V/Qbb4ySK1hUFVxlStb9rBv62ne+THVnFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCFq/RtPP0TgqCLD42YmV/h38g3EwHwYDVR0j
BBgwFoAUi7I/sPOPfN4XhS3GG9I03OvDu5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3Ix
cVEvMS84QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQjIzRkIwRjM4RjdDREUx
Nzg1MkRDNjFCRDIzNERDRUJDM0JCOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3IxcVEvMS84
QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE8FmSQaavw+9prUUxSO8xYCD4gfzHWl86u9fh1Mc9bmkCFk9nQjoRLXHYOOJ
Ra1vxjCwoSY2wi7H1m36XTiBeMS2iqBwRni8NXyiwPikoI1Vl4OK21d2kVL98yvH
tj3BvcHghQpJMzq0kEkSIY1p3zW/axZBKC3T3kJFWP/+bpRoj+FWjvV29H/4+AQk
OxVGRWRMPno+e4IyxeDAe+P3iszEBl3Uwr1PoY0DAmDBWWdjbb6820ygd6FxAdGS
P1eL7ZhBmLx4pmKJKbCvSS/foKSkVzWaFVASiWa+hFOuzJCxVAwU6DefEX8ZR+wU
ezWvSAT/6bYdRSI+6dzto8L4+w==
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:37:04 2025 by rpki-client