This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
File:                     DB87B78475D3067687137BE8069FFB8CBC613CAF.mft (raw, json)
Hash identifier:          yWM1b+rCqPaILOcqSiajJnzdCByKU9dBPg4fKa7mrYg=
Subject key identifier:   AC:9A:B2:B8:77:19:27:7D:EB:56:12:6E:A4:55:95:97:90:C5:7E:D2
Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
Certificate issuer:       /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Certificate serial:       01CA0D6B447F83318F182BEAC880BC563C353A35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
Manifest number:          034C
Signing time:             Fri 26 Dec 2025 21:55:20 +0000
Manifest this update:     Fri 26 Dec 2025 21:50:20 +0000
Manifest next update:     Sat 27 Dec 2025 23:33:20 +0000
Files and hashes:         1: 3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (hash: 4Jqjhfm8UELWTGuiuZ4hZgYSLa1cKWN0n4f8z7pkohI=)
                          2: DB87B78475D3067687137BE8069FFB8CBC613CAF.crl (hash: Mu+K7q7EhVGU0WJaQQ7iEQMqIGXwKTrNGfOO/85fs6o=)
                          3: 323830343a376663383a3a2f33322d3332203d3e20323731373039.roa (hash: zsQhMCE2rF1VO32MT/KDA+4cVlXckYhvlXLp+ghtzdc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl
                          rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 23:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ca:0d:6b:44:7f:83:31:8f:18:2b:ea:c8:80:bc:56:3c:35:3a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
        Validity
            Not Before: Dec 26 21:50:20 2025 GMT
            Not After : Dec 27 23:33:20 2025 GMT
        Subject: CN=AC9AB2B87719277DEB56126EA455959790C57ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:2a:a0:44:5c:7a:f4:d2:06:50:5a:7e:9c:
                    7b:77:c1:43:95:39:bf:f9:e1:d7:f3:65:5c:cd:c3:
                    ab:37:04:0d:55:aa:62:2f:9d:1c:88:05:c2:5d:de:
                    ae:f8:ef:3b:d6:7c:56:3c:33:81:b2:d4:1b:ba:95:
                    0a:c8:5c:19:a5:41:90:a5:73:61:80:93:11:6f:d2:
                    eb:77:9e:16:03:8a:df:ef:9b:d0:75:2f:cb:cd:c0:
                    6b:2a:51:df:db:f5:e8:b7:ae:11:23:6b:a6:89:eb:
                    ae:78:95:df:c6:6b:42:86:7e:45:e0:eb:83:3d:cb:
                    78:d2:5e:25:f5:b2:b5:18:bc:4d:54:0f:f0:7e:b5:
                    a2:94:5f:5e:79:21:40:f2:f6:fe:8e:bb:14:ed:65:
                    44:7f:9f:8c:a0:b4:0c:f1:ac:0d:6b:ad:ba:3d:2b:
                    89:0c:0d:c5:6c:ab:b3:b3:b4:89:24:68:00:71:8f:
                    2f:ef:0c:58:29:45:a7:42:11:bc:3c:de:51:24:87:
                    be:e1:f7:0a:04:61:bc:b3:2a:12:5c:23:e7:61:b4:
                    e9:9d:46:13:3c:8f:4b:3f:74:04:99:08:5f:50:7c:
                    f3:6b:d4:41:6d:bd:30:95:ba:ac:97:9c:7b:47:f0:
                    b1:83:ee:f7:da:f7:8b:bd:21:60:4f:fe:d9:14:80:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9A:B2:B8:77:19:27:7D:EB:56:12:6E:A4:55:95:97:90:C5:7E:D2
            X509v3 Authority Key Identifier:
                keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:5b:77:42:e7:30:09:fb:7f:04:2a:12:df:72:f1:7e:e6:
         f9:38:26:32:e3:fc:de:50:6d:f1:5f:48:24:75:c3:6f:43:4b:
         04:a9:eb:f6:02:d1:bb:e5:2d:05:68:c1:7b:d2:59:0f:1d:5a:
         c8:b3:e0:dc:58:5f:78:3e:44:95:a4:f1:cc:01:06:2c:97:fc:
         57:93:4d:cd:52:09:eb:5f:00:53:0b:61:0f:8c:72:8e:48:bf:
         ef:f0:e0:f4:7f:98:e2:c3:6c:9b:d6:30:fb:35:50:29:92:45:
         8e:ba:40:1a:b3:b3:e8:f2:80:90:95:7e:2f:8f:1c:18:f2:0f:
         d9:c7:4c:d7:42:64:7c:3a:2e:e2:6a:32:e7:06:57:a1:c2:33:
         da:ec:06:a4:7d:3f:c6:66:62:73:c0:2e:30:7c:83:91:ca:e5:
         6f:78:e0:fd:4e:c2:d3:02:57:67:2c:46:63:c1:3e:07:fd:64:
         ab:b4:9e:2b:aa:45:87:27:dc:9f:d1:4e:7f:62:ed:de:08:b0:
         39:37:e6:62:66:b8:a0:2d:ae:30:9a:6b:aa:67:b9:5b:ff:5a:
         38:b7:a0:46:55:4b:77:18:86:59:9f:d7:dc:3b:5a:69:64:7c:
         cc:78:45:47:c7:ce:85:5d:c5:b7:92:13:f8:ea:84:ec:b0:86:
         af:60:a0:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAcoNa0R/gzGPGCvqyIC8Vjw1OjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4N0I3ODQ3NUQzMDY3Njg3MTM3QkU4MDY5RkZCOENC
QzYxM0NBRjAeFw0yNTEyMjYyMTUwMjBaFw0yNTEyMjcyMzMzMjBaMDMxMTAvBgNV
BAMTKEFDOUFCMkI4NzcxOTI3N0RFQjU2MTI2RUE0NTU5NTk3OTBDNTdFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/CqgRFx69NIGUFp+nHt3wUOV
Ob/54dfzZVzNw6s3BA1VqmIvnRyIBcJd3q747zvWfFY8M4Gy1Bu6lQrIXBmlQZCl
c2GAkxFv0ut3nhYDit/vm9B1L8vNwGsqUd/b9ei3rhEja6aJ6654ld/Ga0KGfkXg
64M9y3jSXiX1srUYvE1UD/B+taKUX155IUDy9v6OuxTtZUR/n4ygtAzxrA1rrbo9
K4kMDcVsq7OztIkkaABxjy/vDFgpRadCEbw83lEkh77h9woEYbyzKhJcI+dhtOmd
RhM8j0s/dASZCF9QfPNr1EFtvTCVuqyXnHtH8LGD7vfa94u9IWBP/tkUgEOXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrJqyuHcZJ33rVhJupFWVl5DFftIwHwYDVR0j
BBgwFoAU24e3hHXTBnaHE3voBp/7jLxhPK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3
YVUvMS9EQjg3Qjc4NDc1RDMwNjc2ODcxMzdCRTgwNjlGRkI4Q0JDNjEzQ0FGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCODdCNzg0NzVEMzA2NzY4
NzEzN0JFODA2OUZGQjhDQkM2MTNDQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3YVUvMS9E
Qjg3Qjc4NDc1RDMwNjc2ODcxMzdCRTgwNjlGRkI4Q0JDNjEzQ0FGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF7pbd0LnMAn7fwQqEt9y8X7m+TgmMuP83lBt8V9IJHXDb0NLBKnr9gLRu+Ut
BWjBe9JZDx1ayLPg3FhfeD5ElaTxzAEGLJf8V5NNzVIJ618AUwthD4xyjki/7/Dg
9H+Y4sNsm9Yw+zVQKZJFjrpAGrOz6PKAkJV+L48cGPIP2cdM10JkfDou4moy5wZX
ocIz2uwGpH0/xmZic8AuMHyDkcrlb3jg/U7C0wJXZyxGY8E+B/1kq7SeK6pFhyfc
n9FOf2Lt3giwOTfmYma4oC2uMJprqme5W/9aOLegRlVLdxiGWZ/X3DtaaWR8zHhF
R8fOhV3Ft5IT+OqE7LCGr2CgrA==
-----END CERTIFICATE-----
Generated at Sat Dec 27 14:53:47 2025 by rpki-client