This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
File:                     89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft (raw, json)
Hash identifier:          FrMrTiCguwwVfy75YjVSgVbuyJPSwerPrEHE6HSZAkQ=
Subject key identifier:   92:CA:A6:AB:17:0B:2E:14:B0:9C:CE:BF:A7:A2:34:F7:F9:08:95:6B
Authority key identifier: 89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB
Certificate issuer:       /CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
Certificate serial:       32961E6E8041C6B5D25C72E1F0018CC41701E193
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
Manifest number:          1F
Signing time:             Thu 18 Dec 2025 10:11:25 +0000
Manifest this update:     Thu 18 Dec 2025 10:06:25 +0000
Manifest next update:     Fri 19 Dec 2025 12:53:25 +0000
Files and hashes:         1: 3136382e3233322e38302e302f32342d3234203d3e20323634393336.roa (hash: HxsPaIF/qzhQffODUqeFPjeROXR2c6/2HLHKeKdTir0=)
                          2: 323830343a333033343a36303a3a2f34342d3434203d3e20323634393336.roa (hash: ItCF7/5WWPpDpautNlBrdm7eR4JtF6m2sPLjVkRN/4U=)
                          3: 323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (hash: c0/SqBV5T4crWw9NSjpX+dUNtD1PmlKVj5CYgW077KY=)
                          4: 3136382e3233322e38322e302f32332d3233203d3e20323634393336.roa (hash: dtYKe9LmFw7eUdpu7tOYqxiOkqY5cTGmugHdNck7Occ=)
                          5: 323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (hash: T17EmrtKCo6H68yj4YZOfyOabOPLWvT1IrywCiOeDs4=)
                          6: 323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa (hash: IO/rH//qlAhwvhuC8wG6vU+EQOoFe+Fd6/3D+VD3/6g=)
                          7: 323830343a333033343a3132303a3a2f34332d3433203d3e20323634393336.roa (hash: cpsPGI7l6vxvLCLdkOm1O8sf8Puieh3TVysmjZPKnk0=)
                          8: 3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (hash: fyCXwVhYlTR6ZvuZAsU6dDdICqf0ROyVOb5Ct9zsiOI=)
                          9: 3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa (hash: UR0cTCKTskpcZcn05cRH5cJDLC2qzJ/rIR88Tx3oDOc=)
                          10: 323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (hash: Sn+GqF+mvIJJdVyqS5JDLzdB4qn9nl5v15iRgGSxX70=)
                          11: 323830343a333033343a3a2f33322d3332203d3e20323634393336.roa (hash: SgazwX7n47i9tIUXGGZ6AEqHnWUyREKwtBiNxw+jemc=)
                          12: 3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (hash: jK+f8A3wtlEIaM5pEueNQ4v1lT7CE+6C98FjZfW2XrY=)
                          13: 323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (hash: RZU/s6PNv0N2pTgVWGE6tOR1GTQxjMFb/f3kP/QuFTE=)
                          14: 323830343a333033343a32303a3a2f34342d3434203d3e20323634393336.roa (hash: HSd9qSRmS61f+Ezwy1vpC3+2ALGhOHHXl1kMJ9LYWFU=)
                          15: 323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa (hash: 7lOm+Ol7Z4E2q32oYEIkAe97y+xsQeHgmU5Vd7EDHpc=)
                          16: 89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl (hash: d54I8ITZTy2kypIqZrCk1x1+gAGsSMkN3iuMEfJDDSg=)
                          17: 3136382e3233322e38312e302f32342d3234203d3e20323634393336.roa (hash: Q9ulgKnqz+VkCV2sLerkLiJe6qmytob77pdRwZeK/O0=)
                          18: 3136382e3233322e38302e302f32322d3232203d3e20323634393336.roa (hash: dvo5n45sE31jrlfkZyucS2BjPqd8DGVAptxVuaTznBA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 12:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:96:1e:6e:80:41:c6:b5:d2:5c:72:e1:f0:01:8c:c4:17:01:e1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C2D7F07FF1C3BAD441528520572EB33C763CEB
        Validity
            Not Before: Dec 18 10:06:25 2025 GMT
            Not After : Dec 19 12:53:25 2025 GMT
        Subject: CN=92CAA6AB170B2E14B09CCEBFA7A234F7F908956B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:94:73:6f:ca:bd:90:18:fe:10:b3:af:75:
                    38:73:99:37:79:57:51:af:5b:b4:bc:29:9d:71:68:
                    c2:53:31:47:27:fc:dc:7e:1e:bb:5b:63:cd:15:8b:
                    52:0c:8c:47:89:60:d6:7b:65:2f:16:a8:b8:00:a6:
                    15:36:c5:ac:c5:71:38:b2:12:9a:14:51:e1:0e:1c:
                    69:8c:a6:67:d3:2f:85:80:fb:55:40:36:44:c6:b5:
                    c2:11:08:12:e0:33:5d:1a:ab:3f:c7:5f:00:f5:63:
                    78:a9:f7:a8:4d:35:a8:87:68:f6:8c:e1:8e:f3:f3:
                    f0:8e:f2:ba:67:1f:ab:e7:6c:6f:56:4d:ad:3d:7f:
                    47:6f:e3:12:03:3b:64:a4:65:ce:13:7c:75:fb:6d:
                    03:dd:34:10:3d:ba:7d:69:6c:17:db:da:2e:a1:02:
                    f3:fc:38:a4:d2:6f:e5:4f:2e:52:8f:21:18:75:f6:
                    7a:87:0a:69:94:e9:93:46:81:12:a7:e8:aa:0e:30:
                    d4:08:75:9a:4d:7d:59:61:8f:08:c5:86:94:08:73:
                    94:02:66:f3:fc:41:6c:58:28:10:42:5f:3e:73:26:
                    ab:be:7f:e0:26:d7:a4:e8:71:bc:aa:eb:c6:43:73:
                    6c:7a:84:f5:d5:f1:2d:b5:d9:7a:50:9e:46:b3:e9:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:A6:AB:17:0B:2E:14:B0:9C:CE:BF:A7:A2:34:F7:F9:08:95:6B
            X509v3 Authority Key Identifier:
                keyid:89:C2:D7:F0:7F:F1:C3:BA:D4:41:52:85:20:57:2E:B3:3C:76:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89C2D7F07FF1C3BAD441528520572EB33C763CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/89C2D7F07FF1C3BAD441528520572EB33C763CEB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:f4:a7:df:8c:ec:36:a2:7c:69:02:1a:7e:5d:1f:d7:43:
         2d:e0:c8:26:aa:3e:8a:45:dc:cc:e0:ce:17:fe:99:0d:46:61:
         76:e9:50:5f:1a:cc:2e:63:67:17:12:8c:c0:2d:7e:18:c6:d2:
         50:08:71:68:b8:2a:b5:d8:83:d5:b1:2f:28:26:60:5f:41:f3:
         4d:3f:7f:75:1d:e9:ff:ce:6d:a6:93:14:bc:78:92:33:f9:e6:
         83:5a:90:d1:d2:8a:5c:9c:61:da:f8:38:eb:dc:4e:f0:a0:cb:
         62:22:4b:f1:41:9a:7e:9f:c2:4b:8f:88:34:3e:59:e7:19:7d:
         de:84:f1:96:c4:29:eb:e1:3b:9e:bf:d5:cf:65:d7:d4:99:d7:
         77:c6:72:42:89:b8:d3:d0:c1:f0:fd:46:46:54:df:bc:c2:7b:
         20:c7:a4:07:77:b9:3e:8b:49:32:b4:43:53:f4:be:a6:fd:5e:
         ce:67:86:53:5b:37:70:8f:3a:28:b7:bb:c4:1e:70:09:d4:aa:
         8c:01:08:f7:e5:8c:98:3e:e7:1f:69:15:cf:23:5d:fb:d2:92:
         fc:76:90:bd:be:37:79:36:59:a6:8a:37:9b:f8:94:5a:63:b3:
         ab:43:24:d6:74:a1:35:6a:a2:ee:ee:17:5d:9e:2f:50:35:ff:
         23:71:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:47:07 2025 by rpki-client