This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
File:                     8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft (raw, json)
Hash identifier:          tyHRd31bK/2dry9SJ4T8mA4zSgJ66oueuCXiLQc4Oww=
Subject key identifier:   71:4B:43:09:52:46:C2:7D:FC:22:F6:F5:A6:6B:A0:9A:43:FB:7E:0B
Authority key identifier: 8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94
Certificate issuer:       /CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
Certificate serial:       1D5B45B96C71F4444A27931A2B597040699AE74D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
Manifest number:          34
Signing time:             Sat 20 Dec 2025 12:08:27 +0000
Manifest this update:     Sat 20 Dec 2025 12:03:27 +0000
Manifest next update:     Sun 21 Dec 2025 14:09:27 +0000
Files and hashes:         1: 8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl (hash: +PeLd03gck9K56B315443ALQAWi3W6uaD9QFGeWFTEo=)
                          2: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: hUbthIaEtw9HFHw6obRsM2wDiMQWDo4OVWiLGBu5clg=)
                          3: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: 1I9m2fUf9gQilzK/92MSjbd6eOb2/M7YEGAbTr8KTYs=)
                          4: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: /0T78rqQobVja0DtJ8HTQAWJNYgm+gpT1gfJ9unfuSY=)
                          5: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: tH083W2mbuvxIYkpuiCHf0maj5FH8hVwfI3NmzxecOg=)
                          6: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: LKfai9OZTFCl04VmCLWnvJdSdPICsz5k6/PI4sSkmnA=)
                          7: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: Ju72G5NPWzwFHCe9aM3r7rJQ+Ry+URdIWNHRW2JyXz0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 13:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5b:45:b9:6c:71:f4:44:4a:27:93:1a:2b:59:70:40:69:9a:e7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4C8CA3FDA8BF306949F8978F69041FE55BA994
        Validity
            Not Before: Dec 20 12:03:27 2025 GMT
            Not After : Dec 21 14:09:27 2025 GMT
        Subject: CN=714B43095246C27DFC22F6F5A66BA09A43FB7E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:10:03:34:05:ea:b7:fb:17:6a:e9:c9:30:
                    36:a9:66:3b:8b:96:72:e3:92:2c:69:59:15:a9:53:
                    88:e6:ad:7d:47:1c:cf:96:77:e0:bd:f8:26:7b:cf:
                    25:a5:d1:a3:58:8f:0f:5d:34:6d:2b:e1:80:6f:86:
                    b5:78:28:9c:7e:ff:4a:c7:b2:f8:ca:c1:54:ff:05:
                    9e:cd:3e:3a:1d:64:45:87:92:82:3f:f4:ff:c5:72:
                    9e:a3:d5:3b:08:09:85:d5:c3:9c:a3:cf:be:92:24:
                    29:c4:c7:36:b9:4c:a7:5b:36:60:9b:d5:25:f7:9f:
                    95:22:2a:bb:b3:7e:c3:b8:a4:dc:ef:ad:4b:7f:b6:
                    f8:6c:13:af:72:2c:5b:f4:e8:7b:d8:86:82:a0:c8:
                    40:55:af:d8:d2:e5:75:11:5d:1d:dd:6a:d3:a2:a8:
                    f5:48:0f:05:8c:05:f3:ff:f8:4d:fe:3f:f5:84:69:
                    a1:0d:f2:f2:17:de:83:5a:d1:65:a8:74:51:33:75:
                    23:01:36:12:db:d5:c8:d1:37:88:a5:99:15:1b:6e:
                    d6:9b:e8:c5:3b:fd:48:57:4a:da:11:fd:d3:ff:fa:
                    33:06:49:d1:81:01:e2:9f:e7:cd:c1:16:bf:00:05:
                    f4:81:ec:dd:18:9c:12:c2:61:33:7c:d4:d3:2d:b7:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:43:09:52:46:C2:7D:FC:22:F6:F5:A6:6B:A0:9A:43:FB:7E:0B
            X509v3 Authority Key Identifier:
                keyid:8F:4C:8C:A3:FD:A8:BF:30:69:49:F8:97:8F:69:04:1F:E5:5B:A9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/8F4C8CA3FDA8BF306949F8978F69041FE55BA994.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:07:cd:3b:85:e9:b8:0c:39:db:3f:41:34:3a:03:d9:9e:
         66:d0:f4:85:3e:ec:68:97:e5:99:9a:48:4d:3f:81:67:16:a3:
         f3:3f:11:02:8c:61:38:b9:16:26:dc:f5:80:49:e5:e1:30:e8:
         ae:91:c9:e1:66:37:8c:f2:f5:c0:02:1c:3e:35:8b:0b:91:e2:
         ae:1f:fe:ce:ba:fc:26:af:ac:b3:2d:d3:f5:fd:90:70:2c:49:
         25:56:78:8c:1c:01:71:47:8d:66:4f:69:45:41:12:95:9c:14:
         09:cf:35:3d:fb:c3:39:ac:f5:f0:7c:ba:26:99:2e:27:5c:be:
         67:50:9b:73:c5:ad:32:e3:e5:16:7c:1d:13:7c:70:2f:76:e5:
         33:dd:fb:09:4c:61:0a:bd:fa:5d:a8:15:04:db:12:e9:c3:6f:
         9c:eb:29:44:f3:d7:59:5b:c2:81:aa:a3:e3:4c:b5:c7:84:a0:
         80:a0:1c:8c:e4:e0:6b:ab:30:bd:8a:b0:2b:b5:9c:96:50:21:
         4c:f3:de:80:9f:82:44:50:7c:bb:c6:de:b3:e3:cf:f4:5d:ce:
         9c:a3:d1:80:87:56:20:4d:28:21:0c:38:29:ca:1c:3f:1b:f6:
         06:35:4c:d1:00:71:49:66:ed:09:46:b7:60:f9:e4:49:ed:f4:
         da:b6:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:35:30 2025 by rpki-client