This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
File:                     2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft (raw, json)
Hash identifier:          LvpIc4/vw3T7p5raBg9mIDRCY7teHZ/Q6Z4b/oVUdeU=
Subject key identifier:   F0:9E:F8:E7:D5:04:79:69:49:8B:CE:C3:8C:3A:02:56:4A:8A:12:61
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       367FC8F29F17B7BEB66FA43D2475CBB3AE84EA1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
Manifest number:          0346
Signing time:             Fri 19 Dec 2025 21:45:43 +0000
Manifest this update:     Fri 19 Dec 2025 21:40:43 +0000
Manifest next update:     Sun 21 Dec 2025 00:33:43 +0000
Files and hashes:         1: 323830343a333264633a3a2f33322d3438203d3e20323632333232.roa (hash: 95wtn2PtjN3o486AsXSu7sv3jIID5Q0ukqej/ydy1MY=)
                          2: 3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa (hash: C91+mf1p8hxh/d285BQtBAiWKg3jMftQf0sBi2hDcEc=)
                          3: 3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa (hash: rrNIzMkOetutqSWFRXAvvZbZjyZznAEfNKm17cvcB2g=)
                          4: 3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa (hash: oXTwamZBdeJN2EAApic5UDNV2NLZz87vu3DcDlPv/ro=)
                          5: 3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa (hash: tm4DhsxHeSlJV5JNGpJrHhKVERq+PG1gxBqe0ATxftw=)
                          6: 323830343a333264633a3a2f3332203d3e20323632333232.roa (hash: vrmB5Sh0GVnhMtwphxYGPAIHR2ptBuVrk31o33vBN9k=)
                          7: 2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl (hash: lzjLh1u9wqnD8+TGimOPiXjMheksnisKFo1eoXDwhrc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 00:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7f:c8:f2:9f:17:b7:be:b6:6f:a4:3d:24:75:cb:b3:ae:84:ea:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Dec 19 21:40:43 2025 GMT
            Not After : Dec 21 00:33:43 2025 GMT
        Subject: CN=F09EF8E7D5047969498BCEC38C3A02564A8A1261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:63:0e:63:bf:43:a3:99:12:6e:07:52:a5:
                    ca:00:ad:73:4e:21:ca:66:b7:fa:82:1c:78:1e:8f:
                    26:33:e6:b0:14:e2:f3:7e:0d:e1:1f:23:1a:95:c9:
                    ec:3c:39:93:ab:cb:23:4c:76:05:ca:e0:cb:93:2e:
                    dc:9a:23:fe:0d:34:3f:de:17:ed:d7:43:8c:b2:43:
                    05:33:8a:9a:ff:e9:ac:93:3d:5b:7e:7a:ab:5b:0a:
                    31:6a:92:a0:0d:55:55:2a:e4:c2:be:fc:36:80:ce:
                    d0:a6:c2:49:d8:f9:79:73:9c:59:72:35:0a:d9:4a:
                    51:77:84:99:fe:b5:75:c0:6c:ed:d0:eb:12:40:50:
                    15:eb:0f:6d:1d:ee:ce:f9:f0:85:87:62:6c:30:54:
                    9a:24:2d:8a:bb:d4:5c:0f:cb:dd:8b:ed:df:5f:17:
                    2a:9e:70:7b:38:ca:47:53:a1:8b:59:b6:52:67:e3:
                    a8:02:5c:2c:13:6b:32:a1:be:51:ba:aa:ec:97:33:
                    f3:0a:7e:53:2d:9c:fb:2c:89:e6:a0:de:18:de:88:
                    a6:c6:da:4b:6c:94:6c:93:54:93:f2:b3:ce:d7:22:
                    31:1e:1d:82:7e:01:26:7c:e9:89:d4:05:0b:00:c8:
                    4a:23:58:d6:19:20:c6:01:b5:bb:f0:17:38:e1:28:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9E:F8:E7:D5:04:79:69:49:8B:CE:C3:8C:3A:02:56:4A:8A:12:61
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:6f:ca:4b:32:24:74:0d:3b:e6:bd:f3:6e:5c:24:a4:19:
         fb:22:4c:8c:c9:fd:cd:ad:3c:be:55:d6:e4:74:e6:14:68:8f:
         81:95:88:5e:2a:6f:54:fa:0d:cb:7d:e0:3c:62:1e:35:27:d2:
         bf:42:cc:35:ae:30:e0:8b:03:2a:af:fb:d2:02:e0:ed:e8:28:
         31:74:e3:6a:71:08:d8:62:73:72:58:7c:fb:c0:08:e5:ae:d2:
         1b:19:06:e0:30:cb:68:b6:93:d3:00:94:b2:36:1f:e4:e9:a7:
         42:d0:80:ed:ec:32:a9:ab:c7:28:d8:0b:81:1c:18:e6:cf:14:
         52:24:53:ac:ad:14:1b:af:e7:40:45:67:7b:51:cb:3f:a9:cc:
         f4:18:73:1f:de:72:f7:2b:b4:84:11:c2:b5:60:63:88:6b:02:
         ae:18:61:46:1e:18:a8:7a:a5:61:0a:b3:d1:02:83:2c:71:ba:
         e3:1c:af:f7:a0:45:e5:c8:22:f8:bd:0b:57:fc:b8:fd:48:95:
         a4:e3:5d:b8:63:9b:13:2b:bc:c4:37:3d:bb:5c:2f:90:ea:16:
         02:45:a7:a0:4c:1f:d2:56:c6:7d:d6:94:37:07:88:6b:71:06:
         4b:ce:2f:b4:16:77:4d:58:59:2d:1c:b7:04:51:47:61:61:f0:
         7e:7d:ef:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNn/I8p8Xt762b6Q9JHXLs66E6h4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBRjVBRDFEREQxRUFDNjExOEM5Rjg0NzU1MDZBRkIy
Q0JDMkQyNTAeFw0yNTEyMTkyMTQwNDNaFw0yNTEyMjEwMDMzNDNaMDMxMTAvBgNV
BAMTKEYwOUVGOEU3RDUwNDc5Njk0OThCQ0VDMzhDM0EwMjU2NEE4QTEyNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+52MOY79Do5kSbgdSpcoArXNO
Icpmt/qCHHgejyYz5rAU4vN+DeEfIxqVyew8OZOryyNMdgXK4MuTLtyaI/4NND/e
F+3XQ4yyQwUzipr/6ayTPVt+eqtbCjFqkqANVVUq5MK+/DaAztCmwknY+XlznFly
NQrZSlF3hJn+tXXAbO3Q6xJAUBXrD20d7s758IWHYmwwVJokLYq71FwPy92L7d9f
FyqecHs4ykdToYtZtlJn46gCXCwTazKhvlG6quyXM/MKflMtnPssieag3hjeiKbG
2ktslGyTVJPys87XIjEeHYJ+ASZ86YnUBQsAyEojWNYZIMYBtbvwFzjhKAHhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8J7459UEeWlJi87DjDoCVkqKEmEwHwYDVR0j
BBgwFoAULK9a0d3R6sYRjJ+EdVBq+yy8LSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJq
SmsvMS8yQ0FGNUFEMURERDFFQUM2MTE4QzlGODQ3NTUwNkFGQjJDQkMyRDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUY1QUQxREREMUVBQzYx
MThDOUY4NDc1NTA2QUZCMkNCQzJEMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJqSmsvMS8y
Q0FGNUFEMURERDFFQUM2MTE4QzlGODQ3NTUwNkFGQjJDQkMyRDI1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfBlvyksyJHQNO+a9825cJKQZ+yJMjMn9za08vlXW5HTmFGiPgZWIXipvVPoN
y33gPGIeNSfSv0LMNa4w4IsDKq/70gLg7egoMXTjanEI2GJzclh8+8AI5a7SGxkG
4DDLaLaT0wCUsjYf5OmnQtCA7ewyqavHKNgLgRwY5s8UUiRTrK0UG6/nQEVne1HL
P6nM9BhzH95y9yu0hBHCtWBjiGsCrhhhRh4YqHqlYQqz0QKDLHG64xyv96BF5cgi
+L0LV/y4/UiVpONduGObEyu8xDc9u1wvkOoWAkWnoEwf0lbGfdaUNweIa3EGS84v
tBZ3TVhZLRy3BFFHYWHwfn3veg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:35:08 2025 by rpki-client