This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
File:                     028CDE0E764AA87F51C83E2608B8562B72B4E204.mft (raw, json)
Hash identifier:          Pw+PHGqEGegpNl1PJWd1VBJ5zDCalbv14mKn09Kt/2o=
Subject key identifier:   E0:83:E2:B0:8A:B1:ED:C9:F0:82:6E:59:2B:0A:ED:48:8A:98:0C:2E
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       18F5DABAE736D09A1C0BB91D3C9F81EFA3B6DFF6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
Manifest number:          0291
Signing time:             Fri 19 Dec 2025 23:27:05 +0000
Manifest this update:     Fri 19 Dec 2025 23:22:05 +0000
Manifest next update:     Sun 21 Dec 2025 01:19:05 +0000
Files and hashes:         1: 3139312e3234332e3137302e302f32342d3234203d3e20323633353038.roa (hash: Gde+7BJX6WpFb0AshZjxz1Yy3eZCxZJuyr1WwfMhFvc=)
                          2: 323830343a313266633a333130303a3a2f34302d3430203d3e20323633353038.roa (hash: NzbI+wuTB+WJxl1rXdvM/CXR+N6Sbf/PTfEnhKr2DZk=)
                          3: 028CDE0E764AA87F51C83E2608B8562B72B4E204.crl (hash: b7pJMI4qheIM1NE90hzQEIFCiXG30Q8uN0MCTj2M+sU=)
                          4: 323830343a313266633a333030303a3a2f34302d3430203d3e20323633353038.roa (hash: 2M1BXFkRz7oBMJiw0H3JA7zTsKKZTLThpbxdrLRSRtE=)
                          5: 3139312e3234332e3136382e302f32342d3234203d3e20323633353038.roa (hash: Jm6RPTjMbKjcCpksX9/Vghi4t3v/7Mbli9AOmcwcDKs=)
                          6: 3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa (hash: fPlSnZGwlk45NgQUcJOvHLwKFlJLuMkPDoK/9sGQ86I=)
                          7: 3139312e3234332e3136392e302f32342d3234203d3e20323633353038.roa (hash: /8dX/9qIbUhB7WeEyxl4FPwQjB4MBog/rXqTeB+QshQ=)
                          8: 3139312e3234332e3136372e302f32342d3234203d3e20323633353038.roa (hash: 531xRxG7iGNQplSlgu6+IGgLWfO9GMpQQ79HefdA5lw=)
                          9: 3139312e3234332e3137322e302f32342d3234203d3e20323633353038.roa (hash: 3nWEyNYegFi2A5JDkM1e7auC1lPrhU9yQ61MNUzTmFM=)
                          10: 3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa (hash: XCAkYOJ8mCO8rAcNOs9kne64qsoHpJBd5hRd92N0SvQ=)
                          11: 3139312e3234332e3137342e302f32342d3234203d3e20323633353038.roa (hash: kp2FFajxMXUe07fT0q4OqZQyDZ9Ekhqb2i39gzqFlTw=)
                          12: 323830343a313266633a333530303a3a2f34302d3430203d3e20323633353038.roa (hash: exrVGzFM4PQs3Ow7UrlVVMgucqy67jpegHReK+dCAAI=)
                          13: 323830343a313266633a353030303a3a2f33362d3336203d3e20323633353038.roa (hash: MsNobDxjgM8uFtnLIqZXQ6u7PVpojTGmdSzTxa+tNgM=)
                          14: 3139312e3234332e3136332e302f32342d3234203d3e20323633353038.roa (hash: Bp0AyrEOsI5SQgXVei3LpuEYByGFT1WR4GpGQXm+ZIs=)
                          15: 3139312e3234332e3136352e302f32342d3234203d3e20323633353038.roa (hash: gzpN/v3Fkg6EiRD2tHZAPCqLWX964t9F14vPipEnzHQ=)
                          16: 323830343a313266633a3a2f33362d3336203d3e20323633353038.roa (hash: E4ycx1I5k0soOGJEBLwLr3Sxmfoq3IfSyho777Q3Pmk=)
                          17: 323830343a313266633a373030303a3a2f33362d3336203d3e20323633353038.roa (hash: tx8nXVMlsWh7soi0Uuh876uliOoNjFVU3cLmEeaxYCg=)
                          18: 3139312e3234332e3137312e302f32342d3234203d3e20323633353038.roa (hash: Y26mSbhdZV5hA4TVKXezd3nwZMtVkiF0zAvynXcZT5A=)
                          19: 3139312e3234332e3137302e302f32332d3233203d3e20323633353038.roa (hash: /Z7gCO0TtE+zd5S/jnyZOycGx6dui5YjFRQEXjFhoko=)
                          20: 3139312e3234332e3136362e302f32342d3234203d3e20323633353038.roa (hash: wgDhzKotIdO8DJI/8JwXeAvB5vebL+GCI4BueTObvbk=)
                          21: 3139312e3234332e3137352e302f32342d3234203d3e20323633353038.roa (hash: r3FM8dpCQcbz5YPF+OOcKyh6+rMJdzK4dOZag4Q7paU=)
                          22: 3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa (hash: qBfXOg+r/YQnFmRCN1vXOwdzzU1lIYgU+b9DCN2rbtU=)
                          23: 323830343a313266633a663030303a3a2f33362d3336203d3e20323633353038.roa (hash: 2s8cx4yE3ePCw4vkIvHqBeoZU2/iWiup+ihLnIVjosk=)
                          24: 3139312e3234332e3136342e302f32342d3234203d3e20323633353038.roa (hash: xSRAxxuIs62Au1lb9VrP826H7g9Pl81bdvaLd0aVrdo=)
                          25: 3139312e3234332e3136382e302f32332d3233203d3e20323633353038.roa (hash: RQctsRVoOJxezau6GswgunQIVxMf6pzan4QHxyLdUTw=)
                          26: 3139312e3234332e3136302e302f32342d3234203d3e20323633353038.roa (hash: AYURMyXShVOqbks6tjgXM8FtP0D6lCrYdJy++cM1+DA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f5:da:ba:e7:36:d0:9a:1c:0b:b9:1d:3c:9f:81:ef:a3:b6:df:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Dec 19 23:22:05 2025 GMT
            Not After : Dec 21 01:19:05 2025 GMT
        Subject: CN=E083E2B08AB1EDC9F0826E592B0AED488A980C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:3e:8f:c1:31:6a:5d:b1:a1:a9:97:bf:0c:
                    0f:1b:7a:13:c6:ab:97:66:1e:cb:fa:ec:b7:22:d7:
                    a0:3a:95:11:7d:5d:86:0b:50:56:55:b7:5e:0a:f3:
                    bf:38:0e:5b:3f:5f:54:da:97:db:c2:d0:d8:cb:7f:
                    05:e2:cc:0b:ca:a8:e0:be:bd:3f:50:73:e2:d5:8d:
                    f7:72:4a:26:03:74:79:5f:ae:b0:0a:e0:ce:cc:a9:
                    1b:56:4a:25:87:1d:e0:f9:2b:01:11:c2:1c:36:bb:
                    ed:bc:e4:7c:72:af:db:8b:a8:80:05:39:a1:c5:11:
                    96:1f:e3:b1:a8:7c:df:8c:f2:a1:76:90:e8:68:3e:
                    8d:a5:dc:8b:8b:e8:80:42:75:17:19:75:56:24:5e:
                    18:09:5f:8b:a7:0f:95:2e:3d:73:cb:ef:1d:94:dd:
                    f8:fa:b9:81:d8:56:48:39:d4:64:83:52:89:e3:9e:
                    9a:d2:45:a1:cb:d5:92:92:c0:dc:a6:ca:a7:15:49:
                    ee:c8:3a:8b:ad:87:95:36:df:e3:f4:13:74:8b:76:
                    12:90:1e:7b:86:38:2c:85:ee:e2:f4:f4:0e:4a:fa:
                    c2:24:ff:9d:b4:d8:76:02:94:b5:6d:dc:40:9e:60:
                    8b:88:d7:71:73:eb:fe:05:f8:25:4c:45:65:1a:74:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:83:E2:B0:8A:B1:ED:C9:F0:82:6E:59:2B:0A:ED:48:8A:98:0C:2E
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:12:39:54:29:8d:9f:e0:83:cd:d0:20:87:01:e0:e8:1a:
         24:f6:b5:22:b2:3c:ad:78:f6:d9:d0:e9:e8:92:26:a0:eb:16:
         0c:48:bb:67:86:2d:eb:08:f3:be:4b:c8:c2:b4:98:f0:8c:67:
         76:e0:af:c7:1a:eb:e5:ce:a3:39:98:6b:6f:90:55:74:e7:74:
         6a:18:77:da:a6:f2:8e:11:a7:1f:f6:ee:cc:9d:49:ec:66:38:
         79:8d:d1:9b:cc:96:df:94:31:ae:37:2c:ec:33:b9:c1:38:ed:
         92:4a:e3:36:3d:28:bf:7f:c5:cf:aa:0e:7f:69:1d:fe:db:99:
         d6:27:07:b6:e6:9f:23:24:76:bd:de:a6:5c:25:a2:c7:c3:a4:
         9a:fa:1b:36:91:83:05:6b:8e:ab:46:ba:76:69:4b:57:9d:fd:
         17:ff:c1:f7:53:ca:29:a9:07:2c:4f:07:27:86:02:82:af:32:
         5d:3c:12:48:2d:a4:3b:fc:fd:5a:29:5a:62:ab:bb:96:56:94:
         3f:f1:54:ed:3f:79:d3:89:16:6c:9b:18:18:aa:60:c2:bc:69:
         ce:cb:64:ca:1e:60:e4:c1:d2:25:93:cd:02:a5:39:3e:80:0a:
         7d:84:af:8d:ab:f8:c3:b1:d6:b9:1c:8d:d5:9e:a5:ee:2b:b4:
         9f:63:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:33:31 2025 by rpki-client