This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          ipGcHGQMfe4ypu3QRkqJHtWRdqGkcOmtenGRxfEPL6Q=
Subject key identifier:   48:41:9E:09:63:82:3C:05:31:0F:17:F3:4E:40:3E:EE:0C:5F:E4:40
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       7947681B9D516CD96B91F0844E9165FD1B1D2AE8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          014E
Signing time:             Sun 21 Dec 2025 00:13:06 +0000
Manifest this update:     Sun 21 Dec 2025 00:08:06 +0000
Manifest next update:     Mon 22 Dec 2025 02:26:06 +0000
Files and hashes:         1: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: 3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=)
                          2: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: ce0t36gUg/jnMusT4PBs8zHwut9Y2BeQp9Y+npMatTs=)
                          3: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=)
                          4: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: jHEp77ey3eYInyX7NnipiftUAAgDp3GkFWmhML9L1Yg=)
                          5: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: a6f42d45bxiLHIMWETpqkEcBoAgdph66Eltfz5OsBcc=)
                          6: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: sDn+4Uu4m4W5bslIPmCXR04C2X/8MTPWAS8yBpOzj8A=)
                          7: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 02:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:47:68:1b:9d:51:6c:d9:6b:91:f0:84:4e:91:65:fd:1b:1d:2a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Dec 21 00:08:06 2025 GMT
            Not After : Dec 22 02:26:06 2025 GMT
        Subject: CN=48419E0963823C05310F17F34E403EEE0C5FE440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:38:9b:b6:ff:2f:ec:c6:dd:c0:3f:37:b1:
                    c5:52:34:fa:97:9c:c6:a2:95:1b:1f:76:40:7c:4e:
                    bf:10:21:b1:86:76:8c:3b:75:35:c3:ee:af:16:2f:
                    f5:4d:37:93:66:00:3c:d7:cd:67:f1:ba:a9:46:01:
                    7c:9a:4f:cb:02:22:b4:65:25:c6:42:f2:dc:65:03:
                    57:31:be:6d:99:30:4f:7e:23:af:88:f5:ab:39:48:
                    1f:54:7a:4a:f4:df:c7:14:e0:17:0e:52:cd:f9:8d:
                    46:20:4d:fc:98:c3:9c:9e:9f:41:cb:21:de:a3:62:
                    3e:6f:31:15:44:13:1c:8b:6c:1d:f8:38:b8:1a:dd:
                    8a:15:6d:38:a0:c7:84:43:bb:47:eb:68:22:62:88:
                    db:22:51:88:7a:26:35:bf:9f:f1:1f:38:19:59:41:
                    01:fa:df:ea:f2:34:5a:7d:d6:14:ee:96:75:23:b4:
                    51:ec:64:28:7f:7c:45:7b:c7:e1:49:19:95:17:21:
                    fa:ac:5b:31:a1:d0:cf:fc:1c:df:5b:9c:81:cf:81:
                    54:1c:8c:a2:bf:24:29:70:27:f4:dc:be:57:58:77:
                    33:3d:f4:01:d8:c7:14:cb:2a:47:31:df:7a:2f:a0:
                    32:c3:78:73:97:53:89:76:45:bd:75:b4:0a:ac:be:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:9E:09:63:82:3C:05:31:0F:17:F3:4E:40:3E:EE:0C:5F:E4:40
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:f9:4c:60:82:1b:76:c7:8d:b9:94:4d:e6:44:ca:b7:85:
         b3:81:fe:b2:0b:f2:96:96:0e:e6:b5:38:a9:fe:a3:79:9c:a5:
         5e:ad:f0:df:42:a0:c5:05:74:86:68:f3:a6:5e:23:5d:d0:6c:
         8f:90:3b:7e:34:0f:6f:19:61:f7:dc:ed:13:67:06:ce:27:cf:
         5b:d5:60:72:dc:b0:6d:6a:36:77:80:49:0f:a1:c8:54:1f:e4:
         de:2b:67:f0:f4:22:e6:b3:4f:8f:a0:ac:fd:e8:12:d8:88:8c:
         12:b6:d7:12:30:aa:29:ec:1c:78:7f:22:7d:28:ce:eb:c6:62:
         3d:6c:45:58:11:63:88:8c:d4:e0:85:6f:0b:8a:ab:7b:f1:a5:
         e4:72:d4:05:2a:7a:99:60:38:82:b8:e2:d0:ff:a6:3b:c8:e3:
         bc:32:ef:f0:c4:4d:28:d9:e6:12:be:78:11:29:07:93:64:c4:
         a9:26:87:2e:f8:c1:e4:68:75:29:b0:32:40:42:35:e5:61:d0:
         cb:29:7a:48:c7:56:1f:6f:97:9c:38:0d:07:3d:44:22:04:f8:
         13:a2:b0:9e:4d:8a:aa:6c:42:63:12:4a:aa:1e:e9:cd:89:eb:
         99:9f:24:cb:70:5a:99:d7:bd:8e:e1:f6:a6:70:34:af:8a:88:
         62:27:4d:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeUdoG51RbNlrkfCETpFl/RsdKugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I5MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4
OURFQjFERTAeFw0yNTEyMjEwMDA4MDZaFw0yNTEyMjIwMjI2MDZaMDMxMTAvBgNV
BAMTKDQ4NDE5RTA5NjM4MjNDMDUzMTBGMTdGMzRFNDAzRUVFMEM1RkU0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UDibtv8v7MbdwD83scVSNPqX
nMailRsfdkB8Tr8QIbGGdow7dTXD7q8WL/VNN5NmADzXzWfxuqlGAXyaT8sCIrRl
JcZC8txlA1cxvm2ZME9+I6+I9as5SB9Uekr038cU4BcOUs35jUYgTfyYw5yen0HL
Id6jYj5vMRVEExyLbB34OLga3YoVbTigx4RDu0fraCJiiNsiUYh6JjW/n/EfOBlZ
QQH63+ryNFp91hTulnUjtFHsZCh/fEV7x+FJGZUXIfqsWzGh0M/8HN9bnIHPgVQc
jKK/JClwJ/TcvldYdzM99AHYxxTLKkcx33ovoDLDeHOXU4l2Rb11tAqsvuopAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSEGeCWOCPAUxDxfzTkA+7gxf5EAwHwYDVR0j
BBgwFoAUy5Jgx6vNfIkRmw9hxgnjE4nesd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DQjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTI2MEM3QUJDRDdDODkx
MTlCMEY2MUM2MDlFMzEzODlERUIxREUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQyS2EvMC9D
QjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi0r5TGCCG3bHjbmUTeZEyreFs4H+sgvylpYO5rU4qf6jeZylXq3w30KgxQV0
hmjzpl4jXdBsj5A7fjQPbxlh99ztE2cGzifPW9VgctywbWo2d4BJD6HIVB/k3itn
8PQi5rNPj6Cs/egS2IiMErbXEjCqKewceH8ifSjO68ZiPWxFWBFjiIzU4IVvC4qr
e/Gl5HLUBSp6mWA4grji0P+mO8jjvDLv8MRNKNnmEr54ESkHk2TEqSaHLvjB5Gh1
KbAyQEI15WHQyyl6SMdWH2+XnDgNBz1EIgT4E6Kwnk2KqmxCYxJKqh7pzYnrmZ8k
y3Bamde9juH2pnA0r4qIYidNGg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:44:56 2025 by rpki-client